CVE-2026-43245 ntfs: ->d_compare() must not block

In the Linux kernel, the following vulnerability has been resolved: ntfs: -dcompare must not block ... so don't use getname there. Switch it and ntfsdhash, while we are at it to kmallocPATHMAX, GFPNOWAIT. Yes, ntfsdhash almost certainly can do with smaller allocations, but let ntfs folks deal wit...

CVE-2026-43161

CVE-2026-43161 is a Linux kernel IOMMU VT-d vulnerability related to ATS invalidation when a PCIe endpoint loses connection. In scalable-mode-disabled/unsupported systems, an endpoint link drop can cause the IOMMU to wait indefinitely for an ATS invalidation, leading to a host hard-lock (notably ...

CVE-2026-43161

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode PCIe endpoints with ATS enabled and passed through to userspace e.g., QEMU, DPDK can hard-lock the host when their link drops, either by surprise...

CVE-2026-43130

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode Commit 4fc82cd907ac "iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected" relies on pcidevisdisconnected to skip ATS...

CVE-2026-43161: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode PCIe endpoints with ATS enabled and passed through to userspace e.g., QEMU, DPDK can hard-lock the host when their link drops, either by surprise...

D-Link DI-8100 buffer overflow vulnerability

The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a buffer overflow vulnerability. This vulnerability stems from the handling of parameters in the Web Management Interface component’s file/urlmember.as...

D-Link DI-8100 buffer overflow vulnerability (CNVD-2026-32587)

The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a buffer overflow vulnerability. This vulnerability stems from the sprintf function in the /usergroup.asp file within the CGI Handler component, which...

D-Link DI-8100 buffer overflow vulnerability (CNVD-2026-32588)

The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a buffer overflow vulnerability, which stems from the tgglasp function in the HTTP Request Handler component, where the /tgll.asp file fails to properl...

D-Link DI-8100 buffer overflow vulnerability (CNVD-2026-32591)

The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a buffer overflow vulnerability. This vulnerability stems from the sprintf function in the HTTP Handler component, specifically the autoreboot.asp file...

D-Link DI-8100 buffer overflow vulnerability (CNVD-2026-32589)

The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a buffer overflow vulnerability, which stems from a function in the file/urlrule.asp called urlruleasp failing to correctly validate the input length...

The vulnerability of the Web Management Interface component of D-Link DI-8100 microprogrammed router software allows a intruder to cause a service failure.

The vulnerability of the Web Management Interface component of D-Link DI-8100 microprogrammed router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of the urlrule_asp() function in D-Link DI-8100 router microprogramming software allows a hacker to induce a service failure.

The vulnerability of the urlruleasp function in D-Link DI-8100 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending a specially crafted HTTP request...

The vulnerability of the telnetd.sh script of the D-Link DIR-600L router’s telnet service allows a hacker to gain unauthorized access to protected information, increase their privileges, and execute arbitrary commands.

The vulnerability of the telnetd.sh script of the D-Link DIR-600L router’s telnet service is related to the use of a static password, wrgn61dlwbrdir600L, for the Alphanetworks account. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information, enhance...

The vulnerability of the telnetd.sh script of the D-Link DIR-600L router’s telnet service allows a hacker to gain unauthorized access to protected information, increase their privileges, and execute arbitrary commands.

The vulnerability of the telnetd.sh script of the D-Link DIR-600L router’s telnet service is related to the use of the static password wrgn35dlwbrdir600l for the Alphanetworks account. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, enhanc...

The vulnerability of the telnetd.sh script of the D-Link DIR-605L router’s telnet service allows a hacker to gain unauthorized access to protected information, increase their privileges, and execute arbitrary commands.

The vulnerability of the telnetd.sh script of the D-Link DIR-605L router’s telnet service is related to the use of a static password, wrgn35dlwbrdir605l, for the Alphanetworks account. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, enhanc...

The vulnerability of the sprintf() function in D-Link DI-8100 router microprogramming software allows a hacker to cause a service failure.

The vulnerability of the sprintf function in D-Link DI-8100 router microprogramming devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

The vulnerability of the sprintf() function in the JHTTPD web server of D-Link’s router software DI-8100 allows a hacker to execute arbitrary code.

The vulnerability of the sprintf function in the D-Link DI-8100 router microprogramming software’s web server is related to the execution of operations outside of the buffer during the processing of the enable and time parameters. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the telnetd.sh script of the D-Link DIR-456U router’s telnet service allows a hacker to gain unauthorized access to protected information, increase their privileges, and execute arbitrary commands.

The vulnerability of the telnetd.sh script of the D-Link DIR-456U router’s telnet service is related to the use of a static password, whdrv01dlobdir456U, for the Alphanetworks account. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, enhanc...

The vulnerability of the sprintf() function in D-Link DI-8100 router microprogramming software allows a hacker to cause a service failure.

The vulnerability of the sprintf function in D-Link DI-8100 router microprogramming devices is related to buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of the tggl_asp() function in D-Link DI-8100 router microprogramming software allows a hacker to cause a service failure.

The vulnerability of the tgglasp function in D-Link DI-8100 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service failure...