CVE-2026-80789

A flaw was found in the Linux kernel's nvmet-tcp component. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted command with an oversized data length. This can lead to unbounded kernel memory allocation, causing a denial of service DoS due to resource exhaustion...

ROS-20261027-73-0053

The vulnerability in Tomcat 11 is related to errors in handling length parameters of input data. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

ROS-20261027-73-0052

The vulnerability in Tomcat 10 is related to errors in handling length parameters of input data. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

ROS-20261019-73-0036

The vulnerability in python-ecdsa is related to errors in processing parameter values related to input data length. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2026-98658

In the Linux kernel, the following vulnerability has been resolved: iio: proximity: aw96103: validate firmware data length The firmware parser reads a length from the binary header and then uses it to walk six-byte register/value entries. A truncated firmware image can make the parser read beyond...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: amd-xgbe: Fixed an issue where the data length of the skb structure was underflowed. A BUGON will be triggered in include/linux/skbuff.h, resulting in intermittent kernel panics when a length underflow is detected. This issu...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: tipc: Fixed the msg-req TLV len check in tipcnlcompatnametabledumpheader. This is a follow-up to commit 974cb0e3e7c9 “tipc: Fixed uninit-value in tipcnlcompatnametabledump“”, where a type cast from sizeof.. to int was required so...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fixed a kernel panic that occurs when the host sends an invalid H2C PDU length. If the host sends an H2CData command with an invalid DATAL value, the kernel may crash in the nvmettcpbuildpduiovec function. The...

Astra Linux – vulnerability in linux, linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix buffer overflow when parsing NFS reparse points ReparseDataLength is the sum of the InodeType size and DataBuffer size. To determine the DataBuffer size, it is necessary to subtract the InodeType size from...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative datalen in ibumadwrite ibumadwrite calculates datalen based on a user-controlled count and the MAD header sizes. When the user-defined MAD header size does not match the RMPP header length, datalen can...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbdirect: validate the dataoffset and datalength fields of the smbdirectdatatransfer structure. If the dataoffset and datalength fields of the smbdirectdatatransfer structure are invalid, an out-of-bounds issue may occur...

CLSA-2026-1792053113 lrzsz: Fix of 3 CVEs

CVE-2026-105840: lrz: reject absolute and escaping paths in restricted mode - CVE-2026-105841: lrz: remove piping received files to a shell command - CVE-2026-105842: lrz: terminate received data and bound file name length...

HTTP/3 Server Data Compromise

The vulnerability of HTTP/3 server-side software such as HAProxy is related to errors in processing input data length parameters. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected information...

ROS-20261002-73-0137

The vulnerability in Xen is related to errors in processing the length of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20261002-73-0133

The vulnerability in Xen is related to errors in processing the length of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260930-73-0067

The vulnerability of the authenc component in the Linux operating system’s kernel is related to incorrect checking of the amount of data at input. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0129

The vulnerability in haproxy2 is related to errors in processing parameter values related to input data length. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0117

The vulnerability in haproxy2 is related to errors in processing parameter values related to input data length. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0116

The vulnerability in HProxy is related to errors in processing parameter values related to input data length. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0130

The vulnerability in HProxy is related to errors in processing parameter values related to input data length. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...