CVE-2026-97915 accel/ivpu: Limit firmware log name prints to field size

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Limit firmware log name prints to field size The name in struct vputracingbufferheader is a fixed-size array populated by the NPU firmware. It is expected to be NUL-terminated, but nothing on the host side enforces...

CVE-2026-97915

The Linux kernel contains a vulnerability in the accel/ivpu component where the name field in struct vpu_tracing_buffer_header is populated by the NPU firmware. Because the host side does not enforce NUL-termination on this fixed-size array, using an unbounded string conversion can lead to an out...

EUVD-2026-86769

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Limit firmware log name prints to field size The name in struct vputracingbufferheader is a fixed-size array populated by the NPU firmware. It is expected to be NUL-terminated, but nothing on the host side enforces...

UBUNTU-CVE-2026-97915

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Limit firmware log name prints to field size The name in struct vputracingbufferheader is a fixed-size array populated by the NPU firmware. It is expected to be NUL-terminated, but nothing on the host side enforces...

UBUNTU-CVE-2026-97968

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Create debugfs entries after hwmon registration ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. It runs before hwmondeviceregisterwithinfo, so when that registration fails,...

UBUNTU-CVE-2026-97967

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Remove debugfs entries when probe fails ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. If hwmondeviceregisterwithinfo fails right after it, ccpprobe returns without removi...

UBUNTU-CVE-2026-97996

In the Linux kernel, the following vulnerability has been resolved: virtio: fix use-after-free in unregistervirtiodevice deviceunregister is devicedel plus putdevice. When the caller holds no extra reference, that drops the last one and runs the release callback, which for several transports free...

kata-cve-2020-2023-poc

kata-cve-2020-2023-poc 1. Entorno de reproducción Nota: El entorno requiere soporte KVM https://github.com/ssst0n3/dockerarchive/tree/branchubuntu-20.04docker-ce-19.03.11containerd.io-1.4.9kata-1.11.0 $ git clone https://github.com/ssst0n3/dockerarchive.git $ cd dockerarchive $ git checkout...

Linux Distros Unpatched Vulnerability : CVE-2026-90209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/debug: Fix deadlock during unregister Unregistering an s390dbf debug area while one of the associated debugfs files is being written to can cause a deadloc...

Linux Distros Unpatched Vulnerability : CVE-2026-92505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/amd: Fix undefined behavior in devidwrite debugfs function When foreachpcisegment loop completes without finding a matching segment, the pciseg pointer is...

Linux Distros Unpatched Vulnerability : CVE-2026-90219

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/cxgb4: Free debugfs on registration failure c4iwalloc creates the per-device debugfs tree dev-debugfsroot via setupdebugfs, but it is removed only in...

Linux Distros Unpatched Vulnerability : CVE-2026-93049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: mtdswap: Avoid freeing registered blktrans device twice In mtdswapaddmtd, debugfs setup failure after successful blktrans registration can free mbddev twic...

Linux Distros Unpatched Vulnerability : CVE-2026-92477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: ufs: debugfs: Reserve space for a string terminator ufssavederrwrite copies user input into a zero-initialized stack buffer and passes it to kstrtoint. A...

Linux Distros Unpatched Vulnerability : CVE-2026-93061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpu: host1x: Avoid stack over-read in debug output helpers host1xdebugoutput and host1xdebugcont used vsnprintf, which returns the length the formatted string...

AZL-102320 CVE-2026-93061 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Avoid stack over-read in debug output helpers host1xdebugoutput and host1xdebugcont used vsnprintf, which returns the length the formatted string would have reached with an unbounded buffer. That return value was...

DEBIAN-CVE-2026-93061

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Avoid stack over-read in debug output helpers host1xdebugoutput and host1xdebugcont used vsnprintf, which returns the length the formatted string would have reached with an unbounded buffer. That return value was...

DEBIAN-CVE-2026-93049

In the Linux kernel, the following vulnerability has been resolved: mtd: mtdswap: Avoid freeing registered blktrans device twice In mtdswapaddmtd, debugfs setup failure after successful blktrans registration can free mbddev twice. addmtdblktransdev initializes the blktrans device reference and...

CVE-2026-93049

In the Linux kernel, the following vulnerability has been resolved: mtd: mtdswap: Avoid freeing registered blktrans device twice In mtdswapaddmtd, debugfs setup failure after successful blktrans registration can free mbddev twice. addmtdblktransdev initializes the blktrans device reference and...

AZL-102629 CVE-2026-93049 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: mtd: mtdswap: Avoid freeing registered blktrans device twice In mtdswapaddmtd, debugfs setup failure after successful blktrans registration can free mbddev twice. addmtdblktransdev initializes the blktrans device reference and...

DEBIAN-CVE-2026-92505

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix undefined behavior in devidwrite debugfs function When foreachpcisegment loop completes without finding a matching segment, the pciseg pointer is not NULL but points to an invalid memory location the list head...