Lucene search
+L

5646 matches found

ATTACKERKB
ATTACKERKB
added 2026/06/24 4:28 p.m.12 views

CVE-2026-52963

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI endpoint descriptor scans sndusbmidigetmsinfo validates the internal MIDIStreaming endpoint descriptor size before using baAssocJackID, but the descriptor walker can still return a class-specific...

5.7AI score0.00128EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2026/06/24 4:28 p.m.15 views

CVE-2026-52963 ALSA: usb-audio: Bound MIDI endpoint descriptor scans

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI endpoint descriptor scans sndusbmidigetmsinfo validates the internal MIDIStreaming endpoint descriptor size before using baAssocJackID, but the descriptor walker can still return a class-specific...

5.8AI score
SaveExploits0References11
CVE
CVE
added 2026/06/24 4:28 p.m.46 views

CVE-2026-52963

CVE-2026-52963 affects the Linux kernel ALSA usb-audio code path, specifically the MIDI endpoint handling in snd_usbmidi_get_ms_info. The vulnerability arises when the descriptor walker returns a class-specific MIDI endpoint with bLength larger than the remaining bytes in the endpoint-extra scan,...

5.5CVSS5.7AI score0.00128EPSS
SaveExploits0References8Affected Software1
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.10 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: mm/memfd: Fixed an issue where information leaks occurred during the handling of hugetlb folios. When allocating hugetlb folios for memfd, three initialization steps are missing: 1. The folios are not zeroed, resulting in kern...

5.7AI score0.00211EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.5 views

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fixed a NULL pointer dereferencing in sndusbmixercontrolsbadd. In sndusbcreatestreams, for UAC version 3 devices, the Interface Association Descriptor IAD is retrieved using usbifnumtoif. If this call fails, a...

5.7AI score0.00195EPSS
SaveExploits0References4
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.10 views

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Input: pegasus-notetaker – fixed potential out-of-bounds access issues. In the pegasusnotetaker driver, the pegasusprobe function allocates the URB transfer buffer using the wMaxPacketSize value from the endpoint descriptor. An...

6.1AI score0.00219EPSS
SaveExploits0References4
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.11 views

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: An out-of-bounds access issue in parsesecdesc has been fixed. If osidoffset, gsidoffset, and dacloffset can be greater than smbntsdstruct.size. If they are smaller, it could lead to an out-of-bounds situation. Additionally...

8.8CVSS6.3AI score0.00483EPSS
SaveExploits0References4
OSV
OSV
added 2026/06/24 11:11 a.m.8 views

OESA-2026-2743 libusbx security update

libusb is a library for USB device access from Linux, macOS, Windows, OpenBSD/NetBSD and Haiku userspace. It is written in C Haiku backend in C++ and licensed under the GNU Lesser General Public License version 2.1 or, at your option, any later version see COPYING. Security Fixes: libusb before...

5.5CVSS5.6AI score0.00184EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/24 11:11 a.m.6 views

OESA-2026-2742 libusbx security update

libusb is a library for USB device access from Linux, macOS, Windows, OpenBSD/NetBSD and Haiku userspace. It is written in C Haiku backend in C++ and licensed under the GNU Lesser General Public License version 2.1 or, at your option, any later version see COPYING. Security Fixes: libusb before...

5.5CVSS5.6AI score0.00184EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/06/24 2:35 a.m.15 views

SUSE CVE-2026-48914

A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an...

6.7CVSS5.8AI score0.00158EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/06/24 12:00 a.m.30 views

PT-2026-51904

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ksmbd module during the durable reconnect process. In the smb2 open function, the call to ksmbd put durable fdfp releases the reference to the durabl...

9.8CVSS5.2AI score0.00444EPSS
SaveExploits0
Snyk
Snyk
added 2026/06/24 12:00 a.m.9 views

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in the OpenAtNoFollow process. An attacker can cause unintended file ownership or permission changes on host files by placing a symlink in the virt-launcher filesystem, which is then followed via...

7.3CVSS5.5AI score0.00222EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/24 12:00 a.m.34 views

PT-2026-51890

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the ksmbd component of the Linux kernel during the durable v2 open process. When the parse durable handle context function handles a DURABLE REQ V2 request, it...

5.5CVSS5.9AI score0.00135EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/24 12:00 a.m.28 views

PT-2026-51951

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RISC-V IOMMU implementation where TLB Translation Lookaside Buffer and context cache invalidations were not performed after updating Device Directory Table DDT or...

8.8CVSS6AI score0.00127EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/24 12:00 a.m.37 views

PT-2026-51858

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The USB MIDI 2.0 endpoint parser in the ALSA usb-audio component fails to validate bLength against the remaining bytes in the endpoint-extra scan before reading baAssoGrpTrmBlkID. This...

5.5CVSS6AI score0.00127EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/24 12:00 a.m.27 views

PT-2026-51982

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one error exists in the bcmgenet put txcb function. The write ptr points to the next open tx cb, but the function must rewind the pointer before returning the tx cb to ensure i...

9.8CVSS5.7AI score0.00399EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/24 12:00 a.m.19 views

PT-2026-51933

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ocfs2 module where the OCFS2 IOC GROUP ADD ioctl can trigger a kernel BUG ON. This occurs because the ocfs2 group add function calls ocfs2 set new buffer uptodate ...

5.5CVSS6.2AI score0.00123EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/24 12:00 a.m.29 views

PT-2026-51857

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA usb-audio component where the snd usbmidi get ms info function fails to properly bound MIDI endpoint descriptor scans. While the function validates the intern...

5.5CVSS5.9AI score0.00128EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2026/06/23 5:12 p.m.27 views

Gogs has Unauthenticated Asymmetric Denial of Service (DoS) via SSH Handshake Stall (File Descriptor Exhaustion)

The Gogs built-in Go SSH server is vulnerable to an unauthenticated, asymmetric Denial of Service DoS attack. The application accepts inbound TCP connections and passes them to golang.org/x/crypto/ssh.NewServerConn inside a new goroutine without enforcing any read/write deadlines on the underlyin...

6.9CVSS5.9AI score0.00547EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/06/23 5:12 p.m.21 views

GHSA-XP79-5MX3-JX52 Gogs has Unauthenticated Asymmetric Denial of Service (DoS) via SSH Handshake Stall (File Descriptor Exhaustion)

The Gogs built-in Go SSH server is vulnerable to an unauthenticated, asymmetric Denial of Service DoS attack. The application accepts inbound TCP connections and passes them to golang.org/x/crypto/ssh.NewServerConn inside a new goroutine without enforcing any read/write deadlines on the underlyin...

6.9CVSS5.9AI score0.00547EPSS
SaveExploits0References6
Rows per page
Query Builder