SUSE CVE-2026-63794

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRYPT path In sevdbgcrypt, the per-iteration transfer length is bounded by the source page offset PAGESIZE - soff but not by the destination page offset PAGESIZE - doff. When doff...

EUVD-2026-45460

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRYPT path In sevdbgcrypt, the per-iteration transfer length is bounded by the source page offset PAGESIZE - soff but not by the destination page offset PAGESIZE - doff. When doff...

CVE-2026-63794

The CVE-2026-63794 issue affects the Linux kernel KVM SEV path (sev_dbg_crypt) where the ENCRYPT path could overflow a single-page buffer when d_off > s_off, because the per-iteration transfer length wasn’t bounded by the destination page offset. The root cause is that len was bounded by (PAGE...

CVE-2026-52932

In the Linux kernel, the following vulnerability has been resolved: xfrm: ipcomp: Free destination pages on acomp errors Move the outfreereq label up by a couple of lines so that the allocated dst SG list gets freed on error as well as success...

PT-2026-61110

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.0 Description A page overflow exists in the Linux kernel KVM SVM implementation within the sev dbg crypt function during the encryption path. The issue occurs because the per-iteration transfer length is...

PT-2025-51569

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the arm64 architecture’s memory tagging extension MTE implementation. Specifically, the copy highpage function incorrectly issues a warning when...

kernel: lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure

A flaw was found in the Linux kernel. This vulnerability, located in the lib/testhmm.c component, arises from improper handling of memory allocation failures within the dmirrordeviceevictchunk function. Specifically, if kcalloc returns null due to insufficient physical memory, dereferencing srcpf...

SUSE CVE-2021-47066

In the Linux kernel, the following vulnerability has been resolved: asyncxor: increase srcoffs when dropping destination page Now we support sharing one page if PAGESIZE is not equal stripe size. To support this, it needs to support calculating xor value with different offsets for each r5dev. One...

DEBIAN-CVE-2021-47066

In the Linux kernel, the following vulnerability has been resolved: asyncxor: increase srcoffs when dropping destination page Now we support sharing one page if PAGESIZE is not equal stripe size. To support this, it needs to support calculating xor value with different offsets for each r5dev. One...

Wiki.js 安全漏洞

Wiki.js is the Requarks.io team's suite of open source wiki software based on Node.js and written in JavaScript. A security vulnerability exists in Wiki.js that stems from the application's lack of control and management of permissions. In the affected version, an authenticated user with write...

PT-2021-28770

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.12.3 Description The issue is related to the async xor function, where the src offs is increased when dropping the destination page. The actual impact and attack plausibility have not yet been proven...