4654 matches found
MOEW
Invisible Threats, Visible Solutions. Misaligned Opcode Exception Waterfall MOEW 3‑Stage SEH Waterfall PoC Benign, x86/Wow64 TL;DR: This PoC demonstrates a 3‑stage Structured Exception Handling SEH cascade caused by deliberate misaligned execution into raw byte blobs whose first valid instruction...
CVE-2026-98919
The Linux kernel 's drm/xe component contains a vulnerability in the adjust_idledly() function. The issue stems from multiple corner-case flaws including divide-by-zero errors when timestamp_base is 0, u32 overflows during tick-to-ns conversions, and improper clamping that can cause values to exc...
EUVD-2026-108883
In the Linux kernel, the following vulnerability has been resolved: drm/xe: harden adjustidledly against divide-by-zero and overflow adjustidledly has several corner-case issues flagged during review: 1. If xegtclockinit failed to recognise the crystal clock, gt-info.timestampbase is 0, which mak...
CVE-2026-112054
Schroedinger libschroedinger through 1.0.11 contains a divide by zero...
POC-CVE-2026-0769
Description Proof of concept exploit code for CVE-2026-0769 Usage python3 poc.py -u -c Without bash command proof of code exec via Divide By Zero Error With bash command NOTE: Bash output isn't returned because the endpoint only returns the component template and metadata. The bash output is stor...
POC-CVE-2026-18729
Description Proof of concept exploit code for CVE-2026-18729 Usage python3 poc.py -url -uname -pword -c Without bash command proof of code exec via Divide By Zero Error With bash command NOTE: Bash output isn't returned because the endpoint only returns the component template and metadata. The ba...
CVE-2026-98647
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by crashing the kernel. When loading a specially crafted BPF program that accesses a structure with an empty flexible array member, the verifier...
CVE-2026-89790
A flaw was found in the Linux kernel's IPv6 networking subsystem. A race condition can occur during IPv6 multipath route rebalancing, where a concurrent update can lead to a divide-by-zero error. This vulnerability can cause the kernel to crash, resulting in a Denial of Service DoS for the affect...
CVE-2026-93182
A flaw was found in the Linux kernel. A local user can trigger a divide-by-zero error in the scheduler's fair scheduling class sched/fair due to an unsigned 32-bit integer u32 overflow in the updatetgcfsrunnable function. This overflow corrupts internal scheduling data, leading to an invalid...
Linux Distros Unpatched Vulnerability : CVE-2026-98647
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46161)
In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix divide-by-zero in setupgeo with zero farcopies setupgeo extracts nearcopies nc and farcopies fc from the user-provided layout parameter without checking for zero. When fc=0 with the 'improved' far set layout...
SUSE CVE-2026-112054
Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slicebytesdenom or slice count in a Dirac stream. Attackers can provide a crafted low-delay picture parsed by schrodecoderparsetransformparameters an...
UBUNTU-CVE-2026-98647
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...
CVE-2026-98647
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...
SUSE CVE-2026-98647
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...
DEBIAN-CVE-2026-98647
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...
AZL-109206 CVE-2026-98647 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...
CVE-2026-98647
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...
CVE-2026-98647 bpf: Fix divide-by-zero in btf_struct_walk()
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...
CVE-2026-98647
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...