Lucene search
+L

4892 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/25 12:00 a.m.•6 views

CVE-2026-64458: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: handle extreme intervals in damonhotscore Fix three issues in damonhotscore that comes from wrong handling of extreme zero or too high monitoring intervals user setup. When the user sets sampling interval zer...

6.2AI score0.0018EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/07/25 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-64458

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/damon/ops-common: handle extreme intervals in damonhotscore Fix three issues in damonhotscore that comes from wrong handling of extreme zero or too high...

6AI score0.0018EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/21 10:17 p.m.•26 views

CVE-2026-10679

The DesignWare SPI driver drivers/spi/spidw.c computed the SPI BAUDR clock divider as info-clockfrequency / config-frequency without validating config-frequency. spitransceive is a Zephyr syscall and its verify handler drivers/spi/spihandlers.c copies the caller-supplied spiconfig from userspace...

5.5CVSS0.00136EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/07/21 9:30 p.m.•21 views

CVE-2026-10679 Divide-by-zero in DesignWare SPI driver reachable from spi_transceive syscall (local DoS)

The DesignWare SPI driver drivers/spi/spidw.c computed the SPI BAUDR clock divider as info-clockfrequency / config-frequency without validating config-frequency. spitransceive is a Zephyr syscall and its verify handler drivers/spi/spihandlers.c copies the caller-supplied spiconfig from userspace...

3.3CVSS5.6AI score
SaveExploits0References5
CVE
CVE
•added 2026/07/21 9:30 p.m.•73 views

CVE-2026-10679

The CVE-2026-10679 issue affects Zephyr’s DesignWare SPI driver (drivers/spi/spi_dw.c). The root cause is that the BAUDR clock divider was computed as info->clock_frequency / config->frequency without validating frequency, allowing a userspace thread with SPI access to pass frequency = 0, t...

5.5CVSS5.6AI score0.00136EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/07/21 9:30 p.m.•31 views

EUVD-2026-46448

The DesignWare SPI driver drivers/spi/spidw.c computed the SPI BAUDR clock divider as info-clockfrequency / config-frequency without validating config-frequency. spitransceive is a Zephyr syscall and its verify handler drivers/spi/spihandlers.c copies the caller-supplied spiconfig from userspace...

3.3CVSS5.6AI score0.00136EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/21 9:30 p.m.•48 views

CVE-2026-10679 Divide-by-zero in DesignWare SPI driver reachable from spi_transceive syscall (local DoS)

The DesignWare SPI driver drivers/spi/spidw.c computed the SPI BAUDR clock divider as info-clockfrequency / config-frequency without validating config-frequency. spitransceive is a Zephyr syscall and its verify handler drivers/spi/spihandlers.c copies the caller-supplied spiconfig from userspace...

3.3CVSS0.00136EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/21 12:00 a.m.•9 views

CVE-2026-10679: Divide By Zero

The DesignWare SPI driver drivers/spi/spidw.c computed the SPI BAUDR clock divider as info-clockfrequency / config-frequency without validating config-frequency. spitransceive is a Zephyr syscall and its verify handler drivers/spi/spihandlers.c copies the caller-supplied spiconfig from userspace...

5.5CVSS5.6AI score0.00136EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/21 12:00 a.m.•26 views

PT-2026-62126

The DesignWare SPI driver drivers/spi/spi dw.c computed the SPI BAUDR clock divider as info-clock frequency / config-frequency without validating config-frequency. spi transceive is a Zephyr syscall and its verify handler drivers/spi/spi handlers.c copies the caller-supplied spi config from...

3.3CVSS5.6AI score0.00136EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2026/07/20 8:05 a.m.•13 views

batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd

...

7.5CVSS5.4AI score0.00174EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/07/19 5:34 p.m.•21 views

SUSE CVE-2026-63836

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: avoid divide-by-zero for deccwnd The cwnd is always MSS = cwnd = 0x20000000. But the calculation in batadvtpupdatecwnd assumes unsigned 32 bit arithmetics. mss 8 2 / cwnd 8 In case cwnd is actually 0x20000000...

6.5CVSS5.7AI score0.00174EPSS
SaveExploits0References17
NVD
NVD
•added 2026/07/19 12:16 p.m.•22 views

CVE-2026-63836

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: avoid divide-by-zero for deccwnd The cwnd is always MSS = cwnd = 0x20000000. But the calculation in batadvtpupdatecwnd assumes unsigned 32 bit arithmetics. mss 8 2 / cwnd 8 In case cwnd is actually 0x20000000...

0.00174EPSS
SaveExploits0References8
CVE
CVE
•added 2026/07/19 12:02 p.m.•57 views

CVE-2026-63836

The CVE-2026-63836 issue is in batman-adv tp_meter within the Linux kernel, caused by a 32-bit arithmetic overflow in batadv_tp_update_cwnd() that can yield a divide-by-zero when cwnd reaches 0x20000000. The correct calculation should be (mss ** 2) * 8 / cwnd to avoid overflow, preserving the 8x ...

5.7AI score0.00174EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2026/07/19 12:02 p.m.•23 views

CVE-2026-63836 batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: avoid divide-by-zero for deccwnd The cwnd is always MSS = cwnd = 0x20000000. But the calculation in batadvtpupdatecwnd assumes unsigned 32 bit arithmetics. mss 8 2 / cwnd 8 In case cwnd is actually 0x20000000...

5.4AI score
SaveExploits0References11
Cvelist
Cvelist
•added 2026/07/19 12:02 p.m.•53 views

CVE-2026-63836 batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: avoid divide-by-zero for deccwnd The cwnd is always MSS = cwnd = 0x20000000. But the calculation in batadvtpupdatecwnd assumes unsigned 32 bit arithmetics. mss 8 2 / cwnd 8 In case cwnd is actually 0x20000000...

0.00174EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2026/07/19 12:02 p.m.•20 views

CVE-2026-63836

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: avoid divide-by-zero for deccwnd The cwnd is always MSS = cwnd = 0x20000000. But the calculation in batadvtpupdatecwnd assumes unsigned 32 bit arithmetics. mss 8 2 / cwnd 8 In case cwnd is actually 0x20000000...

5.9AI score0.00174EPSS
SaveExploits0References9Affected Software1
EUVD
EUVD
•added 2026/07/19 12:02 p.m.•25 views

EUVD-2026-45502

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: avoid divide-by-zero for deccwnd The cwnd is always MSS = cwnd = 0x20000000. But the calculation in batadvtpupdatecwnd assumes unsigned 32 bit arithmetics. mss 8 2 / cwnd 8 In case cwnd is actually 0x20000000...

5.7AI score0.00174EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2026/07/19 12:02 p.m.•25 views

CVE-2026-63836

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: avoid divide-by-zero for deccwnd The cwnd is always MSS = cwnd = 0x20000000. But the calculation in batadvtpupdatecwnd assumes unsigned 32 bit arithmetics. mss 8 2 / cwnd 8 In case cwnd is actually 0x20000000...

5.9AI score0.00174EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/19 12:00 a.m.•3 views

CVE-2026-63836: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tpmeter: avoid divide-by-zero for deccwnd The cwnd is always MSS = cwnd = 0x20000000. But the calculation in batadvtpupdatecwnd assumes unsigned 32 bit arithmetics. mss 8 2 / cwnd 8 In case cwnd is actually 0x20000000...

5.7AI score0.00174EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/19 12:00 a.m.•25 views

PT-2026-61152

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A divide-by-zero error exists in the batman-adv module within the batadv tp update cwnd function. The issue occurs during the calculation of dec cwnd when the cwnd variable reaches the...

5.5AI score0.00174EPSS
SaveExploits0
Rows per page
Query Builder