EUVD-2026-69298

A flaw was found in the MTP backend in gvfs. When reading a file from a mounted MTP device, doread in gvfsbackendmtp.c trusts the data length returned by the device without limiting it to the original size requested by the client. If a malicious MTP device responds with more bytes than requested,...

Vulnerability of the do_read() function in the drivers/infiniband/sw/rxe/rxe_comp.c module – The Linux kernel’s InfiniBand support driver allows a hacker to cause a service failure.

Vulnerability of the doread function in the drivers/infiniband/sw/rxe/rxecomp.c module – The Linux kernel’s InfiniBand support driver has a vulnerability related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause service failures...