81307 matches found
CVE-2026-107313: Insertion of Sensitive Information Into Sent Data
pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 and 42.7.5 can send the previous contents of the GSS send buffer in place of the first part of a value on a connection with GSS encryption gssEncMode=prefer or require, and the server stores the value without an error. The buffer is 16320 bytes...
ROS-20261007-73-0176
The vulnerability of the pnrxcomplete function in the drivers/usb/gadget/function/fphonet.c file of the Linux USB device driver module is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20261007-73-0030
The vulnerability of the btusbwork function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver lies in a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
ROS-20261007-73-0065
The vulnerability of the nxpncii2csetmode function in the drivers/nfc/nxp-nci/i2c.c module of the Linux NFC kernel driver is related to an incorrect definition of the internal state. Exploiting this vulnerability could allow a attacker to cause a service failure...
ROS-20261007-73-0071
The vulnerability of the cp2615i2cprobe function in the drivers/i2c/busses/i2c-cp2615.c file of the I2C driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...
CVE-2026-80852
A flaw was found in the Linux kernel's TLS device driver. A local attacker could exploit an out-of-bounds write vulnerability in the tlsappendfrag function when handling TLSTXZEROCOPYRO with spliceSPLICEFMORE operations. This flaw allows an attacker to cause memory corruption, leading to a denial...
CVE-2026-90202
A flaw was found in the Linux kernel's mpt3sas SCSI driver. The basereleasememorypools function attempts to free PCIe SGL Scatter-Gather List buffers that were never allocated, particularly after a partial setup failure. This can lead to a NULL pointer dereference, potentially causing a system...
CVE-2026-90136
A flaw was found in the Linux kernel's AMD HSMP Host System Management Port hardware monitoring hwmon driver. A local user can trigger an issue by attempting to set a negative power cap value. Due to an incorrect conversion of this negative input, a nonsensical, extremely high power limit is sent...
CVE-2026-63691
Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access...
CVE-2026-63691
Dell Container Storage Modules versions prior to 1.18.0 are impacted by a Missing Authorization vulnerability within the Dell CSI Driver for PowerMax - csireverseproxy component. An unauthenticated attacker with adjacent network access could exploit this flaw to gain unauthorized access . Impacti...
CVE-2026-63691
Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access...
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There is no warning first, of the kind either program shows before it runs a macro. The attack works only when the program's Java support is...
USN-8875-1 linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-realtime, linux-xilinx-zynqmp vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 Several...
USN-8875-1: Linux kernel vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 Several...
USN-8879-1 linux-oracle-5.15 vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 It was...
USN-8879-1: Linux kernel (Oracle) vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 It was...
USN-8878-1 linux-gcp-5.15 vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 It was...
USN-8878-1: Linux kernel (GCP) vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 It was...
USN-8877-1 linux-gcp, linux-gcp-fips vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 Several...
USN-8877-1: Linux kernel (GCP) vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 Several...