CVE-2026-43094

A flaw was found in the Linux kernel's ixgbevf driver. When running on Hyper-V virtual machines, a missing operation in the driver's Hyper-V operations table can lead to a null pointer dereference during feature negotiation. This vulnerability allows a local user to trigger a system crash,...

CVE-2025-71290

A flaw was found in the tifpc202 driver within the Linux kernel. This vulnerability, a potential memory leak in the probe function, could allow a local attacker to cause a denial of service by exhausting system memory resources...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via unsafe string copying in the canonicalization process. An attacker can execute arbitrary code or cause a denial of service by supplying a specially crafted username in the MongoDB URI with authMechanism=GSSAPI before...

CVE-2025-71287

A flaw was found in the Linux kernel's mtk-smi driver. This vulnerability occurs due to a failure to properly drop a reference to the SMI device during larb probe on late probe failure or driver unbind. An attacker could potentially exploit this memory leak to cause resource exhaustion, leading t...

CVE-2025-71288

A flaw was found in the Linux kernel's mtk-smi memory driver. This vulnerability arises from the driver's failure to release device references during certain probe failures or when the driver unbinds. This oversight can lead to resource exhaustion, potentially resulting in a Denial of Service DoS...

CVE-2025-71274

A flaw was found in the Linux kernel's rpmsg core. A race condition exists between the driveroverrideshow and driveroverridestore functions. This allows the driveroverride string to be freed while it is still being read, leading to a use-after-free vulnerability. This could potentially result in...

CVE-2026-43102

A flaw was found in the Linux kernel's Airoha network driver. An error in the airohaqdmarxprocess function, which handles received data, can occur when processing subsequent data buffers. This error prevents memory fragments from being properly returned to the system's memory pool, leading to a...

CVE-2026-43097

A flaw was found in the Linux kernel's PCI Hyper-V driver. During error handling, a specific resource identifier can be inadvertently freed twice. This double free vulnerability can lead to memory corruption, potentially causing system instability and a Denial of Service DoS...

CVE-2026-43111

A flaw was found in the Linux kernel's roccat Human Interface Device HID driver. This vulnerability, a use-after-free, arises from a synchronization issue where the roccatreportevent function accesses a list of readers without adequate locking. A local attacker could exploit this to cause a syste...

CVE-2026-43103

A flaw was found in the Linux kernel's lapbether network driver. This vulnerability occurs because the lapbethdatatransmit function expects a specific underlying device type, and without proper handling of network device type changes, this expectation can be violated. This could lead to unexpecte...

CVE-2026-43113

A flaw was found in the wl1251 Wi-Fi driver within the Linux kernel. The wl1251txpacketcb function processes firmware completion IDs without proper validation, allowing an attacker to use a crafted ID to access memory outside of allocated bounds. This out-of-bounds access could lead to memory...

CVE-2026-43081

A flaw was found in the Linux kernel's Integrated Packet Accelerator IPA driver. Incorrectly configured register field masks for IPA version 5.0 and newer could lead to system instability. This issue may manifest as a warning when attempting to send commands to the MPSS remoteproc, potentially...

CVE-2026-6691

The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI...

CVE-2026-6691 MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow

The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI...

MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow

The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI...

CVE-2026-6691 MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow

The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI...

CVE-2026-6691

CVE-2026-6691 affects the MongoDB C Driver Cyrus SASL integration. The issue is unsafe string copying during username canonicalization, leading to a heap buffer overflow before any authentication or network traffic. The vulnerability can be triggered by untrusted input in the username of a MongoD...

CVE-2025-71273

A flaw was found in the Linux kernel's rtw88 Wi-Fi driver. This vulnerability is caused by a memory leak within the rtwregisterhw function, where memory allocated for supported bands is not properly released during error conditions. This could allow a local attacker to exhaust system memory,...

CVE-2026-43120

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access irdma driver. This vulnerability, a double free, occurs during the re-registration of user memory regions. If an internal memory re-registration operation fails, the system attempts to free the same memory twice. This could...

CVE-2026-43110

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. This vulnerability occurs because the driver fails to properly validate bsscfg indices in interface IF events. An attacker could exploit this by sending a specially crafted IF event with an invalid bsscfg index, which could lead to an...