PT-2026-125554

Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process...

NXP MCUXpresso SDK USB Middleware Before 2.13.0 Heap Buffer Overflow

NXP MCUXpresso SDK USB middleware versions before 2.13.0 contain a heap buffer overflow in host audio, video, and CDC class drivers that trust device-supplied descriptor values...

CVE-2026-82390

The Espressif AES driver drivers/crypto/cryptoesp32aes.c advertises a multi-session cipher API — it hands out up to CONFIGESP32CRYPTOAESSESSIONSMAX default 4 independent sessions, each carrying its own key and direction. The AES peripheral, however, has a single chip-global set of key and mode...

UBUNTU-CVE-2026-82390

The Espressif AES driver drivers/crypto/cryptoesp32aes.c advertises a multi-session cipher API — it hands out up to CONFIGESP32CRYPTOAESSESSIONSMAX default 4 independent sessions, each carrying its own key and direction. The AES peripheral, however, has a single chip-global set of key and mode...

CVE-2026-82390

The Espressif AES driver drivers/crypto/cryptoesp32aes.c advertises a multi-session cipher API — it hands out up to CONFIGESP32CRYPTOAESSESSIONSMAX default 4 independent sessions, each carrying its own key and direction. The AES peripheral, however, has a single chip-global set of key and mode...

CVE-2026-82390 Cross-session AES key confusion in the Espressif ESP32 hardware crypto driver

The Espressif AES driver drivers/crypto/cryptoesp32aes.c advertises a multi-session cipher API — it hands out up to CONFIGESP32CRYPTOAESSESSIONSMAX default 4 independent sessions, each carrying its own key and direction. The AES peripheral, however, has a single chip-global set of key and mode...

EUVD-2026-109976

The Espressif AES driver drivers/crypto/cryptoesp32aes.c advertises a multi-session cipher API — it hands out up to CONFIGESP32CRYPTOAESSESSIONSMAX default 4 independent sessions, each carrying its own key and direction. The AES peripheral, however, has a single chip-global set of key and mode...

CVE-2026-82390

The Espressif AES driver (drivers/crypto/crypto_esp32_aes.c) contains a cross-session AES key confusion vulnerability. The driver provides a multi-session API, but the underlying hardware uses a single set of global registers for keys and modes. Because aes_begin_session() programs these register...

CVE-2026-116488 NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap Overflow via Host Class Drivers

NXP MCUXpresso SDK USB middleware mcuxsdk-middleware-usb before 2.13.0 contains a heap buffer overflow in host audio, video and CDC class drivers that trust device-supplied bNumEndpoints and bLength values. A malicious USB device can supply crafted descriptors that write endpoint entries past the...

CVE-2026-116488

The NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) versions before 2.13.0 is vulnerable to a heap buffer overflow in the host audio, video, and CDC class drivers. The root cause is the improper trust of device-supplied bNumEndpoints and bLength values, which allows a malicious USB dev...

PT-2026-123421

The Espressif AES driver drivers/crypto/crypto esp32 aes.c advertises a multi-session cipher API — it hands out up to CONFIG ESP32 CRYPTO AES SESSIONS MAX default 4 independent sessions, each carrying its own key and direction. The AES peripheral, however, has a single chip-global set of key and...

CVE-2026-79978

The RTIO streaming completion callback adxl345processfifosamplescb in drivers/sensor/adi/adxl345/adxl345stream.c clamps the amount of FIFO data it will report readlen = MINfifobytes, bufavail to the space actually returned by rtiosqerxbuf, but then queues one 6-byte bus read per hardware FIFO ent...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.8. It stems from a flaw in the calculation of page table preallocation size within drivers/gpu/drm/imagination/pvrmmu.c. This flaw fails to accurately determine both the device address range and its endpoints, while also neglecting page...

PT-2026-122212

The RTIO streaming completion callback adxl345 process fifo samples cb in drivers/sensor/adi/adxl345/adxl345 stream.c clamps the amount of FIFO data it will report read len = MINfifo bytes, buf avail to the space actually returned by rtio sqe rx buf, but then queues one 6-byte bus read per hardwa...

Linux kernel DoS

The vulnerability of the r8712initxmitpriv function in the drivers/staging/rtl8712/rtl871xxmit.c file and the r8712xmitresourcealloc function in the drivers/staging/rtl8712/xmitlinux.c file of the Linux kernel is related to insufficient resource management during its existence. Exploiting this...

Linux Distros Unpatched Vulnerability : CVE-2026-98968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - amt: send the relay's General Query directly from the receive path An skb queued in a qdisc can outlive the tunnel it references through a raw pointer in skb-cb...

Linux alloc_carmine_fb Buffer Overflow DoS

The vulnerability of the alloccarminefb function in the drivers/video/fbdev/carminefb.c kernel module of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

LEDS Kernel Data Compromise

The vulnerability of the uledswrite function in the drivers/leds/uleds.c file of the Linux kernel relates to the execution of operations outside of the buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected information...

Linux rdma_create_ah Heap Buffer Overflow DoS

The vulnerability of the rdmacreateah function in the drivers/infiniband/core/verbs.c file of the Linux operating system’s kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2026-19676

The user-mode verifier for the pecitransfer system call, zvrfypecitransfer in drivers/peci/pecihandlers.c, checked only the device object permission and copied the caller-supplied struct pecimsg with kusermodefromcopy. That copy validates the outer structure only; the buf pointers and len values...