11158 matches found
USN-8629-2 linux-aws-7.0 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Network traffic control; - IPv4 networking; - IPv6...
CVE-2026-9771
The flashcopy system call is verified by zvrfyflashcopy in drivers/flash/flashutil.c. On builds with CONFIGUSERSPACE enabled, this handler is the kernel-side trust boundary for a user-mode caller. Prior to the fix it validated only the output buffer KSYSCALLMEMORYWRITE and passed the two struct...
CVE-2026-12629: Loop with Unreachable Exit Condition
The ARM PL011 UART driver in drivers/serial/uartpl011.c fails to acknowledge receive error interrupts. On the PL011, the framing, parity, break, and overrun error interrupts PL011IMSCERRORMASK are cleared only by writing the interrupt-clear register UARTICR; reading the data register clears the R...
CVE-2026-9771: Untrusted Pointer Dereference
The flashcopy system call is verified by zvrfyflashcopy in drivers/flash/flashutil.c. On builds with CONFIGUSERSPACE enabled, this handler is the kernel-side trust boundary for a user-mode caller. Prior to the fix it validated only the output buffer KSYSCALLMEMORYWRITE and passed the two struct...
Linux kernel Heap Buffer Overflow DoS
The vulnerability in the drivers/pci/iov.c component of the Linux kernel kernel is related to insufficient locking. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
dbeaver v26.1.5
DBeaver Free multi-platform database tool for developers, SQL programmers, database administrators and analysts. Has a lot of features including schema editor, SQL editor, data editor, AI integration, ER diagrams, data export/import/migration, SQL execution plans, database administration tools,...
CVE-2026-74356 vhost: fix vhost_get_avail_idx for a non empty ring
In the Linux kernel, the following vulnerability has been resolved: vhost: fix vhostgetavailidx for a non empty ring vhostgetavailidx is supposed to report whether it has updated vq-availidx. Instead, it returns whether all entries have been consumed, which is usually the same. But not always - i...
PT-2026-72501
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/fb-helper component where fbdev output is synchronized to the vblank of CRTC 0 regardless of whether it is active. This leads to warnings and timeouts when the...
CVE-2026-74356: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: vhost: fix vhostgetavailidx for a non empty ring vhostgetavailidx is supposed to report whether it has updated vq-availidx. Instead, it returns whether all entries have been consumed, which is usually the same. But not always - i...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.10 contains security vulnerabilities. These vulnerabilities stem from functions in the drivers/dibs/dibsloopback.c file, specifically dibsloattachdmb, dibslodetachdmb, and dibslounregisterdmb. These functions improperly hold locks after finding a dmbnode, resulting in t...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from a lifecycle management issue in the vub300 driver found in the drivers/mmc/host/vub300.c file. When the detection fails, it may lead to reusing resources after release...
Linux Kernel Security Vulnerabilities
The Linux kernel version 3.1 has a security vulnerability. This vulnerability stems from the vhostzerocopycomplete function in drivers/vhost/net.c, which does not properly maintain the ubufinfo reference count, resulting in reusing after release...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the RDMA/IRDMA drivers’ use of wait queues and requestdone flags without proper memory barriers, which can lead to race conditions...
USN-8637-1: Linux kernel (OEM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Thunderbolt and USB4 drivers; - Network traffic contro...
USN-8630-2: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructur...
USN-8630-2 linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia-tegra, linux-oracle vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Mellanox network drivers; - File systems infrastructur...
CVE-2026-66468
Unauthenticated Cross Site Scripting XSS in Local Delivery Drivers for WooCommerce = 3.0.0 versions...
CVE-2026-66468 WordPress Local Delivery Drivers for WooCommerce plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Local Delivery Drivers for WooCommerce = 3.0.0 versions...
CVE-2026-66468 WordPress Local Delivery Drivers for WooCommerce plugin <= 3.0.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Local Delivery Drivers for WooCommerce = 3.0.0 versions...
