The vulnerabilities in the net/netfilter/nf_nat_amanda.c and net/netfilter/nf_nat_sip.c modules of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the net/netfilter/nfnatamanda.c and net/netfilter/nfnatsip.c modules in the Linux operating system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity,...

The vulnerability of the sbc_execute_unmap() function in the drivers/target/target_core_sbc.c driver of the TCM kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sbcexecuteunmap function in the drivers/target/targetcoresbc.c driver of the TCM kernel of the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the isert_login_recvdone() function in the drivers/infiniband/ulp/isert/ib_isert.c module of the Linux operating system’s InfiniBand driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the isertloginrecvdone function in the drivers/infiniband/ulp/isert/ibisert.c driver of the Linux operating system’s InfiniBand module is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability could allow a remote attacker...

The vulnerability of the build_i2c_fw_hdr() function in the drivers/usb/serial/io_ti.c file of the Linux device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the buildi2cfwhdr function in the drivers/usb/serial/ioti.c file of the Linux device driver module is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the ipip6_tunnel_xmit() function in the net/ipv6/sit.c module of the Linux kernel’s IPv6 implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipip6tunnelxmit function in the net/ipv6/sit.c module of the Linux kernel’s IPv6 implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

The vulnerability of the netlbl_unlabel_addrinfo_get() function in the net/netlabel/netlabel_unlabeled.c module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the netlblunlabeladdrinfoget function in the net/netlabel/netlabelunlabeled.c module, which is part of the networking functions in the Linux kernel, relates to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the pppol2tp_ioctl() function in the net/l2tp/l2tp_ppp.c module of the Layer Two Tunneling Protocol (L2TP) implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pppol2tpioctl function in the net/l2tp/l2tpppp.c module of the Layer 2 Tunneling Protocol implementation in the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

The vulnerability of the oaktrail_lvds_init() function in the drivers/gpu/drm/gma500/oaktrail_lvds.c driver code of the Direct Rendering Infrastructure (DRI) kernel module in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the oaktraillvdsinit function in the drivers/gpu/drm/gma500/oaktraillvds.c driver for the Direct Rendering Infrastructure DRI kernel of the Linux operating system leads to unlimited resource allocation. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the Python programming language’s cryptography interpreter lies in errors in the certificate validation process, which allows attackers to compromise the integrity of the protected information.

The vulnerability of the Python programming language’s cryptography interpreter is related to errors in the certificate authentication process. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the osdmap_decode() function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, allows a hacker to gain access to protected information or cause service interruptions.

The vulnerability of the osdmapdecode function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, is related to incorrect input of configuration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected...

The vulnerability of the tipc_bufAppend() function in the net/tipc/msg.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tipcbufAppend function in the net/tipc/msg.c module of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the sctp_getsockopt_peer_auth_chunks() function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sctpgetsockoptpeerauthchunks function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation is related to an incorrect calculation of the buffer size. Exploiting this vulnerability could allow a attacker to compromise the...

The vulnerabilities of the functions qdisc_pkt_len_segs_init() and __dev_queue_xmit() in the net/core/dev.c module of the Linux kernel allow an attacker to access protected information or cause service failures.

The vulnerabilities of the functions qdiscpktlensegsinit and devqueuexmit in the net/core/dev.c module of the Linux kernel are related to incorrect assumptions about the organization of data or memory. Exploiting these vulnerabilities can allow an attacker to access protected information or cause...

The vulnerability of the mrp_pdu_parse_vecattr() function in the net/802/mrp.c module, which is part of the networking functions of the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the mrppduparsevecattr function in the net/802/mrp.c module, which is part of the networking functions in the Linux kernel, stems from an improper check of the specified index, position, or offset within the input data. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the __audit_log_capset() function in the kernel/auditsc.c file of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the auditlogcapset function in the kernel/auditsc.c file of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mbox_controller_register() function in the drivers/mailbox/mailbox.c file of the Linux kernel-based mailbox driver module allows a hacker to cause a service failure.

The vulnerability of the mboxcontrollerregister function in the drivers/mailbox/mailbox.c file of the Linux kernel-based mailbox driver module is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-85370

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Impacted is the function htmlspecialchars decode of the file App/Home/View/Default/Chapter/oneChapter.tpl of the component Chapter Content Output. Performing a...

MiracleLinux 8 : [security - high] nodejs:22 (AXSA:2026-1753:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1753:01 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion vi...

PT-2026-85584

Turso through 0.8.0-pre.8 contains an out-of-bounds read vulnerability in the table-leaf page reader that uses an attacker-controlled cell-count field without bounds validation. Attackers can craft a malicious database file with a modified cell count value to trigger an index-out-of-bounds panic...

PT-2026-85563

tokenizers Hugging Face is affected by an out-of-bounds buffer access in BpeBuilder::build tokenizers/src/models/bpe/model.rs. When loading a tokenizer.json via Tokenizer::from file/from str, the builder sizes a scratch buffer to the longest vocabulary key, then writes each concatenated merge rul...