Lucene search
+L

611 matches found

OSV
OSV
added 2026/07/25 8:50 a.m.8 views

CVE-2026-64369 s390: Revert support for DCACHE_WORD_ACCESS

In the Linux kernel, the following vulnerability has been resolved: s390: Revert support for DCACHEWORDACCESS loadunalignedzeropad reads eight bytes from unaligned addresses and may cross page boundaries. It handles exceptions which may happen if reading from the second page results in an...

5.8AI score
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:0 a.m.7 views

TencentOS Server 2: freerdp (TSSA-2026:0751)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0751 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

9.8CVSS6.5AI score0.00599EPSS
SaveExploits7References9
Tenable Nessus
Tenable Nessus
added 2026/07/18 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-54465

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, when websocket-driver is used to implement a WebSocket server on top of a T...

7.5CVSS5.4AI score0.00344EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/17 8:17 p.m.10 views

CVE-2026-54465

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, when websocket-driver is used to implement a WebSocket server on top of a TCP server using WebSocket::Driver.server or to complement a WebSocket client, a peer can make a single connection consume an unbounded...

7.5CVSS0.00344EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/17 8:6 p.m.8 views

CVE-2026-54465

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, when websocket-driver is used to implement a WebSocket server on top of a TCP server using WebSocket::Driver.server or to complement a WebSocket client, a peer can make a single connection consume an unbounded...

6.3CVSS5.4AI score0.00344EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2026/07/01 2:16 p.m.11 views

CVE-2026-53336

In the Linux kernel, the following vulnerability has been resolved: nvmem: layouts: onie-tlv: fix hang on unknown types The EEPROM on my board has a vendor specific entry of type 0x41. When stumbling upon that, this driver hangs in an endless loop. Fix it by keep incrementing the offset on unknow...

5.5CVSS6AI score0.00114EPSS
SaveExploits0References7
CVE
CVE
added 2026/07/01 1:32 p.m.40 views

CVE-2026-53336

Summary of CVE-2026-53336 (Linux kernel nvmem driver) : The vulnerability occurs in the nvmem layouts: onie-tlv handling where an EEPROM entry with an unknown type can cause the driver to hang in an endless loop. The root cause is an infinite loop when encountering vendor-specific or unknown type...

5.5CVSS5.8AI score0.00114EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/01 1:32 p.m.8 views

CVE-2026-53336

In the Linux kernel, the following vulnerability has been resolved: nvmem: layouts: onie-tlv: fix hang on unknown types The EEPROM on my board has a vendor specific entry of type 0x41. When stumbling upon that, this driver hangs in an endless loop. Fix it by keep incrementing the offset on unknow...

5.8AI score0.00114EPSS
SaveExploits0References6Affected Software1
Vulnrichment
Vulnrichment
added 2026/06/11 6:59 p.m.13 views

CVE-2026-45802 FPDI: Memory Exhaustion and Endless Loop in FPDI leads to Denial of Service

FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. Prior to version 2.6.7, an attacker can upload a small, malicious PDF file that will cause the server-side script to crash due to memory exhaustion or a script...

6CVSS5.3AI score0.00259EPSS
SaveExploits0References3
RubySec
RubySec
added 2026/06/04 12:0 a.m.10 views

Memory exhaustion in HTTP header parser

Impact If this library is used to implement a WebSocket server on top of a TCP server rather than an HTTP server or framework using the WebSocket::Driver.server method, or, if it is used to complement a WebSocket client, then a peer can make a single connection consume an unbounded amount of memo...

7.5CVSS6AI score0.00344EPSS
SaveExploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
added 2026/05/29 8:7 a.m.12 views

ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()

...

7.1CVSS5.4AI score0.00128EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2026/05/29 1:16 a.m.13 views

SUSE CVE-2026-46146

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convertchmapv3 The convertchmapv3 has a loop with its increment size of csdesc-wLength, but we forgot to validate csdesc-wLength itself, which may lead to potential endless loop by...

5.5CVSS5.8AI score0.00128EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/05/29 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-46146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: Avoid potential endless loop in convertchmapv3 The convertchmapv3 has a loop with its increment size of csdesc-wLength, but we forgot to valida...

5.5CVSS5.5AI score0.00128EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/05/28 9:9 p.m.12 views

CVE-2026-46177

A flaw was found in the Linux kernel's Intelligent Platform Management Interface IPMI driver. This vulnerability allows a malfunctioning Baseboard Management Controller BMC to cause the IPMI driver to continuously fetch events and messages, or become stuck if the attention bit remains active. Thi...

7.5CVSS5.8AI score0.00501EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/05/28 10:16 a.m.5 views

CVE-2026-46146

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convertchmapv3 The convertchmapv3 has a loop with its increment size of csdesc-wLength, but we forgot to validate csdesc-wLength itself, which may lead to potential endless loop by...

5.5CVSS5.4AI score0.00128EPSS
SaveExploits0References37
CVE
CVE
added 2026/05/28 9:36 a.m.41 views

CVE-2026-46146

CVE-2026-46146 affects the Linux kernel's ALSA USB audio stack, specifically the convert_chmap_v3() routine. A loop uses cs_desc->wLength for increment but this value isn’t validated, allowing a potential endless loop with malformed descriptors. The issue is resolved by adding a proper size ch...

5.5CVSS5.8AI score0.00128EPSS
SaveExploits0References8Affected Software1
EUVD
EUVD
added 2026/05/28 9:36 a.m.14 views

EUVD-2026-32773

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convertchmapv3 The convertchmapv3 has a loop with its increment size of csdesc-wLength, but we forgot to validate csdesc-wLength itself, which may lead to potential endless loop by...

5.8AI score0.00128EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/05/28 9:36 a.m.37 views

CVE-2026-46146 ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convertchmapv3 The convertchmapv3 has a loop with its increment size of csdesc-wLength, but we forgot to validate csdesc-wLength itself, which may lead to potential endless loop by...

0.00128EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/05/28 9:36 a.m.19 views

CVE-2026-46146

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convertchmapv3 The convertchmapv3 has a loop with its increment size of csdesc-wLength, but we forgot to validate csdesc-wLength itself, which may lead to potential endless loop by...

5.5CVSS5.7AI score0.00128EPSS
SaveExploits0
OSV
OSV
added 2026/05/28 9:36 a.m.6 views

CVE-2026-46146 ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convertchmapv3 The convertchmapv3 has a loop with its increment size of csdesc-wLength, but we forgot to validate csdesc-wLength itself, which may lead to potential endless loop by...

5.8AI score
SaveExploits0References11
Rows per page
Query Builder