CVE-2026-85577

AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in userLogin.php that allows unauthenticated attackers to inject arbitrary JavaScript by closing the script tag with . Attackers can craft a malicious URL with an error parameter containing script breakout...

Malicious code in container-error-sanitize-authenticate-sigma (npm)

Source: amazon-inspector 042b588b7a0bd526a19fddc01c4ae5cd6e61d211c4638993593e8dcd9857ff31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in claims-get-error-string (npm)

Source: amazon-inspector 8107a092447bc749767928c38a816191c2af0ea06cb12d6dbeddb9f09b46c698 On require, index.js loads ext.js which downloads a platform-specific binary from a set of hardcoded Cloudflare Workers hosts oob-worker.cf103-070.workers.dev, oob-worker.cf99-9b3.workers.dev,...

Malicious code in chi-error-kappa-shell-error (npm)

Source: amazon-inspector 7d52be924692085514a7ac69e4324d76070a96c0a3599cbe5efcff36f82206d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Linux kernel vfiopci_core_close_device Heap Buffer Overflow DoS

The vulnerability of the vfiopcicoreclosedevice function in the drivers/vfio/pci/vfiopcicore.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

Linux USB TypeC Driver Heap Buffer Overflow DoS

The vulnerability of the cd321xupdatework function in the drivers/usb/typec/tipd/core.c module of the USB TypeC driver in the Linux operating system is related to error handling flaws. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux GPU DRM XE DMA Buffer Overflow

The vulnerability of the xegemprimeimport function in the drivers/gpu/drm/xe/xedmabuf.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

Linux kernel Bluetooth L2CAP Buffer Overflow DoS

The vulnerability in the l2capecredreconfrsp function within net/bluetooth/l2capcore.c of the Linux kernel’s Bluetooth subsystem is related to synchronization errors. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality, integrity, and availability of...

FreeRDP RDP Client Unauthorized Access

The vulnerabilities of the functions dvcmancallonreceive and dvcmanchannelclose in the file channels/drdynvc/client/drdynvcmain.c of the RDP client FreeRDP are related to synchronization errors when using a shared resource. Exploiting these vulnerabilities can allow an attacker operating remotely...

Linux kernel TCP Target Function Data Compromise

The vulnerabilities of the functions nvmettcpbuildpduiovec and nvmettcphandlereqfailure in the driver/nvme/target/tcp.c module of the Linux kernel are related to error handling flaws. Exploiting these vulnerabilities allows a remote attacker to compromise the confidentiality, integrity, and...

amdgpu_info_ioctl DoS

The vulnerability in the amdgpuinfoioctl function within the drivers/gpu/drm/amd/amdgpu/amdgpukms.c file of the AMD GPU DRI driver is related to synchronization errors that occur when a shared resource is utilized. Exploitation of this vulnerability may allow an attacker to cause a denial of...

netfilter Heap Buffer Overflow DoS

The vulnerability of the nftablescommit function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

Linux kernel drm_gem_change_handle_ioctl Heap Buffer Overflow

The vulnerability of the drmgemchangehandleioctl function in the drivers/gpu/drm/drmgem.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibilit...

Linux Kernel Function Heap Buffer Overflow DoS

The vulnerability of the functions kvmats12 and kvmfinds1desclevel in the arch/arm64/kvm/at.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, an...

Direct Rendering Infrastructure AMD GPU Buffer Overflow DoS

The vulnerability of the dcn32enablephantomplane function in the drivers/gpu/drm/amd/display/dc/resource/dcn32/dcn32resource.c driver of the Direct Rendering Infrastructure DRI module for AMD video cards in Linux operating systems is related to an unvalidated error condition. Exploiting this...

Linux kernel Memory Management Heap Buffer Overflow DoS

The vulnerability of the memcgreparentlistlrus function in the mm/listlru.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

Python cryptography Certificate Validation

The vulnerability of the Python programming language’s cryptography interpreter is related to errors in the certificate authentication process. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

Linux PCI Device Driver DoS

The vulnerability in the pexepeventpexrstdeassert function within the drivers/pci/controller/dwc/pcie-tegra194.c file of the Linux kernel’s PCI device driver is related to synchronization errors that occur when a shared resource is used “race condition”. Exploitation of this vulnerability may all...

PT-2026-85795

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ring-buffer where small events on architectures with RB FORCE 8BYTE ALIGNMENT set to true report a data length 4 bytes larger than expected. This occurs because rb...

PT-2026-85801

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the tegra crypto component where the system fails to return an ENOMEM error value when the input buffer allocation fails within the tegra ccm do one req function...