32590 matches found
ALSA-2026:12310 Important: sudo security update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: Sudo: Privilege escalation due to failu...
golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS
A flaw in golang.org/x/crypto/ssh/agent causes the SSH agent client to panic when a peer responds with the generic SSHAGENTSUCCESS 0x06 message to requests expecting typed replies e.g., List, Sign. The unmarshal layer produces an unexpected message type, which the client code does not handle,...
CVE-2026-42517 Cryptographic Failure Vulnerability in e-Sushrut HMIS
This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data. An authenticated attacker could exploit this vulnerability by decoding and manipulating Base64-encoded parameters in the request URL to gain unauthorized access to sensitive...
CVE-2026-42517 Cryptographic Failure Vulnerability in e-Sushrut HMIS
This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data. An authenticated attacker could exploit this vulnerability by decoding and manipulating Base64-encoded parameters in the request URL to gain unauthorized access to sensitive...
sudo: Sudo: Privilege escalation due to failure in privilege drop calls
A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system...
github.com/sirupsen/logrus: github.com/sirupsen/logrus: Denial-of-Service due to large single-line payload
A denial-of-service vulnerability in github.com/sirupsen/logrus occurs when Entry.Writer processes a single-line payload larger than 64KB with no newline characters. Due to a limitation in Go’s internal bufio.Scanner, the read operation fails with a “token too long” error, causing the underlying...
The vulnerability of the gic_configure_irq() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the gicconfigureirq function in the Linux operating system is related to the improper release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ieee80211_subif_start_xmit() function in Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the ieee80211subifstartxmit function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the mt7915_put_hif2() function in the drivers/net/wireless/mediatek/mt76/mt7915/pci.c file of the wireless adapter driver for Mediatek’s Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mt7915puthif2 function in the driver/net/wireless/mediatek/mt76/mt7915/pci.c file of the Mediatek wireless adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could...
The vulnerability of the perf_pending_task_sync() function in the kernel/events/core.c module, which manages kernel-level events in Linux operating systems, allows a attacker to cause a service failure.
The vulnerability of the perfpendingtasksync function in the kernel/events/core.c module, which handles kernel events in Linux operating systems, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the zswap_writeback_entry() function in the mm/zswap.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.
The vulnerability of the zswapwritebackentry function in the mm/zswap.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerabilities of the functions ism_cmd() and ism_probe() in the driver drivers/s390/net/ism_drv.c file of the network driver for the S390 platform of the Linux operating system allow a malicious actor to cause service failures.
The vulnerabilities of the functions ismcmd and ismprobe in the drivers/s390/net/ismdrv.c file of the S390 network driver for the Linux operating system are related to state management errors. Exploiting these vulnerabilities can allow an attacker to cause a service failure...
The vulnerability of the mhi_mbim_dellink() function in the MHI kernel driver for Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the mhimbimdellink function in the MHI kernel driver for Linux operating systems is related to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `init_mtd()` function in the `driver/mtd/mtdcore.c` file of the memory driver for the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the initmtd function in the driver/mtd/mtdcore.c file of the Linux memory driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the unix_gc() function in the fnet/unix/garbage.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the unixgc function in the net/unix/garbage.c module of the Linux operating system’s kernel is related to incorrect data handling. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-35911
Name of the Vulnerable Software and Affected Versions Ollama for Windows versions 0.12.10 through 0.17.5 Description Ollama for Windows fails to verify the integrity or authenticity of downloaded update executables. The update verification routine on Windows unconditionally returns success,...
The vulnerability of the am65_cpsw_nuss_ndo_slave_open() function in the drivers/net/ethernet/ti/am65-cpsw-nuss.c file of the Ethernet network adapter driver for Texas Instruments’ Linux kernel allows a hacker to cause a service failure.
The vulnerability of the am65cpswnussndoslaveopen function in the drivers/net/ethernet/ti/am65-cpsw-nuss.c file of the Ethernet network adapter driver for Texas Instruments’ Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability could all...
The vulnerability of the iscsi_sw_tcp_conn_set_param() function in the drivers/scsi/iscsi_tcp.c file of the Linux operating system’s SCSI device driver allows a attacker to cause a service failure.
The vulnerability of the iscsiswtcpconnsetparam function in the drivers/scsi/iscsitcp.c file of the Linux SCSI device driver is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `ionic_devlink_alloc()` function in the `drivers/net/ethernet/pensando/ionic/ionic_devlink.c` file of the Pensando Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ionicdevlinkalloc function in the drivers/net/ethernet/pensando/ionic/ionicdevlink.c file of the Pensando Ethernet network adapter driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an...
The vulnerability of the rt6_nlmsg_size() function in the net/ipv6/route.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to cause a service failure.
The vulnerability of the rt6nlmsgsize function in the net/ipv6/route.c module of the Linux operating system’s IPv6 kernel implementation is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...