13858 matches found
Astra Linux – Vulnerability in TIF format
A null pointer dereference flaw was detected in Libtiff through the tifdirinfo.c file. This issue may allow an attacker to trigger memory allocation failures through certain methods, such as restricting the heap space size or injecting faults, resulting in a segmentation fault. This can cause the...
Astra Linux – Vulnerability in ffmpeg, ffmpeg5
It was discovered that FFmpeg git-master, N-113007-g8d24a28d06 contains a segmentation violation through the component /libavcodec/jpeg2000dec.c...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfsfsprocnetinit fails. The syzbot reported a warning below 1 after a fault injection in nfsfsprocnetinit. 0 When nfsfsprocnetinit fails, /proc/net/rpc/nfs is not removed. Later, rpcprocexit...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: ALSA: pcm: Added a sanity NULL check for the default mmap fault handler. A driver may allow access to mmap before properly initializing runtime-dmaarea. A proper NULL check should be added before passing the value to virttopag...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: signal: restored the overriderlimit logic Before committing the change d64696905554 “Reimplemented RLIMITSIGPENDING based on ucounts”, the R LIMIT for UCOUNTRLIMITSIGPENDING was not enforced for a certain class of signals. Howeve...
CVE-2026-74632
A flaw was found in the Linux kernel's memory management mm/hugememory. A race condition can occur between a memory shrinker and a concurrent page fault when handling huge zero pages. This race can lead to the hugezeropfn being incorrectly set, causing the huge zero page to be misidentified as an...
PT-2026-80913
Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection. This issue affects SAMA5D4...
CVE-2026-74641
In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctlssharedmem + offset; page = virttopagevaddr; getpagepag...
CVE-2026-74641
In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctlssharedmem + offset; page = virttopagevaddr; getpagepag...
CVE-2026-74641 ALSA: usx2y: bound the hwdep mmap fault offset
In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctlssharedmem + offset; page = virttopagevaddr; getpagepag...
EUVD-2026-64578
In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset sndus428ctlsvmfault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctlssharedmem + offset; page = virttopagevaddr; getpagepag...
PT-2026-79646
In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset snd us428ctls vm fault turns the faulting page offset into a kernel address with no bound of any kind: offset = vmf-pgoff us428ctls sharedmem + offset; page = virt to pagevaddr; get...
Linux Distros Unpatched Vulnerability : CVE-2026-55894
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the shdisassemble function. An attacker can cause a segmentation fault and terminate the process by supplying crafted SH2A bytecode that leads to an out-of-bounds read in the decode table. Remediation A fix was...
MINI-29G5-V7G6-8HGG
Bulletin has no description...
AZL-97413 CVE-2026-55894 affecting package rust for versions less than 1.96.1-1
Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...
AZL-96891 CVE-2026-55894 affecting package capstone 4.0.2-4
Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...
DEBIAN-CVE-2026-55894
Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...
CVE-2026-55894
CVE-2026-55894 is an out-of-bounds read in the Capstone disassembly framework (≤ 6.0.0-Alpha9). The sh_disassemble() function in arch/SH/SHDisassembler.c computes an idx value from a raw 16-bit instruction without validating it against the active mode-specific decode[] function-pointer table. An ...
EUVD-2026-63669
Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...