Lucene search
+L

56 matches found

SUSE CVE
SUSE CVE
•added 2026/10/01 12:38 a.m.•14 views

SUSE CVE-2026-97614

In the Linux kernel, the following vulnerability has been resolved: net: dsa: tagbrcm: legacy FCS: request needed tailroom The legacy FCS tagger calculates the CRC over skb-len bytes starting at skb-data. When a nonlinear skb reaches the tagger, this reads past the linear head into unrelated slab...

6.2AI score0.00198EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/25 11:17 a.m.•8 views

UBUNTU-CVE-2026-97614

In the Linux kernel, the following vulnerability has been resolved: net: dsa: tagbrcm: legacy FCS: request needed tailroom The legacy FCS tagger calculates the CRC over skb-len bytes starting at skb-data. When a nonlinear skb reaches the tagger, this reads past the linear head into unrelated slab...

6.2AI score0.00198EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/09/25 10:22 a.m.•14 views

CVE-2026-97614

In the Linux kernel, the following vulnerability has been resolved: net: dsa: tagbrcm: legacy FCS: request needed tailroom The legacy FCS tagger calculates the CRC over skb-len bytes starting at skb-data. When a nonlinear skb reaches the tagger, this reads past the linear head into unrelated slab...

6.2AI score0.00198EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/09/25 10:22 a.m.•36 views

CVE-2026-97614 net: dsa: tag_brcm: legacy FCS: request needed tailroom

In the Linux kernel, the following vulnerability has been resolved: net: dsa: tagbrcm: legacy FCS: request needed tailroom The legacy FCS tagger calculates the CRC over skb-len bytes starting at skb-data. When a nonlinear skb reaches the tagger, this reads past the linear head into unrelated slab...

0.00198EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/25 10:22 a.m.•16 views

CVE-2026-97614

The Linux kernel contains a vulnerability in the net: dsa: tag_brcm component where the legacy FCS tagger fails to declare required tailroom. When a nonlinear skb reaches the tagger, it calculates the CRC over bytes starting at skb->data, causing it to read past the linear head into unrelated ...

6.2AI score0.00198EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/25 10:22 a.m.•9 views

EUVD-2026-86745

In the Linux kernel, the following vulnerability has been resolved: net: dsa: tagbrcm: legacy FCS: request needed tailroom The legacy FCS tagger calculates the CRC over skb-len bytes starting at skb-data. When a nonlinear skb reaches the tagger, this reads past the linear head into unrelated slab...

6.2AI score0.00198EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/25 10:22 a.m.•11 views

CVE-2026-97614 net: dsa: tag_brcm: legacy FCS: request needed tailroom

In the Linux kernel, the following vulnerability has been resolved: net: dsa: tagbrcm: legacy FCS: request needed tailroom The legacy FCS tagger calculates the CRC over skb-len bytes starting at skb-data. When a nonlinear skb reaches the tagger, this reads past the linear head into unrelated slab...

6.2AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/25 12:00 a.m.•8 views

CVE-2026-97614: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: dsa: tagbrcm: legacy FCS: request needed tailroom The legacy FCS tagger calculates the CRC over skb-len bytes starting at skb-data. When a nonlinear skb reaches the tagger, this reads past the linear head into unrelated slab...

6.2AI score0.00198EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•9 views

PT-2026-98554

In the Linux kernel, the following vulnerability has been resolved: net: dsa: tag brcm: legacy FCS: request needed tailroom The legacy FCS tagger calculates the CRC over skb-len bytes starting at skb-data. When a nonlinear skb reaches the tagger, this reads past the linear head into unrelated sla...

6.2AI score0.00198EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/09/25 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-97614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: dsa: tagbrcm: legacy FCS: request needed tailroom The legacy FCS tagger calculates the CRC over skb-len bytes starting at skb-data. When a nonlinear skb...

6.1AI score0.00198EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/24 2:51 p.m.•35 views

CVE-2026-13465 EL3 Stack Buffer Overflow in FCS HKDF Request

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpgav2.14.0...

8.3CVSS0.0011EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/24 2:51 p.m.•17 views

CVE-2026-13465

A stack-based buffer overflow vulnerability exists in the Altera Trusted Firmware on HPS . The root cause is the exploitation of improperly configured or implemented memory protections . This vulnerability affects versions through socfpga_v2.14.0 . The impact includes high integrity and availabil...

8.3CVSS6.1AI score0.0011EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•8 views

PT-2026-97817

Name of the Vulnerable Software and Affected Versions Altera Trusted Firmware on HPS versions prior to socfpga v2.14.0 Description A stack-based buffer overflow exists in the EL3 Exception Level 3, the highest privilege level in ARMv8-A architecture during an FCS HKDF request. This flaw allows fo...

8.3CVSS6AI score0.0011EPSS
SaveExploits0References5
AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•11 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: caif: Fixed integer underflow in cffrmlreceive. The cffrmlreceive function extracts a length field from the packet header. When FCS is disabled, it subtracts 2 from this length without verifying that len is greater than or equal ...

8.1CVSS6.4AI score0.00304EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/21 10:16 p.m.•15 views

CVE-2026-10675

In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer subsys/bluetooth/mesh/pbadv.c, provmsgrecv rescheduled the provisioning protocol watchdog timer unconditionally at the top of the function, before the FCS check and before the ADVLINKINVALID check. Once a provisioning attempt fails, provfailed...

6.5CVSS0.00389EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/13 4:16 p.m.•13 views

CVE-2025-68799

In the Linux kernel, the following vulnerability has been resolved: caif: fix integer underflow in cffrmlreceive The cffrmlreceive function extracts a length field from the packet header and, when FCS is disabled, subtracts 2 from this length without validating that len = 2. If an attacker sends ...

8.1CVSS0.00304EPSS
SaveExploits0References7
OSV
OSV
•added 2026/01/13 4:16 p.m.•15 views

AZL-74327 CVE-2025-68799 affecting package kernel for versions less than 6.6.121.1-1

In the Linux kernel, the following vulnerability has been resolved: caif: fix integer underflow in cffrmlreceive The cffrmlreceive function extracts a length field from the packet header and, when FCS is disabled, subtracts 2 from this length without validating that len = 2. If an attacker sends ...

8.1CVSS6.4AI score0.00304EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/13 4:16 p.m.•17 views

UBUNTU-CVE-2025-68799

In the Linux kernel, the following vulnerability has been resolved: caif: fix integer underflow in cffrmlreceive The cffrmlreceive function extracts a length field from the packet header and, when FCS is disabled, subtracts 2 from this length without validating that len = 2. If an attacker sends ...

8.1CVSS6.5AI score0.00304EPSS
SaveExploits0References38
OSV
OSV
•added 2026/01/13 3:29 p.m.•13 views

CVE-2025-68799 caif: fix integer underflow in cffrml_receive()

In the Linux kernel, the following vulnerability has been resolved: caif: fix integer underflow in cffrmlreceive The cffrmlreceive function extracts a length field from the packet header and, when FCS is disabled, subtracts 2 from this length without validating that len = 2. If an attacker sends ...

8.1CVSS6.2AI score
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2026/01/13 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2025-68799

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - caif: fix integer underflow in cffrmlreceive The cffrmlreceive function extracts a length field from the packet header and, when FCS is disabled, subtracts 2 fr...

8.1CVSS7.1AI score0.00304EPSS
SaveExploits0References2
Rows per page
Query Builder