CVE-2026-98658

In the Linux kernel, the following vulnerability has been resolved: iio: proximity: aw96103: validate firmware data length The firmware parser reads a length from the binary header and then uses it to walk six-byte register/value entries. A truncated firmware image can make the parser read beyond...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ASoC: SOF: Added bounds checking to firmware data. Smatch complains that “head-fullsize – head-headersize” can cause underflow. To some extent, we will always have to trust the firmware. However, it’s easy to add checks for...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: wifi: brcmfmac: Fixed a potential stack-out-of-bounds situation in brcmfcpreinitdcmds. This patch addresses a read operation that may lead to a stack-out-of-bounds condition, occurring when a buffer that is not null-terminated...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevention of certain integer underflows My static checker reports the following issue: drivers/infiniband/hw/irdma/ctrl.c:3605 irdmascceqinit Warning: Can subtract underflow for ‘info-dev-hmcfpmmisc.maxceqs’? It seem...

CVE-2026-68350

A flaw was found in the Linux kernel's carl9170 Wi-Fi driver. An out-of-bounds read vulnerability exists within the carl9170txprocessstatus function. This issue is caused by an off-by-two error in a bounds check, allowing the system to read beyond the intended memory buffer when processing...

CVE-2026-49008

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the device...

CVE-2026-49006

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission...

CVE-2026-49008

The CVE-2026-49008 entry concerns the ZTE F689 product and describes an integrity-check credential leakage in an application function. The vulnerability arises from unencrypted information in device firmware that could allow an attacker to obtain credentials related to the integrity verification ...

CVE-2026-49008

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the device...

CVE-2026-49007 Information leakage vulnerability in ZTE F689 product

By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface...

EUVD-2026-54408

By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface...

CVE-2026-49006

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission...

CVE-2026-49006

CVE-2026-49006 affects ZTE device firmware. The issue arises from accessing unencrypted information in the firmware, allowing an attacker with adjacent access (AV:A) and high access complexity (AC:H) to obtain credentials related to TLS transmission, with no privileges required and no user intera...

CVE-2026-49006 TLS credential leakage vulnerability in ZTE F689 product

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission...

CVE-2026-49005

The root password hash of the device can be obtained through unencrypted information in the firmware...

CVE-2026-49005 Root password hash exposure vulnerability in ZTE F689 product

The root password hash of the device can be obtained through unencrypted information in the firmware...

CVE-2026-64407

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxprecvfwreqv3 During the v3 firmware download the controller sends a v3datareq with a 32 bit offset and a 16 bit len. nxprecvfwreqv3 checks only the lower bound of the...

SUSE CVE-2026-53202

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC receive Fix potential buffer overflow where firmware-supplied datasize is cast to signed int before being used in mint. Large unsigned values = 0x80000000 become negative, causing...

CVE-2026-53202

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC receive Fix potential buffer overflow where firmware-supplied datasize is cast to signed int before being used in mint. Large unsigned values = 0x80000000 become negative, causing...

CVE-2026-53202 accel/ivpu: Fix signed integer truncation in IPC receive

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC receive Fix potential buffer overflow where firmware-supplied datasize is cast to signed int before being used in mint. Large unsigned values = 0x80000000 become negative, causing...