59426 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-74451
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: validate firmware interface structure sizes ifacefwtocpuaddr only checks that the firmware-provided MCU virtual address points inside the shared...
Linux Distros Unpatched Vulnerability : CVE-2026-72500
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/bnxtre: Free SRQ toggle page after firmware teardown Free the toggle page only after firmware teardown completes so that an NQ interrupt arriving during...
PT-2026-72403
In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Ensure 32-bit stack location for o32 prom printf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initial one will result in a situation where the stack has been placed in...
PT-2026-72903
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: validate firmware interface structure sizes iface fw to cpu addr only checks that the firmware-provided MCU virtual address points inside the shared section. The returned pointer is later used as a full firmware...
PT-2026-72844
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: fix OOB access from firmware tx status queue ID ath tx edma tasklet accesses sc-tx.txqts.qid where ts.qid is a 4-bit hardware field 0-15, but the txq array only has ATH9K NUM TX QUEUES 10 entries. A qid = 10 causes a...
PT-2026-72266
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix firmware leak in async update The firmware object was not being released if validation failed. Use freefirmware to ensure the firmware is always released...
CVE-2026-72500: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Free SRQ toggle page after firmware teardown Free the toggle page only after firmware teardown completes so that an NQ interrupt arriving during bnxtqplibdestroysrq won't write the toggle values to an already-freed...
CVE-2026-74409: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: add bounds check on firmware macid in link lookup The macid field in RX descriptors is 8 bits wide 0-255, but assoclinkonmacid has only RTW89MAXMACIDNUM 128 entries. While the driver currently assigns macid values...
CVE-2026-68469: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix permanently busy scans after multiple roam iterations In order for the firmware to sleep, the driver has to confirm a previously received sleep request. The normal sequence of evets goes like this: EVENTSLEEP -...
PT-2026-72904
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: reject firmware sections with oversized data In panthor fw load section entry, the data size to copy is calculated without validating it against the allocated section size: section-data.size = hdr.data.end -...
Linux Distros Unpatched Vulnerability : CVE-2026-74452
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: reject firmware sections with oversized data In panthorfwloadsectionentry, the data size to copy is calculated without validating it against the...
CVE-2026-72089: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Reject firmware log with size smaller than header fwlogfrombo validates the tracing buffer headersize and that the log fits within the BO, but never checks that log-size is at least log-headersize. fwlogprintbuffer th...
PT-2026-72777
In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix heap overflow from oversized firmware HAL response The firmware response dispatcher copies all synchronous HAL responses into the 4096-byte hal buf without validating the response length. A response exceeding...
CVE-2026-72077: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix firmware leak in async update The firmware object was not being released if validation failed. Use freefirmware to ensure the firmware is always released...
SUSE CVE-2026-20713
Always-incorrect control flow implementation in some firmware for some IntelR XeonR processors may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via...
MINI-RG49-H5RP-JFGR
Bulletin has no description...
CVE-2026-27871 TL280
Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63...
CVE-2026-27871
CVE-2026-27871 affects Johnson Controls TL280 (pre-5.63) with CWE-327: Use of a Broken or Risky Cryptographic Algorithm, enabling potential cryptanalytic access as described in the ICS advisory icsa-26-218-02. The vulnerability stems from weak cryptographic practices in TL280 prior to version 5.6...
