7 matches found
CVE-2026-80760 Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject HCICMDSYNC paramslen above 255 mgmthcicmdsync checks that the message length agrees with paramslen but puts no upper bound on it. paramslen is le16 while the parameter length in the HCI command header is a...
PT-2026-85601
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject HCI CMD SYNC params len above 255 mgmt hci cmd sync checks that the message length agrees with params len but puts no upper bound on it. params len is le16 while the parameter length in the HCI command...
Linux Distros Unpatched Vulnerability : CVE-2026-72115
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: track a single source interface for ANYDEV timeout/throttle ops An ANYDEV rx op ifindex == 0 with an active RX timeout and/or throttle timer has no...
AZL-91113 CVE-2026-55892 affecting package vim for versions less than 9.2.0735-1
Vim is an open source, command line text editor. Prior to 9.2.0662, the dumpprefixes function in src/spell.c walks a spell-file prefix trie iteratively with a depth counter while dumping the prefixes that apply to a word. The counter is bounded only by the trie structure itself; it is never check...
CVE-2026-43406
In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in processmessageheader If the message frame is maliciously corrupted in a way that the length of the control segment ends up being less than the size of the message header or a...
CVE-2026-43406
In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in processmessageheader If the message frame is maliciously corrupted in a way that the length of the control segment ends up being less than the size of the message header or a...