160 matches found
CVE-2026-89978
CVE-2026-89978 affects the Linux kernel accel/amdxdna driver (AMD NPU). The SYNC_BO ioctl does not validate that the requested size is non-zero, so a zero-byte request reaches drm_clflush_virt_range(), which unconditionally calls clflushopt(end - 1). For an empty range this dereferences the guard...
EUVD-2026-80578
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: return early from a zero-length flush SYNCBO does not constrain its size, so a request for zero bytes reaches drmclflushvirtrange, which ends with an unconditional clflushoptend - 1. For an empty range that is the...
UBUNTU-CVE-2026-72084
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing to the received buffer corescsi3decodespeciport and corescsi3emulateregisterandmove hand the raw PERSISTENT RESERVE OUT parameter buffer to targetparseprouttransportid without tellin...
SUSE CVE-2017-1000377
An issue was discovered in the size of the default stack guard page on PAX Linux originally from GRSecurity but shipped by other Linux vendors, specifically the default stack guard page is not sufficiently large and can be "jumped" over the stack guard page is bypassed, this affects PAX Linux...
CVE-2026-44028
An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the NAR Nix Archive parser could lead to a stack-to-heap overflow when the parser is run on a coroutine stack. The stack is allocated without a guard page, which means that a stack overflow could overwrite...
CVE-2026-44028
CVE-2026-44028 affects Nix and Lix: unbounded recursion in the NAR (Nix Archive) parser can cause a stack-to-heap overflow when parsing on a coroutine stack. The stack lacks a guard page, enabling a stack overflow to overwrite heap memory and potentially execute arbitrary code as the Nix daemon (...
nix: coroutine stack-to-heap overflow via unbounded recursion in NAR directory parser
A flaw was found in Nix. Unbounded recursion in the NAR Nix Archive parser could lead to a stack-to-heap overflow when the parser is run on a coroutine stack. The stack is allocated without a guard page, which means that a stack overflow could overwrite memory on the heap and could allow arbitrar...
nix: coroutine stack-to-heap overflow via unbounded recursion in NAR directory parser
A flaw was found in Nix. Unbounded recursion in the NAR Nix Archive parser could lead to a stack-to-heap overflow when the parser is run on a coroutine stack. The stack is allocated without a guard page, which means that a stack overflow could overwrite memory on the heap and could allow arbitrar...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000926)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000926 advisory. An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be jumped over the stack...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003522)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003522 advisory. An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be jumped over the stack...
Unity Linux 20.1060a Security Update: kernel (UTSA-2026-002948)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002948 advisory. An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be jumped over the stack...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003396)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003396 advisory. An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be jumped over the stack...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989488)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989488 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvlan: add ipvlanroutev6outbound helper Inspired by syzbot reports using a stack of multiple...
UBUNTU-CVE-2025-40008
In the Linux kernel, the following vulnerability has been resolved: kmsan: fix out-of-bounds access to shadow memory Running sha224kunit on a KMSAN-enabled kernel results in a crash in kmsaninternalsetshadoworigin: BUG: unable to handle page fault for address: ffffbc3840291000 PF: supervisor read...
CVE-2025-40008
CVE-2025-40008 is a Linux kernel vulnerability involving kmsan shadow memory. The issue arises when a memset is performed on a buffer not 4-byte aligned that spans a guard page, causing an out-of-bounds read of shadow memory and a kernel crash (oops) in kmsan_internal_set_shadow_origin. The root ...
CVE-2025-40008 kmsan: fix out-of-bounds access to shadow memory
In the Linux kernel, the following vulnerability has been resolved: kmsan: fix out-of-bounds access to shadow memory Running sha224kunit on a KMSAN-enabled kernel results in a crash in kmsaninternalsetshadoworigin: BUG: unable to handle page fault for address: ffffbc3840291000 PF: supervisor read...
EUVD-2017-1523
Malware in sbrugna...
EUVD-2017-1533
Malware in sbrugna...