23365 matches found
UBUNTU-CVE-2026-80609
In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...
CVE-2026-80609
In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...
CVE-2026-80670 perf tools: Use perf_env__get_cpu_topology() in machine__resolve()
In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perfenvgetcputopology in machineresolve machineresolve accesses env-cpual-cpu.socketid after checking al-cpu = 0 and env-cpu != NULL, but without validating al-cpu against env-nrcpusavail. Since al-cpu comes from...
EUVD-2026-67546
In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perfenvgetcputopology in machineresolve machineresolve accesses env-cpual-cpu.socketid after checking al-cpu = 0 and env-cpu != NULL, but without validating al-cpu against env-nrcpusavail. Since al-cpu comes from...
CVE-2026-80670
CVE-2026-80670 affects the Linux kernel perf tools subsystem. The function machine__resolve() accesses env->cpu[al->cpu].socket_id after validating al->cpu >= 0 and env->cpu != NULL, but fails to validate al->cpu against env->nr_cpus_avail. Because al->cpu originates from ...
CVE-2026-80609 qede: fix out-of-bounds check for cqe->len_list[]
In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...
CVE-2026-80609
This vulnerability affects the qede (Qualcomm Ethernet) driver in the Linux kernel . The root cause is an out-of-bounds access on the cqe->len_list[] array, where the index bounds check was performed after the element was already accessed, allowing an out-of-bounds read or write. The fix moves...
EUVD-2026-67485
In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...
CVE-2026-80609 qede: fix out-of-bounds check for cqe->len_list[]
In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...
CVE-2026-80598
CVE-2026-80598 is an out-of-bounds read in the Linux kernel's ntfs3 filesystem, specifically in the decompress_lznt() function. The root cause is a missing array index bounds validation before accessing the decompression table; a corrupted NTFS3 image with invalid compressed data can trigger the ...
CVE-2026-80598 ntfs3: fix out-of-bounds read in decompress_lznt
In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompresslznt decompresslznt does not validate array index bounds before accessing the decompression table. A corrupted NTFS3 image with invalid compressed data can trigger an out-of-bounds read...
SUSE CVE-2026-17113
A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...
Linux Distros Unpatched Vulnerability : CVE-2026-80598
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs3: fix out-of-bounds read in decompresslznt decompresslznt does not validate array index bounds before accessing the decompression table. A corrupted NTFS3...
openSUSE 16 Security Update : python-pip (openSUSE-SU-2026:21643-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21643-1 advisory. This update for python-pip fixes the following issue: - CVE-2026-13346: incorrect handling of doubly-encoded package URLs from malicious indexes allows...
PT-2026-82909
In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-len list Move index check before element access...
UBUNTU-CVE-2026-40014
An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD command consume CPU disproportionate to the size of the message. When a mail client issues a THREAD command on the affected mailbox, this can cause degradation or denial of service for IMAP. Monitor...
PT-2026-82970
In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perf env get cpu topology in machine resolve machine resolve accesses env-cpual-cpu.socket id after checking al-cpu = 0 and env-cpu != NULL, but without validating al-cpu against env-nr cpus avail. Since al-cpu...
CVE-2026-40014
An attacker that can send mail to a user can craft a message header that makes the IMAP THREAD command consume CPU disproportionate to the size of the message. When a mail client issues a THREAD command on the affected mailbox, this can cause degradation or denial of service for IMAP. Monitor...
Linux Distros Unpatched Vulnerability : CVE-2026-80670
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf tools: Use perfenvgetcputopology in machineresolve machineresolve accesses env-cpual-cpu.socketid after checking al-cpu = 0 and env-cpu != NULL, but withou...
CVE-2026-81334
darknet subscripts its layer array with an index taken from a configuration file without checking it against the array's length. The array is allocated in src-lib/darknetnetwork.cpp as xcallocnet.n, sizeofDarknet::Layer, sized to exactly the number of layer sections the file declares. The shortcu...