13183 matches found
EUVD-2026-76419
In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Fix PMU event info array size overflow SBI PMU EVENTGETINFO stores guest-controlled numevents sizeofeinfo in a 32-bit integer. On RV64, numevents = 0x10000001 makes 0x100000010 truncate to 16. KVM then allocates one...
CVE-2026-80973 ALSA: 6fire: bound the MIDI event length from the device
In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI event length from the device usb6firecommreceiverhandler forwards a MIDI event using a length byte the device supplies, with no bound and no check that the transfer delivered that many bytes: if...
CVE-2026-80970 ALSA: FCP: do not copy out an uninitialised init response
In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: do not copy out an uninitialised init response fcpioctlinit allocates its response buffer with kmalloc and copies the whole buffer back to userspace: bufsize = init.step0respsize + init.step2respsize; void resp freekfr...
CVE-2026-80970
CVE-2026-80970 affects the Linux kernel ALSA FCP USB audio driver. In fcp_ioctl_init(), the response buffer is allocated via kmalloc() without being zeroed. Because the step-0 USB control transfer does not set URB_SHORT_NOT_OK, a short or zero-length data stage is accepted as success, and snd_usb...
CVE-2026-80959
CVE-2026-80959 affects the Linux kernel's dm-pcache (device-mapper persistent cache) component. The root cause is in cache_pos_decode() , which uses persisted key_tail and dirty_tail seg_off values to address data within a cache segment. A seg_off at or past the segment data_size , controllable b...
CVE-2026-80952
In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix info leak and UAF in device unregister path i3cmasterunregisteri3cdevs clears i3cdev-dev-desc before calling deviceunregister. During deviceunregister, devicedel emits a KOBJREMOVE uevent and unbinds the driver...
CVE-2026-80952 i3c: master: Fix info leak and UAF in device unregister path
In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix info leak and UAF in device unregister path i3cmasterunregisteri3cdevs clears i3cdev-dev-desc before calling deviceunregister. During deviceunregister, devicedel emits a KOBJREMOVE uevent and unbinds the driver...
CVE-2026-80952 i3c: master: Fix info leak and UAF in device unregister path
In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix info leak and UAF in device unregister path i3cmasterunregisteri3cdevs clears i3cdev-dev-desc before calling deviceunregister. During deviceunregister, devicedel emits a KOBJREMOVE uevent and unbinds the driver...
CVE-2026-80927
In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return value of tkgetauxts64 in doadjtimex If the auxiliary clock is disabled during tkgetauxts64 but is enabled before tks-clockvalid is checked, then uninitialized stackdata will be used in the calculatio...
CVE-2026-18061
creationtimestamp| type| source ---|---|--- 2026-09-11 18:02:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2o3loai2phvut...
CVE-2026-72710
creationtimestamp| type| source ---|---|--- 2026-09-11 17:20:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/33hs5bqrmvemc 2026-09-11 17:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvb4dlewfi2t 2026-09-11 18:09:00+00:00| seen|...
CVE-2026-72709
creationtimestamp| type| source ---|---|--- 2026-09-11 17:18:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/eezs3rf76rjy6 2026-09-11 17:30:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvb3rspmhl2b 2026-09-11 18:08:50+00:00| seen|...
CVE-2026-81861
CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU functionality...
CVE-2026-89146
creationtimestamp| type| source ---|---|--- 2026-09-11 16:02:14+00:00| seen| https://gist.github.com/ichintu/e68d248961a651eeb0a6f457e08e2206...
OPENSUSE-SU-2026:21833-1 Security update for jq
This update for jq fixes the following issues: - CVE-2026-43895: embedded NUL bytes in import paths can lead to policy bypass and sensitive information disclosure bsc1265071. - CVE-2026-47770: stack overflow in deep structural equality bsc1269221...
CVE-2026-8030
creationtimestamp| type| source ---|---|--- 2026-09-11 14:00:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaq2esev62q 2026-09-14 07:45:17+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260914 2026-09-14 07:46:12+00:00| seen|...
CVE-2026-3855
creationtimestamp| type| source ---|---|--- 2026-09-11 14:00:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaq2esev62q 2026-09-14 07:45:12+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260914 2026-09-14 07:46:15+00:00| seen|...
CVE-2026-22575
creationtimestamp| type| source ---|---|--- 2026-09-11 13:55:10+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r...
CVE-2026-89256
creationtimestamp| type| source ---|---|--- 2026-09-11 13:23:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2hwso7fhid74v 2026-09-11 13:50:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvapiglkmd2j 2026-09-11 14:07:56+00:00| seen|...