59691 matches found
The vulnerability of the __sched_fork() function in the kernel/sched/core.c module allows attackers to compromise the privacy, integrity, and accessibility of protected information within the Linux operating system’s resource management framework.
The vulnerability of the schedfork function in the kernel/sched/core.c module related to Linux’s resource management system is associated with integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
MiracleLinux 9 : gimp-3.0.4-4.el9_8.10 (AXSA:2026-1755:10)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1755:10 advisory. gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow CVE-2026-59090 gimp: GIMP: Arbitrary code execution via crafted TIF fil...
Linux Distros Unpatched Vulnerability : CVE-2026-81666
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow was found in Corosync's handling of membership commit token messages. The length- validation check for these messages can be bypassed on...
PT-2026-85655
In the Linux kernel, the following vulnerability has been resolved: rndis host: add overflow check in rndis rx fixup Add an overflow check to ensure that data offset + data len + 8 does not wrap, which would enable an OOB read of the USB data buffer...
PT-2026-85450
Name of the Vulnerable Software and Affected Versions Corosync affected versions not specified Description An integer overflow exists in the handling of membership commit token messages. On 32-bit systems, the length-validation check for these messages can be bypassed because the expected message...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-106170)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106170 advisory. FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memo...
PT-2026-85651
In the Linux kernel, the following vulnerability has been resolved: io uring/rsrc: fix folio size overflow in io vec fill bvec io vec fill bvec computes the folio size with a plain int 1: unsigned long folio size = 1 folio shift; imu-folio shift is unsigned int and comes from folio shift of the...
The vulnerability of the tbproperty_entry_valid() function in the drivers/thunderbolt/property.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tbpropertyentryvalid function in the drivers/thunderbolt/property.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the sbc_execute_unmap() function in the drivers/target/target_core_sbc.c driver of the TCM kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sbcexecuteunmap function in the drivers/target/targetcoresbc.c driver of the TCM kernel of the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Linux Distros Unpatched Vulnerability : CVE-2026-80909
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from...
perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.
A flaw was found in Perl. An integer overflow vulnerability in the regular expression engine's superlinear cache calculation can lead to out-of-bounds memory reads and writes. A remote attacker could exploit this by providing a specially crafted, large input string during regular expression...
CVE-2026-48486
Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment PoC+ consensus algorithm. Prior to version 3.9.9, an integer overflow in BlockServiceImpl.applyBlock allowed a miner to receive an arbitrarily inflated block reward by crafting a block with a negative...
USN-8724-1 librabbitmq vulnerabilities
It was discovered that the rabbitmq-c command-line tools only accepted credentials on the command line, making them visible to other local users through the process list. An attacker could possibly use this to obtain sensitive credentials. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04...
EUVD-2026-70527
Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment PoC+ consensus algorithm. Prior to version 3.9.9, an integer overflow in BlockServiceImpl.applyBlock allowed a miner to receive an arbitrarily inflated block reward by crafting a block with a negative...
CVE-2026-48486
Signum Node (a HDD-mined cryptocurrency using Proof-of-Commitment consensus) is vulnerable to an integer overflow in BlockServiceImpl.applyBlock() prior to version 3.9.9 . A miner can craft a block with a negative totalFeeCashBackNqt value to receive an arbitrarily inflated block reward . The fla...
CVE-2026-48486 Signum Node: Integer overflow in SMART_FEES fee distribution allows arbitrary miner reward inflation
Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment PoC+ consensus algorithm. Prior to version 3.9.9, an integer overflow in BlockServiceImpl.applyBlock allowed a miner to receive an arbitrarily inflated block reward by crafting a block with a negative...
CVE-2026-48486 Signum Node: Integer overflow in SMART_FEES fee distribution allows arbitrary miner reward inflation
Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment PoC+ consensus algorithm. Prior to version 3.9.9, an integer overflow in BlockServiceImpl.applyBlock allowed a miner to receive an arbitrarily inflated block reward by crafting a block with a negative...
kernel: dm log: fix out-of-bounds write due to region_count overflow
A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...
SUSE-SU-2026:3964-1 Security update for lcms2
This update for lcms2 fixes the following issue: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994...
Security update for lcms2
This update for lcms2 fixes the following issue: CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...