Lucene search
+L

5367 matches found

OSV
OSV
added 2026/08/15 6:21 a.m.7 views

UBUNTU-CVE-2026-72195

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound attroff in UpdateResidentValue against dataoff In doaction's UpdateResidentValue case fslog.c:3307, lrh-attroff and lrh-redolen come from the on-disk LRH. When they satisfy aoff + dlen res.dataoff, the assignment...

7.8CVSS5.4AI score0.00164EPSS
SaveExploits0References10
OSV
OSV
added 2026/08/15 6:20 a.m.9 views

UBUNTU-CVE-2026-68479

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds rtlbtparsefirmware copies patchlength - 4 bytes before appending the firmware version. A malformed firmware patch shorter than the version field can make this subtraction underflow...

7.8CVSS5.5AI score0.00164EPSS
SaveExploits0References11
UbuntuCve
UbuntuCve
added 2026/08/15 6:20 a.m.6 views

CVE-2026-68479

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds rtlbtparsefirmware copies patchlength - 4 bytes before appending the firmware version. A malformed firmware patch shorter than the version field can make this subtraction underflow...

7.8CVSS5.5AI score0.00164EPSS
SaveExploits0References10
EUVD
EUVD
added 2026/08/15 5:58 a.m.7 views

EUVD-2026-59496

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2trimmainbm trims the global bitmap in cluster units, but its too-short range validation only checks sb-sblocksize. On filesystems with a cluster size larger than the block...

5.4AI score0.00126EPSS
SaveExploits0References8
CVE
CVE
added 2026/08/15 5:58 a.m.33 views

CVE-2026-74349

The CVE-2026-74349 issue affects the Linux kernel’s OCFS2 filesystem, where FITRIM range handling incorrectly validated ranges that cross cluster boundaries. Specifically, ocfs2_trim_mainbm() trims the global bitmap in cluster units but only validates ranges against sb->s_blocksize; on filesys...

7.1CVSS5.3AI score0.00126EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/08/15 5:58 a.m.33 views

CVE-2026-74349 ocfs2: reject FITRIM ranges shorter than a cluster

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2trimmainbm trims the global bitmap in cluster units, but its too-short range validation only checks sb-sblocksize. On filesystems with a cluster size larger than the block...

7.1CVSS0.00126EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/15 5:58 a.m.11 views

CVE-2026-74349 ocfs2: reject FITRIM ranges shorter than a cluster

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a cluster ocfs2trimmainbm trims the global bitmap in cluster units, but its too-short range validation only checks sb-sblocksize. On filesystems with a cluster size larger than the block...

7.1CVSS5.5AI score
SaveExploits0References11
EUVD
EUVD
added 2026/08/15 5:57 a.m.9 views

EUVD-2026-59429

In the Linux kernel, the following vulnerability has been resolved: tipc: prevent sntunacked underflow on CONNACK tipcskconnprotorcv subtracts the peer-supplied connection ack count from the unsigned 16-bit send counter sntunacked without checking that it does not exceed the number of messages...

5.5AI score0.00677EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/08/15 5:57 a.m.29 views

CVE-2026-74282 tipc: prevent snt_unacked underflow on CONN_ACK

In the Linux kernel, the following vulnerability has been resolved: tipc: prevent sntunacked underflow on CONNACK tipcskconnprotorcv subtracts the peer-supplied connection ack count from the unsigned 16-bit send counter sntunacked without checking that it does not exceed the number of messages...

7.5CVSS0.00677EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/15 5:57 a.m.10 views

CVE-2026-74282 tipc: prevent snt_unacked underflow on CONN_ACK

In the Linux kernel, the following vulnerability has been resolved: tipc: prevent sntunacked underflow on CONNACK tipcskconnprotorcv subtracts the peer-supplied connection ack count from the unsigned 16-bit send counter sntunacked without checking that it does not exceed the number of messages...

7.5CVSS5.6AI score
SaveExploits0References11
CVE
CVE
added 2026/08/15 5:57 a.m.36 views

CVE-2026-74269

CVE-2026-74269 describes a Linux kernel issue where bnxt RX path under XDP head-grow can underflow the skb head when the head is adjusted by -256. The root cause is an underflow in bnxt_rx_multi_page_skb that builds the skb with napi_build_skb(data_ptr - bp->rx_offset, rxr->rx_page_size); b...

9.8CVSS5.3AI score0.0038EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/15 5:56 a.m.13 views

CVE-2026-72382 ksmbd: reject undersized DACLs before parsing ACEs

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject undersized DACLs before parsing ACEs parsedacl limits the attacker-controlled ACE count by comparing it with the number of minimal ACEs that fit in the DACL size. The DACL size field is 16 bits, but the expression...

8.8CVSS5.5AI score
SaveExploits0References8
EUVD
EUVD
added 2026/08/15 5:56 a.m.9 views

EUVD-2026-59281

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject undersized DACLs before parsing ACEs parsedacl limits the attacker-controlled ACE count by comparing it with the number of minimal ACEs that fit in the DACL size. The DACL size field is 16 bits, but the expression...

5.4AI score0.00589EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/15 5:56 a.m.34 views

CVE-2026-72382 ksmbd: reject undersized DACLs before parsing ACEs

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject undersized DACLs before parsing ACEs parsedacl limits the attacker-controlled ACE count by comparing it with the number of minimal ACEs that fit in the DACL size. The DACL size field is 16 bits, but the expression...

8.8CVSS0.00589EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/15 5:56 a.m.34 views

CVE-2026-72382

CVE-2026-72382 affects the Linux kernel ksmbd component. The issue is an unsigned underflow in parse_dacl() when computing the ACE count for a security descriptor, caused by subtracting sizeof(struct smb_acl) from a 16-bit DACL size. This can allow a malformed security descriptor to bypass the AC...

8.8CVSS5.3AI score0.00589EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/15 5:55 a.m.8 views

CVE-2026-72326 net/sched: cake: reject overhead values that underflow length

In the Linux kernel, the following vulnerability has been resolved: net/sched: cake: reject overhead values that underflow length CAKE accepts signed overhead values and stores them in an s16, but the adjusted packet length calculation uses unsigned arithmetic. A negative effective length can...

5.6AI score
SaveExploits0References11
CVE
CVE
added 2026/08/15 5:55 a.m.25 views

CVE-2026-72326

CVE-2026-72326 affects the Linux kernel’s net/sched cake scheduler. CAKE accepts signed overhead values stored in an s16, but the adjusted packet length calculation uses unsigned arithmetic, allowing a negative effective length to wrap to a large value. This can cause rate accounting to depend on...

5.4AI score0.0022EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/15 5:55 a.m.10 views

CVE-2026-72318 cifs: validate DFS referral string offsets

In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parsedfsreferrals validates that the response header and referral array fit in the received buffer, but each referral also contains string offsets supplied by the server. Those offsets a...

9.4CVSS5.6AI score
SaveExploits0References9
EUVD
EUVD
added 2026/08/15 5:54 a.m.12 views

EUVD-2026-59124

In the Linux kernel, the following vulnerability has been resolved: jbd2: fix integer underflow in jbd2journalinitializefastcommit jbd2journalinitializefastcommit validates journal capacity by checking journal-jlast - numfcblks JBD2MINJOURNALBLOCKS. Both jlast and numfcblks are unsigned, so when...

5.4AI score0.00172EPSS
SaveExploits0References7
CVE
CVE
added 2026/08/15 5:54 a.m.33 views

CVE-2026-72225

The CVE-2026-72225 issue is in the Linux kernel’s journal code (jbd2). A numeric underflow occurs in jbd2_journal_initialize_fast_commit() when calculating journal capacity with (journal->j_last - num_fc_blks) where both operands are unsigned; if num_fc_blks > j_last, the subtraction wraps ...

7.8CVSS5.4AI score0.00172EPSS
SaveExploits0References8
Rows per page
Query Builder