7663 matches found
CVE-2026-93789
A flaw was found in the Linux kernel's iwlwifi driver. This vulnerability allows a local user capable of loading custom firmware to cause a Denial of Service DoS through a system crash. The issue stems from insufficient bounds checking when parsing aligned Type-Length-Value TLV data blocks within...
CVE-2026-94287
A flaw was found in libXpm. An unsigned integer underflow vulnerability exists in the library's write path when processing image data. A local attacker could exploit this issue by convincing a user or application to process a specially crafted file, causing unbounded CPU and memory consumption th...
PT-2026-102413
Name of the Vulnerable Software and Affected Versions MCUmgr affected versions not specified Description An integer underflow exists in the SMP-over-console transport when processing base64 frames. The function mcumgr serial process frag in subsys/mgmt/mcumgr/transport/src/serial util.c...
OESA-2026-4070 strongswan security update
The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fixes: In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted...
OESA-2026-4071 strongswan security update
The strongSwan IPsec implementation supports both the IKEv1 and IKEv2 key exchange protocols in conjunction with the native NETKEY IPsec stack of the Linux kernel. Security Fixes: In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted...
CVE-2026-97991: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: vdpasimblk: reject out-of-range sector starts vdpasimblkcheckrange logs an invalid start sector but continues validating the request. The subsequent unsigned capacity subtraction can underflow and let an out-of-range buffer offse...
SUSE SLES16 Security Update : liboqs (SUSE-SU-2026:23313-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23313-1 advisory. Changes in liboqs: Updated to 0.16.0: Deprecation notice: - SPHINCS+ was removed in 0.16.0. Security issues: - Fixed uninitialized...
SUSE CVE-2026-93783
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in rfcommrecvframe rfcommrecvframe casts skb-data to struct rfcommhdr and dereferences hdr-addr and hdr-ctrl without validating skb-len first. A truncated frame with skb-len less than the...
SUSE CVE-2026-97413
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...
kernel: net: tun: bound receive headroom
A flaw was found in the Linux kernel's TUN/TAP driver. An integer underflow vulnerability exists in the tungetuser function when processing oversized headroom requests. This can occur if Open vSwitch OVS propagates an excessively large headroom request to the TUN or TAP device. Successful...
kernel: net: tun: bound receive headroom
A flaw was found in the Linux kernel's TUN/TAP driver. An integer underflow vulnerability exists in the tungetuser function when processing oversized headroom requests. This can occur if Open vSwitch OVS propagates an excessively large headroom request to the TUN or TAP device. Successful...
DEBIAN-CVE-2026-97413
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...
CVE-2026-97413
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...
AZL-103829 CVE-2026-97413 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...
CVE-2026-93784
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate IEs in cfg80211wextsiwgenie The KASAN allocation trace shows that a malformed IE buffer is stored via SIOCSIWGENIE cfg80211wextsiwgenie without any validation. The crash trace shows that a subsequent...
DEBIAN-CVE-2026-93784
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate IEs in cfg80211wextsiwgenie The KASAN allocation trace shows that a malformed IE buffer is stored via SIOCSIWGENIE cfg80211wextsiwgenie without any validation. The crash trace shows that a subsequent...
AZL-103670 CVE-2026-93784 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate IEs in cfg80211wextsiwgenie The KASAN allocation trace shows that a malformed IE buffer is stored via SIOCSIWGENIE cfg80211wextsiwgenie without any validation. The crash trace shows that a subsequent...
CVE-2026-93783
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in rfcommrecvframe rfcommrecvframe casts skb-data to struct rfcommhdr and dereferences hdr-addr and hdr-ctrl without validating skb-len first. A truncated frame with skb-len less than the...
CVE-2026-88376
Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4AvccAtom::Create and AP4HvccAtom::Create. A specially crafted MP4 file containing an avcC or hvcC atom with a declared size smaller than the atom header size can cause the payload-size calculation to wrap to a large unsigned value...
CVE-2026-88377
Bento4 1.6.0.0 contains an integer underflow vulnerability in the avcC and hvcC configuration atom parsers. A specially crafted MP4 file containing an atom with a declared size smaller than AP4ATOMHEADERSIZE can cause AP4AvccAtom::Create or AP4HvccAtom::Create to underflow the payload-size...