Lucene search
+L

57489 matches found

NVD
NVD
added 2026/08/15 1:17 p.m.7 views

CVE-2026-74447

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix uint32t overflow in EOP ring buffer size alignment eopringbuffersize in struct queueproperties is a u32. In kfdqueueacquirebuffers the expected EOP buffer size is computed as ALIGNeopringbuffersize, PAGESIZE; ALIG...

7.8CVSS0.00129EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/15 1:17 p.m.11 views

CVE-2026-73193

DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse. preparse reserves its output buffer with newSVstrlenstatement 7 + 16, budgeting seven output bytes per input byte for the longest ':p99999'...

9.8CVSS0.00477EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/15 1:17 p.m.7 views

CVE-2026-74444

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate DRAWPRIMITIVES header size before division vmwcmddraw computes maxnum = header-size - sizeofcmd-body / sizeofdecl; where header-size is u32 and is taken straight from the user-supplied command stream. When...

7.8CVSS0.00129EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2026/08/15 1:17 p.m.10 views

CVE-2026-74469

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctpassocaddpeer increments the association's 16-bit transportcount for every new unique peer. Adding the 65,536th transport wraps the count to zero. SCTP sockdiag uses transportcount t...

8.8CVSS5.4AI score0.00469EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/08/15 1:17 p.m.7 views

CVE-2026-74447

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix uint32t overflow in EOP ring buffer size alignment eopringbuffersize in struct queueproperties is a u32. In kfdqueueacquirebuffers the expected EOP buffer size is computed as ALIGNeopringbuffersize, PAGESIZE; ALIG...

7.8CVSS5.8AI score0.00129EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/15 1:17 p.m.7 views

UBUNTU-CVE-2026-73193

DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse. preparse reserves its output buffer with newSVstrlenstatement 7 + 16, budgeting seven output bytes per input byte for the longest ':p99999'...

9.8CVSS5.7AI score0.00477EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/15 1:17 p.m.5 views

UBUNTU-CVE-2026-74469

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctpassocaddpeer increments the association's 16-bit transportcount for every new unique peer. Adding the 65,536th transport wraps the count to zero. SCTP sockdiag uses transportcount t...

8.8CVSS5.4AI score0.00469EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/15 1:17 p.m.7 views

UBUNTU-CVE-2026-73194

DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' branch parses the number with atoisrc an...

9.1CVSS5.8AI score0.00493EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/15 1:17 p.m.5 views

UBUNTU-CVE-2026-74444

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate DRAWPRIMITIVES header size before division vmwcmddraw computes maxnum = header-size - sizeofcmd-body / sizeofdecl; where header-size is u32 and is taken straight from the user-supplied command stream. When...

7.8CVSS5.4AI score0.00129EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2026/08/15 1:17 p.m.6 views

CVE-2026-74504

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix division by zero in initializetimer A userspace-driven ALSA timer SNDUTIMER lets an unprivileged user set the backing sndtimer's hardware resolution to an arbitrary 64-bit value via SNDRVTIMERIOCTLCREATE...

5.7AI score0.00168EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/08/15 1:17 p.m.9 views

CVE-2026-74470

In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix REPORT ZONES alloclen underflow OOB write respreportzones sizes the reply buffer from the CDB allocation length. The v3 fix rounds alloclen up with ALIGN before deriving the descriptor count: repmaxzones =...

7.8CVSS5.7AI score0.00129EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/15 1:17 p.m.6 views

UBUNTU-CVE-2026-74447

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix uint32t overflow in EOP ring buffer size alignment eopringbuffersize in struct queueproperties is a u32. In kfdqueueacquirebuffers the expected EOP buffer size is computed as ALIGNeopringbuffersize, PAGESIZE; ALIG...

7.8CVSS5.8AI score0.00129EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2026/08/15 12:28 p.m.11 views

CVE-2026-74570

In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runlist element counts to byte sizes using overflow checks, and use it in both ntfsrlrealloc and ntfsrlreallocnofail...

9.8CVSS5.4AI score0.00308EPSS
SaveExploits0
OSV
OSV
added 2026/08/15 12:28 p.m.10 views

CVE-2026-74570 ntfs: harden runlist realloc size calculations

In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runlist element counts to byte sizes using overflow checks, and use it in both ntfsrlrealloc and ntfsrlreallocnofail...

9.8CVSS5.6AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/15 12:28 p.m.33 views

CVE-2026-74570 ntfs: harden runlist realloc size calculations

In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runlist element counts to byte sizes using overflow checks, and use it in both ntfsrlrealloc and ntfsrlreallocnofail...

9.8CVSS0.00308EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/15 12:28 p.m.42 views

CVE-2026-74570

CVE-2026-74570 is a Linux kernel vulnerability affecting NTFS runlist handling. The issue stems from unsafe/overflow-prone size calculations in runlist element counts used by ntfs_rl_realloc() and ntfs_rl_realloc_nofail(). A fix was implemented by adding a shared helper to safely convert runlist ...

9.8CVSS5.4AI score0.00308EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/15 12:28 p.m.10 views

EUVD-2026-59635

In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runlist element counts to byte sizes using overflow checks, and use it in both ntfsrlrealloc and ntfsrlreallocnofail...

5.5AI score0.00308EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/15 12:28 p.m.13 views

CVE-2026-74570

In the Linux kernel, the following vulnerability has been resolved: ntfs: harden runlist realloc size calculations Add a shared helper to safely convert runlist element counts to byte sizes using overflow checks, and use it in both ntfsrlrealloc and ntfsrlreallocnofail...

5.4AI score0.00308EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/08/15 12:28 p.m.23 views

CVE-2026-74569 netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: widen NAT rewrite delta to s32 in siphelptcp siphelptcp stores the size change of each NAT-rewritten SIP message in s16 diff and accumulates it in s16 tdiff, but a single message can grow by more than...

9.8CVSS5.7AI score
SaveExploits0References11
Debian CVE
Debian CVE
added 2026/08/15 12:28 p.m.10 views

CVE-2026-74569

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: widen NAT rewrite delta to s32 in siphelptcp siphelptcp stores the size change of each NAT-rewritten SIP message in s16 diff and accumulates it in s16 tdiff, but a single message can grow by more than...

9.8CVSS5.5AI score0.00388EPSS
SaveExploits0
Rows per page
Query Builder