74731 matches found
CVE-2026-89559: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in ndlabelvalidate The on-media namespace index field nslot is a u32 read from the DIMM label storage area. ndlabelvalidate bounds it against the config area size, but sizeofnamespacelab...
CVE-2026-89559: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in ndlabelvalidate The on-media namespace index field nslot is a u32 read from the DIMM label storage area. ndlabelvalidate bounds it against the config area size, but sizeofnamespacelab...
CVE-2026-80978: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised neededheadroom from lower output devices. A stack of user-created devices can make the derived value larger than the 16-bit skb header offsets can...
Linux Distros Unpatched Vulnerability : CVE-2026-89158
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCRE2 before 10.48, on 32-bit platforms, has a pcre2compile32 integer overflow and resultant out-of- bounds write. CVE-2026-89158 Note that Nessus relies on the...
CVE-2026-89665: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder converts the wire useconds to nanoseconds in svcxdrdecodesattr: iap-iaatime.tvnsec = tmp2 NSECPERUSEC; tmp2 is a u32 and NSECPERUSEC is 1000, so t...
CVE-2026-88914: Integer Overflow or Wraparound
A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV file containing CEA-608 closed-caption data, an integer overflow in 32-bit unsigned arithmetic can bypass a bounds check in the caption parser. This leads to an out-of-bounds heap read o...
PT-2026-90381
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv2 sattr decoder within the svcxdr decode sattr function. When processing SETATTR or CREATE requests, the decoder converts microseconds to nanoseconds. On ILP32...
CVE-2026-89158: Integer Overflow or Wraparound
PCRE2 before 10.48, on 32-bit platforms, has a pcre2compile32 integer overflow and resultant out-of-bounds write...
PT-2026-89764
Name of the Vulnerable Software and Affected Versions PCRE2 versions prior to 10.48 Description On 32-bit platforms, an integer overflow occurs within the pcre2 compile 32 function, which can lead to an out-of-bounds write. An integer overflow happens when an arithmetic operation attempts to crea...
CVE-2026-80978: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised neededheadroom from lower output devices. A stack of user-created devices can make the derived value larger than the 16-bit skb header offsets can...
CVE-2026-89157: Integer Overflow or Wraparound
PCRE2 before 10.48, on 32-bit platforms, has a pcre2patternconvert out-of-bounds write when an attacker can provide a large pattern...
CVE-2026-89158: Integer Overflow or Wraparound
PCRE2 before 10.48, on 32-bit platforms, has a pcre2compile32 integer overflow and resultant out-of-bounds write...
Fedora 45 : gegl04 (2026-03ea7c5707)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-03ea7c5707 advisory. This update fixes an overflow in parsing RGBE/HDR image files. Tenable has extracted the preceding description block directly from the Fedora security...
Microsoft SQL Server (September 2026)
The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. CVE-2026-77482 - Integer overflow or wraparound ...
CVE-2026-89592: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: accel/rocket: fix NULL dereference and integer overflow in rocketjobpush rocketjobpush allocates a temporary array to hold all input and output GEM object pointers: bos = kvmallocarrayjob-inbocount + job-outbocount, sizeofvoid ,...
GoBGP parseRibEntry Function DoS
The vulnerability of the parseRibEntry function in the pkg/packet/mrt/mrt.go file of the GoBGP firewall protocol is related to the possibility of integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
PT-2026-96389
In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in nd label validate The on-media namespace index field nslot is a u32 read from the DIMM label storage area. nd label validate bounds it against the config area size, but sizeof namespa...
PT-2026-90275
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the nd label validate function within the libnvdimm/labels component. The nslot field, which is a u32 read from the DIMM label storage area or provided by...
PT-2026-90257
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SUNRPC component where the gss unwrap resp priv function improperly validates the RPCSEC GSS opaque length. Because the sum of offset and opaque len is computed...
CVE-2026-54241: Heap-based Buffer Overflow
libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16-bit luma samples to cause an integer overflow, an...