PT-2026-91913

In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...

Linux Distros Unpatched Vulnerability : CVE-2026-86138

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow. CVE-2026-86138 Note that Nessus relies o...

CVE-2026-86143: Integer Coercion Error

In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a check for integer overflow before calling writecallback. This has security relevance for many types of uses of that length value within a...

Linux Distros Unpatched Vulnerability : CVE-2026-86143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks, aka a lack of a...

Linux Distros Unpatched Vulnerability : CVE-2026-86139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow. CVE-2026-86139 Note that Nessus relies on the presence of the package as reported by...

CVE-2026-86138: Integer Overflow or Wraparound

In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow...

AZL-99636 CVE-2026-80909 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5...

CVE-2026-80909

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5...

CVE-2026-80908

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with dimensions above 4096 Fixes potential overflow in DPB size calculations. cherry picked from commit 05e1387d151f71569fbe122d2c89f9db0c21dc10...

CVE-2026-80887

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use checkaddoverflow for shader size+offset bound vmwshaderdefine validates the user-supplied shader window against its backing buffer with u64buffer-tbo.base.size guestmemoryoffset and forwarded to host SVGA...

AZL-99603 CVE-2026-80887 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use checkaddoverflow for shader size+offset bound vmwshaderdefine validates the user-supplied shader window against its backing buffer with u64buffer-tbo.base.size guestmemoryoffset and forwarded to host SVGA...

Exploit for CVE-2026-85769

CVE-2026-85769 Heap out-of-bounds read in libtpms TPM 2.0...

CVE-2026-80909 drm/amdgpu: Reject UVD message with invalid number of h265 refs

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5...

CVE-2026-80909 drm/amdgpu: Reject UVD message with invalid number of h265 refs

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from commit a4b0720e4f1601f97f59a2be9c1b4b94fa6527d5...

CVE-2026-80908

CVE-2026-80908 affects the Linux kernel drm/amdgpu subsystem. When a UVD (Unified Video Decoder) message with dimensions above 4096 is not rejected, it can trigger a potential overflow in DPB (Decoded Picture Buffer) size calculations . The fix, cherry-picked from upstream commit 05e1387d151f7156...

EUVD-2026-71667

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with dimensions above 4096 Fixes potential overflow in DPB size calculations. cherry picked from commit 05e1387d151f71569fbe122d2c89f9db0c21dc10...

CVE-2026-18341

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to an integer underflow...

CVE-2026-18078

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to an integer overflow...

CVE-2026-80887 drm/vmwgfx: use check_add_overflow for shader size+offset bound

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use checkaddoverflow for shader size+offset bound vmwshaderdefine validates the user-supplied shader window against its backing buffer with u64buffer-tbo.base.size guestmemoryoffset and forwarded to host SVGA...

CVE-2026-80887 drm/vmwgfx: use check_add_overflow for shader size+offset bound

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use checkaddoverflow for shader size+offset bound vmwshaderdefine validates the user-supplied shader window against its backing buffer with u64buffer-tbo.base.size guestmemoryoffset and forwarded to host SVGA...