CVE-2026-81666: Integer Overflow or Wraparound

An integer overflow was found in Corosync's handling of membership commit token messages. The length-validation check for these messages can be bypassed on 32-bit systems due to an integer overflow in the calculation of the expected message length, allowing a crafted network packet to trigger an...

PT-2026-85651

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the io vec fill bvec function when computing the folio size. The function uses a plain int for the shift operation 1 folio shift, which is undefined when...

PT-2026-85655

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description An issue exists in the rndis host component where the rndis rx fixup function lacks a proper overflow check. This allows the sum of data offset, data len, and 8 to wrap, potentially leading ...

PT-2026-86178

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the vmw shader define function when validating a user-supplied shader window against its backing buffer. Because the offset variable in drm vmw shader creat...

PT-2026-85777

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to an integer underflow...

PT-2026-85774

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to an integer overflow...

PT-2026-85450

Name of the Vulnerable Software and Affected Versions Corosync affected versions not specified Description An integer overflow exists in the handling of membership commit token messages. On 32-bit systems, the length-validation check for these messages can be bypassed because the expected message...

CVE-2026-80887: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use checkaddoverflow for shader size+offset bound vmwshaderdefine validates the user-supplied shader window against its backing buffer with u64buffer-tbo.base.size guestmemoryoffset and forwarded to host SVGA...

CVE-2026-80887: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use checkaddoverflow for shader size+offset bound vmwshaderdefine validates the user-supplied shader window against its backing buffer with u64buffer-tbo.base.size guestmemoryoffset and forwarded to host SVGA...

PT-2026-91793

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use check add overflow for shader size+offset bound vmw shader define validates the user-supplied shader window against its backing buffer with u64buffer-tbo.base.size guest memory offset and forwarded to host SVGA...

Linux Distros Unpatched Vulnerability : CVE-2026-80909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: Reject UVD message with invalid number of h265 refs Same change as for h264, avoids overflow later when calculating min dpb size. cherry picked from...

Linux kernel __sched_fork() Heap Buffer Overflow DoS

The vulnerability of the schedfork function in the kernel/sched/core.c module related to Linux’s resource management system is associated with integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel crypto af_alg_cmsg_send Heap Buffer Overflow DoS

The vulnerability of the afalgcmsgsend function in the crypto/afalg.c module of the Linux kernel’s cryptographic subsystem is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

I2C driver Heap Buffer Overflow DoS

The vulnerability of the i2cdevioctl function in the drivers/i2c/i2c-dev.c file of the I2C driver in the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to cause a service failure...

KVM Dirty Ring Buffer Overflow DoS

The vulnerability of the kvmresetdirtygfn function in the virt/kvm/dirtyring.c module of the Kernel-based Virtual Machine KVM virtualization subsystem of the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacke...

TCM kernel Heap Buffer Overflow DoS

The vulnerability of the sbcexecuteunmap function in the drivers/target/targetcoresbc.c driver of the Linux operating system’s TCM kernel is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

komeda_fb_afbc_size_check Heap Buffer Overflow DoS

The vulnerability of the komedafbafbcsizecheck function in the drivers/gpu/drm/arm/display/komeda/komedaframebuffer.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux kernel, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability...

Linux Thunderbolt Property Function Use-After-Free

The vulnerability of the tbpropertyentryvalid function in the drivers/thunderbolt/property.c module of the general support driver for USB4 and Thunderbolt in the Linux operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to...

fastrpc_get_args() function Heap Buffer Overflow

The vulnerability of the fastrpcgetargs function in the drivers/misc/fastrpc.c module of the Linux kernel is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux kernel DMA Length Buffer Overflow DoS

The vulnerability of the dmalength function in the drivers/accel/ethosu/ethosugem.c module of the Linux kernel’s acceleration device driver lies in integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...