PT-2026-7286

Name of the Vulnerable Software and Affected Versions IntelR OptaneTM PMem management software versions CR MGMT 01.00.00.3584, CR MGMT 02.00.00.4052, CR MGMT 03.00.00.0538 Description The software has default permissions that may allow a privilege escalation. An unprivileged software adversary wi...

Robust Vision Systems for Connected and Autonomous Vehicles: Security Challenges and Attack Vectors

This article investigates the robustness of vision systems in Connected and Autonomous Vehicles CAVs, which is critical for developing Level-5 autonomous driving capabilities. Safe and reliable CAV navigation undeniably depends on robust vision systems that enable accurate detection of objects,...

Linux USB UDC Uevent Buffer Overflow DoS

The vulnerability of the usbudcuevent function in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel regulator function Use-After-Free

The vulnerability of the regulatordoenable function in the drivers/regulator/core.c module of the Linux kernel’s voltage and current regulators driver relates to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the...

Linux __ieee80211_scan_completed Heap Buffer Overflow DoS

The vulnerability of the ieee80211scancompleted function in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux UDP Tunnel Buffer Overflow DoS

The vulnerability of the udptunnelnicnetdeviceevent function in the net/ipv4/udptunnelnic.c module of the Linux kernel’s IPv4 protocol implementation is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to...

Linux net/sched cls_api tcf_blockbind buffer overflow

The vulnerability of the tcfblockbind function in the net/sched/clsapi.c module of the net/sched subsystem of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

at91 pinctrl driver Heap Buffer Overflow DoS

The vulnerability of the atmelpinctrlprobe function in the drivers/pinctrl/pinctrl-at91-pio4.c driver for Linux kernel’s PINCTRL output devices is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

CVE-2025-15545

The backup restore function does not properly validate unexpected or unrecognized tags within the backup file. When such a crafted file is restored, the injected tag is interpreted by a shell, allowing execution of arbitrary commands with root privileges. Successful exploitation allows the attack...

Qualcomm embedded software Data Compromise

The vulnerability of the camera driver in the microprogramming software for embedded chips from Qualcomm arises from the execution of operations beyond buffer boundaries. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the...

DSP-service Qualcomm Data Compromise

The vulnerability of the DSP-service of microprogramming software in embedded chips from Qualcomm arises from incorrect validation of the array index. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-14988 Incorrect Permission Assignment for Critical Resource vulnerability in iba Systems ibaPDA

A security issue has been identified in ibaPDA that could allow unauthorized actions on the file system under certain conditions. This may impact the confidentiality, integrity, or availability of the system...

CVE-2025-14988 Incorrect Permission Assignment for Critical Resource vulnerability in iba Systems ibaPDA

A security issue has been identified in ibaPDA that could allow unauthorized actions on the file system under certain conditions. This may impact the confidentiality, integrity, or availability of the system...

CVE-2026-21955

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

ROS-20260121-73-0042

A vulnerability in the nfttunnel component of the Linux operating system kernel is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected information...

CVE-2026-21955

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2026-21957

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.14 and 7.2.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

ROS-20260119-7304

A vulnerability in the ppsgpioprobe function of the drivers/pps/clients/pps-gpio.c module of the Linux kernel PPS client support driver is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability...

ROS-20260119-7357

A vulnerability in the neighnotify function of the net/core/neighbour.c module of the Linux kernel's network functions support is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of...

ROS-20260119-7356

A vulnerability in the arpxmitfinish function of the net/ipv4/arp.c module of the Linux kernel IPv4 protocol implementation is related to the reuse of previously freed memory. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protecte...