Lucene search
+L

64161 matches found

NVD
NVD
added 3 days ago7 views

CVE-2026-63835

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets disabled, the worker is correctly disabled by batadvhardifdisableinterface - ... - batadvvogmifacedisable. In this process, the skb aggrlist is also...

0.00165EPSS
Exploits0References8
Cvelist
Cvelist
added 3 days ago26 views

CVE-2026-63835 batman-adv: v: prevent OGM aggregation on disabled hardif

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets disabled, the worker is correctly disabled by batadvhardifdisableinterface - ... - batadvvogmifacedisable. In this process, the skb aggrlist is also...

0.00165EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 3 days ago6 views

CVE-2026-63835

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets disabled, the worker is correctly disabled by batadvhardifdisableinterface - ... - batadvvogmifacedisable. In this process, the skb aggrlist is also...

5.2AI score0.00165EPSS
Exploits0References9Affected Software1
CVE
CVE
added 3 days ago9 views

CVE-2026-63835

CVE-2026-63835 concerns the Linux kernel’s batman-adv OGM aggregation on disabled hard interfaces. When an interface is disabled, batadv_hardif_disable_interface() disables the worker and frees the skb aggr_list; however batadv_v_ogm_send_meshif() may still queue new skbs via batadv_v_ogm_queue_o...

5.3AI score0.00165EPSS
Exploits0References8
OSV
OSV
added 3 days ago4 views

CVE-2026-63835 batman-adv: v: prevent OGM aggregation on disabled hardif

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets disabled, the worker is correctly disabled by batadvhardifdisableinterface - ... - batadvvogmifacedisable. In this process, the skb aggrlist is also...

5.3AI score0.00165EPSS
Exploits0References11
Cvelist
Cvelist
added 3 days ago30 views

CVE-2026-53379 media: i2c: ov8856: free control handler on error in ov8856_init_controls()

In the Linux kernel, the following vulnerability has been resolved: media: i2c: ov8856: free control handler on error in ov8856initcontrols The control handler wasn't freed if adding controls failed, add an error exit label and convert the existing error return to use it...

0.00161EPSS
Exploits0References7
NVD
NVD
added 3 days ago7 views

CVE-2026-16224

A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the file /jxxghp/MoviePilot of the component Application API. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The identifier of the pat...

5.3CVSS0.00222EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 3 days ago8 views

PT-2026-61517

Meshtastic is an open source mesh networking solution. Prior to version 2.7.23.b246bcd, a single node advertising a User.long name that contains a malformed character encoding can render other radios unusable over BLE when managed through the iOS app. The malformed name does not need to be...

7.5CVSS5.6AI score0.00278EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 3 days ago11 views

PT-2026-61151

In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface gets disabled, the worker is correctly disabled by batadv hardif disable interface - ... - batadv v ogm iface disable. In this process, the skb aggr list...

5.3AI score0.00165EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 3 days ago12 views

PT-2026-61121

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto nx component where nx crypto ctx shash exit calls nx crypto ctx exit using an incorrect argument type. Specifically, crypto shash ctx provides a nx crypto c...

7.8CVSS5.2AI score0.00127EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 3 days ago8 views

PT-2026-61273

In the Linux kernel, the following vulnerability has been resolved: USB: serial: cypress m8: fix memory corruption with small endpoint Make sure that the interrupt-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption or NULL-pointer dereference should a...

5.5AI score0.0021EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 3 days ago8 views

PT-2026-61233

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacom hid set device mode wacom hid set device mode currently assumes that the HID DG INPUTMODE usage is always located in the first field field0 of the feature report. However, a device can specify H...

5.4AI score0.00349EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 3 days ago8 views

PT-2026-61291

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci sync: Set HCI CMD DRAIN WORKQUEUE during device close Since hci dev close sync can now be called during the reset path, we should also set HCI CMD DRAIN WORKQUEUE. This avoids queuing timeouts while the hdev...

5.2AI score0.00321EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 3 days ago9 views

PT-2026-61234

In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6 tnl.net in vti6 changelink. ip netns add ns1 ip netns add ns2 ip -n ns1 link add vti6 test type vti6 remote ::1 local ::2 key 7 ip -n ns1 link set vti6 test netns ns2 ip -n ns2 link set vti6 test type vti6 remot...

5.4AI score0.00164EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 3 days ago7 views

PT-2026-61232

In the Linux kernel, the following vulnerability has been resolved: nfc: hci: fix out-of-bounds read in HCP header parsing Both nfc hci recv from llc and nci hci data received cb read packet-header from skb-data at function entry without first checking that the buffer holds at least one byte. A...

5.5AI score0.00349EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 3 days ago9 views

PT-2026-61360

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix race between deleting interface and adding new peer While deleting an existing ovpn interface, there is a very narrow window where adding a new peer via netlink may cause the netdevice to hang and prevent its...

5.3AI score0.00198EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 3 days ago6 views

PT-2026-61274

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safe serial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab corruption in "safe" mode should a malicious device report a smalle...

5.7AI score0.0021EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 3 days ago5 views

PT-2026-61411

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface Without rtnl lock held, a hardif might be retrieved as primary interface of a meshif, but then while operating on this interface getting decoupled from the mes...

5.3AI score0.0021EPSS
Exploits0References9
CVE
CVE
added 4 days ago14 views

CVE-2026-16129

The CVE-2026-16129 entry concerns princezuda SafestClaw (Built-in Web Interface) with a flaw in ShellAction._validate_command in src/safestclaw/actions/shell.py of the Built-in Web Interface. The vulnerability is described as an incomplete blacklist in the command validation logic, enabling local...

5.3CVSS5AI score0.00229EPSS
Exploits0References6
EUVD
EUVD
added 4 days ago10 views

EUVD-2026-45390

A vulnerability has been found in princezuda SafestClaw up to 4.2.4. This vulnerability affects the function ShellAction.validatecommand of the file src/safestclaw/actions/shell.py of the component Built-in Web Interface. Such manipulation leads to incomplete blacklist. An attack has to be...

5.3CVSS5AI score0.00229EPSS
Exploits0References6
Rows per page
Query Builder