CVE-2026-98405

A flaw in the Linux kernel SMB client's parse_posix_sids() function allows for out-of-bounds reads into adjacent kernel memory. The issue arises because the function calculates sidsbuf_end using a server-supplied out_len without validating it against the actual received iov_len. A malicious or co...

NetBSD input validation error vulnerability

NetBSD is an open-source Unix-like operating system developed by the NetBSD Foundation. Prior to version ec8451, there was a vulnerability related to input validation. This vulnerability stemmed from the fact that the local variable iovlen was declared as a signed integer in the cryptodevop...