kernel: Kernel: Privilege escalation and denial of service via integer truncation in accel/ivpu

A flaw was found in the Linux kernel's accel/ivpu component. A local attacker could exploit a signed integer truncation vulnerability in the Inter-Process Communication IPC receive path. This flaw occurs when a firmware-supplied data size is incorrectly converted, leading to an oversized memory...

CVE-2026-73583: Out-of-bounds Read

A flaw was found in sblim-sfcb. A local attacker with access to the system can exploit an unsafe deserialization vulnerability in the provider-manager's inter-process communication IPC message parsing. By sending a specially crafted message, the attacker can cause out-of-bounds memory access,...

Linux Distros Unpatched Vulnerability : CVE-2026-73583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sblim-sfcb. A local attacker with access to the system can exploit an unsafe deserialization vulnerability in the provider-manager's...

PT-2026-71458

A flaw was found in sblim-sfcb. A local attacker with access to the system can exploit an unsafe deserialization vulnerability in the provider-manager's inter-process communication IPC message parsing. By sending a specially crafted message, the attacker can cause out-of-bounds memory access,...

CVE-2026-14479

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

CVE-2026-14478

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14479

CVE-2026-14479 affects the Autodesk Installer IPC frame parser. A maliciously crafted input can cause improper validation of an input-specified position or offset, producing an out-of-range substring operation. The resulting condition may cause the NT AUTHORITY\SYSTEM service to terminate, yieldi...

EUVD-2026-57239

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

CVE-2026-14479 Denial of Service in Autodesk Installer IPC Channel

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

CVE-2026-14479 Denial of Service in Autodesk Installer IPC Channel

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

CVE-2026-14478 Incorrect Permission Assignment in Autodesk Installer Named Pipes

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14478 Incorrect Permission Assignment in Autodesk Installer Named Pipes

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

EUVD-2026-57238

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14478

The CVE-2026-14478 issue concerns Autodesk's installer named pipes. A malicious executable run on a victim machine could allow a local, low-privilege attacker to inject unauthenticated IPC messages into these named pipes, and to modify pipe permissions or ownership, with potential impact to confi...

kernel: Kernel: Privilege escalation and denial of service via integer truncation in accel/ivpu

A flaw was found in the Linux kernel's accel/ivpu component. A local attacker could exploit a signed integer truncation vulnerability in the Inter-Process Communication IPC receive path. This flaw occurs when a firmware-supplied data size is incorrectly converted, leading to an oversized memory...

CVE-2026-14478: Incorrect Permission Assignment for Critical Resource

A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confidentiality, integrity, and availability...

CVE-2026-14479: Improper Validation of Specified Index, Position, or Offset in Input

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITY\SYSTEM...

ALSA-2026:54443 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action lifecycle CVE-2026-53264 Bug Fixes and...

PT-2026-71097

A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITYSYSTEM...

PT-2026-71096

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A local low-privileged attacker can execute a maliciously created executable on a victim's machine to inject unauthenticated Inter-Process Communication IPC...