867 matches found
SUSE CVE-2026-48096
OpenFGA is an authorization/permission engine built for developers. Prior to version 1.16.0, when iterator caching is enabled, two distinct check requests can produce the same cache key, leading to OpenFGA reusing an earlier cached result for a subsequent request. This issue has been patched in...
Linux Distros Unpatched Vulnerability : CVE-2026-58041
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSynccreateTagStore to continue executing a cached prepared statement...
golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...
UBUNTU-CVE-2026-64217
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfsextractuseriter Fix netfsextractuseriter so that if ioviterextractpages overfills pages, then those pages don't get included in the iterator constructed at the end of the function. If there was an...
EUVD-2026-49007
In the Linux kernel, the following vulnerability has been resolved: mm: pageext: add count limit to pageextiternext to prevent invalid PFN access The pageext iteration API does not validate if the PFN still belongs to a valid section while advancing the iterator. When dynamically adding memory in...
CVE-2026-64295 mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access
In the Linux kernel, the following vulnerability has been resolved: mm: pageext: add count limit to pageextiternext to prevent invalid PFN access The pageext iteration API does not validate if the PFN still belongs to a valid section while advancing the iterator. When dynamically adding memory in...
CVE-2026-64288 KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB VNCR TLB invalidation occurs from MMU notifiers or TLBI instructions, and either can race against a vcpu not being onlined yet no pseudo-TLB allocated. Similarly, the TLB...
Linux Distros Unpatched Vulnerability : CVE-2026-64295
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm: pageext: add count limit to pageextiternext to prevent invalid PFN access The pageext...
PT-2026-64516
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the page ext iteration API where the system fails to validate if the Page Frame Number PFN still belongs to a valid section while advancing the iterator. During memory...
PT-2026-64509
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 nv component where a NULL VNCR pseudo-TLB may be dereferenced. This occurs during VNCR TLB invalidation triggered by MMU notifiers or TLBI instructions,...
CVE-2026-64217
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfsextractuseriter Fix netfsextractuseriter so that if ioviterextractpages overfills pages, then those pages don't get included in the iterator constructed at the end of the function. If there was an...
EUVD-2026-48625
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfsextractuseriter Fix netfsextractuseriter so that if ioviterextractpages overfills pages, then those pages don't get included in the iterator constructed at the end of the function. If there was an...
CVE-2026-64217 netfs: Fix overrun check in netfs_extract_user_iter()
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfsextractuseriter Fix netfsextractuseriter so that if ioviterextractpages overfills pages, then those pages don't get included in the iterator constructed at the end of the function. If there was an...
CVE-2026-64217
The CVE-2026-64217 entry affects the Linux kernel netfs subsystem. The vulnerability arises in the function netfs_extract_user_iter() where iov_iter_extract_pages() can overfill pages[]; overfilled pages are not supposed to be included in the final iterator, but memory corruption can already occu...
CVE-2026-64217 netfs: Fix overrun check in netfs_extract_user_iter()
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfsextractuseriter Fix netfsextractuseriter so that if ioviterextractpages overfills pages, then those pages don't get included in the iterator constructed at the end of the function. If there was an...
PT-2026-64332
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs extract user iter function where a failure to properly handle an overrun check during the execution of iov iter extract pages can lead to memory corruption...
golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...
CVE-2026-55708
In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare local zones tree for an already configured named view when the view is configured with no local data to begin with. However, the creation through the contro...