CVE-2026-9728

The userspace syscall verifier zvrfymboxsend in drivers/mbox/mboxhandlers.c validated the nested msg-data/msg-size fields by reading them directly out of live userspace memory, and then forwarded the original, still-mutable userspace struct mboxmsg pointer to zimplmboxsend and the underlying...

EUVD-2026-64897

The userspace syscall verifier zvrfymboxsend in drivers/mbox/mboxhandlers.c validated the nested msg-data/msg-size fields by reading them directly out of live userspace memory, and then forwarded the original, still-mutable userspace struct mboxmsg pointer to zimplmboxsend and the underlying...

PT-2026-80896

The userspace syscall verifier z vrfy mbox send in drivers/mbox/mbox handlers.c validated the nested msg-data/msg-size fields by reading them directly out of live userspace memory, and then forwarded the original, still-mutable userspace struct mbox msg pointer to z impl mbox send and the...

EUVD-2026-63702

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read...

CVE-2026-16973

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read...

CVE-2026-16973 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read...

CVE-2026-16973 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read...

CVE-2026-74336

A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. An out-of-bounds read vulnerability exists when parsing the S1G Sub-1 GHz TIM Traffic Indication Map Partial Virtual Bitmap PVB element. Due to an incorrect boundary check, the system can read two bytes beyond the allocated memory f...

CVE-2026-74324

A flaw was found in the mt7925 Wi-Fi driver of the Linux kernel. An attacker could exploit this vulnerability by providing a specially crafted firmware response during a test mode query. This improper validation of the response length can lead to a buffer over-read, potentially disclosing sensiti...

CVE-2026-74292

A flaw was found in the Linux kernel's audio driver for Tegra devices, specifically within the AHUB component. This vulnerability arises because a function attempts to read data from an array using an index that has not been properly checked, potentially leading to access beyond the array's...

PT-2026-79166

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description An out-of-bounds read allows a local attacker to disclose sensitive kernel memory. An out-of-bounds read occurs when a program reads data past the end of the intended buffer...

CVE-2026-16973: Exposure of Sensitive Information to an Unauthorized Actor

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read...

CVE-2026-16833

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memory due to an out-of-bounds read...

CVE-2026-16833

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 have an out-of-bounds read allowing remote, unauthenticated kernel memory disclosure (CVSS 5.3, MEDIUM). IBM support page is the only reference; no exploitation details provided.

CVE-2026-16833 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memory due to an out-of-bounds read...

EUVD-2026-62720

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memory due to an out-of-bounds read...

PT-2026-78596

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to disclose kernel memory due to an out-of-bounds read...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101982)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101982 advisory. In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling i...

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-2045)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2045 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix race condition during PASID entry replacement CVE-2026-45945 In the Linux kernel, the following vulnerabilit...

CVE-2026-72076

A flaw was found in the Linux kernel's ims-pcu driver. The debug logging in the imspcuirq function can attempt to read data beyond the allocated buffer when processing certain Universal Serial Bus USB control requests. This out-of-bounds read occurs if the length of the control request exceeds th...