PT-2026-61257

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM SEV component where Port I/O requests with a length or count of 0 were not explicitly ignored. This could lead to length underflow when setting up the software...

PT-2026-61237

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An unprivileged slab-out-of-bounds read exists in the Linux kernel. The ip6 datagram recv specific ctl function trusts the on-wire hdrlen byte when computing the length for put cmsg, but...

Linux Distros Unpatched Vulnerability : CVE-2026-53391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4/pNFS: reject zero-length raddr in nfs4decodempdsaddr nfs4decodempdsaddr decodes the rnetid and raddr opaques of a netaddr4 from a GETDEVICEINFO multipath-...

PT-2026-61406

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module where the last changeset len field in batadv piv tt is declared as a signed 16-bit integer s16. Because this field should not hold negative value...

PT-2026-61229

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xfrm ESP out-of-place fast path where the esp output head function appends the trailer before esp output tail allocates the destination page frag. The head-side ga...

PT-2026-61402

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hwmon subsystem where the adm1266 pmbus block xfer function copies a device-supplied block payload into a caller-provided buffer using a length specified by the...

PT-2026-61443

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth MGMT component where the MGMT OP ADD EXT ADV DATA command fails to verify if the specified advertising data lengths are within the actual command payload...

PT-2026-61405

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module where the tt buff len field in batadv orig node is declared as a signed 16-bit integer s16. Because this field should not hold negative values,...

PT-2026-61426

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the af unix module. The unix stream data wait function calls skb peek tail on the sk-sk receive queue without holding a lock to prevent Socket Buffer...

PT-2026-61256

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM SEV implementation regarding the calculation of the maximum length of the in-GHCB scratch area. When the scratch area is located within the GHCB shared buffer,...

CVE-2026-64102: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connected siw peer can send an iWARP FPDU whose MPA length field chdr-mpalen, 16 bit big-endian, peer-controlled is smaller than the fixed DDP/RDMA...

PT-2026-61313

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ethtool CMIS component where the kernel does not properly validate the length of the Common Management Interface Specification CMIS Capability Data Block CDB reply...

The Finite Key Effect of Side-Channel-Secure Quantum Key Distribution beyond Post-Selection Technique

By applying the framework of entropic uncertainty relation EUR and the Quantum Leftover Hash Lemma QLHL, we introduce a security-proof method for variable-length side-channel-secure SCS quantum key distribution QKD against coherent attacks. This method reframes composable security as a statistica...

PT-2026-61301

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the ipv6 rpl srh decompress function when processing Routing Header SRH decompression. The hdrlen variable, defined as u8, fails to hold values when n is 12...

PT-2026-61071

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the udf read tagged function where CRC verification is skipped if the descCRCLength plus the size of the tag structure exceeds the block size. A specially crafted UDF...

CVE-2026-53994

ProFTPD modsftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxppacketread function accepts the attacker-supplied 32-bit big-endian SFTP packet length without a minimum sanity check. A value of 0 causes an unsigned subtraction elsewhere in the read path to...

CVE-2026-53994

ProFTPD modsftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxppacketread function accepts the attacker-supplied 32-bit big-endian SFTP packet length without a minimum sanity check. A value of 0 causes an unsigned subtraction elsewhere in the read path to...

EUVD-2026-45396

ProFTPD modsftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxppacketread function accepts the attacker-supplied 32-bit big-endian SFTP packet length without a minimum sanity check. A value of 0 causes an unsigned subtraction elsewhere in the read path to...

CVE-2026-53994

ProFTPD mod_sftp has a heap-based buffer overflow reachable by an authenticated SFTP user. The fxp_packet_read() function accepts an attacker-controlled 32-bit big-endian SFTP packet length without minimum sanity checks. A value of 0 underflows in the read path, yielding an oversized request (~4 ...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.11 contains security vulnerabilities. These vulnerabilities stem from KVM: SEV fails to properly handle Port I/O requests with a length of 0, which may lead to length underflow issues when configuring the software’s scratch area...