2264 matches found
DEBIAN-CVE-2026-64332
In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...
DEBIAN-CVE-2026-64321
In the Linux kernel, the following vulnerability has been resolved: nvme: target: rdma: fix ndev refcount leak on queue connect nvmetrdmaqueueconnect calls nvmetrdmafindgetdevice which acquires a reference on the returned ndev via krefget. On the path where the host queue backlog is exceeded and...
DEBIAN-CVE-2026-64322
In the Linux kernel, the following vulnerability has been resolved: udf: validate sparing table length as an entry count, not a byte count udfloadsparablemap accepts a sparing table when sizeofst + le16tocpust-reallocationTableLen sb-sblocksize is false, i.e. it treats reallocationTableLen as a...
DEBIAN-CVE-2026-64297
In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of moduleextendmaxpages moduleextendmaxpages calls kvrealloc internally and returns -ENOMEM on allocation failure. The return value is never checked. If the initial allocation fails,...
DEBIAN-CVE-2026-64296
In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfatfinddirentry In exfatfinddirentry, each TYPEEXTEND file name entry advances the output pointer by a fixed amount while the loop guard only tracks the accumulated name length: if ++order == 2...
DEBIAN-CVE-2026-64283
In the Linux kernel, the following vulnerability has been resolved: KVM: guestmemfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a guestmemfd file, treat the offset and size as unsigned values to fix a bug where the sum of the two can result in a false negative...
EUVD-2026-48582
DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements allowed via CUSTOMELEMENTHANDLING.tagNameCheck, allowing attributes to bypass application security policies. Attackers can preserve sensitive attributes on custom elements that later re-inject them into...
DEBIAN-CVE-2026-61723
Bulletin has no description...
MINI-HQJ5-CHF3-J3G7
Bulletin has no description...
CGA-RX92-5XRF-42PW
Bulletin has no description...
MINI-J53X-53JW-X7QR
Bulletin has no description...
MINI-QWH2-96X7-F4CH
Bulletin has no description...
MINI-55PM-HF4M-8P44
Bulletin has no description...
MINI-79F6-2M7J-XH5G
Bulletin has no description...
MINI-P249-W995-8FC7
Bulletin has no description...
BELL-CVE-2026-53585
Bulletin has no description...
BELL-CVE-2026-53584
Bulletin has no description...
BELL-CVE-2026-64600
Bulletin has no description...
DEBIAN-CVE-2026-64833
FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a coresize value larger than the actual packet length. Attackers can exploit the missing bound...