Lucene search
+L

237173 matches found

OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64487

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser sndusbcaiaqtks4dispatch decodes the Traktor Kontrol S4 input stream in fixed 16-byte TKS4MSGBLOCKSIZE message blocks. On every iteration it advances buf a...

5.6AI score0.00184EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.7 views

UBUNTU-CVE-2026-64307

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPCONFIG Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and ze...

5.8AI score0.00215EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64263

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix moving cancelled entry to entinuserspace list fuseuringcancel moves entries that are available these have no reqs attached to the entinuserspace list. entlistrequestexpired checks the first entry on entinuserspace...

5.7AI score0.00198EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/25 10:17 a.m.7 views

UBUNTU-CVE-2026-64291

In the Linux kernel, the following vulnerability has been resolved: iommufd: Set veventqdepth upper bound iommufdveventqalloc accepts any !0 veventqdepth from userspace, with an upper bound at U32MAX. This leaves a vulnerability where userspace can allocate excessively large queues to exhaust...

5.7AI score0.00198EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/25 10:17 a.m.8 views

UBUNTU-CVE-2026-64330

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate SVID index in svdmconsumemodes In svdmconsumemodes, the SVID value is read from pmdata-svids using pmdata-svidindex as an array index without bounds validation: paltmode-svid =...

5.6AI score0.00177EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.9 views

UBUNTU-CVE-2026-64344

In the Linux kernel, the following vulnerability has been resolved: USB: idmouse: fix use-after-free on disconnect race mutexunlock may access the mutex structure after releasing the lock and therefore cannot be used to manage lifetime of objects directly unlike spinlocks and refcounts. 12 Use a...

5.7AI score0.00177EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64403

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate option length before reading conf opt value l2capgetconfopt derives the option length from the attacker-controlled opt-len field and immediately dereferences opt-val as u8, getunalignedle16 or...

7.1CVSS5.8AI score0.00265EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64345

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fprinter: take kref only for successful open printeropen returns -EBUSY when the character device is already open, but it increments dev-kref regardless of the return value. VFS does not call -release for a failed...

5.7AI score0.00173EPSS
SaveExploits0References9
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64465

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix sleep in atomic context in xhcifreestreams When a USB device with active stream endpoints is disconnected, xhcifreestreams is called from the hubevent workqueue to free the stream resources. It calls...

5.6AI score0.00184EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64358

In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: cancel workqueue on release for supported platforms only Since a recent fix the mtkjpegrelease function cancels any pending or running work present in the driver workqueue using cancelworksync function. Currently...

5.7AI score0.00168EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64328

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fix DMA fence leak In ffsdmabuftransfer, a ffsdmafence object is kmalloc'd, with the underlying dmafence later initialized by dmafenceinit, which sets its kref counter to 1. Then, dmaresvaddfence gets a second...

5.7AI score0.002EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/25 10:17 a.m.9 views

UBUNTU-CVE-2026-64292

In the Linux kernel, the following vulnerability has been resolved: iommufd: Move vevent memory allocation outside spinlock The veventq memory allocation happens inside the spinlock. Given its depth is decided by the user space, this leaves a vulnerability, where userspace can allocate large queu...

5.7AI score0.00198EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/25 10:17 a.m.7 views

UBUNTU-CVE-2026-64262

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: end fusereq on io-uring cancel task work When iouring delivers task work with tw.cancel set PFEXITING, PFKTHREAD fallback, or percpurefisdying on the ring context, fuseuringsendintask takes the cancel branch, assigns...

5.7AI score0.00198EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64310

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for SEV ioctls Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and zero o...

5.8AI score0.00215EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64366

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix slab-out-of-bounds write in wacomwacqueueinsert wacomwacqueueinsert calls kfifoskip in a loop when the kfifo doesn't have enough space for the incoming report. If the kfifo is empty, kfifoskip reads stale data lef...

8.8CVSS5.8AI score0.00253EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/25 10:17 a.m.7 views

UBUNTU-CVE-2026-64390

In the Linux kernel, the following vulnerability has been resolved: ksmbd: track the connection owning a byte-range lock SMB2LOCK adds each granted byte-range lock to both the file lock list and the lock list of the connection which handled the request. The final close and durable handle paths,...

8.8CVSS5.6AI score0.00467EPSS
SaveExploits0References10
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64305

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect service table iterations with servicelock The servicetable list is protected by servicelock when entries are added or removed in adfserviceadd and adfserviceremove, but several functions iterate over the lis...

5.7AI score0.00168EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64489

In the Linux kernel, the following vulnerability has been resolved: ALSA: ymfpci: check sndctlnew1 return value sndctlnew1 can return NULL when memory allocation fails. sndymfpcicreatespdifcontrols does not check the return value before dereferencing kctl-id.device, which can lead to a NULL point...

5.7AI score0.0018EPSS
SaveExploits0References9
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64407

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxprecvfwreqv3 During the v3 firmware download the controller sends a v3datareq with a 32 bit offset and a 16 bit len. nxprecvfwreqv3 checks only the lower bound of the...

5.7AI score0.00168EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64405

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix null ptr deref in hciabortconn hciabortconn read hciskbeventhdev-sentcmd when a connection was pending, but hdev-sentcmd can be NULL while reqstatus is still HCIREQPEND, leading to a NULL pointer dereferen...

5.7AI score0.00173EPSS
SaveExploits0References9
Rows per page
Query Builder