Lucene search
+L

264895 matches found

OSV
OSV
added 2026/08/28 8:16 a.m.7 views

UBUNTU-CVE-2026-80641

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

6.8CVSS5.8AI score0.00155EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/28 8:16 a.m.8 views

UBUNTU-CVE-2026-80652

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...

5.9AI score0.00176EPSS
SaveExploits0References11
OSV
OSV
added 2026/08/28 8:16 a.m.8 views

UBUNTU-CVE-2026-80718

In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpucreatechunk In pcpucreatechunk, nrpages is the total contiguous backing allocation, i.e., nrunits pcpuunitpages, but pcpuchunkpopulated uses it to set chunk-populated, whose...

7.8CVSS5.7AI score0.0012EPSS
SaveExploits0References11
OSV
OSV
added 2026/08/28 8:16 a.m.7 views

UBUNTU-CVE-2026-80715

In the Linux kernel, the following vulnerability has been resolved: igc: remove napisynchronize in igcdown When an AFXDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igccleanrxirqzc then returns the full budget on every poll, so napicompletedone neve...

6.7CVSS5.8AI score0.00161EPSS
SaveExploits0References10
Debian CVE
Debian CVE
added 2026/08/28 7:03 a.m.13 views

CVE-2026-80724

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becoming writable vmclockmiscdevmmap rejects writable mappings of the shared vmclock ABI page with -EROFS, but leaves VMMAYWRITE set. Userspace can map the page read-only and then...

8.8CVSS5.8AI score0.0012EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/08/28 7:03 a.m.39 views

CVE-2026-80724 ptp: vmclock: prevent read-only mappings from becoming writable

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becoming writable vmclockmiscdevmmap rejects writable mappings of the shared vmclock ABI page with -EROFS, but leaves VMMAYWRITE set. Userspace can map the page read-only and then...

8.8CVSS0.0012EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/28 7:03 a.m.8 views

EUVD-2026-67460

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becoming writable vmclockmiscdevmmap rejects writable mappings of the shared vmclock ABI page with -EROFS, but leaves VMMAYWRITE set. Userspace can map the page read-only and then...

5.8AI score0.0012EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/28 7:03 a.m.60 views

CVE-2026-80724

CVE-2026-80724 affects the Linux kernel's ptp/vmclock driver. The root cause is that vmclock_miscdev_mmap() rejects writable mappings of the shared vmclock ABI page with -EROFS but leaves VM_MAYWRITE set, allowing a guest to map the page read-only and then upgrade it to writable via mprotect(). T...

8.8CVSS5.8AI score0.0012EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/28 7:03 a.m.18 views

CVE-2026-80724 ptp: vmclock: prevent read-only mappings from becoming writable

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becoming writable vmclockmiscdevmmap rejects writable mappings of the shared vmclock ABI page with -EROFS, but leaves VMMAYWRITE set. Userspace can map the page read-only and then...

8.8CVSS5.8AI score
SaveExploits0References9
Cvelist
Cvelist
added 2026/08/28 6:53 a.m.38 views

CVE-2026-80723 of: reserved_mem: prevent OOB when too many dynamic regions are defined

In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a local array of size MAXRESERVEDREGIONS. If the device tree defines...

8.4CVSS0.00134EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/28 6:53 a.m.41 views

CVE-2026-80723

CVE-2026-80723 affects the Linux kernel in the of: reserved_mem subsystem. During boot, the function fdt_scan_reserved_mem() stores each dynamically-placed /reserved-memory subnode into a local array of fixed size MAX_RESERVED_REGIONS. When the device tree defines more dynamically-placed regions ...

8.4CVSS5.8AI score0.00134EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/28 6:53 a.m.13 views

CVE-2026-80723 of: reserved_mem: prevent OOB when too many dynamic regions are defined

In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a local array of size MAXRESERVEDREGIONS. If the device tree defines...

8.4CVSS5.8AI score
SaveExploits0References7
EUVD
EUVD
added 2026/08/28 6:53 a.m.9 views

EUVD-2026-67458

In the Linux kernel, the following vulnerability has been resolved: of: reservedmem: prevent OOB when too many dynamic regions are defined On boot, fdtscanreservedmem saves each dynamically-placed /reserved-memory subnode into a local array of size MAXRESERVEDREGIONS. If the device tree defines...

5.8AI score0.00134EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/28 6:53 a.m.44 views

CVE-2026-80722 wifi: mac80211: validate individual TWT params before driver setup

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211processrxtwtaction only partially validates a received S1G TWT setup frame before queueing it. An individual agreement can therefore reach...

8.8CVSS0.00242EPSS
SaveExploits0References7
CVE
CVE
added 2026/08/28 6:53 a.m.35 views

CVE-2026-80722

CVE-2026-80722 is a Linux kernel vulnerability in the mac80211 WiFi subsystem's handling of S1G TWT (Target Wake Time) setup frames. The function ieee80211_process_rx_twt_action() only partially validates an incoming frame before queueing it, allowing an individual TWT agreement with a twt->le...

8.8CVSS5.8AI score0.00242EPSS
SaveExploits0References7
CVE
CVE
added 2026/08/28 6:53 a.m.30 views

CVE-2026-80721

A dangling pointer vulnerability exists in the Linux kernel Bluetooth ISO (Isochronous) subsystem. After iso_conn_del() is called, ISO sockets may still dereference the hcon (HCI connection) pointer because clearing iso_conn::hcon previously relied on iso_conn_del() releasing the last reference t...

8.8CVSS5.8AI score0.00225EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/28 6:53 a.m.21 views

CVE-2026-80722 wifi: mac80211: validate individual TWT params before driver setup

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211processrxtwtaction only partially validates a received S1G TWT setup frame before queueing it. An individual agreement can therefore reach...

8.8CVSS5.8AI score
SaveExploits0References10
EUVD
EUVD
added 2026/08/28 6:53 a.m.10 views

EUVD-2026-67457

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params before driver setup ieee80211processrxtwtaction only partially validates a received S1G TWT setup frame before queueing it. An individual agreement can therefore reach...

5.8AI score0.00242EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/28 6:53 a.m.40 views

CVE-2026-80721 Bluetooth: ISO: ensure no dangling hcon references in iso_conn

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in isoconn After isoconndel, ISO sockets should not dereference the hcon any more. Currently, clearing isoconn::hcon relies on isoconndel releasing the last reference to the...

8.8CVSS0.00225EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/28 6:53 a.m.10 views

EUVD-2026-67456

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references in isoconn After isoconndel, ISO sockets should not dereference the hcon any more. Currently, clearing isoconn::hcon relies on isoconndel releasing the last reference to the...

5.8AI score0.00225EPSS
SaveExploits0References3
Rows per page
Query Builder