Lucene search
+L

237087 matches found

OSV
OSV
added 2026/07/25 10:17 a.m.5 views

UBUNTU-CVE-2026-64339

In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: bound bulk IN response length to the received transfer usbiobulkmsg copies bpktlen = le16tocpubpkt-len bytes out of the bulk IN buffer usbio-rxbuf, allocated with size usbio-rxbuflen into the caller's buffer...

5.8AI score0.00198EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64341

In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconnect race mutexunlock may access the mutex structure after releasing the lock and therefore cannot be used to manage lifetime of objects directly unlike spinlocks and refcounts. 12 Use ...

5.7AI score0.00166EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/25 10:17 a.m.5 views

UBUNTU-CVE-2026-64395

In the Linux kernel, the following vulnerability has been resolved: ksmbd: require source read access for duplicate extents FSCTLDUPLICATEEXTENTSTOFILE passes the source file directly to vfsclonefilerange or vfscopyfilerange without checking the SMB access mask granted to the source handle. A...

7.5CVSS5.7AI score0.00406EPSS
SaveExploits0References9
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64312

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcryptaeaddone on the child AEAD request before trying to submit it through padata. If padatadoparallel returns -EBUSY, pcrypt falls back to calling the...

7.5CVSS5.7AI score0.00501EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64309

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPCOMMIT Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and ze...

5.8AI score0.00215EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64421

In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix use-after-free on remove KASAN reports a slab-use-after-free in mediaentityremovelink during rmmod of imx8isi: BUG: KASAN: slab-use-after-free in mediaentityremovelink+0x608/0x650 Read of size 2 at addr...

5.7AI score0.00168EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64451

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix NULL pointer dereference in funcsetflag funcsetflag dereferences tr-currenttraceflags before verifying that the current tracer is actually the function tracer. When the active tracer has been switched away from...

5.7AI score0.00162EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64304

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths The generic RSA key parser rsahelper.c bounds each CRT component p, q, dp, dq, qinv by the modulus size nsz, but qatrsasetkeycrt allocates half-size DMA buffers keysz / 2 and...

7.8CVSS5.7AI score0.00164EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.7 views

UBUNTU-CVE-2026-64314

In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1305 - validate poly1305 template argument chachapolycreate still accepts the compatibility poly1305 parameter in the template name, but it assumes the second template argument is always present and immediatel...

5.6AI score0.00198EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/25 10:17 a.m.7 views

UBUNTU-CVE-2026-64481

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs35l41: Fix firmware load work teardown cs35l41hda creates ALSA controls whose private data points at the cs35l41hda object. The firmware load control can also queue fwloadwork. Those controls are not removed on...

7.8CVSS5.6AI score0.00138EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64463

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpcirt1711h: unregister TCPCI port with devres rt1711hprobe registers the TCPCI port before requesting the interrupt and enabling alert interrupts. If either of those later steps fails, the probe function returns...

7.8CVSS5.7AI score0.00138EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64327

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Initialize epfile-in early to fix endpoint direction checks When parsing endpoint descriptors, ffsdatagotdescs generates the epsaddrmap which contains the endpoint direction. However, epfile-in was previously on...

5.6AI score0.002EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64529

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device qatadfctl with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public...

7.8CVSS5.7AI score0.00135EPSS
SaveExploits0References12
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64361

In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: fix u32 overflow in checkandcorrectrequestedlength checkandcorrectrequestedlength compares off + len against nodesize using u32 arithmetic. When the caller passes a large len value e.g. from an underflowed subtractio...

7.8CVSS5.7AI score0.00129EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64490

In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the device virtio-snd control handling trusts the device-provided control type and value count returned by the device. That metadata is then used directly to index gv2atypemap in...

8.4CVSS5.7AI score0.00153EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64296

In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfatfinddirentry In exfatfinddirentry, each TYPEEXTEND file name entry advances the output pointer by a fixed amount while the loop guard only tracks the accumulated name length: if ++order == 2...

7.8CVSS5.9AI score0.00164EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.7 views

UBUNTU-CVE-2026-64370

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in docpunanosleep error path In docpunanosleep, posixcputimercreate takes a pid reference via getpid and stores it in timer.it.cpu.pid. If the subsequent posixcputimerset call fails, the...

5.7AI score0.00177EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64276

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count rmif30mapgpios allocates gpioledkeymap with mingpioledcount, TRACKSTICKRANGEEND == at most 6 entries, but rmif30attention iterates the full f30-gpioledcount devic...

7.8CVSS5.7AI score0.00164EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64332

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...

5.7AI score0.00177EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64372

In the Linux kernel, the following vulnerability has been resolved: cpufreq: pcc: fix use-after-free and double free in OSC evaluation pcccpufreqdoosc calls acpievaluateobject twice for the two-phase OSC negotiation. Between the two calls it freed output.pointer but left output.length unchanged...

7.8CVSS5.8AI score0.00126EPSS
SaveExploits0References11
Rows per page
Query Builder