Lucene search
+L

237089 matches found

OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64427

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short report validation Commit b6a57912854e "HID: logitech-dj: Prevent REPORTIDDJSHORT related user initiated OOB write" added validation for the DJ short output report, but the error pa...

5.7AI score0.00155EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64455

In the Linux kernel, the following vulnerability has been resolved: USB: chaoskey: Fix slab-use-after-free in chaoskeyrelease The chaoskey driver has a use-after-free bug in its release routine. If the user closes the device file after the USB device has been unplugged, a debugging log statement...

5.7AI score0.00184EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.13 views

UBUNTU-CVE-2026-64257

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject overlapping data areas in SMB2 responses Commit 53b7c271f06b "smb: client: restrict implied bcc0 exemption to responses without data area" restricted the implied bcc0 length exception to responses without a da...

9.1CVSS5.7AI score0.00672EPSS
SaveExploits0References9
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64463

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpcirt1711h: unregister TCPCI port with devres rt1711hprobe registers the TCPCI port before requesting the interrupt and enabling alert interrupts. If either of those later steps fails, the probe function returns...

7.8CVSS5.7AI score0.00138EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64384

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix change notify replay double-free A response-bearing attempt can return a replayable error and free its response buffer. If SMB2notifyinit fails before the next send, cleanup retains the previous buffer type and...

9.8CVSS5.8AI score0.00457EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/25 10:17 a.m.9 views

UBUNTU-CVE-2026-64364

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix out-of-bounds bit access on mtioflags mtioflags is a single unsigned long, but mtprocessslot, mtreleasependingpalms and mtreleasecontacts use it as a per-slot bitmap indexed by the slot number. That slot numb...

8.8CVSS5.6AI score0.00345EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64529

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device qatadfctl with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public...

7.8CVSS5.7AI score0.00135EPSS
SaveExploits0References12
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64417

In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix NULL pointer dereference in debugfs shrinkerdebugfsadd creates both "count" and "scan" debugfs files unconditionally. That assumes every shrinker implements both countobjects and scanobjects, which is not...

5.6AI score0.00173EPSS
SaveExploits0References9
OSV
OSV
added 2026/07/25 10:17 a.m.5 views

UBUNTU-CVE-2026-64395

In the Linux kernel, the following vulnerability has been resolved: ksmbd: require source read access for duplicate extents FSCTLDUPLICATEEXTENTSTOFILE passes the source file directly to vfsclonefilerange or vfscopyfilerange without checking the SMB access mask granted to the source handle. A...

7.5CVSS5.7AI score0.00406EPSS
SaveExploits0References9
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64378

In the Linux kernel, the following vulnerability has been resolved: writeback: fix race between cgroupwritebackumount and inodeswitchwbs When a container exits, the following BUGON is occasionally triggered: ================================================================== VFS: Busy inodes after...

7.8CVSS5.7AI score0.00129EPSS
SaveExploits0References10
OSV
OSV
added 2026/07/25 10:17 a.m.7 views

UBUNTU-CVE-2026-64408

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: pin L2CAP connection during netdev registration bnepaddconnection reads the L2CAP connection without holding the channel lock, then passes its HCI device to registernetdev. Controller teardown can clear and relea...

8.8CVSS5.7AI score0.00262EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.5 views

UBUNTU-CVE-2026-64285

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guestmemfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the...

5.7AI score0.00189EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64332

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...

5.7AI score0.00177EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.5 views

UBUNTU-CVE-2026-64317

In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling in parserockridgeinodeinternal walk the variable-length components of a Rock Ridge "SL" symbolic link record. Each component is a...

7.1CVSS5.8AI score0.0016EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.7 views

UBUNTU-CVE-2026-64314

In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1305 - validate poly1305 template argument chachapolycreate still accepts the compatibility poly1305 parameter in the template name, but it assumes the second template argument is always present and immediatel...

5.6AI score0.00198EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64276

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count rmif30mapgpios allocates gpioledkeymap with mingpioledcount, TRACKSTICKRANGEEND == at most 6 entries, but rmif30attention iterates the full f30-gpioledcount devic...

7.8CVSS5.7AI score0.00164EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.5 views

UBUNTU-CVE-2026-64329

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove The threaded IRQ handler ccgirqhandler calls ucsinotifycommon, which on a connector-change event calls ucsiconnectorchange and schedules connector work. In ucsiccgremove...

5.6AI score0.00177EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.7 views

UBUNTU-CVE-2026-64258

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: remove request-less entries from entwreqqueue to fix NULL deref If a copy into the userspace ring buffer fails, a request will be terminated and fuseuringreqend will set ent-fusereq to NULL but it will leave the entry...

5.8AI score0.00198EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/25 10:17 a.m.7 views

UBUNTU-CVE-2026-64445

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth OnAuth has two bugs in the shared-key authentication path. When the Privacy bit is set, rtwwepdecrypt is called without verifying that the frame is long enough t...

8.8CVSS5.7AI score0.00316EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/25 10:17 a.m.6 views

UBUNTU-CVE-2026-64325

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon This patch is based on a BUG as reported by Bongani Hlope at https://lore.kernel.org/all/[email protected]/ When a channel-switch...

5.7AI score0.00189EPSS
SaveExploits0References5
Rows per page
Query Builder