ROS-20260928-73-0103

The vulnerability of the functions bitPutcsaligned and bitPutcsunaligned in the Linux kernel’s drivers/video/fbdev/core/bitblit.c module lies in the fact that they allow data buffer sizes to exceed the allowed limits. Exploiting this vulnerability could enable an attacker to cause a service failu...

ROS-20260928-73-0051

The vulnerability of the vsock AssignTransport function in the net/vmwvsock/afvsock.c component of the Linux kernel is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0050

The vulnerability of the hdmdisconnect function in the drivers/most/mostusb.c component of the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0087

The vulnerability of the iommufd component in the Linux operating system’s kernel is related to the lack of checks for division by zero. Exploiting this vulnerability allows an attacker to cause a service failure...

ROS-20260928-73-0094

The vulnerability of the scosockkill function in the net/bluetooth/sco.c module of the Linux Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

ROS-20260928-73-0089

The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

ROS-20260928-73-0071

The vulnerability of the procreaddirde function in the Linux operating system is related to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

ROS-20260928-73-0128

The vulnerability of the bpf component in the Linux operating system’s kernel is related to improper synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0108

The vulnerability of the nvmefccreateassociation function in the drivers/nvme/host/fc.c file of the Linux kernel’s NVME driver is related to the lack of synchronization. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0006

The vulnerability of the drivers/usb/host/max3421-hcd.c component in the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0005

The vulnerability of the drivers/scsi/mpt3sas component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0002

The vulnerability in Vim is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0023

The vulnerability of the usbnetresumerx function in the drivers/net/usb/usbnet.c module of the Linux kernel is related to resource management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0012

The vulnerability of the blkmqupdatenrhwqueues function in the block/blk-mq-sysfs.c module, which supports the block-level kernel in the Linux operating system, is related to the lack of checking the returned value. Exploiting this vulnerability could allow a remote attacker to gain elevated...

ROS-20260928-73-0015

The vulnerability of the dmsuspend function in the Linux operating system is related to an error in pointer arithmetic. Exploiting this vulnerability could allow an attacker to trigger a service failure...

ROS-20260928-73-0102

The vulnerability of the drivers/net/wireless/broadcom/brcm80211/brcmfmac component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Important: libpcap

Issue Overview: In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the...

ROS-20260928-73-0046

The vulnerability of the unixwalkscc function in the net/unix/garbage.c module, which is part of the Linux kernel’s networking functions, stems from the lack of initialization for a variable. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Medium: nginx

Issue Overview: NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpv3module module. When using HTTP/3 with OpenSSL versions = OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could happen while processing a TLS handshake. This can happen in a...

Low: amazon-efs-utils

Issue Overview: RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on major platforms to execute in constant-time and not be rewritten as branches by the compiler. From 0.1.1 until 0.5.4, the aarch64 implementations of Cmov and CmovEq in cmov/src/backends/aarch64.rs...