ROS-20261012-73-0265

The vulnerability of the xen-netback component in the Linux operating system’s kernel is related to incorrect checking of the amount of data at the input. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0260

The vulnerability of the cpcap-battery.c component in the Linux operating system is related to situations where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0028

The vulnerability of the wdmincallback function in the drivers/usb/class/cdc-wdm.c file of the Linux operating system’s USB device driver framework is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20261012-73-0058

The vulnerability of the pipapo Drop function in the net/netfilter/nftsetpipapo.c module of the netfilter component in the Linux operating system’s kernel is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux drivers iio magnetometer ak8975 Heap Buffer Overflow DoS

The vulnerability of the drivers/iio/magnetometer/ak8975.c component in the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel max3421_hub_control() function Heap Buffer Overflow

The vulnerability of the max3421hubcontrol function in the drivers/usb/host/max3421-hcd.c file of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

Linux kernel nvec_rx_completed() Heap Buffer Overflow

The vulnerability of the nvecrxcompleted function in the drivers/staging/nvec/nvec.c file of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux net/tipc/bearer ipvlan_hard_header Heap Buffer Overflow

The vulnerability of the ipvlanhardheader function in the net/tipc/bearer.c component of the Linux operating system is related to the pointer being dereferenced after its expiration. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the bpfmsgpopdata function in the net/core/filter.c component of the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux PCI ROM Buffer Overflow DoS

The vulnerability of the drivers/pci/rom.c component of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected information...

Linux same_client_has_lease() Function Use-After-Free

The vulnerability of the sameclienthaslease function in the fs/smb/server/oplock.c component of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibili...

Linux net/ipv6/route.c Heap Buffer Overflow DoS

The vulnerability of the ip6defaultadvmss function in the net/ipv6/route.c component of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux kernel IMA Buffer Overflow DoS

The vulnerability of the mma8452read function in the drivers/iio/accel/mma8452.c file of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux drivers/mailbox/mtk-adsp-mailbox.c Buffer Overflow

The vulnerability of the drivers/mailbox/mtk-adsp-mailbox.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux kernel recv_done p9_cm_event_handler Data Compromise

The vulnerability of the recvdone and p9cmeventhandler functions in the net/9p/transrdma.c file of the Linux kernel is related to the implementation of incorrect thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

Linux kcm_attach() Heap Buffer Overflow

The vulnerability of the kcmattach function in the net/kcm/kcmsock.c component of the Linux operating system’s kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

Linux kernel IAMS Buffer Overflow DoS

The vulnerability of the amseventtochannel function in the drivers/iio/adc/xilinx-ams.c file of the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20261012-73-0232

The vulnerability of the fs/ntfs3 components in the Linux operating system is related to incorrect data input used as a condition for loop execution. Exploiting this vulnerability can allow an attacker to cause a service failure...

EulerOS 2.0 SP11 : linux-sgx (EulerOS-SA-2026-4253)

According to the versions of the linux-sgx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: When CMS password-based decryption RFC 3211 / PWRI key unwrap processes attacker-supplied CMS data, an attacker-chosen stream-mo...

Rocky Linux 8.6 [CIQ] Security Update: libzip / libzip-devel / libzip-tools Multiple Vulnerabilities (ciqsa-2026_1604)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261604 advisory. This advisory aggregates security fixes for the libzip SRPM in CIQ LTS 8.6. It addresses 3 CVEs: CVE-2015-2331, CVE-2012-1162, CVE-2012-1163. Tenable has...