mqd_manager_init_v11 Heap Buffer Overflow DoS

The vulnerability of the mqdmanagerinitv11 function in the drivers/gpu/drm/amd/amdkfd/kfdmqdmanagerv11.c driver for the Direct Rendering Infrastructure DRI of AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to...

Linux IPv4 UDP skb_consume_udp Buffer Overflow DoS

The vulnerability of the skbconsumeudp function in the net/ipv4/udp.c module of the IPv4 protocol implementation in the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

papr_hvpipe_dev_create_handle Buffer Overflow DoS

The vulnerability of the paprhvpipedevcreatehandle function in the arch/powerpc/platforms/pseries/papr-hvpipe.c module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

Direct Rendering Infrastructure AMD GPU Buffer Overflow DoS

The vulnerability of the amdgpudmhpdinit function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmirq.c driver of the Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker...

sof_ipc4_route_setup Heap Buffer Overflow DoS

The vulnerability of the sofipc4routesetup function in the sound/soc/sof/ipc4-topology.c module of the Linux SoC audio support module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

amdgpu_display_get_scanout_buffer Heap Buffer Overflow DoS

The vulnerability of the amdgpudisplaygetscanoutbuffer function in the drivers/gpu/drm/amd/amdgpu/amdgpuDisplay.c driver of the Direct Rendering Infrastructure DRI module for AMD GPU cores in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow ...

Linux kernel HID DoS

The vulnerability of the ishtpbusremoveallclients function in the drivers/hid/intel-ish-hid/ishtp/bus.c file of the Linux kernel’s user interface device subsystem driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

DRI infrastructure driver Heap Buffer Overflow DoS

The vulnerability of the intelhdcpgsccheckstatus function in the drivers/gpu/drm/xe/display/xehdcpgsc.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a servic...

Linux driver Heap Buffer Overflow DoS

The vulnerability of the epfntbinit function in the driver/pci/endpoint/functions/pci-epf-ntb.c driver for Linux system devices related to PCI devices is associated with pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel TCM driver Heap Buffer Overflow DoS

The vulnerability of the iscsitclosesession function in the drivers/target/iscsi/iscsitarget.c file of the Linux kernel’s TCM driver is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

btrfs fs/btrfs/tree-log.c Heap Buffer Overflow DoS

The vulnerability of the doabortlogreplay function in the fs/btrfs/tree-log.c file of the btrfs file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux kernel cgroup dmem buffer overflow DoS

The vulnerability of the dmemcglimitwrite function in the kernel/cgroup/dmem.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

AppArmor File Heap Buffer Overflow DoS

The vulnerability of the unixneedsrevalidation function in the security/apparmor/file.c module of the AppArmor security component for the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux SMB Client Buffer Overflow

The vulnerability of the cifsoplockbreak function in the fs/smb/client/file.c module of the SMB client support library in Linux operating systems is related to the pointer manipulation. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and...

bareudp_fill_metadata_dst Heap Buffer Overflow DoS

The vulnerability of the bareudpfillmetadatadst function in the drivers/net/bareudp.c module of the Linux kernel network device driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

cros_typec_register_thunderbolt() DoS

The vulnerability of the crostypecregisterthunderbolt function in the drivers/platform/chrome/crostypecaltmode.c module of the Chrome OS hardware support module for Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failur...

PT-2026-84975

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An authenticated user with operator privileges can perform a SQL injection by manipulating the selected grp dupli parameter within the ID field. This occurs due ...

CVE-2026-84292 fast-uri vulnerable to authority injection via an unvalidated port in serialize

fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated verbatim, so a port value that is not a sequence of digits can inject authority delimiters, demoting the intended host t...

CVE-2026-84856

rowboatlabs rowboat versions up to 0.9.1 are affected by a denial of service vulnerability in the Composio Webhook Endpoint (apps/rowboat/app/api/composio/webhook/route.ts), specifically in the request.text/req.json function. The attack is remotely exploitable with no authentication required. A p...

CVE-2026-84651

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration from overwriting a different agent by specifying that agent's name in the submitted XML document, allowing attackers with Agent/Configure...