CVE-2015-8299

knAx20150101 제목: KNX 관리 소프트웨어 ETS의 원격 코드 실행 취약점 분류/요약: 버퍼 오버플로우 취약점 제품: ETS Engineering Tool Software 영향을 받는 버전: ETS 4.1.5 빌드 3246 다른 버전은 테스트되지 않음 수정된 버전: 알 수 없음 벤더: KNX Association 영향: 심각 CVE 번호: CVE-2015-8299 타임라인 2013-10-11 취약점 식별 2013-10-?? 1차 벤더 연락, 벤더 응답 없음 2013-07-30 2차 벤더 연락, 벤더 응답 없음...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validated the box size for the snooped cursor. Invalid user-space DMA surface copies could potentially cause an overflow when copying data from the surface to the snooped image, leading to crashes. To address this...

Astra Linux – Vulnerability in libheif

There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call...

DEBIAN-CVE-2026-89587

In the Linux kernel, the following vulnerability has been resolved: ACPI: pfrupdate: fix stack buffer overflow in querycapability querycapability copies four ACPI buffer objects returned by the firmware DSM into fixed-size u816 fields in struct pfruupdatecapinfo using memcpy with the...

CVE-2026-89580

CVE-2026-89580 is a race condition in the Linux kernel's BPF subsystem , specifically in __bpf_get_stack. A preemptible BPF program (e.g., a non-sleepable raw tracepoint program on a PREEMPT kernel) can be scheduled out between obtaining a per-CPU perf_callchain_entry buffer and copying it. Anoth...

SUSE CVE-2026-80803

In the Linux kernel, the following vulnerability has been resolved: nfc: digital: clamp SENSFRES length to the destination buffer digitalinrecvsensfres memcpys resp-len bytes from a remote NFC-F device response into the NFCSENSFRESMAXSIZE-byte target.sensfres field without an upper-bound check. A...

CVE-2020-0023

CVE-2020-0022 Seems like Android 9-6 have similar Bluetooth subsystem, Android 5 and 4 are different. Android 9.0 BlueFrag experiments Patch: https://android.googlesource.com/platform/system/bt/+/3cb7149d8fed2d7d77ceaa95bf845224c4db3baf Below I hit the patched condition. OK I think I got it, but...

Linux Distros Unpatched Vulnerability : CVE-2026-80615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which ...

SUSE CVE-2026-80615

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

CVE-2026-80615

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

CVE-2026-80615

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

CVE-2026-80615

CVE-2026-80615 affects the Linux kernel net: dst_metadata subsystem. In metadata_dst_alloc(), kmalloc_flex() sets the __counted_by annotation to options_len, which is initialized to zero . When skb_tunnel_info_unclone later copies tunnel info plus options into the structure, clang with source for...

CVE-2026-80615 net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

EUVD-2026-67491

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

CVE-2026-80615 net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

CVE-2026-80615

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

PT-2026-82915

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A false-positive memcpy overflow occurs in the tun dst unclone function within the dst metadata component. When built with clang and source fortification, the compiler incorrectly...

CVE-2026-80615: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: dstmetadata: fix false-positive memcpy overflow in tundstunclone kmallocflex in metadatadstalloc sets countedby for the structure to the optionslen, which is then initialized to zero. Later, we're initializing the structure ...

CVE-2026-62292

In libheif 1.19.0–1.23.1, unc_decoder::fetch_tile_data() computes a large tile offset that, combined with range_start_offset + range_size in get_compressed_image_data_uncompressed(), wraps to zero and bypasses the bounds check. This passes an invalid source pointer and 1 TB length to memcpy, caus...

PT-2026-72346

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dfh get param size function where it can return a parameter size larger than the feature region. This occurs because the loop bounds check is evaluated before the...