410480 matches found
CVE-2026-98906
The Linux kernel contains a vulnerability in the lan966x driver where a failed RX resource reallocation during an MTU change results in an inconsistent state. Specifically, while the driver backs up rx->page_pool and rx->fdma, it fails to restore rx->page_order and rx->max_mtu on fail...
CVE-2026-98906 net: lan966x: restore RX state on reload failure
In the Linux kernel, the following vulnerability has been resolved: net: lan966x: restore RX state on reload failure lan966xfdmareload backs up rx-pagepool and rx-fdma before reallocating the RX resources for the new MTU. If the allocation fails, the restore path puts these fields back before...
Important: Red Hat Security Advisory: php security update
An update for php is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...
php: OOM bailout during request parsing leads to memory corruption and RCE
A flaw was found in PHP's memory limit handling during request parsing. PHP records certain state as ready for use before all required memory allocations complete. If an allocation fails due to memory exhaustion, the incomplete state is not rolled back. Subsequent cleanup operations treat the...
CVE-2026-98895 net/mlx5: HWS, Handle destroying table that has a miss table
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Handle destroying table that has a miss table If a table has a miss table that was created by 'mlx5hwstablesetdefaultmiss' API function, its misstbl keeps the table that points to it in a list. If such table is...
CVE-2026-98895 net/mlx5: HWS, Handle destroying table that has a miss table
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Handle destroying table that has a miss table If a table has a miss table that was created by 'mlx5hwstablesetdefaultmiss' API function, its misstbl keeps the table that points to it in a list. If such table is...
CVE-2026-98895
The Linux kernel is affected by a vulnerability in the net/mlx5 driver (HWS). Specifically, when a table is created using the mlx5hws_table_set_default_miss API, the associated miss_tbl maintains a list containing the table that points to it. The root cause is a failure to remove the table from t...
EUVD-2026-108689
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Handle destroying table that has a miss table If a table has a miss table that was created by 'mlx5hwstablesetdefaultmiss' API function, its misstbl keeps the table that points to it in a list. If such table is...
EUVD-2026-108710
RPly through 1.1.4 contains an improper array index validation vulnerability in plyreadheaderproperty that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes plyreadlistproperty call an out-of-bounds handler, crashing ASCII parsing or...
CVE-2026-115722
The RPly library, versions through 1.1.4 , is vulnerable to an out-of-bounds function pointer index due to improper array index validation in ply_read_header_property(). The flaw occurs because the function accepts a list as a list property's length or value type. An attacker providing a crafted ...
CVE-2026-115722 RPly through 1.1.4 Out-of-Bounds Function Pointer Index via PLY Header
RPly through 1.1.4 contains an improper array index validation vulnerability in plyreadheaderproperty that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes plyreadlistproperty call an out-of-bounds handler, crashing ASCII parsing or...
CVE-2026-115722
RPly through 1.1.4 contains an improper array index validation vulnerability in plyreadheaderproperty that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes plyreadlistproperty call an out-of-bounds handler, crashing ASCII parsing or...
CVE-2026-115722 RPly through 1.1.4 Out-of-Bounds Function Pointer Index via PLY Header
RPly through 1.1.4 contains an improper array index validation vulnerability in plyreadheaderproperty that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes plyreadlistproperty call an out-of-bounds handler, crashing ASCII parsing or...
CVE-2026-98784
A flaw was found in the AMD GPU driver within the Linux kernel. During graphics block teardown, the driver fails to release previously loaded microcode firmware resources. A local user could exploit this behavior through repeated device re-initialization and teardown operations, resulting in a...
CVE-2026-98780
A flaw was found in the Linux kernel's AMD GPU driver. When registering hardware discovery entries within the sysfs system filesystem interface, the driver fails to release allocated memory if a kernel object fails to register. An unexpected registration failure can cause the memory to remain...
CVE-2026-98789
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter memory allocator. When releasing memory, objects queued while a delayed cleanup cycle is already in progress can fail to be reclaimed. A local user can exploit this vulnerability through repeated BPF operations, causing an unbounde...
CVE-2026-80764
A flaw was found in the Linux kernel's Bluetooth subsystem. A local user could exploit a use-after-free vulnerability in the hcievent component. This occurs when the hciccreset function clears Bluetooth Low Energy LE lists without proper locking, allowing a debugfs reader to access freed memory...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
patch-php2shell A small, defensive remediation helper for the...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell Vulnerability Reproduction Report CVE-2026-1096...
CLSA-2026-1792751700 kernel: Fix of 106 CVEs
net: skbuff: propagate shared-frag marker in skbzerocopy - net: ipv6: clear suppressed fib6 rule result CVE-2026-74581 - net: skbuff: propagate shared-frag marker through frag-transfer helpers CVE-2026-43503 - ALSA: virtio: reset device before deleting virtqueues CVE-2026-98264 - ALSA: usb-audio:...