68613 matches found
EUVD-2026-49019
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPCONFIG Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and ze...
CVE-2026-64307 crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPCONFIG Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and ze...
CVE-2026-64297
In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of moduleextendmaxpages moduleextendmaxpages calls kvrealloc internally and returns -ENOMEM on allocation failure. The return value is never checked. If the initial allocation fails,...
CVE-2026-64297 module: decompress: check return value of module_extend_max_pages()
In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of moduleextendmaxpages moduleextendmaxpages calls kvrealloc internally and returns -ENOMEM on allocation failure. The return value is never checked. If the initial allocation fails,...
CVE-2026-64297
Summary (CVE-2026-64297): The Linux kernel vuln arises from not checking the return value of module_extend_max_pages() inside the decompression path. When initial allocation fails, info->pages is NULL and info->max_pages is 0. Subsequent calls to module_get_next_page() may call module_exten...
EUVD-2026-49009
In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of moduleextendmaxpages moduleextendmaxpages calls kvrealloc internally and returns -ENOMEM on allocation failure. The return value is never checked. If the initial allocation fails,...
CVE-2026-64297 module: decompress: check return value of module_extend_max_pages()
In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of moduleextendmaxpages moduleextendmaxpages calls kvrealloc internally and returns -ENOMEM on allocation failure. The return value is never checked. If the initial allocation fails,...
NLTK vulnerable to Eval Injection via collocations CLI arguments
NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...
GHSA-848C-C2CX-J7QX NLTK vulnerable to Eval Injection via collocations CLI arguments
NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...
PT-2026-64633
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the netfilter ebtables component, module names are not properly validated to ensure they are null-terminated. This lack of length checking can result in a non-null terminated string...
PT-2026-64760
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The QAT driver exposes a character device qat adf ctl that utilizes IOCTLs Input/Output Control for device configuration, start, stop, status query, and enumeration. This interface...
PT-2026-64518
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the decompression module where the return value of the module extend max pages function is not checked. This function internally calls kvrealloc and returns -ENOMEM up...
PT-2026-64528
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the crypto ccp component where the system could attempt to initialize SNP during an ioctlSNP CONFIG call. If SEV initialization fails while KVM is running normal VMs, a...
PT-2026-64713
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the tmp006 probe function, the DRDY trigger is allocated using devm iio trigger alloc but registered using iio trigger register. Because the driver lacks a .remove callback, the trigg...
PT-2026-64632
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the netfilter ebtables component, the update counters and compat update counters functions forward a user-supplied 32-byte table name to find table lock without NUL-termination. When ...
PT-2026-64635
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter component where the system fails to properly handle socket buffers skb with unreadable fragments, such as those from devmem TCP. When the skb frags...
PT-2026-64533
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pcrypt component of the crypto subsystem. The system installs the pcrypt aead done callback on a child AEAD request before attempting submission via padata. When...
CVE-2026-64492: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: iio: temperature: tmp006: use devmiiotriggerregister tmp006probe allocates the DRDY trigger with devmiiotriggeralloc but registers it with plain iiotriggerregister. The driver has no .remove callback, so on module unload the...
Linux Distros Unpatched Vulnerability : CVE-2026-64297
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of moduleextendmaxpages moduleextendmaxpages calls...
