68214 matches found
The vulnerability of the match_policy_in() function in the net/netfilter/xt_policy.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the matchpolicyin function in the net/netfilter/xtpolicy.c module of the netfilter component of the Linux operating system is related to an incorrect order of authentication checks before syntactic analysis and canonization. Exploiting this vulnerability could allow a remote...
The vulnerability of the `ivpu_ms_get_info_ioctl()` function in the drivers/accel/ivpu/ivpu_ms.c module of the Linux kernel allows a attacker to gain access to protected information or cause a service failure.
The vulnerability of the ivpumsgetinfoioctl function in the drivers/accel/ivpu/ivpums.c kernel module of the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability may allow an attacker to access protected information...
The vulnerability of the btf_check_dtor_kfuncs() function in the kernel/bpf/btf.c module, which supports the BPF interpreter for Linux kernels, allows a attacker to cause a service failure.
The vulnerability of the btfcheckdtorkfuncs function in the kernel/bpf/btf.c module, which supports the BPF interpreter for Linux kernels, is related to improper security checks for standard elements. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the icmpv6_rcv() function in the net/ipv6/icmp.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the icmpv6rcv function in the net/ipv6/icmp.c module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the osdmap_decode() function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, allows a hacker to gain access to protected information or cause service failures.
The vulnerability of the osdmapdecode function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, is related to incorrect input of configuration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected...
The vulnerability of the ccp_aes_complete() function in the drivers/crypto/ccp/ccp-crypto-aes.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ccpaescomplete function in the drivers/crypto/ccp/ccp-crypto-aes.c module of the Linux kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Linux Distros Unpatched Vulnerability : CVE-2026-80823
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: st21nfca: validate ATRREQ length against the received frame st21nfcatmrecvatrreq checks that the received ATRREQ frame is at least ST21NFCAATRREQMINSIZE a...
The vulnerability of the sctp_unpack_cookie() function in the net/sctp/sm_make_chunk.c module of the Linux operating system’s SCTP kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sctpunpackcookie function in the net/sctp/smmakechunk.c module of the Linux operating system’s SCTP protocol implementation is related to improper handling of length parameter mismatches. Exploiting this vulnerability allows a remote attacker to compromise the...
The vulnerability of the cgroup_migrate_add_task() function in the kernel/cgroup/cgroup.c module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the cgroupmigrateaddtask function in the kernel/cgroup/cgroup.c module of the Linux operating system is related to incorrect handling of highly compressed input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
kernel security update
6.12.0-211.51.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
The vulnerability of the sctp_sf_do_5_2_6_stale() function in the net/sctp/sm_statefuns.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sctpsfdo526stale function in the net/sctp/smstatefuns.c module of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the __input_process_payload() function in the net/xfrm/xfrm_iptfs.c module, which is part of the networking functions of the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the inputprocesspayload function in the net/xfrm/xfrmiptfs.c module, which is part of the networking functions in the Linux kernel, is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a remote attacker to...
PT-2026-85520
Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validation via a forward-confirmation loop that does not bound the names it queries. check dns issues one PTR query for the client address, keeps the returned names matching the rule's domain, and...
The vulnerability of the require_uniform_address_uniform() function in the drivers/gpu/drm/vc4/vc4_validate_shaders.c driver module of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the requireuniformaddressuniform function in the drivers/gpu/drm/vc4/vc4validateshaders.c driver for the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remot...
CVE-2026-18167
A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device. Successful exploitation...
CVE-2026-18330
A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to...
CVE-2026-18330 Hardcoded Shared RSA-1024 Private Key in TP-Link Archer AX55 v4
A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to...
CVE-2026-18330
A hard-coded shared RSA-1024 private key vulnerability exists in the web module of the TP-Link Archer AX55 v4 . A LAN attacker who captures an HTTP login session can use the known shared private key to decrypt the administrator password , and a weakened AES session key further reduces the effort ...
CVE-2026-18330 Hardcoded Shared RSA-1024 Private Key in TP-Link Archer AX55 v4
A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to...
SUSE CVE-2026-80753
In the Linux kernel, the following vulnerability has been resolved: ovpn: run deferred work on a module-owned workqueue ovpn queues several work items whose callbacks execute module text. These works currently run on the global system workqueues, so module exit has no driver-owned drain point tha...