PT-2026-26292

Name of the Vulnerable Software and Affected Versions pgproto3 affected versions not specified Description A flaw exists in pgproto3 where a malicious or compromised PostgreSQL server can send a DataRow message containing a negative field length. This input validation issue can cause a denial of...

PT-2026-26046

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel’s RDMA/umad component where a negative data len value can occur in the ib umad write function. This happens when there is a mismatch between the...

PT-2026-6137

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue involves a signedness bug in the arm lpae unmap function within the io-pgtable-arm component of the Linux kernel. The function incorrectly returns a negative error code -ENOENT...

PT-2026-27753

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the Squashfs file system related to metadata block offset validation. A corrupted index look-up table can result in a negative metadata block offs...

PT-2026-8385

Name of the Vulnerable Software and Affected Versions Crypt::URandom versions 0.41 through 0.55 Description The Perl module Crypt::URandom is susceptible to a heap buffer overflow within the crypt urandom getrandom function. The issue arises because the function does not properly validate the...

PT-2026-27708

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc1+ 21 Description The Linux kernel contained a flaw in the XDP eXpress Data Path implementation where a negative tailroom could be calculated. This occurs when ethernet drivers report XDP RX queue frag...

SUSE CVE-2023-54186

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: fix pinassignmentshow This patch fixes negative indexing of buf array in pinassignmentshow when getcurrentpinassignments returns 0 i.e. no compatible pin assignments are found. BUG: KASAN:...

SUSE CVE-2023-54284

In the Linux kernel, the following vulnerability has been resolved: media: av7110: prevent underflow in writetstodecoder The buf4 value comes from the user via tsplay. It is a value in the u8 range. The final length we pass to av7110ipackinstantrepack is "len - buf4 + 1 - 4" so add a check to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993134)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993134 advisory. In the Linux kernel, the following vulnerability has been resolved: pagepool: avoid infinite loop to schedule delayed worker We noticed the kworker in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993283)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993283 advisory. In the Linux kernel, the following vulnerability has been resolved: loop: Check for overflow while configuring loop The userspace can configure a loop using an ioct...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993078)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993078 advisory. In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions If an error occurs in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993143)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993143 advisory. In the Linux kernel, the following vulnerability has been resolved: ca8210: fix maclen negative array access This patch fixes a buffer overflow access of skb-data if...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992891)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992891 advisory. In the Linux kernel, the following vulnerability has been resolved: media: cx24116: prevent overflows on SNR calculus as reported by Coverity, if reading SNR registe...

EUVD-2023-60455

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: fix pinassignmentshow This patch fixes negative indexing of buf array in pinassignmentshow when getcurrentpinassignments returns 0 i.e. no compatible pin assignments are found. BUG: KASAN:...

CVE-2023-54186

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: fix pinassignmentshow This patch fixes negative indexing of buf array in pinassignmentshow when getcurrentpinassignments returns 0 i.e. no compatible pin assignments are found. BUG: KASAN:...

CVE-2023-54186

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: fix pinassignmentshow This patch fixes negative indexing of buf array in pinassignmentshow when getcurrentpinassignments returns 0 i.e. no compatible pin assignments are found. BUG: KASAN:...

UBUNTU-CVE-2023-54284

In the Linux kernel, the following vulnerability has been resolved: media: av7110: prevent underflow in writetstodecoder The buf4 value comes from the user via tsplay. It is a value in the u8 range. The final length we pass to av7110ipackinstantrepack is "len - buf4 + 1 - 4" so add a check to...

UBUNTU-CVE-2023-54186

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: fix pinassignmentshow This patch fixes negative indexing of buf array in pinassignmentshow when getcurrentpinassignments returns 0 i.e. no compatible pin assignments are found. BUG: KASAN:...

CVE-2023-54284

CVE-2023-54284 : Linux kernel vulnerability in the media/av7110 path. The issue arises from underflow-prone length calculation in write_ts_to_decoder(), where buf[4] is user-controlled via ts_play(). The intended final length passed to av7110_ipack_instant_repack() is computed as len - (buf[4] + ...

CVE-2023-54186

CVE-2023-54186 is a Linux kernel vulnerability affecting the USB Type-C altmodes/displayport code. The issue arises from a patch that fixes the negative indexing of the buf array in pin_assignment_show when get_current_pin_assignments returns 0 (no compatible pin assignments). The bug led to a KA...