125331 matches found
DEBIAN-CVE-2026-80730
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix crash passing ERRPTR to kthreadstop In testringbuffer's outfree cleanup loop, the check !rbthreadscpu only catches NULL entries and misses entries that hold an ERRPTR. rbthreads is static, so unassigned slots are...
DEBIAN-CVE-2026-80732
In the Linux kernel, the following vulnerability has been resolved: ata: patasl82c105: fix bridge revision use-after-free pcigetslot returns a referenced PCI device. Commit 44c10138fd4b "PCI: Change all drivers to use pcidevice-revision" replaced a configuration-space read with direct access to t...
DEBIAN-CVE-2026-80729
In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: initialise workingset state before folio split xastrysplit adds GFPACCOUNT for page-cache xanodes, but foliosplit leaves the xastate's xalru unset. That lets a live, memcg-charged xanode exist without being linked...
DEBIAN-CVE-2026-80727
In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI discovery I hit the following on one of my machines: mce: CPU0 BANK15 CMCI inherited storm ------------ cut here ------------ ODEBUG: assertinit not available active state 0 object:...
DEBIAN-CVE-2026-80726
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...
DEBIAN-CVE-2026-80731
In the Linux kernel, the following vulnerability has been resolved: net: remove CAPSYSRAWIO zero-padding in devvalidateheader devvalidateheader reads dev-hardheaderlen directly when zero-padding short link layer headers for CAPSYSRAWIO holders: if capableCAPSYSRAWIO memsetllheader + len, 0,...
DEBIAN-CVE-2026-76642
util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with...
DEBIAN-CVE-2026-71224
A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca with an untrusted inode height value from on-disk metadata without bounds validation, causing stack exhaustion and a denial of service when processing crafted GFS2 filesystem images...
DEBIAN-CVE-2026-71222
A heap out-of-bounds read vulnerability was found in gfs2-utils. The eanumptrs field from on-disk extended attribute metadata is consumed without bounds validation, causing a heap buffer over-read that may disclose sensitive memory contents or cause a crash when processing crafted GFS2 filesystem...
DEBIAN-CVE-2026-71221
A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode metadata is used as a loop bound without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem images...
DEBIAN-CVE-2026-71219
A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c uses alloca with an exponentially-derived size from the untrusted on-disk didepth field without bounds validation. A crafted GFS2 filesystem image with a large didepth value causes stack exhaustion...
DEBIAN-CVE-2026-71220
A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2edit, the diheight field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem image...
CGA-JR64-GPH8-689Q
Bulletin has no description...
CVE-2026-58400
creationtimestamp| type| source ---|---|--- 2026-09-03 12:28:54+00:00| seen| https://vulnerability.circl.lu/bundle/d3a9a3be-7e46-44d6-a018-982d32551a2a 2026-09-03 19:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mun54p72iz2v 2026-09-03 19:02:33+00:00| seen|...
CVE-2025-68935
creationtimestamp| type| source ---|---|--- 2026-09-03 12:00:06+00:00| seen| https://t.me/bizonechannel/2808 2026-09-04 00:00:51+00:00| seen| https://t.me/bizonechannel/2808...
CGA-Q9W5-R6PV-F6G3
Bulletin has no description...
CGA-QHPX-JGXF-J436
Bulletin has no description...
CGA-4J68-XV8V-4HW6
Bulletin has no description...