Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: 8822b: Avoid WARNING in rtw8822bconfigtrxmode rtw8822bsetantenna can be called from userspace when the chip is powered off. In that case a WARNING is triggered in rtw8822bconfigtrxmode because trying to read the RF...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix an off-by-one error in the signed range check within checkimm checkimmbits, imm is used in the arm64 BPF JIT to verify that a branch displacement in arm64 instruction units fits into the signed N-bit immediate fie...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: mfd: ene-kb3930: Fix a potential NULL pointer dereference The offgpios may be NULL. Add a missing check in the kb3930probe function. This is similar to the issue fixed in commit b1ba8bcb2d1f "backlight: hx8357: Fix potential NULL...

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: lib/ucs2string.c: fix out-of-bounds read in ucs2strnlen Patch series “lib/ucs2string.c: fix out-of-bounds read in ucs2strnlen”, version 2. This series fixes an off-by-one out-of-bounds read in ucs2strnlen. The first patch is the...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overflow in the InterpretImageFilename function. The issue arises from an off-by-one error that causes out-of-bounds memory access when...

SUSE CVE-2026-98392

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: fix txhandle bounds off-by-one Valid indices into txq-urbd0s/tfds/bufs are 0..txq-count-1, so tfdindex == txq-count is already out of range. Change the guard in btintelpciemsixtxhandle from ' txq-count' to...

Microsoft Office Word Remote Code Execution Vulnerability

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-98392

A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. An off-by-one boundary check error in the transmission interrupt handler allows an array index to exceed valid buffer limits. A local attacker could exploit this flaw to crash the system, resulting in a denial of service DoS, or...

CVE-2026-101302

TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the inner record type had an off-by-one bug which could be triggered by an invalid frame, leading to an underflow followed by an unconditional...

EUVD-2026-101870

TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the inner record type had an off-by-one bug which could be triggered by an invalid frame, leading to an underflow followed by an unconditional...

CVE-2026-101302 Remote DoS via receive-side kernel TLS

TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the inner record type had an off-by-one bug which could be triggered by an invalid frame, leading to an underflow followed by an unconditional...

CVE-2026-101302

TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the inner record type had an off-by-one bug which could be triggered by an invalid frame, leading to an underflow followed by an unconditional...

CVE-2026-101302 Remote DoS via receive-side kernel TLS

TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the inner record type had an off-by-one bug which could be triggered by an invalid frame, leading to an underflow followed by an unconditional...

CVE-2026-101302

The FreeBSD kernel's KTLS (Kernel TLS) module is vulnerable to a Remote Denial of Service (DoS) due to an off-by-one bug in the code that searches for the inner record type in TLS 1.3 decrypted payloads. A remote peer can trigger an underflow followed by an unconditional NULL pointer dereference ...

CVE-2026-101302: Off-by-one Error

TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the inner record type had an off-by-one bug which could be triggered by an invalid frame, leading to an underflow followed by an unconditional...

Linux Distros Unpatched Vulnerability : CVE-2026-98392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btintelpcie: fix txhandle bounds off-by-one Valid indices into txq-urbd0s/tfds/bufs are 0..txq-count-1, so tfdindex == txq-count is already out of...

PT-2026-115245

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An off-by-one error occurs when a program writes or reads one element past the end of an array, which can lead to memory corruption. In Microsoft Office Word, this flaw allows a...

PT-2026-115167

libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BW MidiSequencer that allows attackers to corrupt stack memory via crafted MIDI files. Attackers can supply a MIDI file with a note-on using status 0x9F and note 0x7F through adl openFile or adl...

PT-2026-115137

Name of the Vulnerable Software and Affected Versions libxmp versions prior to 4.7.5 Description An off-by-one stack out-of-bounds read occurs in the prowizard P61A depacker depack p61a function. This issue allows an attacker to provide a crafted headerless P61A module containing 31 samples and a...

Unity Linux 20.1070e Security Update: tomcat (UTSA-2026-130389)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130389 advisory. Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the...