CVE-2026-72210

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix off-by-one in mapping pairs decoding bounds checks In ntfsmappingpairsdecompress, attrend points one byte past the end of the attribute record: attrend = u8 attr + le32tocpuattr-length; The two bounds checks validating...

CVE-2026-72210 ntfs: fix off-by-one in mapping pairs decoding bounds checks

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix off-by-one in mapping pairs decoding bounds checks In ntfsmappingpairsdecompress, attrend points one byte past the end of the attribute record: attrend = u8 attr + le32tocpuattr-length; The two bounds checks validating...

EUVD-2026-58968

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix off-by-one in mapping pairs decoding bounds checks In ntfsmappingpairsdecompress, attrend points one byte past the end of the attribute record: attrend = u8 attr + le32tocpuattr-length; The two bounds checks validating...

CVE-2026-72210

The CVE relates to the Linux kernel ntfs decoding path: in ntfs_mapping_pairs_decompress, attr_end points one byte past the attribute end, and two bounds checks used strict greater-than; this permits a one-byte out-of-bounds read when the data extends to attr_end. The root cause is using > ins...

PT-2026-72840

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one heap buffer overflow exists in the snp filter reserved mem regions function, which is called via walk iomem res desc. The issue occurs because the bounds check does not...

CVE-2026-74404: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix snpfilterreservedmemregions off-by-one Sashiko notes: regarding the bounds check in snpfilterreservedmemregions called via walkiomemresdesc: does the check if rangelist-numelements 16 + 8 PAGESIZE allow an...

CVE-2026-72339: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: qede: fix off-by-one in BD ring consumption on buildskb failure qederxbuildskb and qedetparxbuildskb do not check for a NULL return from qedebuildskb. When it returns NULL under memory pressure, the functions still consume a BD...

PT-2026-72398

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one error exists in the ntfs mapping pairs decompress function. The issue occurs because bounds checks use a strict greater-than operator when validating that mapping pair data...

PT-2026-72527

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one error exists in the BD ring consumption when qede build skb fails. The functions qede rx build skb and qede tpa rx build skb fail to check for a NULL return from qede build...

PT-2026-72533

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one error exists in the single-FDB error rollback mechanism within the LAG component. When a failure occurs at index i, the reverse cleanup loop in the mlx5 lag create single f...

CVE-2026-72345: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB error rollback On failure at index i, the reverse cleanup loop in mlx5lagcreatesinglefdb starts from i, so the failed index itself is rolled back. That can operate on uninitialized stat...

CVE-2026-74495: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the driver should unmap any buffers already mapped for that skb. Because count is incremented before each frag mapping, it will always...

CVE-2026-72210: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix off-by-one in mapping pairs decoding bounds checks In ntfsmappingpairsdecompress, attrend points one byte past the end of the attribute record: attrend = u8 attr + le32tocpuattr-length; The two bounds checks validating...

PT-2026-72947

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the igbvf driver during TX DMA error cleanup. When an error occurs while mapping TX buffers, the driver fails to correctly unmap all buffers already mapped for th...

PT-2026-72437

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter flowtable component when pushing the IPIP header. The system incorrectly uses the route of the opposite direction to calculate the headroom instead of th...

Linux Distros Unpatched Vulnerability : CVE-2026-72210

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: fix off-by-one in mapping pairs decoding bounds checks In ntfsmappingpairsdecompress,...

CVE-2026-18020

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an off-by-one error in bounds checking...

Malicious code in in-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b0bedeac5b8460ad12e0ef3e013f8146eb2b7adacd483c3b8833f1dcbb457b [email protected] declares its ltidisafe dependency as an HTTPS tarball URL hosted on a Google Cloud Storage bucket...

MAL-2026-13982 Malicious code in in-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b0bedeac5b8460ad12e0ef3e013f8146eb2b7adacd483c3b8833f1dcbb457b [email protected] declares its ltidisafe dependency as an HTTPS tarball URL hosted on a Google Cloud Storage bucket...

MAL-2026-13977 Malicious code in cspell-esm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e857800f57969e257ed22cd056f2e4a4395de09ac9b69becd0c7c2b931314ab Package name resembles the widely-used 'cspell' library but its main entry index.js exports an empty object and provides no functionality. Its...