Lucene search
+L

37145 matches found

NVD
NVD
added 2026/09/11 8:19 p.m.6 views

CVE-2026-89679

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix null dereference in nfsd4setattr for deleg timestamp attrs When a SETATTR request includes FATTR4WORD2TIMEDELEGACCESS or FATTR4WORD2TIMEDELEGMODIFY in the attribute bitmap, nfsd4setattr sets delegattrs=true and calls...

7.5CVSS0.00687EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/11 8:19 p.m.6 views

DEBIAN-CVE-2026-89596

In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix off-by-one when saving/restoring non-PCI config space nvsuspend and nvresume walk the non-PCI configuration space with for i = 0; i registersize/sizeofu32; i++ which runs one iteration too many. savedconfigspace is...

7.1CVSS0.00172EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/11 8:19 p.m.4 views

AZL-100386 CVE-2026-89596 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix off-by-one when saving/restoring non-PCI config space nvsuspend and nvresume walk the non-PCI configuration space with for i = 0; i registersize/sizeofu32; i++ which runs one iteration too many. savedconfigspace is...

7.1CVSS0.00172EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/11 8:19 p.m.7 views

CVE-2026-89596

In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix off-by-one when saving/restoring non-PCI config space nvsuspend and nvresume walk the non-PCI configuration space with for i = 0; i registersize/sizeofu32; i++ which runs one iteration too many. savedconfigspace is...

7.1CVSS0.00172EPSS
SaveExploits0References8
NVD
NVD
added 2026/09/11 8:19 p.m.8 views

CVE-2026-89442

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate socket ID in closassoc ioctl isstifclosassoc validates the user-supplied socketid with 'socketid topologymaxpackages', but isstcommon.sstinst is allocated with topologymaxpackages entries, so the vali...

7.8CVSS0.00163EPSS
SaveExploits0References5
NVD
NVD
added 2026/09/11 8:19 p.m.7 views

CVE-2026-89436

In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix sentinel write past pcc-sinf acpipccretrievebiosdata rejects SINF packages only when pcc-numsifr is strictly less than hkey-package.count, then unconditionally writes a trailing sentinel at...

7.8CVSS0.00133EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/11 8:19 p.m.7 views

DEBIAN-CVE-2026-81012

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer size with "size dstsize", so when the converted length is exactly equ...

8.4CVSS0.00144EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/11 8:19 p.m.6 views

AZL-100590 CVE-2026-81012 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer size with "size dstsize", so when the converted length is exactly equ...

8.4CVSS0.00144EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/11 8:19 p.m.7 views

CVE-2026-81012

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hpgetstringfrombuffer hpgetstringfrombuffer clamps the converted string length against the destination buffer size with "size dstsize", so when the converted length is exactly equ...

8.4CVSS0.00144EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/11 8:02 p.m.6 views

CVE-2021-3156

CVE-2021-3156 Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via sudoedit -s and a command-line argument that ends with a single backslash character. Credit to: Advisory by Baron Samedit of Qualys How to...

7.8CVSS7.4AI score0.99969EPSS
SaveExploits83
CVE
CVE
added 2026/09/11 7:46 p.m.11 views

CVE-2026-89751

CVE-2026-89751 is an off-by-one error in the Linux kernel's x86 TDX (Trusted Domain Extensions) port I/O handling. The functions handle_in() and handle_out() in arch/x86/coco/tdx/tdx.c compute a bitmask using GENMASK(BITS_PER_BYTE * size, 0). Since GENMASK(h, l) includes bit h , this produces a m...

0.00168EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/11 7:46 p.m.7 views

EUVD-2026-76663

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handlein and handleout in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITSPERBYTE size, 0; GENMASKh, l includes bit h. For size=1 INB, this produces GENMASK8, 0 = 0x1FF 9 bits inste...

0.00168EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/11 7:46 p.m.28 views

CVE-2026-89751 x86/tdx: Fix off-by-one in port I/O handling

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handlein and handleout in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITSPERBYTE size, 0; GENMASKh, l includes bit h. For size=1 INB, this produces GENMASK8, 0 = 0x1FF 9 bits inste...

0.00168EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/11 7:46 p.m.6 views

CVE-2026-89751 x86/tdx: Fix off-by-one in port I/O handling

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix off-by-one in port I/O handling handlein and handleout in arch/x86/coco/tdx/tdx.c use: u64 mask = GENMASKBITSPERBYTE size, 0; GENMASKh, l includes bit h. For size=1 INB, this produces GENMASK8, 0 = 0x1FF 9 bits inste...

5.9AI score
SaveExploits0References7
EUVD
EUVD
added 2026/09/11 7:46 p.m.8 views

EUVD-2026-76638

In the Linux kernel, the following vulnerability has been resolved: lib/ucs2string.c: fix out-of-bounds read in ucs2strnlen Patch series "lib/ucs2string.c: fix out-of-bounds read in ucs2strnlen", v2. This series fixes an off-by-one out-of-bounds read in ucs2strnlen. The first patch is the real fi...

0.00168EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/11 7:46 p.m.10 views

CVE-2026-89726

CVE-2026-89726 is an off-by-one out-of-bounds read in the Linux kernel's lib/ucs2_string.c, specifically in the ucs2_strnlen() function. The root cause is that ucs2_strnlen() checks the current character before verifying whether the caller-provided maximum length has been reached. If the input is...

0.00168EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/09/11 7:46 p.m.30 views

CVE-2026-89726 lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()

In the Linux kernel, the following vulnerability has been resolved: lib/ucs2string.c: fix out-of-bounds read in ucs2strnlen Patch series "lib/ucs2string.c: fix out-of-bounds read in ucs2strnlen", v2. This series fixes an off-by-one out-of-bounds read in ucs2strnlen. The first patch is the real fi...

0.00168EPSS
SaveExploits0References8
OSV
OSV
added 2026/09/11 7:46 p.m.7 views

CVE-2026-89726 lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()

In the Linux kernel, the following vulnerability has been resolved: lib/ucs2string.c: fix out-of-bounds read in ucs2strnlen Patch series "lib/ucs2string.c: fix out-of-bounds read in ucs2strnlen", v2. This series fixes an off-by-one out-of-bounds read in ucs2strnlen. The first patch is the real fi...

6AI score
SaveExploits0References7
EUVD
EUVD
added 2026/09/11 7:46 p.m.7 views

EUVD-2026-76633

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip-samsung-dcphy: fix out-of-range maxregister The PHY register block is 64KB, so with a register stride of 4 the last accessible register sits at offset 0xfffc. maxregister names 0x10000, one register past the end of...

0.00198EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/11 7:46 p.m.26 views

CVE-2026-89679 nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix null dereference in nfsd4setattr for deleg timestamp attrs When a SETATTR request includes FATTR4WORD2TIMEDELEGACCESS or FATTR4WORD2TIMEDELEGMODIFY in the attribute bitmap, nfsd4setattr sets delegattrs=true and calls...

7.5CVSS0.00687EPSS
SaveExploits0References3
Rows per page
Query Builder