CVE-2026-98631

In the Linux kernel, the following vulnerability has been resolved: xsk: Use a 32-bit compare in xskmapgenlookup xskmapgenlookup loads a u32 key and compares it with maxentries using BPFJMPIMM. BPF immediates are sign-extended to 64 bits, so a maxentries value of 0x80000000 or higher becomes a...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210ahub: Validates the written enum value. The tegraahubputvalueenum function reads e-valuesitem0 before checking whether item0 is within the enum item range. As a result, the existing check happens too late,...

UBUNTU-CVE-2026-89721

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip-samsung-dcphy: fix out-of-range maxregister The PHY register block is 64KB, so with a register stride of 4 the last accessible register sits at offset 0xfffc. maxregister names 0x10000, one register past the end of...

PT-2026-90437

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rockchip-samsung-dcphy PHY driver where the max register is incorrectly defined as 0x10000. Since the PHY register block is 64KB with a register stride of 4, the...

SUSE CVE-2026-74292

In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210ahub: Validate written enum value tegraahubputvalueenum reads e-valuesitem0 before checking whether item0 is within the enum item range. The existing check therefore happens too late to prevent an out-of-rang...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104574)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104574 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210ahub: Validate written enum value tegraahubputvalueenum reads e-valuesitem0...

CVE-2026-74292: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: tegra: tegra210ahub: Validate written enum value tegraahubputvalueenum reads e-valuesitem0 before checking whether item0 is within the enum item range. The existing check therefore happens too late to prevent an out-of-rang...

AZL-89664 CVE-2026-46303 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rockcontinue reads rs-contextent verbatim from the Rock Ridge CE record and passes it to sbbread without checking that the block number is within the mounted I...

AZL-83273 CVE-2026-31449 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved: ext4: validate pidx bounds in ext4extcorrectindexes ext4extcorrectindexes walks up the extent tree correcting index entries when the first extent in a leaf is modified. Before accessing pathk.pidx-eiblock, there is no validation...

Linux squashfs_read_xattr_id_table DoS

The vulnerability of the squashfsreadxattridtable function in the Linux kernel is related to read errors outside of the allowed range. Exploiting this vulnerability can allow an attacker to cause a service failure...

OPENSUSE-SU-2025:0039-1 Security update for stb

This update for stb fixes the following issues: Addressing the follow security issues boo1216478: CVE-2019-13217: heap buffer overflow in startdecoder CVE-2019-13218: stack buffer overflow in computecodewords CVE-2019-13219: uninitialized memory in vorbisdecodepacketrest CVE-2019-13220:...

Bentley Systems Bentley View buffer error vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View is vulnerable to an information disclosure vulnerability caused by reading out of range when parsing JT files, which can be exploited by attackers to obtain sensitive information...

Advisory ROSA-SA-2021-1911

Software: luajit 2.0.4 OS: Cobalt 7.9 CVE-ID: CVE-2020-24372 CVE-Crit: HIGH CVE-DESC: LuaJIT before 2.1.0-beta3 has out-of-range reads in ljerrrun in ljerr.c. CVE-STATUS: default CVE-REV: default...