PT-2026-2505

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the fsl-cpm driver within the Linux kernel related to handling transfer sizes during SPI communication. A commit intended to optimize large transfers by switching to...

Shelly Pro 3EM 缓冲区错误漏洞

Shelly Pro 3EM is a three-phase energy meter from Shelly USA. A buffer error vulnerability exists in Shelly Pro 3EM versions prior to 1.4.4, which stems from an out-of-bounds read that could result in an over-read of the buffer...

The vulnerability of the get_link_hash_entry() function in the GNU Binutils development environment allows a hacker to gain enhanced privileges.

The vulnerability of the getlinkhashentry function in the GNU Binutils development environment is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to increase their privileges...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49995)

tipc: vulnerability due to a potential buffer overrun when copying medianame and ifname to nameparts, which may be prevented by using strscpy to avoid overwriting the destination buffer. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49971)

drm/amd/display: dml2coresharedmodesupport and dmlcoremodesupport access the third element of dummyboolean, for example: hwdebug5 = &s-dummyboolean. Any assignment to hwdebug5 would cause an OVERRUN. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

The vulnerability of the arch_syncKernel_mappings() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the archsynckernelmappings function in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the strscpy() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the strscpy function in the Linux operating system’s kernel is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the batadv_nc_skb_decode_packet() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the batadvncskbdecodepacket function in the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Mozilla Firefox and Thunderbird browsers relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Mozilla Firefox and Thunderbird browsers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Siemens SIMATIC S7-1500 Off-by-one Error (CVE-2022-3821)

An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in formattimespan, leading to a Denial of Service. This plugin only works with Tenable.ot. Please visit...

The vulnerability of Mozilla Firefox’s JavaScript Engine component allows a hacker to execute arbitrary code.

The vulnerability of Mozilla Firefox’s JavaScript Engine component is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Siemens SIMATIC S7-1500 Out-of-bounds Write (CVE-2023-34319)

The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many piece...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990875)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990875 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check numvalidsets before accessing readerwmsets WHY & HOW numvalidsets needs to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990844)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990844 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check msgid before processing transcation WHY & HOW HDCPMESSAGEIDINVALID -1 is n...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989875)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989875 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip finding free audio for unknown engineid WHY ENGINEIDUNKNOWN = -1 and can no...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990245)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990245 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check pipe offset before setting vblank pipectx has a size of MAXPIPES so checki...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-990029)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990029 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip finding free audio for unknown engineid WHY ENGINEIDUNKNOWN = -1 and can no...

ROS-20251105-04

A vulnerability in the debugtypesamep function of the objdump component of the GNU Binutils development tool is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability of the elfgcsweep...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989851)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989851 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index msgid before read or write WHAT msgid is used as an array index and ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990376 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index msgid before read or write WHAT msgid is used as an array index and ...