CVE-2026-64547

CVE-2026-64547 affects the Linux kernel net1080 USB network driver. The issue arises when an even packet_len is processed by net1080_rx_fixup: it reads the pad byte at skb->data[packet_len] before verifying skb->len, with packet_len only bounded by NC_MAX_PACKET, enabling a malicious NetChi...

CVE-2026-64547

In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen, net1080rxfixup reads the pad byte at skb-datapacketlen before the skb-len != packetlen check further down, and packetlen is only bound...

CVE-2026-64545

In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdpmasterredirect xdpmasterredirect dereferences the result of netdevmasterupperdevgetrcu without a NULL check, but that helper returns NULL when the receiving device has no upper-master...

CVE-2026-64540

The CVE-2026-64540 issue affects the Linux kernel usbnet driver for GeneLink GL620A. A vulnerability in genelink_rx_fixup() could allow an out-of-bounds read by splitting an aggregated RX frame and using per-packet lengths that aren’t checked against the received data, enabling a malicious GL620A...

CVE-2026-64540 usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()

In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in genelinkrxfixup genelinkrxfixup splits an aggregated RX frame into its individual packets, using a per-packet length taken from device-supplied data. That length is only bounded by...

SUSE-SU-2026:3299-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: - CVE-2026-12892: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser bsc1268971. - CVE-2026-52720: invalid check of total area instead of individual dimensions could trigger a heap out-of-bounds write bsc1268406. -...

CVE-2025-59180

Ericsson Packet Core Controller PCC versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with knowledge of the hardcoded credential can read alarm and alert information...

CVE-2025-59178

Ericsson Packet Core Controller PCC versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system...

CVE-2025-59181

Ericsson Packet Core Controller PCC versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users...

CVE-2025-59172

Ericsson Packet Core Controller PCC versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary code as root...

CVE-2025-59177

Ericsson Packet Core Controller PCC versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages...

CVE-2025-59181 Path traversal Vulnerability

Ericsson Packet Core Controller PCC versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users...

CVE-2025-59181

CVE-2025-59181 concerns the Ericsson Packet Core Controller (PCC) up to version 1.38 (prior to 1.39) in the Configuration Management component. The issue is a directory traversal vulnerability that could allow an attacker to change directory permissions, potentially denying access to legitimate u...

EUVD-2025-210516

Ericsson Packet Core Controller PCC versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users...

CVE-2025-59181 Path traversal Vulnerability

Ericsson Packet Core Controller PCC versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users...

CVE-2025-59181

Ericsson Packet Core Controller PCC versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users...

CVE-2025-59180

CVE-2025-59180 concerns Ericsson Packet Core Controller (PCC) prior to version 1.38. The vulnerability is a hardcoded credential in the alarm system. An attacker with access to the cluster and knowledge of the hardcoded credential can read alarm and alert information. The entry notes a CVSS v4.0 ...

CVE-2025-59180 Use of Hard-coded Credentials Vulnerability

Ericsson Packet Core Controller PCC versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with knowledge of the hardcoded credential can read alarm and alert information...

EUVD-2025-210515

Ericsson Packet Core Controller PCC versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with knowledge of the hardcoded credential can read alarm and alert information...

CVE-2025-59180

Ericsson Packet Core Controller PCC versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with knowledge of the hardcoded credential can read alarm and alert information...