15436 matches found
CVE-2026-46600
Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...
CVE-2026-15792
A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic...
CVE-2026-15792 Possible panic when incorrect parameters sent from frontend
A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic...
CVE-2026-15792 Possible panic when incorrect parameters sent from frontend
A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic...
CVE-2026-15792
CVE-2026-15792 affects BuildKit components (notably the LLB solver/llbsolver) where a malicious BuildKit frontend or LLB input can trigger NULL pointer dereference or slice-index panics, crashing the BuildKit daemon. Public detail across sources indicates vulnerable paths in the solver handling a...
CVE-2026-15792
A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic...
CVE-2026-15792
A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic...
EUVD-2026-46311
A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic...
CVE-2026-63933
A flaw was found in the Linux kernel's adis16260 gyroscope driver. A local user can trigger a division-by-zero error by writing a zero value to the samplingfrequency sysfs attribute. This can lead to a kernel panic, resulting in a system crash and a Denial of Service DoS...
SUSE CVE-2026-64012
In the Linux kernel, the following vulnerability has been resolved: net/sched: schsfb: Replace direct dequeue call with peek and qdiscdequeuepeeked When sfb has children eg qfq qdisc whose peek callback is qdiscpeekdequeued, we could get a kernel panic. When the parent of such qdiscs eg illustrat...
CVE-2026-63836
A flaw was found in the Linux kernel. Specifically, within the batman-adv throughput meter, an arithmetic overflow in the batadvtpupdatecwnd function can cause a division by zero. This issue can lead to a kernel panic, resulting in a Denial of Service DoS for the affected system...
CVE-2026-63819
A flaw was found in the Linux kernel's f2fs Flash-Friendly File System component. A local attacker could create a specially crafted or corrupted f2fs filesystem that, when mounted and operated upon, would trigger a sanity check failure during filesystem truncation. This issue leads to a kernel...
CVE-2026-63818
A flaw was found in the Linux kernel's F2FS Flash-Friendly File System component. This vulnerability arises from improper validation of the orphan inode entry count during the recovery process. A local attacker could craft a malicious F2FS image, which, when mounted on an unpatched system, could...
CVE-2026-64140
A flaw was found in the Linux kernel's ksmbd module. A local user, or a remote authenticated user, could trigger a null pointer dereference by reading the /proc/fs/ksmbd/files entry after an SMB2 client with a durable handle logs off. This vulnerability can lead to a kernel panic, resulting in a...
CVE-2026-64192
A flaw was found in the Linux kernel. When the BPF Berkeley Packet Filter Linux Security Module LSM is compiled into the kernel but not explicitly enabled at boot, a privileged user can create and update a BPF inode storage map. This improper initialization leads to an incorrect memory offset...
CVE-2026-64189
A flaw was found in the Linux kernel's netfilter ipset component. A race condition exists between the ipsetlist resize operation and dump operations. This can lead to a use-after-free vulnerability, where memory is accessed after it has been deallocated. A successful exploitation of this flaw cou...
PT-2026-63280
Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description The AddTime API handler fails to stop execution after an error is returned by the GetUserByName function. When a repository administrator provides a non-existent user name, the system generates...
CVE-2026-46600: Out-of-bounds Read
Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...
PT-2026-61985
Name of the Vulnerable Software and Affected Versions BuildKit affected versions not specified Description A malicious BuildKit client or frontend can craft a request that causes the BuildKit daemon to crash with a panic, which is a critical error that immediately stops the execution of a program...