171545 matches found
CVE-2026-80863
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix OOB in freerdatomicresources freerdatomicresources iterates using qp-attr.maxdestrdatomic. Updating maxdestrdatomic before freeing the old array can make the free path walk past the old allocation and trigger a slab...
CVE-2026-80842
In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context brmulticasttoggleonevlan clears BRVLFLAGMCASTENABLED under br-multicastlock before stopping a VLAN's multicast context. That is the teardown handshake:...
UBUNTU-CVE-2026-80823
In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ATRREQ length against the received frame st21nfcatmrecvatrreq checks that the received ATRREQ frame is at least ST21NFCAATRREQMINSIZE and that the self-declared atrreq-length is at least sizeofstruct...
Mirth-Connect-CVE-2023-43208
CVE-2023-43208: Unauthenticated Remote Code Execution RCE in NextGen Mirth Connect This exploit leverages a critical deserialization vulnerability within Mirth Connect's XStream engine. It stems from an incomplete patch for CVE-2023-37679, enabling unauthenticated arbitrary code execution across...
net: remove WARN_ON_ONCE() from sk_mc_loop()
...
Malicious code in claims-patch-url (npm)
Source: amazon-inspector c07292652ca72654d945a2833f8cf8915ea79f1ce665a0445938ff2605394c08 [email protected] presents an empty ClaimsPatchUrl shell class in index.js and unconditionally requires./compat.js on load. On require, compat.js selects a platform-specific endpoint, downloads an opaq...
The History Is the Detector: Executing CVE Patch History, End-To-End
Public vulnerability databases collect rich information about known software flaws, including their weakness types, affected components, and related patches. Fixing commits provide the exact code changes that removed these flaws. While these records capture why the original code was unsafe, they...
Linux Distros Unpatched Vulnerability : CVE-2026-80744
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftablesoffload: suppress WARNONONCE for ENOMEM in abort path In nftflowruleoffloadabort, WARNONONCEerr is triggered on every error during rollback,...
Linux Distros Unpatched Vulnerability : CVE-2026-85504
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via...
Linux Distros Unpatched Vulnerability : CVE-2026-85052
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to read memory...
Linux Distros Unpatched Vulnerability : CVE-2026-80762
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisync: Fix accept list UAF during suspend hciupdateeventfiltersync walks hdev-acceptlist while sending a synchronous HCI command for each...
Linux Distros Unpatched Vulnerability : CVE-2026-80795
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: nci: fix out-of-bounds write in ncitargetautoactivated ncitargetautoactivated appends a target to the fixed-size array ndev-targetsNCIMAXDISCOVEREDTARGETS...
Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-500247)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-500247 advisory. - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974845 CVE-2026-80590 - x86/bugs: Make Safe-RET robust against...
RHSA-2026:62642 Red Hat Security Advisory: kpatch-patch-6_12_0-211_16_1 security update
Bulletin has no description...
RHSA-2026:62639 Red Hat Security Advisory: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update
Bulletin has no description...
RHSA-2026:62640 Red Hat Security Advisory: kpatch-patch-5_14_0-687_10_1 security update
Bulletin has no description...
RHSA-2026:62638 Red Hat Security Advisory: kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 security update
Bulletin has no description...
RHSA-2026:62637 Red Hat Security Advisory: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update
Bulletin has no description...
RHSA-2026:62558 Red Hat Security Advisory: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_143_1, and kpatch-patch-4_18_0-477_97_1 security update
Bulletin has no description...
CVE-2026-80747
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add bounds check for CRAT subtype length The CRAT parser validates that the subtype header fits within the image, but does not verify that the advertised subtype length fits. A malformed CRAT table with an oversized...