167764 matches found
CVE-2026-74645
In the Linux kernel, the following vulnerability has been resolved: mm/damon/lrusort: error out for 10000 activemembp damosquotascore can trigger division by zero if the target value is zero. DAMONLRUSORT lets users set the target value for the hot memory scheme via activemembp parameter. It avoi...
CVE-2026-74614
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: read virtqueues under worker locks Commit bd50c5dc182b "vsock/virtio: add support for device suspend/resume" made the run flags transition from false to true when restore installs replacement virtqueues. The RX, TX...
CVE-2026-74593
In the Linux kernel, the following vulnerability has been resolved: schedext: Take cgrouplock first in scxcgrouplock scxcgrouplock write-locks scxcgroupopsrwsem and then takes cgrouplock, which can deadlock through kernfs: scx enable/disable cgroup rmdir cpu.weight write ------------------...
CVE-2026-59285
CVE-2026-59285...
Linux Distros Unpatched Vulnerability : CVE-2026-74632
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugememory: fix hugezeropfn race Patch series mm/hugememory: fix hugezeropfn race, v2. There is a subtle race in the reference-counted hugezerofolio...
Linux Distros Unpatched Vulnerability : CVE-2026-74682
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix OOB write on Type II inbound URBs dataepsetparams sizes each URB transfer buffer before it adds the Format Type II transfer delimiter:...
Linux Distros Unpatched Vulnerability : CVE-2026-74689
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/atm: fix slab-out-of-bounds read in vccsetsockopt vccsetsockopt contained an ineffective optlen check: if SOLEVELMATCHoptname, level && optlen !=...
Linux Distros Unpatched Vulnerability : CVE-2026-74589
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, sockmap: Fix skredir use-after-free in send verdict skpsockmsgverdict takes a socket reference for psock-skredir. tcpbpfsendverdict copies that pointer whi...
Linux Distros Unpatched Vulnerability : CVE-2026-68768
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hashcat contains a heap-based buffer overflow out-of-bounds write in the outfilewrite function in src/outfile.c. When assembling output into a fixed-size buffer...
Linux Distros Unpatched Vulnerability : CVE-2026-74709
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xsk: clear metadata pointer when no timestamp is requested User space can change metadata flags after request processing. Rereading them during completion can...
Linux Distros Unpatched Vulnerability : CVE-2026-74608
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: Fix use-after-free in cifstryaddingchannels cifstryaddingchannels takes a temporary reference to an interface before dropping ifacelock. If...
patch-diffing-in-the-dark
Patch Diffing nel Buio Una serie di articoli del blog che sfruttano l'analisi CVE e il patch diffing per scoprire nuove vulnerabilità. Come rivelato negli articoli del blog, 4 CVE sono emerse dallo studio approfondito di CVE-2021-1657. Indice Risultati da CVE-2021-1657: Parte 1 - Patch Diffing ne...
CVE-2026-56289
A flaw was found in GNU patch. This vulnerability allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted patch file. The improper validation of hunk single block of changes in diff line offsets in unified-diff input can lead to an effectively infinite processin...
CVE-2026-56288
A flaw was found in GNU patch. An attacker can exploit this by providing a specially crafted patch file, which leads to a NULL pointer dereference. This improper handling of end-of-file markers can corrupt internal data structures, causing the utility to crash. This results in a denial of service...
CVE-2026-67217
A flaw was found in cJSON. The library applies RFC 6902 JSON Patch operations non-atomically. A remote attacker, by supplying a specially crafted patch document e.g., a 'replace' operation missing its value or a 'move' operation with an unresolved destination, can cause the existing target data t...
CVE-2026-67215
A flaw was found in cJSON. A remote attacker can exploit this vulnerability by applying a specially crafted JSON Patch document that causes uncontrolled recursion, leading to stack exhaustion. This can result in a denial of service DoS by crashing the application. Mitigation To reduce the risk of...
ROOT-APP-PYPI-CVE-2025-4565 CVE-2025-4565 in protobuf - Patched by Root
Root has patched CVE-2025-4565 in the protobuf package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-53643 CVE-2025-53643 in aiohttp - Patched by Root
Root has patched CVE-2025-53643 in the aiohttp package for Root:PyPI. Multiple fixed versions available...