995 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-89574
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm array: validate array block headers on read arrayblockcheck validates blocknr and csum and nothing else, while nodecheck, next to it, has bounded the...
xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c
A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...
CVE-2026-53706 PREVAIL: ALU32 pointer arithmetic accepted without is64 gate — verifier emits false PASS for pointer-corrupting programs
PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevail eBPF verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag. Because ALU32 arithmetic zero-extends the 32-bit...
CVE-2026-53706 PREVAIL: ALU32 pointer arithmetic accepted without is64 gate — verifier emits false PASS for pointer-corrupting programs
PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevail eBPF verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag. Because ALU32 arithmetic zero-extends the 32-bit...
CVE-2026-53706 PREVAIL: ALU32 pointer arithmetic accepted without is64 gate — verifier emits false PASS for pointer-corrupting programs
PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevail eBPF verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag. Because ALU32 arithmetic zero-extends the 32-bit...
EUVD-2026-70245
PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevail eBPF verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag. Because ALU32 arithmetic zero-extends the 32-bit...
CVE-2026-53706
PREVAIL is a Polynomial-Runtime eBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4 , the verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag . Because ALU32 arithmetic zero-extends the 32-bit result, the ...
The vulnerability of the Kerberos authentication protocol, related to pointer arithmetic errors, allows attackers to induce a service denial.
The vulnerability of the Kerberos authentication protocol is related to pointer arithmetic errors. Exploiting this vulnerability can allow a malicious actor to cause a service failure...
Vulnerability of components of the Linux operating system’s kernel, net/mlx5, which allows a hacker to cause a service failure
The vulnerability of the net/mlx5 components in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-74720
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. When a scalar value is added to a pointer during certain arithmetic operations, the system fails to fully preserve the pointer's state. This inconsistency in how the pointer's origin and properties are tracked can lead t...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1, Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: Wifi: iwlwifi: mvm – Fixed a memory corruption issue A few lines above, space is allocated using kzalloc for: sizeofstruct iwlnvmdata + sizeofstruct ieee80211channel + sizeofstruct ieee80211rate mvm-nvmdata is a struct iwlnvmdata...
Astra Linux – Vulnerability in Linux
A issue was discovered in the Linux kernel through version 5.11.x. The kernel/bpf/verifier.c file contains unwanted out-of-bounds speculation during pointer arithmetic operations, which allows for side-channel attacks that circumvent Spectre mitigations and extract sensitive information from kern...
The vulnerability of the wmem_strbuf_get_str() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.
The vulnerability of the wmemstrbufgetstr function in the Wireshark network traffic analyzer is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the Linux operating system’s kernel, related to pointer arithmetic errors, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the imx8qm-hsio component of the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the imx8qm-hsio component of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the driver/platform/x86/hp/hp-bioscfg/bioscfg.h component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/platform/x86/hp/hp-bioscfg/bioscfg.h component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ceph kernel component in the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the ceph kernel component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the i2c/busses/i2c-i801.c component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the i2c/busses/i2c-i801.c component of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability in the Linux operating system’s driver/dclk/clk-renesas-pcie.c component allows a hacker to cause a service failure.
The vulnerability of the drivers/clk/clk-renesas-pcie.c component of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the Linux operating system’s kernel’s media component, which allows a hacker to cause a service failure
The vulnerability of the Linux operating system’s kernel media component is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...