7 matches found
CVE-2026-68089
In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If ppos is non-zero then simplewritetobuffer will not initialize the start of buf. Non zero values for ppos aren't going to work anyway. Test for them at the start of the function and...
EUVD-2026-55270
In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If ppos is non-zero then simplewritetobuffer will not initialize the start of buf. Non zero values for ppos aren't going to work anyway. Test for them at the start of the function and...
CVE-2026-68089
The CVE-2026-68089 entry concerns the Linux kernel iio core debugfs handling. It documents a vulnerability where uninitialized data could be exposed when *ppos is non-zero, because simple_write_to_buffer() would not initialize buf[]. The fix adds a test for non-zero *ppos at the start of the affe...
SUSE CVE-2009-2846
The eisaeepromread function in the parisc isa-eeprom component drivers/parisc/eisaeeprom.c in the Linux kernel before 2.6.31-rc6 allows local users to access restricted memory via a negative ppos argument, which bypasses a check that assumes that ppos is positive and causes an out-of-bounds read ...
Malicious code in web3-ppos (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4c548943dd0c85744c10b6f12851f7663c9e68d366526bff9b14c987ff303aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-7083 Malicious code in web3-ppos (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4c548943dd0c85744c10b6f12851f7663c9e68d366526bff9b14c987ff303aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...