OESA-2026-1762 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: net: usbnet: Fix WARNING in usbnetstartxmit/usbsubmiturb The syzbot fuzzer identified a problem in the usbnet driver: usb 1-1: BOGUS urb xfer, pipe 3 != type 1...

Linux kernel IOMMU Driver Heap Buffer Overflow DoS

The vulnerability of the mtkiommuprobe function in the drivers/iommu/mtkiommu.c file of the Linux IOMMU driver module is related to the lack of checking of the return value. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux drivers/counter/interrupt-cnt.c Heap Buffer Overflow DoS

The vulnerability of the interruptcntprobe function in the drivers/counter/interrupt-cnt.c module of the Linux operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Linux kernel cryptographic accelerator driver Heap Buffer Overflow DoS

The vulnerability of the hpreprobe function in the drivers/crypto/hisilicon/hpre/hpremain.c source file of the Linux kernel’s cryptographic accelerator driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a hacker to...

Linux kernel DMA driver module Heap Buffer Overflow DoS

The vulnerability of the opmapdmaprobe function in the drivers/dma/ti/omap-dma.c file of the Linux kernel’s DMA driver module is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to compromise the confidentialit...

Linux kernel IOMMU Driver Heap Buffer Overflow DoS

The vulnerability of the fslpamuprobe function in the drivers/iommu/fslpamu.c file of the Linux kernel’s IOMMU driver is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-32705

PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, the BST telemetry probe writes a string terminator using a device-provided length without bounds. A malicious BST device can report an oversized devnamelen, causing a stack overflow in the driver and crashing the task or...

CVE-2025-15608

This vulnerability in AX53 v1 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a stack-based buffer overflow that causes the affected service to crash and, under specific conditions, may enable remote code execution throug...

CVE-2026-30957

OneUptime is a solution for monitoring and managing online services. Prior to 10.0.21, OneUptime Synthetic Monitors allow a low-privileged authenticated project user to execute arbitrary commands on the oneuptime-probe server/container. The root cause is that untrusted Synthetic Monitor code is...

CVE-2026-33329

FileRise is a self-hosted web file manager / WebDAV server. From version 1.0.1 to before version 3.10.0, the resumableIdentifier parameter in the Resumable.js chunked upload handler UploadModel::handleUpload is concatenated directly into filesystem paths without any sanitization. An authenticated...

CVE-2026-33396 OneUptime has sandbox escape in Synthetic Monitor Playwright runtime allows project members to execute arbitrary commands on Probe

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.35, a low-privileged authenticated user ProjectMember can achieve remote command execution on the Probe container/host by abusing Synthetic Monitor Playwright script execution. Synthetic monitor code is...

CVE-2026-33396

OneUptime prior to 10.0.35 allows a low-privileged authenticated user (ProjectMember) to escape sandbox in Synthetic Monitor Playwright runtime and execute arbitrary commands on the Probe container/host. The sandbox denial-list omits blocking _browserType and launchServer, enabling traversal via ...

EUVD-2026-16189

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.35, a low-privileged authenticated user ProjectMember can achieve remote command execution on the Probe container/host by abusing Synthetic Monitor Playwright script execution. Synthetic monitor code is...

CVE-2026-33396 OneUptime has sandbox escape in Synthetic Monitor Playwright runtime allows project members to execute arbitrary commands on Probe

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.35, a low-privileged authenticated user ProjectMember can achieve remote command execution on the Probe container/host by abusing Synthetic Monitor Playwright script execution. Synthetic monitor code is...

CVE-2026-33396 OneUptime has sandbox escape in Synthetic Monitor Playwright runtime allows project members to execute arbitrary commands on Probe

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.35, a low-privileged authenticated user ProjectMember can achieve remote command execution on the Probe container/host by abusing Synthetic Monitor Playwright script execution. Synthetic monitor code is...

net: phy: register phy led_triggers during probe to avoid AB-BA deadlock

...

Linux imx8mn_clocks_probe Heap Buffer Overflow DoS

The vulnerability of the imx8mnclocksprobe function in the drivers/clk/imx/clk-imx8mn.c file of the Linux operating system’s Samsung Exynos processor controller driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux MMC/SD/SDIO Card Driver Heap Buffer Overflow DoS

The vulnerability of the amdprobe function in the drivers/mmc/host/sdhci-pci-core.c file of the MMC/SD/SDIO card driver in the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel TCC Timer Probe DoS

The vulnerability of the ttctimerprobe function in the drivers/clocksource/timer-cadence-ttc.c module of the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

STMicroelectronics Ethernet Adapter Heap Buffer Overflow DoS

The vulnerability of the tegraeqosprobe function in the drivers/net/ethernet/stmicro/stmmac/dwmac-dwc-qos-eth.c file of the Ethernet adapter support driver from STMicroelectronics’ Linux operating system is related to the use of insufficiently random values. Exploiting this vulnerability could...