gha-lab-e4a85583c3

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of ONSdigital/ras-collection-instrument a...

Linux Distros Unpatched Vulnerability : CVE-2026-89731

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl/ras: Fix cxlrchgetaerinfo out-of-bounds AER register read cxlrchgetaerinfo copies the RCH Downstream Port AER capability from the RCRB MMIO block using a...

CVE-2026-89731

In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix cxlrchgetaerinfo out-of-bounds AER register read cxlrchgetaerinfo copies the RCH Downstream Port AER capability from the RCRB MMIO block using a readl loop bounded by sizeofstruct aercapabilityregs. This struct is a...

CVE-2026-89731 cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register read

In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix cxlrchgetaerinfo out-of-bounds AER register read cxlrchgetaerinfo copies the RCH Downstream Port AER capability from the RCRB MMIO block using a readl loop bounded by sizeofstruct aercapabilityregs. This struct is a...

CVE-2026-89731 cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register read

In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix cxlrchgetaerinfo out-of-bounds AER register read cxlrchgetaerinfo copies the RCH Downstream Port AER capability from the RCRB MMIO block using a readl loop bounded by sizeofstruct aercapabilityregs. This struct is a...

CVE-2026-89731

CVE-2026-89731 is an out-of-bounds read in the Linux kernel CXL/RAS subsystem, specifically in the cxl_rch_get_aer_info() function. The function copies the RCH Downstream Port AER capability from the RCRB MMIO block using a readl() loop bounded by sizeof(struct aer_capability_regs). Since struct ...

CVE-2026-89731

In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix cxlrchgetaerinfo out-of-bounds AER register read cxlrchgetaerinfo copies the RCH Downstream Port AER capability from the RCRB MMIO block using a readl loop bounded by sizeofstruct aercapabilityregs. This struct is a...

EUVD-2026-76643

In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix cxlrchgetaerinfo out-of-bounds AER register read cxlrchgetaerinfo copies the RCH Downstream Port AER capability from the RCRB MMIO block using a readl loop bounded by sizeofstruct aercapabilityregs. This struct is a...

PT-2026-90447

In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix cxl rch get aer info out-of-bounds AER register read cxl rch get aer info copies the RCH Downstream Port AER capability from the RCRB MMIO block using a readl loop bounded by sizeofstruct aer capability regs. This...

CVE-2026-69455

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-71342

A use-after-free flaw in Windows Remote Access Connection Manager enables a locally authenticated attacker to elevate privileges, as disclosed by Microsoft. The vulnerability is rated CVSS 3.1: 7.0 (HIGH) with a vector of local attack, high complexity, low privileges required, and no user interac...

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

Windows Remote Access Connection Manager Remote Code Execution Vulnerability

Integer underflow wrap or wraparound in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network...

CVE-2026-80662

A flaw was found in the Linux kernel's Compute Express Link CXL subsystem. An incorrect definition of the CXLHEADERLOGSIZE led to an out-of-bounds read when processing RAS capability structures. This vulnerability allows a local attacker to read sensitive kernel stack memory, potentially leading ...

Linux Distros Unpatched Vulnerability : CVE-2026-80621

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: dwc: Avoid dwcpcierasdesdebugfsdeinit NULL dereference when no RAS DES capability dwcpcierasdesdebugfsinit returns success when the controller has no RAS D...

SUSE CVE-2026-80662

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXLHEADERLOGSIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXLRASCAPABILITYLENGTH; the Header Log occupies the trailing 64 bytes at offset 0x18...

AZL-98096 CVE-2026-80662 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXLHEADERLOGSIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXLRASCAPABILITYLENGTH; the Header Log occupies the trailing 64 bytes at offset 0x18...

CVE-2026-80621

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Avoid dwcpcierasdesdebugfsdeinit NULL dereference when no RAS DES capability dwcpcierasdesdebugfsinit returns success when the controller has no RAS DES capability, leaving pci-debugfs-rasdesinfo unset. The common debug...

CVE-2026-80621

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Avoid dwcpcierasdesdebugfsdeinit NULL dereference when no RAS DES capability dwcpcierasdesdebugfsinit returns success when the controller has no RAS DES capability, leaving pci-debugfs-rasdesinfo unset. The common debug...

UBUNTU-CVE-2026-80621

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Avoid dwcpcierasdesdebugfsdeinit NULL dereference when no RAS DES capability dwcpcierasdesdebugfsinit returns success when the controller has no RAS DES capability, leaving pci-debugfs-rasdesinfo unset. The common debug...