CVE-2026-98168

The Linux kernel contains a vulnerability in the SMB client component within the cifs_query_reparse_point() function. The root cause is an insufficient bounds check where the code verifies that the start pointer is within the response but fails to ensure at least 8 bytes remain for the reparse_da...

CVE-2026-98167

The Linux kernel SMB client contains a vulnerability in receive_encrypted_standard() where server->total_read incorrectly maintains the full decrypted frame size while processing sub-PDUs of a compound encrypted frame . This oversight causes cifs_handle_standard() to pass an incorrect size to ...

CVE-2026-98167 smb: client: fix server->total_read for compound encrypted PDUs

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server-totalread for compound encrypted PDUs In receiveencryptedstandard, server-totalread is left at the full decrypted frame size when walking sub-PDUs of a compound encrypted frame. As a result,...

EUVD-2026-93095

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server-totalread for compound encrypted PDUs In receiveencryptedstandard, server-totalread is left at the full decrypted frame size when walking sub-PDUs of a compound encrypted frame. As a result,...

CVE-2026-98167 smb: client: fix server->total_read for compound encrypted PDUs

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server-totalread for compound encrypted PDUs In receiveencryptedstandard, server-totalread is left at the full decrypted frame size when walking sub-PDUs of a compound encrypted frame. As a result,...

CVE-2026-98165 drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only The BAR0 fallback read path was introduced as a workaround for SR-IOV VFs where the VRAM aperture is not available during early init. Restrict this workaround to only...

CVE-2026-98165

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only The BAR0 fallback read path was introduced as a workaround for SR-IOV VFs where the VRAM aperture is not available during early init. Restrict this workaround to only...

CVE-2026-98165 drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only The BAR0 fallback read path was introduced as a workaround for SR-IOV VFs where the VRAM aperture is not available during early init. Restrict this workaround to only...

EUVD-2026-93093

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only The BAR0 fallback read path was introduced as a workaround for SR-IOV VFs where the VRAM aperture is not available during early init. Restrict this workaround to only...

CVE-2026-98165

The Linux kernel 's drm/amdgpu driver contains a vulnerability related to the BAR0 fallback read path. This path was originally implemented as a workaround for SR-IOV VFs where the VRAM aperture is unavailable during early initialization. The fix involves restricting this workaround specifically ...

path-traversal-CVE-2026-14628

पथ ट्रैवर्सल डेमो - केस स्टडी : CVE-2026-14628 पथ ट्रैवर्सल CWE-22 कमजोरी वर्ग का एक न्यूनतम, चलने योग्य प्रदर्शन, हाल ही में खोजे गए CVE-2026-14628 को एक वास्तविक दुनिया के संदर्भ बिंदु के रूप में उपयोग करते हुए। वास्तविक कमजोरी CVE-2026-14628 'NousResearch/hermes-agent' 2026.5.16 को प्रभावित कर...

CVE-2024-2887-REPORT

SSD Advisory – Google Chrome RCE المصدر: ssd-disclosure.com/ssd-advisory-google-chrome-rce الملخص ثغرة حرجة في تنفيذ التعليمات البرمجية عن بُعد في متصفح Google Chrome الإصدارات 123 وما قبلها تؤثر على معالجة أنواع جمع القمامة garbage-collection في WebAssembly WASM. يتسبب الخطأ في ارتباك الأنواع ty...

CVE-2026-94293 Missing authentication for critical function in the aas-edge-client REST API

An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints...

CVE-2026-105775

A flaw was found in vLLM. An authenticated remote attacker can send a crafted request that triggers an out-of-bounds read in the completions request handler. This issue can cause the service to crash, resulting in a Denial of Service DoS...

CVE-2026-57546 Buffer Over-read in WLAN HAL

Transient DOS when processing a continuous receive command with a zero-sized global configuration override...

CVE-2026-57546

A Buffer Over-read vulnerability exists in the WLAN HAL component. The flaw occurs during the processing of a continuous receive command when a zero-sized global configuration override is present, leading to a transient Denial of Service (DoS) . No specific software versions or remediation steps ...

CVE-2026-57546 Buffer Over-read in WLAN HAL

Transient DOS when processing a continuous receive command with a zero-sized global configuration override...

CVE-2026-105775

A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function convssmforward of the file vllm/modelexecutor/layers/mamba/mambamixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible to b...

CVE-2021-43798

CVE-2021-43798 1. सारांश Grafana एक ओपन-सोर्स प्लेटफ़ॉर्म है जो डेटा मॉनिटरिंग और प्रबंधन का समर्थन करता है। निम्नलिखित संस्करणों में, ../ जैसे विशेष वर्णों का उपयोग करके फ़ाइल पथों में हेरफेर करने की अनुमति देने वाला एक पथ ट्रैवर्सल Path Traversal दोष मौजूद है: 8.0.0 और उससे ऊपर, लेकिन 8.0.7 से...

Authorization Bypass

langgraphsdk is vulnerable to an authorization bypass. The vulnerability is due to the @auth.on.threads, @auth.on.assistants, and @auth.on.crons decorators ignoring the specified actions argument, which allows an authenticated attacker to bypass fallback permission or ownership checks and read,...