173809 matches found
CVE-2026-98169 smb: client: fix potential OOB read in smb3_enum_snapshots()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOB read in smb3enumsnapshots If snapshotarraysize is smaller than GMTTOKENSIZE, smb3enumsnapshots sets retdatalen to sizeofstruct smbsnapshotarray without verifying the actual length of the server's...
CVE-2026-98169
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOB read in smb3enumsnapshots If snapshotarraysize is smaller than GMTTOKENSIZE, smb3enumsnapshots sets retdatalen to sizeofstruct smbsnapshotarray without verifying the actual length of the server's...
CVE-2026-98168 smb: client: fix reparse buffer bounds in cifs_query_reparse_point()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix reparse buffer bounds in cifsqueryreparsepoint In cifsqueryreparsepoint, the start = end check before casting to struct reparsedatabuffer only ensures the start pointer is within the response. It fails to verify...
CVE-2026-98168 smb: client: fix reparse buffer bounds in cifs_query_reparse_point()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix reparse buffer bounds in cifsqueryreparsepoint In cifsqueryreparsepoint, the start = end check before casting to struct reparsedatabuffer only ensures the start pointer is within the response. It fails to verify...
EUVD-2026-93096
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix reparse buffer bounds in cifsqueryreparsepoint In cifsqueryreparsepoint, the start = end check before casting to struct reparsedatabuffer only ensures the start pointer is within the response. It fails to verify...
CVE-2026-98168
The Linux kernel contains a vulnerability in the SMB client component within the cifs_query_reparse_point() function. The root cause is an insufficient bounds check where the code verifies that the start pointer is within the response but fails to ensure at least 8 bytes remain for the reparse_da...
EUVD-2026-93095
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server-totalread for compound encrypted PDUs In receiveencryptedstandard, server-totalread is left at the full decrypted frame size when walking sub-PDUs of a compound encrypted frame. As a result,...
CVE-2026-98167
The Linux kernel SMB client contains a vulnerability in receive_encrypted_standard() where server->total_read incorrectly maintains the full decrypted frame size while processing sub-PDUs of a compound encrypted frame . This oversight causes cifs_handle_standard() to pass an incorrect size to ...
CVE-2026-98167 smb: client: fix server->total_read for compound encrypted PDUs
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server-totalread for compound encrypted PDUs In receiveencryptedstandard, server-totalread is left at the full decrypted frame size when walking sub-PDUs of a compound encrypted frame. As a result,...
CVE-2026-98167 smb: client: fix server->total_read for compound encrypted PDUs
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server-totalread for compound encrypted PDUs In receiveencryptedstandard, server-totalread is left at the full decrypted frame size when walking sub-PDUs of a compound encrypted frame. As a result,...
CVE-2026-98165
The Linux kernel 's drm/amdgpu driver contains a vulnerability related to the BAR0 fallback read path. This path was originally implemented as a workaround for SR-IOV VFs where the VRAM aperture is unavailable during early initialization. The fix involves restricting this workaround specifically ...
CVE-2026-98165 drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only The BAR0 fallback read path was introduced as a workaround for SR-IOV VFs where the VRAM aperture is not available during early init. Restrict this workaround to only...
EUVD-2026-93093
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only The BAR0 fallback read path was introduced as a workaround for SR-IOV VFs where the VRAM aperture is not available during early init. Restrict this workaround to only...
CVE-2026-98165 drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only The BAR0 fallback read path was introduced as a workaround for SR-IOV VFs where the VRAM aperture is not available during early init. Restrict this workaround to only...
CVE-2026-98165
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only The BAR0 fallback read path was introduced as a workaround for SR-IOV VFs where the VRAM aperture is not available during early init. Restrict this workaround to only...
path-traversal-CVE-2026-14628
경로 탐색 데모 - 사례 연구 : CVE-2026-14628 최근 공개된 CVE-2026-14628을 실제 사례 참조점으로 사용하여 경로 탐색CWE-22 취약점 클래스를 보여주는, 실행 가능한 최소한의 데모입니다. 실제 취약점 CVE-2026-14628은 'NousResearch/hermes-agent' 2026.5.16에 영향을 미칩니다. gateway/platforms/base.py의 extractmedia 함수는 들어오는 웹훅 페이로드에서 검증 없이 파일 시스템 경로를 구성하므로, 원격의 인증되지 않은 공격자가 의도된 미...
CVE-2024-2887-REPORT
SSD Advisory – Удалённое выполнение кода в Google Chrome Источник: ssd-disclosure.com/ssd-advisory-google-chrome-rce Краткое описание Критическая уязвимость удалённого выполнения кода в Google Chrome версии 123 и ранее, затрагивающая обработку типов сборщика мусора WebAssembly WASM. Ошибка вызыва...
CVE-2026-94293 Missing authentication for critical function in the aas-edge-client REST API
An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints...
CVE-2026-105775
A flaw was found in vLLM. An authenticated remote attacker can send a crafted request that triggers an out-of-bounds read in the completions request handler. This issue can cause the service to crash, resulting in a Denial of Service DoS...