Linux kernel SFP I2C Buffer Overflow DoS

The vulnerability of the sfpi2cmdiobuscreate function in the Linux kernel’s drivers/net/phy/sfp.c module is related to insufficient resource management during its existence. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux kernel xfrm_input_state_lookup Buffer Overflow

The vulnerability of the xfrminputstatelookup function in the net/xfrm/xfrmstate.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibili...

Linux fs/ocfs2/aops.c Heap Buffer Overflow DoS

The vulnerability of the ocfs2dioendiowrite function in the fs/ocfs2/aops.c component of the Linux kernel is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the iceresetallvfs function in the drivers/net/ethernet/intel/ice/ice VFlib.c file of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53325)

In the Linux kernel, the following vulnerability has been resolved: agp/amd64: Fix broken error propagation in agpamd64probe A NULL pointer dereference was observed in the AMD64 AGP driver when running in a virtualized environment e.g. qemu/kvm without a physical AMD northbridge. The crash occurs...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46294)

"In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson using Claude found a buffer overflow in dm-ioctl in the function retrievestatus: 1. The code in retrievestatus checks that the output string fits into the output buffer...

Linux netfilter ipvs TCP DoS

The vulnerability of the tcpstatetransition function in the net/netfilter/ipvs/ipvsprototcp.c component of the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploitation of this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the fiblookup function in the include/net/ipfib.h component of the Linux kernel is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

Siemens SIMATIC S7-1500 TM MFP Incorrect Synchronization (CVE-2026-23281)

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix use-after-free in lbsfreeadapter The lbsfreeadapter function uses timerdelete non-synchronous for both commandtimer and txlockuptimer before the structure is freed. This is incorrect because timerdelete does n...

cpp-httplib create_redirect_client Unauthorized Access

The vulnerability of the createredirectclient function in the cpp-httplib library is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Linux kernel raid1_read_request Heap Buffer Overflow DoS

The vulnerability of the raid1readrequest function in the drivers/md/raid1.c file of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause a service failure...

FreeRDP RDP DoS

The vulnerability of the nsccontextinitializeencode function in the RDP client FreeRDP relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux kernel trace ring buffer overflow DoS

The vulnerability of the ringbuffereventlength function in the kernel/trace/ringbuffer.c file of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the nfnatregisterfn function in the net/netfilter/nfnatcore.c component of the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality,...

FreeRDP RDP Server Replacement

The vulnerability of the freerdphttprequest function in the RDP client FreeRDP is related to errors in the certificate authentication process. Exploiting this vulnerability could allow a malicious actor to replace the RDP server remotely...

FreeRDP RDP Channel Process Failure

The vulnerability of the freerdpchannelprocess function in the RDP client FreeRDP is related to pointer arithmetic errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

AlmaLinux 9.6 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc (ALMALINUX9.6:CLSA-2026:1791841538)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791841538 advisory. - Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service DoS via the addGitSha function. An attacke...

Siemens SIMATIC S7-1500 TM MFP Deadlock (CVE-2026-23157)

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages BUG There is an internal report that over 1000 processes are waiting at the ioscheduletimeout of balancedirtypages, causing a system hang and trigger...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-45838)

In the Linux kernel, the following vulnerability has been resolved: bpf: fix end-of-list detection in cgroupstoragegetnextkey listnextentry never returns NULL -- when the current element is the last entry it wraps to the list head via containerof. The subsequent NULL check is therefore dead code...

Wireshark 1.12.x < 1.12.3 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.12.3. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.3 advisory. - Buffer underflow in the ssldecryptrecord function in epan/dissectors/packet-ssl-utils.c in Wireshark...