Amazon Linux 2 : vim, --advisory ALAS2-2026-3883 (ALAS-2026-3883)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3883 advisory. Vim is an open source, command line text editor. Prior to version 9.2.0565, the updatesnapshot function in src/terminal.c copies the visible terminal screen into the scrollback buffer when a...

ROS-20260831-73-0014

The vulnerability of the metaphone function ext/standard/metaphone.c in the PHP programming language is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to trigger segmentation errors and cause service failures...

ROS-20260831-73-0016

The vulnerability of the metaphone function ext/standard/metaphone.c in the PHP programming language is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to trigger segmentation errors and cause service failures...

Amazon Linux 2 : thunderbird, --advisory ALAS2-2026-3880 (ALAS-2026-3880)

The version of thunderbird installed on the remote host is prior to 140.14.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3880 advisory. Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the...

Linux Distros Unpatched Vulnerability : CVE-2026-82631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the...

The vulnerability of the check_mem_access() function in the kernel/bpf/verifier.c module, which supports the BPF interpreter of the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the checkmemaccess function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system’s kernel, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mm_cid_do_fixuptasks_to_cpus() function in the kernel/sched/core.c module, which is part of the Linux operating system’s resource management support, allows a hacker to trigger a service failure.

The vulnerability of the mmciddofixuptaskstocpus function in the kernel/sched/core.c module, which is part of the Linux operating system’s resource management support mechanism, involves executing a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could...

The vulnerability of the wave5_vpu_remove() function in the drivers/media/platform/chips-media/wave5/wave5-vpu.c driver for multimedia devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the wave5vpuremove function in the drivers/media/platform/chips-media/wave5/wave5-vpu.c driver for multimedia devices in the Linux kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the geth_allocinst() function in the drivers/usb/gadget/function/fsubset.c module of the Linux operating system’s USB device driver allows a attacker to cause a service failure.

The vulnerability of the gethallocinst function in the drivers/usb/gadget/function/fsubset.c file of the Linux USB device driver module is related to errors during link counters updates. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the __ufshcd_wl_suspend() function in the drivers/ufs/core/ufshcd.c file, which is part of the UFS (Universal Flash Storage) support for host controllers in Linux operating systems, allows a attacker to cause a service failure.

The vulnerability of the ufshcdwlsuspend function in the drivers/ufs/core/ufshcd.c file, which is part of the UFS Universal Flash Storage support for host controllers in Linux operating systems, relates to the activation of web functions from an unreliable source. Exploitation of this vulnerabili...

The vulnerability of the amdgpu_userq_wait_ioctl() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c driver of the Direct Rendering Infrastructure (DRI) for AMD GPU cores in the Linux operating system allows a attacker to compromise the accessibility of protected information.

The vulnerability of the amdgpuuserqwaitioctl function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserqfence.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to incorrect input validation. Exploiting this vulnerability could allow a...

The vulnerability of the __acpi_processor_start() function in the drivers/acpi/processor_driver.c file of the ACPI driver (an extended configuration and power management interface) in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the acpiprocessorstart function in the drivers/acpi/processordriver.c file of the ACPI driver an extended configuration and power management interface for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the nat_keepalive_send() function in the xfrm component of the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of the natkeepalivesend function in the xfrm component of the Linux operating system’s kernel is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the hx9023s_set_samp_freq() function in the drivers/iio/proximity/hx9023s.c driver for various types of built-in kernel sensors in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hx9023ssetsampfreq function in the drivers/iio/proximity/hx9023s.c driver for various types of built-in kernel sensors in the Linux operating system is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow a...

The vulnerability of the ext4_mb_scan_groups() function in the fs/ext4/mballoc.c file of the Ext4 file system in the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the ext4mbscangroups function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system is related to the execution of a loop with an unreachable exit condition an “infinite loop”. Exploitation of this vulnerability could allow an attacker to...

The vulnerability of the `fw_mbox_index_xlate()` function in the `drivers/mailbox/mailbox.c` file of the Linux kernel’s mailbox driver module allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the fwmboxindexxlate function in the drivers/mailbox/mailbox.c file of the Linux kernel’s mailbox driver module is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to access protected information or...

The vulnerability of the `bh1780_read_raw()` function in the `iio/light/bh1780.c` driver module of Linux’s kernel-based sensors allows a hacker to induce a service failure.

The vulnerability of the bh1780readraw function in the iio/light/bh1780.c driver module of Linux’s sensor drivers is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the mtk_smi_larb_remove() function in the drivers/memory/mtk-smi.c module of the memory controller driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mtksmilarbremove function in the driver/memory/mtk-smi.c file of the memory driver for the Linux operating system’s kernel is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the idxd_conf_device_release() function in the drivers/dma/idxd/sysfs.c module of the Intel Data Accelerator driver for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the idxdconfdevicerelease function in the drivers/dma/idxd/sysfs.c module of the Intel Data Accelerator driver for the Linux operating system is related to an unvalidated error condition. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the tipc_sk_filter_connect() function in the net/tipc/socket.c module of the TIPC protocol implementation in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tipcskfilterconnect function in the net/tipc/socket.c module of the TIPC protocol implementation in the Linux operating system is related to insufficient validation of input data when dividing by zero. Exploiting this vulnerability could allow an attacker to cause a servi...