Lucene search
+L

11967 matches found

Debian CVE
Debian CVE
added 2026/07/25 8:49 a.m.18 views

CVE-2026-64332

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...

5.5CVSS5.7AI score0.00123EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/25 8:49 a.m.17 views

EUVD-2026-48876

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...

5.8AI score0.00123EPSS
SaveExploits0References8
CVE
CVE
added 2026/07/25 8:49 a.m.54 views

CVE-2026-64332

CVE-2026-64332 is a memory leak in the Linux kernel's USB ULPI driver. When a ULPI device registration fails early, the allocated device name is never freed, leading to gradual resource exhaustion and potential denial of service (CVSS 5.5, local/low privileges, high availability impact). The fix ...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2026/07/25 8:49 a.m.48 views

CVE-2026-64330 usb: typec: tcpm: Validate SVID index in svdm_consume_modes()

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate SVID index in svdmconsumemodes In svdmconsumemodes, the SVID value is read from pmdata-svids using pmdata-svidindex as an array index without bounds validation: paltmode-svid =...

0.00129EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/25 8:49 a.m.12 views

CVE-2026-64279 i2c: core: fix adapter deregistration race

In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter deregistration race Adapters can be looked up by their id using i2cgetadapter which takes a reference to the embedded struct device. Remove the adapter from the IDR before tearing it down during...

7.8CVSS5.7AI score
SaveExploits0References11
SUSE CVE
SUSE CVE
added 2026/07/25 12:14 a.m.12 views

SUSE CVE-2026-64230

In the Linux kernel, the following vulnerability has been resolved: regulator: tps65219: fix irqdata.rdev not being assigned Commit 64a6b577490c "regulator: tps65219: Remove debugging helper function" removed the tps65219getrdevbyname helper along with the irqdata.rdev assignment that depended on...

5.8AI score0.00121EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/25 12:00 a.m.16 views

PT-2026-64622

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the SMB client. The cifs swn notify function retrieves a witness registration by ID using the cifs swnreg idr mutex mutex, releases the mutex, and...

7.8CVSS5.8AI score0.00126EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/25 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-64492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: temperature: tmp006: use devmiiotriggerregister tmp006probe allocates the DRDY trigger...

5.9AI score0.00173EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/25 12:00 a.m.30 views

PT-2026-64763

Name of the Vulnerable Software and Affected Versions OpenRemote versions prior to 1.26.2 Description An authentication bypass exists in the console registration API. Unauthenticated attackers can update existing console assets by providing a known asset identifier. This allows the overwriting of...

9.3CVSS5.9AI score0.00426EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/25 12:00 a.m.17 views

PT-2026-64713

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the tmp006 probe function, the DRDY trigger is allocated using devm iio trigger alloc but registered using iio trigger register. Because the driver lacks a .remove callback, the trigg...

5.8AI score0.00173EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/25 12:00 a.m.18 views

PT-2026-64553

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the USB ULPI Ultra Low Power Interface component during early device registration failures. The issue arises because the allocated device name is not freed when...

5.5CVSS5.2AI score0.00123EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/25 12:00 a.m.19 views

PT-2026-64692

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free and double-free issue exists in the Bluetooth btusb component. The problem occurs when controller registration fails, and sibling interfaces are not properly released,...

5.7AI score0.00184EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/25 12:00 a.m.17 views

Linux Distros Unpatched Vulnerability : CVE-2026-64408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: bnep: pin L2CAP connection during netdev registration bnepaddconnection reads the L2CAP connection without holding the channel lock, then passes its...

8.8CVSS5.9AI score0.00262EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/25 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-64332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising...

5.5CVSS5.9AI score0.00123EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/25 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-64471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btusb: fix use-after-free on registration failure Make sure to release the sibling interfaces in case controller registration fails to avoid...

5.9AI score0.00184EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/07/24 4:20 p.m.20 views

@backstage/plugin-auth-backend: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass

Impact The allowlist matching used by the experimental dynamic client registration and client ID metadata document CIMD features in @backstage/plugin-auth-backend matched glob patterns against the full URL string. A wildcard could therefore match across URL component boundaries: a pattern such as...

4.7CVSS5.9AI score0.00201EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2026/07/24 4:16 p.m.10 views

DEBIAN-CVE-2026-64230

In the Linux kernel, the following vulnerability has been resolved: regulator: tps65219: fix irqdata.rdev not being assigned Commit 64a6b577490c "regulator: tps65219: Remove debugging helper function" removed the tps65219getrdevbyname helper along with the irqdata.rdev assignment that depended on...

5.5CVSS5.7AI score0.00121EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/07/24 4:16 p.m.18 views

CVE-2026-64244

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem-altmap after successful device registration If addmemoryblock fails at xastore under memory pressure for example, deviceunregister is called, which eventually triggers memoryblockrelease with mem-altm...

5.5CVSS5.3AI score0.00115EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/24 3:44 p.m.22 views

GHSA-QQ9H-G4JM-XGF3 Better Auth: Account takeover via pre-account hijacking on magic-link and email-OTP sign-in

Am I affected You are affected if all of the following hold: - You run a better-auth version below 1.6.22, or a 1.7.0-beta below 1.7.0-beta.10. - You enable the magic-link plugin or the email-OTP plugin. - You also enable email and password sign-up with open registration. - An account can exist a...

8.3CVSS5.8AI score0.00264EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/24 3:29 p.m.10 views

CVE-2026-64244 drivers/base/memory: set mem->altmap after successful device registration

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem-altmap after successful device registration If addmemoryblock fails at xastore under memory pressure for example, deviceunregister is called, which eventually triggers memoryblockrelease with mem-altm...

5.7AI score
SaveExploits0References9
Rows per page
Query Builder