The vulnerability of the rockchip_gpioremove() function in the drivers/gpio/gpio-rockchip.c file of the Linux kernel’s GPIO driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rockchipgpioremove function in the drivers/gpio/gpio-rockchip.c file of the Linux kernel’s GPIO driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the reqsk_queue_hash_req() function in the net/ipv4/inet_connection_sock.c module of the IPv4 protocol implementation in Linux’s kernel, which allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the reqskqueuehashreq function in the net/ipv4/inetconnectionsock.c module, part of the IPv4 protocol implementation in Linux kernel, relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

The vulnerability of the .NET software platform, related to type mixing errors, allows attackers to trigger a service failure.

The vulnerability of the .NET software platform is related to type mixing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Microsoft Edge browser (based on Chromium) relates to errors in data type mixing, allowing a malicious actor to execute arbitrary code.

The vulnerability of Microsoft Edge based on Chromium is related to errors in data type mixing. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

CVE-2026-78745

An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352EDMO allows a remote attacker to execute arbitrary code via the Android Debug Bridge ADB daemon adbd...

Linux Distros Unpatched Vulnerability : CVE-2026-85042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...

The vulnerability of the qp_send_message() function in the drivers/crypto/hisilicon/sec2/sec_crypto.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qpsendmessage function in the drivers/crypto/hisilicon/sec2/seccrypto.c file of the Linux kernel cryptographic accelerator driver relates to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to...

The vulnerabilities in the net/netfilter/nf_nat_amanda.c and net/netfilter/nf_nat_sip.c modules of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the net/netfilter/nfnatamanda.c and net/netfilter/nfnatsip.c modules in the Linux operating system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity,...

The vulnerability of the isert_login_recvdone() function in the drivers/infiniband/ulp/isert/ib_isert.c module of the Linux operating system’s InfiniBand driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the isertloginrecvdone function in the drivers/infiniband/ulp/isert/ibisert.c driver of the Linux operating system’s InfiniBand module is related to incorrect assumptions about the organization of data or memory. Exploiting this vulnerability could allow a remote attacker to...

The vulnerability of the tipc_bufAppend() function in the net/tipc/msg.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tipcbufAppend function in the net/tipc/msg.c module of the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the inet_frag_queue_flush() function in the net/ipv4/inet_fragment.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the inetfragqueueflush function in the net/ipv4/inetfragment.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the sctp_sf_do_5_2_6_stale() function in the net/sctp/sm_statefuns.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sctpsfdo526stale function in the net/sctp/smstatefuns.c module of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerabilities of the functions nvmet_tcp_build_pdu_iovec() and nvmet_tcp_handle_req_failure() in the Linux kernel’s drivers/nvme/target/tcp.c module allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions nvmettcpbuildpduiovec and nvmettcphandlereqfailure in the driver/nvme/target/tcp.c module of the Linux kernel are related to error handling flaws. Exploiting these vulnerabilities allows a remote attacker to compromise the confidentiality, integrity, and...

The vulnerability of the ipip6_tunnel_xmit() function in the net/ipv6/sit.c module of the Linux kernel’s IPv6 implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipip6tunnelxmit function in the net/ipv6/sit.c module of the Linux kernel’s IPv6 implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

The vulnerability of the match_policy_in() function in the net/netfilter/xt_policy.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the matchpolicyin function in the net/netfilter/xtpolicy.c module of the netfilter component of the Linux operating system is related to an incorrect order of authentication checks before syntactic analysis and canonization. Exploiting this vulnerability could allow a remote...

The vulnerability of the sctp_process_strreset_resp() function in the net/sctp/stream.c module of the Linux operating system’s SCTP protocol implementation allows a attacker to cause a service failure.

The vulnerability of the sctpprocessstrresetresp function in the net/sctp/stream.c module of the Linux operating system’s SCTP protocol implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to cause...

The vulnerability of the bond_do_ioctl() function in the drivers/net/bonding/bond_main.c file of the Linux kernel network device driver allows a attacker to cause a service failure.

The vulnerability of the bonddoioctl function in the drivers/net/bonding/bondmain.c file of the Linux kernel network device driver is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections

A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause the server to retain HTTP/1.1 request trailers from a prior connection. Consequently, subsequent requests made over the same connection may unintentionally disclose information by reporting the previously...

ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification

A flaw was found in ruby-jwt, a Ruby implementation of the RFC 7519 OAuth JSON Web Token JWT standard. A remote attacker can exploit this vulnerability by crafting a malicious token that is accepted due to an empty key being used in the HMAC Hash-based Message Authentication Code digest calculati...