UBUNTU-CVE-2026-80570

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...

CVE-2026-80569

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer rmif54work reads a diagnostics report from the device into f54-reportdata, sizing the transfer with rmif54getreportsize: reportsize = rmif54getreportsizef5...

CVE-2026-80570

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...

UBUNTU-CVE-2026-80569

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer rmif54work reads a diagnostics report from the device into f54-reportdata, sizing the transfer with rmif54getreportsize: reportsize = rmif54getreportsizef5...

CVE-2026-80570 Input: synaptics-rmi4 - zero report size on F54 work error

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...

CVE-2026-80569 Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer rmif54work reads a diagnostics report from the device into f54-reportdata, sizing the transfer with rmif54getreportsize: reportsize = rmif54getreportsizef5...

CVE-2026-80570

CVE-2026-80570 is a heap buffer overflow in the Linux kernel's synaptics-rmi4 input driver. In rmi_f54_work(), an error during report request or command verification jumped to the error label, bypassing the abort label where f54->report_size was normally zeroed. The stale payload size then cau...

CVE-2026-80568

This Linux kernel vulnerability affects the synaptics-rmi4 input driver. When the diagnostic report type is changed mid-stream via VIDIOC_S_INPUT , the report size can change while V4L2 buffers remain allocated at their original stream-start size, leading to a heap buffer overflow if the new size...

CVE-2026-3035

creationtimestamp| type| source ---|---|--- 2026-08-26 12:30:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtydkmt2jf26...

CVE-2026-74932

creationtimestamp| type| source ---|---|--- 2026-08-26 12:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtybw3pt6m2u...

CVE-2026-77542

creationtimestamp| type| source ---|---|--- 2026-08-26 11:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mty6jmjtc42m 2026-08-27 07:00:04+00:00| seen| https://t.me/GithubRedTeam/99900 2026-08-27 16:00:04+00:00| seen| Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LI...

K000163099: Linux kernel vulnerability CVE-2026-53253

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: reject short frames before parsing A BNEP peer can send a short BNEP SDU. bneprxframe reads the packet type byte immediately and, for control packets, reads the control opcode and...

CVE-2026-75803

creationtimestamp| type| source ---|---|--- 2026-08-26 01:09:35+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mtx5jnfojs24 2026-08-26 12:35:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtydtvyhrf2r 2026-09-14 15:15:04+00:00| seen|...

CVE-2026-65905

creationtimestamp| type| source ---|---|--- 2026-08-26 01:00:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/djd7h3cbj7p5x 2026-08-26 12:30:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtydl6w76z2k 2026-08-27 16:10:04+00:00| seen|...

CVE-2026-80201

creationtimestamp| type| source ---|---|--- 2026-08-26 00:26:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ddfj5rmkf3fh3...

CVE-2026-79911

creationtimestamp| type| source ---|---|--- 2026-08-26 00:01:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwzppmknq27 2026-08-26 00:07:55+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtx23h7slr2p 2026-08-26 01:50:04+00:00| seen|...

PT-2026-82185

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the synaptics-rmi4 driver where the rmi f54 work function reads a diagnostics report into the f54-report data buffer. The transfer size is determined by rmi f54 get...

PT-2026-82186

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap buffer overflow exists in the synaptics-rmi4 driver. In the rmi f54 work function, an error during report request or command verification causes the code to bypass the logic that...

CVE-2026-75334

The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution . The vulnerability exists because the sqlResource.sql parameter, submitted via the ReportController.save() interface, is stored in the t_report_sql_resource table and subsequently embedded directly int...

Tenable Security Center Report Charting Remote Code Execution

This Metasploit module demonstrates how Tenable Security Center versions prior to 6.9.0 allow an authenticated, non-administrative user to achieve code execution as the web service account tns through report generation. This module requires Metasploit: https://metasploit.com/download Current...