83 matches found
CVE-2026-10677
The CONFIGUSERSPACE syscall verifier zvrfykpoll in kernel/poll.c allocates a kernel-side copy of the user-supplied kpollevent via zthreadmalloc and then validates each event's object handle. Before this fix, validation used KOOPSKSYSCALLOBJ... inline inside the loop, which kills the calling threa...
CVE-2026-10677
The CVE concerns Zephyr’s CONFIG_USERSPACE verifier z_vrfy_k_poll() in kernel/poll.c, where a user-supplied k_poll_event[] is copied to kernel space and validated. Previously, an inline K_OOPS(K_SYSCALL_OBJ(...)) inside the loop could leak the allocation when a forged object handle was encountere...
CVE-2026-10677 Kernel heap memory leak in `z_vrfy_k_poll()` lets an unprivileged user thread exhaust the kernel resource pool
The CONFIGUSERSPACE syscall verifier zvrfykpoll in kernel/poll.c allocates a kernel-side copy of the user-supplied kpollevent via zthreadmalloc and then validates each event's object handle. Before this fix, validation used KOOPSKSYSCALLOBJ... inline inside the loop, which kills the calling threa...
EUVD-2026-46446
The CONFIGUSERSPACE syscall verifier zvrfykpoll in kernel/poll.c allocates a kernel-side copy of the user-supplied kpollevent via zthreadmalloc and then validates each event's object handle. Before this fix, validation used KOOPSKSYSCALLOBJ... inline inside the loop, which kills the calling threa...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003997)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003997 advisory. Memory leaks in createresourcepool functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003780)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003780 advisory. Memory leaks in createresourcepool functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000445)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000445 advisory. Memory leaks in createresourcepool functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service...
kernel: cifs: Fix xid leak in cifs_ses_add_channel()
A transaction ID xid leak was found in the CIFS/SMB filesystem. When adding a new channel fails, the allocated xid is not freed, leading to gradual exhaustion of the xid pool...
EUVD-2019-0863
Malware in sbrugna...
EUVD-2017-3679
Malware in sbrugna...
EUVD-2019-8721
Malware in sbrugna...
EUVD-2025-9511
Malicious code in bioql PyPI...
EUVD-2025-14566
Malicious code in bioql PyPI...
EUVD-2022-49475
Malicious code in bioql PyPI...
EUVD-2025-10184
Malicious code in bioql PyPI...
Intel Processors Denial of Service Vulnerability
Intel Processors is a family of processors produced by Intel Corporation, covering a wide range of laptop, desktop, workstation, and server applications, providing basic to professional-level performance support. A denial of service vulnerability exists in Intel Processors, which stems from an...
Security update for microcode_ctl
This update for microcodectl fixes the following issues: Intel CPU Microcode was updated to the 20250512 release bsc1243123 CVE-2024-28956: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel Processors may allow an authenticated use...
OESA-2025-1528 microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via...
