The vulnerability of the cd321x_update_work() function in the drivers/usb/typec/tipd/core.c module of the Linux operating system’s USB TypeC driver allows a hacker to cause a service failure.

The vulnerability of the cd321xupdatework function in the drivers/usb/typec/tipd/core.c module of the USB TypeC driver in the Linux operating system is related to error handling flaws. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the map_kptr_match_type() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system’s kernel, allows a hacker to trigger a service failure.

The vulnerability of the mapkptrmatchtype function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a system failure...

The vulnerability of the `create_securityfs_measurement_lists()` function in the `security/integrity/ima/ima_fs.c` module of the Linux kernel’s security subsystem allows a attacker to cause a service failure.

The vulnerability of the createsecurityfsmeasurementlists function in the security/integrity/ima/imafs.c module of the Linux kernel’s security subsystem is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the __tb_property_parse_dir() function in the drivers/thunderbolt/property.c module of the general support for USB4 and Thunderbolt driver in the Linux operating system allows a hacker to disclose protected information or cause service failures.

The vulnerability of the tbpropertyparsedir function in the drivers/thunderbolt/property.c module of the general support for USB4 and Thunderbolt driver in the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an...

The vulnerability of the Python library for working with PDF files, PyPDF, relates to the execution of a loop with an unreachable exit condition, allowing a hacker to cause a service failure.

The vulnerability of the Python library for working with PDF files, PyPDF, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the renesas_i3c_i3c_xfers() function in the drivers/i3c/master/renesas-i3c.c file of the I3C driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the renesasi3ci3cxfers function in the drivers/i3c/master/renesas-i3c.c file of the I3C driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the pcpu_init_value() function in the kernel/bpf/hashtab.c module, which is part of the BPF interpreter support for Linux kernel, allows a attacker to access protected information or cause a service failure.

The vulnerability of the pcpuinitvalue function in the kernel/bpf/hashtab.c module, which is part of the Linux kernel’s BPF interpreter support, relates to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to access protected...

The vulnerability of the bpf_prog_test_run_skb() function in the net/bpf/test_run.c module, which is part of the networking functions of the Linux operating system’s kernel, allows a hacker to cause a service failure.

The vulnerability of the bpfprogtestrunskb function in the net/bpf/testrun.c module, which implements networking functions in the Linux kernel, relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xe_display_init_early() function in the drivers/gpu/drm/xe/display/xe_display.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the xedisplayinitearly function in the drivers/gpu/drm/xe/display/xedisplay.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system...

The vulnerability of the tmigrhandle_remote_cpu() function in the kernel/time/timer_migration.c module of the Linux kernel’s timer subsystem allows a hacker to cause a service failure.

The vulnerability of the tmigrhandleremotecpu function in the kernel/time/timermigration.c module of the Linux kernel’s timer subsystem is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow a remote attacker to cause a...

The vulnerability of the rtw_is_desired_network() function in the drivers/staging/rtl8723bs/core/rtw_mlme.c module allows for unauthorized access to protected information or to cause service failures. This vulnerability exposes additional devices in the Linux operating system to potential threats.

The vulnerability of the rtwisdesirednetwork function in the drivers/staging/rtl8723bs/core/rtwmlme.c module relates to the exploitation of integer overflows. Exploiting this vulnerability could allow an attacker to gain access to protected information or cause service failures...

The vulnerability of the mptcp_established_options_dss() function in the net/mptcp/options.c module of the MPTCP protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the mptcpestablishedoptionsdss function in the net/mptcp/options.c module of the MPTCP protocol implementation in the Linux operating system is related to incorrect calculation of buffer size when processing received packets. Exploiting this vulnerability may allow a remote...

The vulnerability of the require_uniform_address_uniform() function in the drivers/gpu/drm/vc4/vc4_validate_shaders.c driver module of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the requireuniformaddressuniform function in the drivers/gpu/drm/vc4/vc4validateshaders.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote...

UBUNTU-CVE-2026-84971

Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a failed internal check that terminates the process using the library. A party able to place a suitably formed encrypted value where an application will decrypt it, or able to contro...

UBUNTU-CVE-2026-71224

A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses alloca with an untrusted inode height value from on-disk metadata without bounds validation, causing stack exhaustion and a denial of service when processing crafted GFS2 filesystem images...

PT-2026-85450

Name of the Vulnerable Software and Affected Versions Corosync affected versions not specified Description An integer overflow exists in the handling of membership commit token messages. On 32-bit systems, the length-validation check for these messages can be bypassed because the expected message...

Linux Distros Unpatched Vulnerability : CVE-2026-81666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow was found in Corosync's handling of membership commit token messages. The length- validation check for these messages can be bypassed on...

MiracleLinux 8 : php:7.4 (AXSA:2026-1772:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1772:01 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar...

OpenVPN: denial of service

OpenVPN team reports: OpenVPN 2.x allows attackers to potentially cause a denial of service against the control channel reliability layer, either by driving the reliable TLS retransmission timeout to grow without bound, or by sending acknowledgements for packets that cannot be outstanding...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libevent (UTSA-2026-106194)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106194 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent can read beyond a contiguous evbuffer region in eventtagging.c when...