2346 matches found
Astra Linux – Vulnerability in openexr
A flaw was discovered in OpenEXR’s B44 uncompression functionality in versions prior to 3.0.0-beta. An attacker who can submit a crafted file to OpenEXR could trigger shift overflows, potentially affecting the availability of the application...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Added a check for the negative value of dbl2nbperpage. l2nbperpage is log2number of blks per page, and the minimum legal value should be 0, not negative. If l2nbperpage is negative, an error will occur when it is...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Wifi: brcmfmac: A potential out-of-bounds exception has been fixed in brcmfmac.brcmffwallocrequest. This patch addresses an out-of-bounds situation that occurs in brcmfmac when the chiprev provided by the device is too large. It...
Linux Distros Unpatched Vulnerability : CVE-2026-89568
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '...
CVE-2026-89568
A flaw was found in the Linux kernel. The khopreservedmemoryreserve function, responsible for reserving memory, incorrectly calculates the size of these reservations. This issue arises because it uses a 32-bit integer for bit shifting, which limits the maximum reservation size to 2 Gigabytes GiB...
CVE-2026-89568
In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is, it wil...
DEBIAN-CVE-2026-89568
In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is, it wil...
DEBIAN-CVE-2026-89557
In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb-bblogshift in super1load In super1load, sb-bblogshift is an u8 type value loaded from on- disk superblock. It is used for badblocks API badblocksset by the following sequence, 1930 rdev-badblocks.shif...
CVE-2026-89568
In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is, it wil...
UBUNTU-CVE-2026-89568
In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is, it wil...
CVE-2026-89568
In the Linux kernel , the function kho_preserved_memory_reserve() contains a size-calculation bug. It computes the size of a memory preservation using 1 <
CVE-2026-89568 kho: fix size calculation in kho_preserved_memory_reserve()
In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is, it wil...
CVE-2026-89568
In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is, it wil...
EUVD-2026-76479
In the Linux kernel, the following vulnerability has been resolved: kho: fix size calculation in khopreservedmemoryreserve khopreservedmemoryreserve calculates the size of a preservation by doing 1 order + PAGESHIFT. Since the '1' is a 32-bit integer, it can only be shifted by 31. That is, it wil...
PT-2026-90284
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the kho preserved memory reserve function where the size of a preservation is calculated using a 32-bit integer shift operation 1 order + PAGE SHIFT. Because the...
PT-2026-90273
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow issue exists in the super 1 load function. The variable sb-bblog shift, which is an u8 type value loaded from the on-disk superblock, is used to shift the sector and...
The vulnerability of the `ieee80211_parse_tx_radiotap()` function in the `net/mac80211/tx.c` module of the `mac80211` stack implementation in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ieee80211parsetxradiotap function in the net/mac80211/tx.c module of the mac80211 stack implementation in the Linux operating system is related to an incorrect bitwise shift of a integer value. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the BPF_CALL_4() function in the net/core/filter.c module allows a hacker to compromise the privacy, integrity, and accessibility of protected information within the Linux operating system’s kernel-based networking functions.
The vulnerability of the BPFCALL4 function in the net/core/filter.c module related to the execution of kernel network functions in Linux operating systems involves a pointer shift beyond the allocated memory range. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the amdgpu_gem_op_ioctl() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c driver for AMD GPU cores in the Linux operating system’s Direct Rendering Infrastructure (DRI) allows a attacker to cause a service failure.
The vulnerability of the amdgpugemopioctl function in the drivers/gpu/drm/amd/amdgpu/amdgpugem.c driver for AMD GPU cores in the Linux operating system’s Direct Rendering Infrastructure DRI is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an...
The vulnerability of the tls_push_record() function in the net/tls/tls_sw.c module of the Linux operating system’s TLS protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the Linux operating system’s TLS implementation is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...