CVE-2026-87823 zstd-jni 1.1.1 through 1.5.7-13 Out-of-Bounds Read via Direct ByteBuffer Frame-Size Methods

zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory reads via negative or overflowing offsets. Attackers can supply negative offset values near Integer.MINVALUE to read unmapped memory, causing JVM...

CVE-2026-87823

zstd-jni (Java JNI binding for Zstandard compression) versions 1.1.1 through 1.5.7-13 are vulnerable to an out-of-bounds read caused by 32-bit signed bounds checks in three direct-ByteBuffer frame-size native methods. An attacker can supply negative offset values near Integer.MIN_VALUE , causing ...

SUSE CVE-2021-46908

In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed bounds arithmetic We forbid adding unknown scalars with mixed signed bounds due to the spectre v1 masking mitigation. Hence this also needs bypassspecv1 flag instead of...

CVE-2021-46908

A flaw was found in the Linux Kernel. Adding unknown scalars with mixed signed bounds are forbidden due to the spectre v1 masking mitigation. Therefore, this needs the bypassspecv1 flag instead of allowptrleaks...

DEBIAN-CVE-2021-46908

In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed bounds arithmetic We forbid adding unknown scalars with mixed signed bounds due to the spectre v1 masking mitigation. Hence this also needs bypassspecv1 flag instead of...

CVE-2021-46908

In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed bounds arithmetic We forbid adding unknown scalars with mixed signed bounds due to the spectre v1 masking mitigation. Hence this also needs bypassspecv1 flag instead of...

CVE-2021-46908

In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed bounds arithmetic We forbid adding unknown scalars with mixed signed bounds due to the spectre v1 masking mitigation. Hence this also needs bypassspecv1 flag instead of...

CVE-2021-46908

In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed bounds arithmetic We forbid adding unknown scalars with mixed signed bounds due to the spectre v1 masking mitigation. Hence this also needs bypassspecv1 flag instead of...

CVE-2021-46908

In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed bounds arithmetic We forbid adding unknown scalars with mixed signed bounds due to the spectre v1 masking mitigation. Hence this also needs bypassspecv1 flag instead of...

UBUNTU-CVE-2021-46908

In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed bounds arithmetic We forbid adding unknown scalars with mixed signed bounds due to the spectre v1 masking mitigation. Hence this also needs bypassspecv1 flag instead of...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed bounds arithmetic We forbid adding unknown scalars with mixed signed bounds due to the spectre v1 masking mitigation. Hence this also needs bypassspecv1 flag instead of...

CVE-2021-46908 bpf: Use correct permission flag for mixed signed bounds arithmetic

In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed bounds arithmetic We forbid adding unknown scalars with mixed signed bounds due to the spectre v1 masking mitigation. Hence this also needs bypassspecv1 flag instead of...

CVE-2021-46908: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Use correct permission flag for mixed signed bounds arithmetic We forbid adding unknown scalars with mixed signed bounds due to the spectre v1 masking mitigation. Hence this also needs bypassspecv1 flag instead of...

CLSA-2022-1644933991 Fix of CVE: CVE-2021-31440, CVE-2022-0435

tipc: improve size validations for received domain records Jon Maloy CVE-2022-0435 - bpf: Fix propagation of 32 bit unsigned bounds from 64 bit bounds Yauheni Kaliuta CVE-2021-31440 - bpf: Fix propagation of 32-bit signed bounds from 64-bit bounds Yauheni Kaliuta CVE-2021-31440...

PT-2021-27196

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.7 through v5.15.10 Description The issue concerns a problem with signed bounds propagation after a specific operation in the Linux Kernel. It was introduced in version v5.7 and fixed in version v5.15.11. The actual...

PT-2021-27158

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.88 Description The issue concerns a problem with signed bounds propagation after a specific operation in the Linux Kernel. It was introduced in version v5.7 and fixed in version v5.10.88. The actual impact...

UVI-2021-1000011 bpf: Use correct permission flag for mixed signed bounds arithmetic

bpf: Use correct permission flag for mixed signed bounds arithmetic This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.16 by commit...

PT-2021-28480

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.8 through v5.11.15 Description: The issue concerns incorrect permission flags used for mixed signed bounds arithmetic in the bpf component. This problem was introduced in version v5.8 and fixed in version v5.11.16. Th...

PT-2021-28490

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.10.31 Description The issue concerns incorrect permission flags used for mixed signed bounds arithmetic in the bpf component. This problem was introduced in version v5.8 and fixed in version v5.10.32. The...

PT-2021-24496

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.8 through v5.10.31 Description: The issue concerns incorrect permission flag usage for mixed signed bounds arithmetic in the bpf component. The actual impact and potential for attacks have not been proven yet...