Lucene search
+L

9 matches found

SUSE CVE
SUSE CVE
•added 2026/09/21 4:30 p.m.•14 views

SUSE CVE-2026-90220

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Don't leak the extension cell pointer in the bounce payload The bounceerrorevent embeds the failed event in the bounce payload by pointing data.ext.ptr at it. When that event is a queued variable-length event, its own...

5.6AI score0.002EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/15 6:22 a.m.•15 views

CVE-2026-74388

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data The OSS sequencer processes the input MIDI bytes into a sequencer event to be dispatched later in sndseqossmidiputc called from sndseqossprocessevent. When it's ...

7.8CVSS0.00124EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/08/15 6:22 a.m.•17 views

CVE-2026-74388

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data The OSS sequencer processes the input MIDI bytes into a sequencer event to be dispatched later in sndseqossmidiputc called from sndseqossprocessevent. When it's ...

7.8CVSS6.3AI score0.00124EPSS
SaveExploits0References12
attackerkb
attackerkb
•added 2026/08/15 5:59 a.m.•30 views

CVE-2026-74388

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data The OSS sequencer processes the input MIDI bytes into a sequencer event to be dispatched later in sndseqossmidiputc called from sndseqossprocessevent. When it's ...

6.3AI score0.00124EPSS
SaveExploits0References4Affected Software1
SUSE CVE
SUSE CVE
•added 2026/07/25 3:58 p.m.•18 views

SUSE CVE-2026-64479

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell-ump.raw.extra word that the memcpy did not cover. The guard...

5.5CVSS5.8AI score0.00181EPSS
SaveExploits0References12
UbuntuCve
UbuntuCve
•added 2026/07/25 10:17 a.m.•17 views

CVE-2026-64479

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell-ump.raw.extra word that the memcpy did not cover. The guard...

5.8AI score0.00181EPSS
SaveExploits0References22
CVE
CVE
•added 2026/07/25 8:51 a.m.•56 views

CVE-2026-64479

CVE-2026-64479 concerns the Linux kernel ALSA sequencer, where snd_seq_event_dup() can leak 4 bytes of uninitialized kernel heap memory. The issue arises in the UMP-enabled path: when copying an incoming event into a pool cell, the code conditionally zeros cell->ump.raw.extra only if size even...

5.8AI score0.00181EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/25 12:00 a.m.•4 views

CVE-2026-64479: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell-ump.raw.extra word that the memcpy did not cover. The guard...

5.8AI score0.00181EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/07/25 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-64479

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the...

5.6AI score0.00181EPSS
SaveExploits0References3
Rows per page
Query Builder