9 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-92480
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: ufs: core: Validate string descriptors The string descriptor length includes a two-byte header while the UTF-16 payload starts after it. utf16stoutf8s...
AZL-102365 CVE-2026-92480 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Validate string descriptors The string descriptor length includes a two-byte header while the UTF-16 payload starts after it. utf16stoutf8s expects a count of UTF-16 code units, not bytes. Passing the payload byt...
CVE-2026-92480
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Validate string descriptors The string descriptor length includes a two-byte header while the UTF-16 payload starts after it. utf16stoutf8s expects a count of UTF-16 code units, not bytes. Passing the payload byt...
CVE-2026-92480
CVE-2026-92480 affects the Linux kernel in the scsi ufs core subsystem. Two related out-of-bounds read issues exist in string descriptor handling: first, utf16s_to_utf8s() expects a count of UTF-16 code units but receives a byte count, which can cause it to read beyond the descriptor buffer; seco...
EUVD-2026-82101
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Validate string descriptors The string descriptor length includes a two-byte header while the UTF-16 payload starts after it. utf16stoutf8s expects a count of UTF-16 code units, not bytes. Passing the payload byt...
CVE-2026-64233 usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: hold opts-lock across XU walks in uvcfunctionbind uvcfunctionbind walks &opts-extensionunits twice without holding opts-lock: - directly, for the iExtension string-descriptor fixup loop; - indirectly, four times...
EUVD-2006-4447
Malware in sbrugna...