83 matches found
PT-2026-90442
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An off-by-one out-of-bounds read exists in the ucs2 strnlen function. The function evaluates the current character before verifying if the maximum length provided by the caller has been...
PT-2026-96343
In the Linux kernel, the following vulnerability has been resolved: lib/ucs2 string.c: fix out-of-bounds read in ucs2 strnlen Patch series "lib/ucs2 string.c: fix out-of-bounds read in ucs2 strnlen", v2. This series fixes an off-by-one out-of-bounds read in ucs2 strnlen. The first patch is the re...
EUVD-2026-66581
In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads one word ahead before checking the aligned boundary: REGL t1, SZREGt0 // load next word addi t0, t0, SZREG // advance orc.b t1, t1 bgeu...
CVE-2026-74751
A flaw was found in the Linux kernel's RISC-V Reduced Instruction Set Computer - V ZBB-optimized strnlen function. This vulnerability occurs because the strnlen loop attempts to read one word beyond the intended boundary. If the read operation crosses an unmapped memory page, it can lead to a...
SUSE CVE-2026-74751
In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads one word ahead before checking the aligned boundary: REGL t1, SZREGt0 // load next word addi t0, t0, SZREG // advance orc.b t1, t1 bgeu...
CVE-2026-74751
In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads one word ahead before checking the aligned boundary: REGL t1, SZREGt0 // load next word addi t0, t0, SZREG // advance orc.b t1, t1 bgeu...
UBUNTU-CVE-2026-74751
In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads one word ahead before checking the aligned boundary: REGL t1, SZREGt0 // load next word addi t0, t0, SZREG // advance orc.b t1, t1 bgeu...
CVE-2026-74751
In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads one word ahead before checking the aligned boundary: REGL t1, SZREGt0 // load next word addi t0, t0, SZREG // advance orc.b t1, t1 bgeu...
CVE-2026-74751 riscv: lib: Fix ZBB strnlen reading past count boundary
In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads one word ahead before checking the aligned boundary: REGL t1, SZREGt0 // load next word addi t0, t0, SZREG // advance orc.b t1, t1 bgeu...
CVE-2026-74751 riscv: lib: Fix ZBB strnlen reading past count boundary
In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads one word ahead before checking the aligned boundary: REGL t1, SZREGt0 // load next word addi t0, t0, SZREG // advance orc.b t1, t1 bgeu...
CVE-2026-74751
CVE-2026-74751 is a bug in the Linux kernel's RISC-V ZBB-optimized strnlen function. The loop loads one word ahead of the aligned boundary before performing the boundary check. When the string pointer is aligned and the count is a multiple of the word size, the loop can read a full word at exactl...
CVE-2026-74751: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads one word ahead before checking the aligned boundary: REGL t1, SZREGt0 // load next word addi t0, t0, SZREG // advance orc.b t1, t1 bgeu...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099009)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099009 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Validate buflen before strnlen in sndctleleminitenumnames sndctleleminitenumnames...
Linux Distros Unpatched Vulnerability : CVE-2026-74751
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads...
PT-2026-82131
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ZBB-optimized strnlen function within the RISC-V architecture implementation. The loop loads a word ahead of the aligned boundary before performing the boundary...
CVE-2026-72318
In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parsedfsreferrals validates that the response header and referral array fit in the received buffer, but each referral also contains string offsets supplied by the server. Those offsets a...
CVE-2026-72318
CVE-2026-72318 affects the Linux kernel CIFS/SMB path handling. The flaw arises in parse_dfs_referrals(), where string offsets in DFS referrals are not validated against the received buffer, allowing crafted referrals to cause pointers to read outside the buffer. This can lead to out-of-bounds re...
CVE-2026-72318 cifs: validate DFS referral string offsets
In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets parsedfsreferrals validates that the response header and referral array fit in the received buffer, but each referral also contains string offsets supplied by the server. Those offsets a...
Linux Distros Unpatched Vulnerability : CVE-2026-74291
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: topology: Check PCM and DAI name strings before use Topology objects store several PCM and DAI names in fixed-size UAPI arrays. Other topology parser path...
