6338 matches found
bramble v1.9.0-chromium
Bramble A password manager that keeps your secrets on your own devices. No account, no server holding your vault, no company to get breached and leak everything. You hold the vault, you hold the password, and that's it. Bramble runs where you do: Browser extension for Chromium browsers Brave,...
SUSE CVE-2026-64405
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix null ptr deref in hciabortconn hciabortconn read hciskbeventhdev-sentcmd when a connection was pending, but hdev-sentcmd can be NULL while reqstatus is still HCIREQPEND, leading to a NULL pointer dereferen...
CVE-2026-64404
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid NULL deref of conn in isoconnbigsync isoconnbigsync drops the socket lock to call hcigetroute and then re-acquires it, but dereferences isopisk-conn-hcon afterwards without re-checking that conn is still...
CVE-2026-64402
In the Linux kernel, the following vulnerability has been resolved: coresight: ultrasoc-smb: Fix OOB write in smbsyncperfbuffer When the SMB sink is used as a perf AUX sink, smbupdatebuffer calls smbsyncperfbuffer to copy hardware trace data into the perf AUX ring buffer pages. It derives pgidx =...
CVE-2026-64358
In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: cancel workqueue on release for supported platforms only Since a recent fix the mtkjpegrelease function cancels any pending or running work present in the driver workqueue using cancelworksync function. Currently...
UBUNTU-CVE-2026-64326
In the Linux kernel, the following vulnerability has been resolved: block: skip syncblockdev on surprise removal in bdevmarkdead bdevmarkdead's @surprise == true means the device is already gone. The filesystem callback fsbdevmarkdead honours this and skips syncfilesystem, but the bare block devi...
CVE-2026-64431 ntfs: avoid calling post_write_mst_fixup() for invalid index_block
In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling postwritemstfixup for invalid indexblock ntfsicxibsyncwrite calls postwritemstfixup when ntfsibwrite returns an error, intending to restore the buffer after a failed write. However, ntfsibwrite returns an erro...
CVE-2026-64404
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid NULL deref of conn in isoconnbigsync isoconnbigsync drops the socket lock to call hcigetroute and then re-acquires it, but dereferences isopisk-conn-hcon afterwards without re-checking that conn is still...
CVE-2026-64404
CVE-2026-64404 is a NULL pointer dereference in the Linux kernel's Bluetooth ISO subsystem , specifically in the iso_conn_big_sync() function. The function drops the socket lock to call hci_get_route() and re-acquires it, but dereferences iso_pi(sk)->conn->hcon without re-validating that co...
CVE-2026-64402 coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer()
In the Linux kernel, the following vulnerability has been resolved: coresight: ultrasoc-smb: Fix OOB write in smbsyncperfbuffer When the SMB sink is used as a perf AUX sink, smbupdatebuffer calls smbsyncperfbuffer to copy hardware trace data into the perf AUX ring buffer pages. It derives pgidx =...
CVE-2026-64326
In the Linux kernel, the following vulnerability has been resolved: block: skip syncblockdev on surprise removal in bdevmarkdead bdevmarkdead's @surprise == true means the device is already gone. The filesystem callback fsbdevmarkdead honours this and skips syncfilesystem, but the bare block devi...
CVE-2026-64326 block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
In the Linux kernel, the following vulnerability has been resolved: block: skip syncblockdev on surprise removal in bdevmarkdead bdevmarkdead's @surprise == true means the device is already gone. The filesystem callback fsbdevmarkdead honours this and skips syncfilesystem, but the bare block devi...
EUVD-2026-48870
In the Linux kernel, the following vulnerability has been resolved: block: skip syncblockdev on surprise removal in bdevmarkdead bdevmarkdead's @surprise == true means the device is already gone. The filesystem callback fsbdevmarkdead honours this and skips syncfilesystem, but the bare block devi...
CVE-2026-64326 block: skip sync_blockdev() on surprise removal in bdev_mark_dead()
In the Linux kernel, the following vulnerability has been resolved: block: skip syncblockdev on surprise removal in bdevmarkdead bdevmarkdead's @surprise == true means the device is already gone. The filesystem callback fsbdevmarkdead honours this and skips syncfilesystem, but the bare block devi...
bramble v0.9.5-android
Bramble A password manager that keeps your secrets on your own devices. No account, no server holding your vault, no company to get breached and leak everything. You hold the vault, you hold the password, and that's it. Bramble runs where you do: Browser extension for Chromium browsers Brave,...
PT-2026-64547
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the block layer where the bdev mark dead function fails to check the surprise variable when handling bare block devices. When surprise is set to true, it indicates the...
PT-2026-64586
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the HID letsketch driver. The letsketch probe function initializes a per-device timer inrange timer using timer setup, which is subsequently re-armed...
PT-2026-64579
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the mtk-jpeg driver, the mtk jpeg release function unconditionally calls the cancel work sync function to cancel pending or running work in the driver workqueue. However, only...
PT-2026-64625
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the Bluetooth ISO implementation. The function iso conn big sync drops the socket lock to call hci get route and subsequently re-acquires it. However...
DEBIAN-CVE-2026-64248
In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU to RCU in stopthiscpu smpsendstop parks all secondary CPUs in stopthiscpu. The function marks the CPU offline for the scheduler via setcpuonlinefalse but never informs RCU, so RCU keeps expecting a...