libLAS buffer error vulnerability

LibLAS versions 1.8.1 and earlier have a buffer error vulnerability. This vulnerability arises from the point record reader truncating the schema byte size to 16 bits when calculating the point buffer size. An attacker can create a .las file with a schema exceeding 65,535 bytes, resulting in...

Beau Gunderson ip-address resource management error vulnerability

Beau Gunderson’s IP-address version prior to 10.7.4 contains a resource management error vulnerability. This vulnerability arises from functions that accept inputs containing a large number of '%' characters and invoke the Address6 constructor function. This leads to a quadratic complexity, causi...

CVE-2026-98298

A flaw was found in the Linux kernel's MMP Peripheral Direct Memory Access PDMA driver. When preparing multi-entry scatter-gather lists for Direct Memory Access DMA transfers, the driver incorrectly reads the buffer length from the initial list entry rather than the active entry being processed. ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: “drm/amd: Check if ASPM is enabled from the PCIe subsystem” has been reverted. This reversion is associated with the commit 7294863a6f01248d72b61d38478978d638641bee. This commit was erroneously applied again after the commit...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Fixed the mismatch between power and frequency. During DPU runtime suspension, calling devpmoppsetratedev, 0 lowers the voltage of the MMCX rail to MINSVS, while the core’s clock frequency remains at its original...

kernel: crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()

A flaw was found in the Linux kernel's crypto QAT QuickAssist Technology module. A race condition exists during the teardown of Virtual Function to Physical Function VF2PF work in the adfdisablesriov function. This allows a concurrently scheduled or already queued worker to attempt to access memo...

PT-2026-98021

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the PCI altera component when stopping and removing a root bus. The issue occurs when the pci rescan remove lock lock is not held, allowing concurrent rescan o...

PT-2026-98022

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the PCI iproc component when stopping and removing a root bus. The failure to hold the pci rescan remove lock lock during this process allows concurrent rescan...

PT-2026-97944

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fs-integrity component of the block layer where the system fails to properly check BIP CHECK flags before generating or verifying Protection Information PI. This...

PT-2026-96156

Name of the Vulnerable Software and Affected Versions Intel SEDI IPM affected versions not specified Description The Intel SEDI IPM driver contains an out-of-bounds write issue in the ipm event dispose function within drivers/ipm/ipm sedi.c. The driver processes inbound message interrupts by...

PT-2026-94497

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue exists in the NFSv4/flexfiles component when interacting with NFSv4.0 data servers. The system incorrectly assumes that the data server client has a session, whi...

EUVD-2026-80235

A low-privileged remote attacker can exploit improper authorization in the /index.php/attacheddevicestab/doupload endpoint to upload IODD files to the device, potentially altering device behavior or causing system crashes...

CVE-2026-27552 Unauthorized IODD File Upload due to Improper Authorization

A low-privileged remote attacker can exploit improper authorization in the /index.php/attacheddevicestab/doupload endpoint to upload IODD files to the device, potentially altering device behavior or causing system crashes...

PT-2026-93345

A low-privileged remote attacker can exploit improper authorization in the /index.php/attached devices tab/do upload endpoint to upload IODD files to the device, potentially altering device behavior or causing system crashes...

PT-2026-69447

Name of the Vulnerable Software and Affected Versions GNU Emacs for Android affected versions not specified Description Improper validation of table header input occurs in the sfnt read table directory function within src/sfnt.c. An incorrect comparison variable during the read-length check allow...

CVE-2026-63879

A flaw was found in the Linux kernel, specifically within the drm/amdgpu component. This vulnerability arises from incorrect handling of a notifier sequence in the amdgpuhmmrangegetpages function, where the sequence can be read more than once. This can lead to the system processing invalid memory...

kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...

MongoDB Server code-related vulnerabilities

MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a code vulnerability in MongoDB Server, which stems from the 2dsphere...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the reuse of a memory block released by the ofunittestchangeset function, potentially leading to...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from RTNL assertion warnings in the txgbe driver, potentially leading to system crashes...