Lucene search
+L

249287 matches found

Debian CVE
Debian CVE
added 2026/07/25 8:51 a.m.8 views

CVE-2026-64439

In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...

9.8CVSS5.9AI score0.0043EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/25 8:51 a.m.9 views

EUVD-2026-48775

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling postwritemstfixup for invalid indexblock ntfsicxibsyncwrite calls postwritemstfixup when ntfsibwrite returns an error, intending to restore the buffer after a failed write. However, ntfsibwrite returns an erro...

5.9AI score0.00123EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/25 8:51 a.m.9 views

EUVD-2026-48776

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate Dirty Page Table capacity in logreplay copylcns In the analysis pass of $LogFile journal replay, logreplay copies LCNs from each action log record into an existing Dirty Page Table DPT entry without bounding th...

5.7AI score0.00135EPSS
SaveExploits0References7
CVE
CVE
added 2026/07/25 8:51 a.m.29 views

CVE-2026-64432

Summary: CVE-2026-64432 affects the Linux kernel, specifically the ntfs3 filesystem code path used during NTFS image replay. The issue stems from validating the Dirty Page Table (DPT) capacity in log_replay() when copying LCNs; if dp->lcns_follow (capacity) is smaller than lrh->lcns_follow,...

7.8CVSS5.7AI score0.00135EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2026/07/25 8:51 a.m.11 views

CVE-2026-64431

In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling postwritemstfixup for invalid indexblock ntfsicxibsyncwrite calls postwritemstfixup when ntfsibwrite returns an error, intending to restore the buffer after a failed write. However, ntfsibwrite returns an erro...

7.8CVSS5.9AI score0.00123EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/07/25 8:51 a.m.9 views

CVE-2026-64429

In the Linux kernel, the following vulnerability has been resolved: gpio: eic-sprd: use rawspinlockt in the irq startup path sprdeicirqunmask enables the GPIO IRQ and then updates controller state through sprdeicupdate, which takes sprdeic-lock with spinlockirqsave. The callback can be reached fr...

5.7AI score0.00177EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/07/25 8:51 a.m.11 views

CVE-2026-64422

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Reject invalid net.ipv4.tcpreordering values before they reach TCP socket state. The sysctl is stored as an int but copied into the u32 tp-reordering field for new...

7.1CVSS5.8AI score0.00132EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/07/25 8:50 a.m.9 views

CVE-2026-64401

In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifsswnnotify looks up a witness registration by id under cifsswnregidrmutex, drops the mutex, and then uses the registration's cached tcon pointer. That pointer is not a...

7.8CVSS5.6AI score0.00126EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/07/25 8:50 a.m.32 views

CVE-2026-64400 ksmbd: prevent path traversal bypass by restricting caseless retry

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent path traversal bypass by restricting caseless retry ksmbdvfspathlookup enforces LOOKUPBENEATH to restrict path resolution within the share root. When a crafted path attempts to escape the share boundary using...

8.6CVSS0.00357EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/25 8:50 a.m.31 views

CVE-2026-64395

Summary: CVE-2026-64395 in the Linux kernel ksmbd exposes information disclosure via FSCTL_DUPLICATE_EXTENTS_TO_FILE. The source file is passed directly to vfs_clone_file_range() / vfs_copy_file_range() without checking the SMB access mask, enabling a handle opened with attribute access to copy c...

7.5CVSS5.8AI score0.00406EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/25 8:50 a.m.9 views

EUVD-2026-48901

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservation limit check xfsexchmapsestimateoverhead adds the bmbt and rmapbt overhead to a local resblks variable, but the final UINTMAX check still tests req-resblks. That is the reservation value from before t...

5.7AI score0.00168EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/07/25 8:50 a.m.9 views

CVE-2026-64357

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservation limit check xfsexchmapsestimateoverhead adds the bmbt and rmapbt overhead to a local resblks variable, but the final UINTMAX check still tests req-resblks. That is the reservation value from before t...

5.6AI score0.00168EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/25 8:50 a.m.8 views

EUVD-2026-48900

In the Linux kernel, the following vulnerability has been resolved: xfs: fix memory leak in xfsdqinodemetadircreate If xfsmetadircreate fails in xfsdqinodemetadircreate, the current code returns directly, leaking the allocated update and transaction state. If the subsequent commit fails, the...

5.8AI score0.00179EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/25 8:50 a.m.21 views

CVE-2026-64357

CVE-2026-64357 affects the Linux kernel XFS code: xfs_exchmaps_estimate_overhead() incorrectly allowed a reservation value to bypass the UINT_MAX check due to adding overhead to a local resblks, which then feeds xfs_trans_alloc() as an unsigned int. A fix ensures the reservation value tested agai...

5.7AI score0.00168EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/07/25 8:50 a.m.7 views

CVE-2026-64338

In the Linux kernel, the following vulnerability has been resolved: USB: misc: uss720: unregister parport on probe failure uss720probe registers a parport before reading the 1284 register used to detect unsupported Belkin F5U002 adapters. If get1284register fails, the error path drops the driver...

5.7AI score0.00177EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/07/25 8:50 a.m.9 views

CVE-2026-64334

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix hard lockup on disconnect If submitting the OOB write urb fails persistently e.g if the device is being disconnected the driver would loop indefinitely with interrupts disabled. Check for urb...

5.7AI score0.00177EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/07/25 8:49 a.m.11 views

CVE-2026-64329

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove The threaded IRQ handler ccgirqhandler calls ucsinotifycommon, which on a connector-change event calls ucsiconnectorchange and schedules connector work. In ucsiccgremove...

5.6AI score0.00177EPSS
SaveExploits0
OSV
OSV
added 2026/07/25 8:49 a.m.8 views

CVE-2026-64330 usb: typec: tcpm: Validate SVID index in svdm_consume_modes()

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate SVID index in svdmconsumemodes In svdmconsumemodes, the SVID value is read from pmdata-svids using pmdata-svidindex as an array index without bounds validation: paltmode-svid =...

5.7AI score
SaveExploits0References11
Debian CVE
Debian CVE
added 2026/07/25 8:49 a.m.9 views

CVE-2026-64318

In the Linux kernel, the following vulnerability has been resolved: partitions: aix: bound the ppcount scan to the ppe array aixpartition reads the physical volume descriptor into a fixed-size struct pvd and then scans its physical-partition-extent array: int numpps = be16tocpupvd-ppcount; ... fo...

7.1CVSS5.6AI score0.0016EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/07/25 8:49 a.m.7 views

CVE-2026-64312

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcryptaeaddone on the child AEAD request before trying to submit it through padata. If padatadoparallel returns -EBUSY, pcrypt falls back to calling the...

7.5CVSS5.7AI score0.00501EPSS
SaveExploits0
Rows per page
Query Builder