Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2026/10/20 12:48 p.m.•20 views

CVE-2026-93067

A flaw was found in the Linux kernel's drm/bridge: tc358767 component. An issue in the tcauxtransfer function, specifically within tcauxreaddata, allows a connected DisplayPort DP AUX controller to report a read size larger than requested. This can lead to a buffer overflow when reading data into...

5.5CVSS6.1AI score0.00177EPSS
SaveExploits0References4
AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•11 views

Astra Linux – vulnerability in linux-5.10, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tc358767: Clamp the reported AUX read size to the request tcauxtransfer clamps an AUX read to the payload limit: .sizet size = mintsizet, DP Aux MAXPAYLOADBYTES - 1, msg-size; After the transfer, it replaces size with...

6.1AI score0.00177EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/09/22 4:25 p.m.•27 views

SUSE CVE-2026-93067

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tc358767: clamp the reported AUX read size to the request tcauxtransfer clamps an AUX read to the payload limit: sizet size = mintsizet, DPAUXMAXPAYLOADBYTES - 1, msg-size; After the transfer it replaces size with the...

6AI score0.00177EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/09/17 5:18 p.m.•26 views

DEBIAN-CVE-2026-93067

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tc358767: clamp the reported AUX read size to the request tcauxtransfer clamps an AUX read to the payload limit: sizet size = mintsizet, DPAUXMAXPAYLOADBYTES - 1, msg-size; After the transfer it replaces size with the...

6.2AI score0.00177EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•9 views

CVE-2026-93067: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: tc358767: clamp the reported AUX read size to the request tcauxtransfer clamps an AUX read to the payload limit: sizet size = mintsizet, DPAUXMAXPAYLOADBYTES - 1, msg-size; After the transfer it replaces size with the...

6AI score0.00177EPSS
SaveExploits0References1
Rows per page
Query Builder