The vulnerability of the btrfs_truncate_block() function in the fs/btrfs/inode.c file of the file system module in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the btrfstruncateblock function in the fs/btrfs/inode.c file of the Btrfs file system in Linux kernels is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the mousevsc_on_receive() function in the drivers/hid/hid-hyperv.c file of the Linux kernel subsystem for user interface devices’ drivers allows a hacker to cause a service failure.

The vulnerability of the mousevsconreceive function in the drivers/hid/hid-hyperv.c file of the Linux kernel’s input device subsystem driver is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow...

The vulnerability of the snd_ymfpci_memalloc() function in the sound/pci/ymfpci/ymfpci_main.c module of the Linux kernel’s audio subsystem allows a hacker to cause a service failure.

The vulnerability of the sndymfpcimemalloc function in the sound/pci/ymfpci/ymfpcimain.c module of the Linux kernel’s audio subsystem is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

Unchecked Input for Loop Condition

Overview github.com/0xJacky/Nginx-UI/settings is a yet another Nginx Web UI Affected versions of this package are vulnerable to Unchecked Input for Loop Condition due to improper input validation in the POST /api/settings handler for the logrotate.interval field. An attacker can make the web...

Unchecked Input for Loop Condition

Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition due to improper input validation in the POST /api/settings handler for the logrotate.interval field. An attacker can make the web interface unresponsive by submitting a negative interval value, causing...

Unchecked Input for Loop Condition

Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition due to improper input validation in the POST /api/settings handler for the logrotate.interval field. An attacker can make the web interface unresponsive by submitting a negative interval value, causing...

CVE-2026-25570

A vulnerability has been identified in SICAM SIAPP SDK All versions V2.1.7. The SICAM SIAPP SDK does not perform checks on input values potentially resulting in stack overflow. This could allow an attacker to perform code execution and denial of service...

The vulnerability of the __skb_pull() function in the include/linux/skbuff.h module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the skbpull function in the include/linux/skbuff.h module of the Linux kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the svc_rdma_build_writes() function in the net/sunrpc/xprtrdma/svc_rdma_rw.c module of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the svcrdmabuildwrites function in the net/sunrpc/xprtrdma/svcrdmarw.c module of the Linux kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause ...

The vulnerability of the smsc75xx_rx_fixup() function in the drivers/net/usb/smsc75xx.c module of the Linux network adapter driver allows a hacker to cause a service failure.

The vulnerability of the smsc75xxrxfixup function in the drivers/net/usb/smsc75xx.c module of the Linux network adapter driver framework is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

The vulnerability of the ipgre_xmit() function in the net/ipv4/ip_gre.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ipgrexmit function in the net/ipv4/ipgre.c module of the Linux kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow an attacker to cause a system failure...

SUSE-SU-2026:20868-1 Security update for capstone

This update for capstone fixes the following issues: - CVE-2025-67873: Skipdata length unchecked leads to csinsn.bytes heap buffer overflow bsc1255309. - CVE-2025-68114: Unchecked vsnprintf return in SStreamconcat allows stack buffer overflow bsc1255310...

The vulnerability of the dpaa2_eth_free_tx_fd() function in the drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c module of the Ethernet adapter support driver for the Linux operating system on Freescale cores allows a hacker to cause a service failure.

The vulnerability of the dpaa2ethfreetxfd function in the drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c module of the Ethernet adapter support driver for the Linux operating system’s Freescale kernel is related to the copying of buffers without checking the size of the input data a classic...

The vulnerability of the `ice_get_module_eeprom()` function in the `drivers/net/ethernet/intel/ice/ice_ethtool.c` file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the icegetmoduleeeprom function in the drivers/net/ethernet/intel/ice/iceethtool.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attac...

The vulnerability of the f2fs_handle_failed inode() function in the fs/f2fs/inode.c file of the F2FS file system in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the f2fshandlefailed inode function in the fs/f2fs/inode.c file of the F2FS file system in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow a...

The vulnerability in the nvidia_setup_i2c_bus() function of the drivers/video/fbdev/nvidia/nv_i2c.c driver module allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information within the Linux operating system’s kernel video buffer device.

The vulnerability of the nvidiasetupi2cbus function in the drivers/video/fbdev/nvidia/nvi2c.c driver module relates to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the cp2112_xfer() function in the drivers/hid/hid-cp2112.c driver module of the Linux kernel’s input device subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cp2112xfer function in the drivers/hid/hid-cp2112.c driver of the Linux kernel’s input device subsystem relates to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...

capstone: Capstone: Memory corruption via unchecked vsnprintf return

A flaw was found in Capstone, a disassembly framework. An unchecked return value from vsnprintf within the SStreamconcat function allows a malicious input to manipulate the internal stream index. This can lead to a stack buffer underflow or overflow, potentially enabling a local attacker to achie...

The vulnerability of the fbtft_framebuffer_alloc() function in the drivers/staging/fbtft/fbtft-core.c module, which supports additional hardware devices in Linux, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the fbtftframebufferalloc function in the drivers/staging/fbtft/fbtft-core.c module, which supports additional hardware devices in Linux, stems from the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

The vulnerability of the jbd2_journal_dirtymetadata() function in the fs/jbd2/transaction.c file of the Linux kernel’s file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the jbd2journaldirtymetadata function in the fs/jbd2/transaction.c module of the Linux kernel file system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker t...