Linux Distros Unpatched Vulnerability : CVE-2026-89579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallba...

CVE-2026-89579 bpf: Harden bloom filter sizing and indexing on 32-bit kernels

In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallback case. First, BITSTOBYTESU32MAX is evaluated with 32-bit arithmetic...

CVE-2026-89579

In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallback case. First, BITSTOBYTESU32MAX is evaluated with 32-bit arithmetic...

EUVD-2026-76491

In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallback case. First, BITSTOBYTESU32MAX is evaluated with 32-bit arithmetic...

CVE-2026-89579

CVE-2026-89579 affects the Linux kernel's BPF bloom filter on 32-bit x86 systems. Two distinct flaws exist in bloom_map_alloc() when the computed bitmap reaches the U32_MAX fallback: (1) a 32-bit arithmetic wrap in DIV_ROUND_UP causes under-allocation of the bitmap, and (2) hash values in the ran...

CVE-2026-89579 bpf: Harden bloom filter sizing and indexing on 32-bit kernels

In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallback case. First, BITSTOBYTESU32MAX is evaluated with 32-bit arithmetic...

PT-2026-90295

In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloom map alloc has two 32-bit-specific problems when the computed bitmap reaches the U32 MAX fallback case. First, BITS TO BYTESU32 MAX is evaluated with 32-bit...

CVE-2025-62821

Microsoft HEIF Image Extensions msheifstore.dll: Source-buffer under-allocation in CopyPixels path leads to out-of-bounds read and Access Violation DoS When decoding a crafted HEIF image through WIC, the msheif codec allocates a 1-byte source buffer but later attempts to copy a very large amount ...

CVE-2026-48095

CVE-2026-48095 7-Zip es un archivador de archivos con una alta relación de compresión. Las versiones 26.00 y anteriores contienen una vulnerabilidad de desbordamiento de búfer en el montón causada por una asignación insuficiente en el búfer de flujo comprimido NTFS GetCuSize shift UB, lo que...

Linux Distros Unpatched Vulnerability : CVE-2025-70293

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to...

DEBIAN-CVE-2025-70293

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

CVE-2025-70293

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

CVE-2025-70293

CVE-2025-70293 affects Denx U-Boot before version 2026.04 . An integer overflow in the function ext4fs_get_bgdtable causes an under-allocated buffer to be passed to memcpy() , resulting in a heap buffer overflow. This can lead to arbitrary code execution , denial of service , or other unspecified...

EUVD-2025-210792

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

CVE-2025-70293

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...

Linux Distros Unpatched Vulnerability : CVE-2026-74668

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - packet: use consistent hardheaderlen in TXRING send path tpacketsnd reads dev-hardheaderlen independently for skb allocation and header construction in...

ANT-2026-G1XC2M5V · CGIF · other

other high Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-G1XC2M5V: cgif/cgiffuzzer/20251218020844unknown/ cgif's LZW encoder computes a conservative upper bound for the...

CVE-2026-41521

xrdp is an open source RDP server. Versions 0.10.6 and prior contain an integer overflow vulnerability when processing screen update messages within the vnc-any connection mode. A malicious remote VNC server can send crafted image dimensions that cause an integer overflow during memory buffer siz...

UBUNTU-CVE-2026-20215

A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in 7z file...

Important: 7zip

Issue Overview: A heap buffer overflow vulnerability GHSL-2026-140 exists in 7-Zip version 26.00, caused by an under-allocation in the NTFS compressed stream buffer GetCuSize shift UB, potentially allowing attackers to exploit this issue for arbitrary code execution or application crashes...