CVE-2026-75421

A flaw was found in aria2. This stack-buffer-underflow vulnerability, located in the IOFile::getLine function, could allow an attacker to cause a denial of service or potentially execute arbitrary code. The vulnerability arises when the application attempts to write data before the beginning of a...

kernel: crypto: qat - validate RSA CRT component lengths

A flaw was found in the Linux kernel's QAT QuickAssist Technology crypto module. This vulnerability occurs in the RSA key parser when handling CRT Chinese Remainder Theorem components. An underflow can happen during a memory copy operation if an RSA CRT component is larger than its allocated...

CVE-2026-80626

A flaw was found in the Linux kernel's powerpc/perf component. An issue in the fslembpmudel function can lead to a preempt count underflow. This occurs when the function attempts to decrement a preemption counter without a corresponding increment, specifically when event-hw.idx is negative. On...

CVE-2026-9624: Integer Underflow (Wrap or Wraparound)

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet can cause the RSLinx® Classic service to crash due to insufficient data length validation, requiring a restart of the service to recover...

CVE-2026-9622: Integer Underflow (Wrap or Wraparound)

A denial-of-service security issue exists within RSLinx® Classic. A crafted CIP packet targeting the Forward Close service can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover...

SUSE CVE-2026-72195

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound attroff in UpdateResidentValue against dataoff In doaction's UpdateResidentValue case fslog.c:3307, lrh-attroff and lrh-redolen come from the on-disk LRH. When they satisfy aoff + dlen res.dataoff, the assignment...

SUSE CVE-2026-72213

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch In allochugetlbfolio, a single hcg pointer is used for both the rsvd and non-rsvd hugetlb cgroup charges. When mapchg is set, hugetlbcgroupchargecgrouprsvd stores the...

SUSE CVE-2026-72225

In the Linux kernel, the following vulnerability has been resolved: jbd2: fix integer underflow in jbd2journalinitializefastcommit jbd2journalinitializefastcommit validates journal capacity by checking journal-jlast - numfcblks JBD2MINJOURNALBLOCKS. Both jlast and numfcblks are unsigned, so when...

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow

A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the blockrem variable, occurs when a user opens a specially crafted .psd image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource...

USN-8707-1: openCryptoki vulnerabilities

It was discovered that primitive decoders in openCryptoki produced integer underflows when the encoded length was zero. An attacker could possibly use this issue to trigger out-of-bounds reads. CVE-2026-40253 It was discovered that openCryptoki incorrectly handled symlinks. An attacker in the...

USN-8707-1 opencryptoki vulnerabilities

It was discovered that primitive decoders in openCryptoki produced integer underflows when the encoded length was zero. An attacker could possibly use this issue to trigger out-of-bounds reads. CVE-2026-40253 It was discovered that openCryptoki incorrectly handled symlinks. An attacker in the...

FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling

A flaw was found in FreeRDP. A remote attacker, by sending a specially crafted Remote Desktop Protocol RDP packet, could trigger a heap buffer overflow in the server-side RAIL channel handler. This vulnerability, caused by an integer underflow, allows the attacker to corrupt memory and crash the...

Important: iscsi-initiator-utils

Issue Overview: open-iscsi: open-iscsi: Stack buffer overflow in idbm record parsing CVE-2026-18724 open-iscsi: open-iscsi: Out-of-bounds access in iscsiuio ICMPv6 echo handling CVE-2026-18725 A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network...

Linux Distros Unpatched Vulnerability : CVE-2026-80626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/perf: fix preempt count underflow in fslembpmudel fslembpmudel unconditionally calls putcpuvarcpuhwevents at the 'out:' label, but only calls the matchi...

Important: gimp

Issue Overview: A flaw was found in GIMP. A signed integer overflow vulnerability exists in the file-fli plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width and height can exceed th...

Important: iscsi-initiator-utils

Issue Overview: open-iscsi: open-iscsi: Stack buffer overflow in idbm record parsing CVE-2026-18724 open-iscsi: open-iscsi: Out-of-bounds access in iscsiuio ICMPv6 echo handling CVE-2026-18725 A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network...

Amazon Linux 2023 : iscsi-initiator-utils, iscsi-initiator-utils-devel, iscsi-initiator-utils-iscsiuio (ALAS2023-2026-2120)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2120 advisory. open-iscsi: open-iscsi: Stack buffer overflow in idbm record parsing CVE-2026-18724 open-iscsi: open-iscsi: Out-of-bounds access in iscsiuio ICMPv6 echo handling CVE-2026-18725 A flaw was foun...

Amazon Linux 2 : iscsi-initiator-utils, --advisory ALAS2-2026-3897 (ALAS-2026-3897)

The version of iscsi-initiator-utils installed on the remote host is prior to 6.2.0.874-7. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3897 advisory. open-iscsi: open-iscsi: Stack buffer overflow in idbm record parsing CVE-2026-18724 open-iscsi:...

Amazon Linux 2 : gimp, --advisory ALAS2GIMP-2026-019 (ALASGIMP-2026-019)

The version of gimp installed on the remote host is prior to 2.8.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2GIMP-2026-019 advisory. A flaw was found in GIMP. A signed integer overflow vulnerability exists in the file-fli plugin when processing FLI image...