CVE-2026-112897

A flaw was found in Pillow. This flaw can lead to information disclosure when handling compressed Tagged Image File Format TIFF images. During incomplete decoding of image data, uninitialized buffer memory is not cleared before being converted into pixel rows. A remote attacker can exploit this...

Red Hat: CVE-2026-112897: pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding

Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of JPEG-compressed or Group 4 fax TIFF data. The decodeStrip and decodeTile buffers can be larger than the bytes written by libtiff, but Pillow conver...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: scsi: qla2xxx: Zero-initialized BSG stack buffers are used to avoid information leaks. Several BSG handlers store their requests/responses in an uninitialized 256-byte on-stack buffer uint8t bsgDMAPOOLSIZE, and fill it using...

Astra Linux – Vulnerability in libstb

stbimage is a single-file library licensed under MIT that is used for processing images. The stbigetn function reads a specified number of bytes from the context usually a file into the specified buffer. If the file stream points to the end of the file, it returns zero. There are two places where...

Information Disclosure

postgresql is vulnerable to information disclosure. The vulnerability is due to uninitialized buffer bytes being used to pad values shorter than their declared length, where SQL statements and parameter values from previous operations on the same connection can be stored in the database and expos...

CVE-2026-98325

A flaw was found in the Linux kernel's mac80211 wireless subsystem. Transmission control information within packet buffers was not initialized early enough, preventing proper cleanup and error reporting if header construction or buffer resizing fails. A local user could exploit this flaw during...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: crypto: drbg – Fix for returning success in case of failure in CTRDRBG The drbgctrGenerate function sometimes returns success when it actually fails, leaving the output buffer uninitialized. This issue has been fixed...

Rocky Linux 8 [CIQ] Security Update: cups / cups-client / cups-client-debuginfo / cups-debuginfo / etc (crlsa-2021_4393)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214393 advisory. cups: access to uninitialized buffer in ipp.c CVE-2020-10001 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note tha...

CentOS Linux 8 [TuxCare] Security Update: libssh / libssh-config / libssh-devel (CENTOS-STREAM8:CLSA-2025:1759330475)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2025:1759330475 advisory. - A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible for key...

Linux Distros Unpatched Vulnerability : CVE-2026-90300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Clear buf on error in bpfgettaskstack Both bpfgettaskstack and bpfgettaskstacksleepable helpers that use bpfgettaskstack have buf defined as...

Linux Distros Unpatched Vulnerability : CVE-2026-92520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper...

DEBIAN-CVE-2026-90300

In the Linux kernel, the following vulnerability has been resolved: bpf: Clear buf on error in bpfgettaskstack Both bpfgettaskstack and bpfgettaskstacksleepable helpers that use bpfgettaskstack have buf defined as ARGPTRTOUNINITMEM argument and we should initialize the buf on every return path...

AZL-102008 CVE-2026-90300 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Clear buf on error in bpfgettaskstack Both bpfgettaskstack and bpfgettaskstacksleepable helpers that use bpfgettaskstack have buf defined as ARGPTRTOUNINITMEM argument and we should initialize the buf on every return path...

CVE-2026-92520 bpf: Zero queue and stack outputs on lock failure

In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a...

CVE-2026-90300 bpf: Clear buf on error in __bpf_get_task_stack

In the Linux kernel, the following vulnerability has been resolved: bpf: Clear buf on error in bpfgettaskstack Both bpfgettaskstack and bpfgettaskstacksleepable helpers that use bpfgettaskstack have buf defined as ARGPTRTOUNINITMEM argument and we should initialize the buf on every return path...

CVE-2026-90300 bpf: Clear buf on error in __bpf_get_task_stack

In the Linux kernel, the following vulnerability has been resolved: bpf: Clear buf on error in bpfgettaskstack Both bpfgettaskstack and bpfgettaskstacksleepable helpers that use bpfgettaskstack have buf defined as ARGPTRTOUNINITMEM argument and we should initialize the buf on every return path...

CVE-2026-90300

CVE-2026-90300 affects the Linux kernel BPF subsystem, specifically the __bpf_get_task_stack helper used by both bpf_get_task_stack and bpf_get_task_stack_sleepable. The buffer argument is declared as ARG_PTR_TO_UNINIT_MEM, requiring initialization on every return path, but the error/fail paths w...

PT-2026-94828

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. While the empty-map error path clears the buffer, a faile...

CVE-2026-92520: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a...

CVE-2026-89859

This Linux kernel vulnerability affects the scsi: qla2xxx (QLogic Fibre Channel HBA) driver. In qla2x00_do_dport_diagnostics(), the qla_dport_diag response buffer is allocated with kmalloc_obj() (non-zeroing), but only a subset of the buffer is populated by the user request. The options and unuse...