1960 matches found
CVE-2026-58810
In multiple functions of simdctx.c, there is a possible way to disclose secure vector predicate and fault registers to non-secure callers due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for...
CVE-2026-56897
In multiple functions of attestationobject.c, there is a possible way to disclose uninitialized secure element stack memory in key attestation certificates due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction i...
CVE-2026-58810
A vulnerability exists in multiple functions of simd_ctx.c that may disclose secure vector predicate and fault registers to non-secure callers. This is caused by the use of uninitialized data , potentially leading to local information disclosure . Exploitation requires System execution privileges...
EUVD-2026-122625
In multiple functions of simdctx.c, there is a possible way to disclose secure vector predicate and fault registers to non-secure callers due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for...
EUVD-2026-122715
In multiple functions of attestationobject.c, there is a possible way to disclose uninitialized secure element stack memory in key attestation certificates due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction i...
CVE-2026-56897
A vulnerability exists in multiple functions of attestation_object.c , where uninitialized data allows for the disclosure of uninitialized secure element stack memory in key attestation certificates. This flaw can result in local information disclosure without requiring additional execution privi...
PT-2026-144529
In multiple functions of simd ctx.c, there is a possible way to disclose secure vector predicate and fault registers to non-secure callers due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for...
Astra Linux – vulnerability in linux-6.18
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix EFAULT clobber in fuseuringcommit copyfromuser returns the number of bytes not copied as an unsigned residual on failure 1..sizeofstruct fuseoutheader. fuseuringcommit stores that residual in ssizet err, sets...
USN-8974-1: PCRE2 vulnerabilities
It was discovered that PCRE2 did not correctly manage memory when processing certain patterns. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS, and Ubuntu 26.10. CVE-2026-86145...
Astra Linux – vulnerability in linux-6.12, linux-6.1
In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd When the remote proc starts while the NGD driver is being probed, or when the remote proc is already up during PDR lookup registration, or in the theoretical...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Once an interrupt is requested, the interrupt handler may run immediately. Since the IRQ handler can access channel-chbase, which is initialized only after...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpected size A remote peer could send a malformed DSS with an incorrect size, followed by another DSS or MPC + Data. In this case, the first suboption will be ignored, but certain...
PUB-A-513143345
In multiple functions of attestationobject.c, there is a possible way to disclose uninitialized secure element stack memory in key attestation certificates due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction i...
CLEANSTART-2024-VY91213 Uninitialized data in PDFium in Google Chrome prior to 90
Security vulnerability affects the qt5-qtwebengine package. Uninitialized data in PDFium in Google Chrome prior to 90...
CLEANSTART-2024-EI54121 Uninitialized data in PDFium in Google Chrome prior to 89
Security vulnerability affects the chromium package. Uninitialized data in PDFium in Google Chrome prior to 89...
CVE-2026-99189 gpio: mxc: fix race between chained IRQ handler install and probe completion
In the Linux kernel, the following vulnerability has been resolved: gpio: mxc: fix race between chained IRQ handler install and probe completion mxcupdateirqchainedhandler is called before the IRQ domain, the generic IRQ chip, and the port list entry are set up. If an interrupt arrives in that...
SUSE CVE-2026-98873
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackexpect: zero at allocation time There are occasional LLM hints wrt. leaking uninitialized data to userspace via ctnetlink. Just zero at allocation time, expectations are not frequently used these days...
Linux Distros Unpatched Vulnerability : CVE-2026-98873
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntrackexpect: zero at allocation time There are occasional LLM hints wrt. leaking uninitialized data to userspace via ctnetlink. Just zero at...
UBUNTU-CVE-2026-98929
In the Linux kernel, the following vulnerability has been resolved: macsec: initialize SecY before registering the netdevice Creating a MACsec device with MAC offload over an LRO-capable lower device triggers a warning in rtmsgifinfobuildskb when IPv4 forwarding is enabled by default...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel versions 6.5.3 through 6.6 and 6.6. This vulnerability arises because userregsetcopyin only copies count bytes; as a result, a PTRACESETREGSET request with a short iovlen causes the remaining portion of the stack buffer to remain uninitialized...