289 matches found
CVE-2015-8710
Reproducer Kudos to Mike Dalessio, Francois Chagnon, Florian Weingarten and Jun Kokatsu. See BZ 746048 Building on Linux $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2 -DLIBXML2INCLUDEDIR=/path/to/your/sources/libxml2-2.9.1/include/ $ make...
CVE-2025-5419
CVE-2025-5419 An uninitialized read vulnerability by incorrect Turboshaft Store-Store Elimination in V8. This repository contains analysis and stablized exploit to escalate this vulnerability to achieve in-V8-sandbox Arbitrary Read / Write, AddressOf & FakeObject primitives. Analysis:...
CLSA-2026-1792402249 webkit2gtk3: Fix of 4 CVEs
CVE-2026-91747: use-after-free in the Skia GPU glyph atlas after a partial atlas update - CVE-2026-91740: uninitialized GPU resource read after a failed render task in Skia - CVE-2026-91733: missing flush failure handling in the Skia GPU backend - CVE-2026-17771: uninitialized texture padding...
CVE-2026-98702
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a received CSA frame on a non-6 GHz link. It warns for this unsupported width but...
UBUNTU-CVE-2026-98702
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a received CSA frame on a non-6 GHz link. It warns for this unsupported width but...
CVE-2026-98702
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a received CSA frame on a non-6 GHz link. It warns for this unsupported width but...
EUVD-2026-103956
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a received CSA frame on a non-6 GHz link. It warns for this unsupported width but...
CVE-2026-98702 wifi: mac80211: reject invalid 320 MHz CSA bandwidth
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a received CSA frame on a non-6 GHz link. It warns for this unsupported width but...
CVE-2026-98702 wifi: mac80211: reject invalid 320 MHz CSA bandwidth
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a received CSA frame on a non-6 GHz link. It warns for this unsupported width but...
CVE-2026-98702
The Linux kernel contains a vulnerability in the wifi: mac80211 component where the HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a CSA frame on a non-6 GHz link. The system warns about the unsupported width but proceeds with an uninitialized vht_operation.ch...
CVE-2026-98702: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a received CSA frame on a non-6 GHz link. It warns for this unsupported width but...
PT-2026-116921
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mac80211 wifi component where the HT/VHT channel definition validator fails to properly handle a 320 MHz bandwidth indication from a received Channel Switch...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Added parameter validation for packet data. Syzbot reported a bug involving uninitialized values in nciinitreq. This bug was introduced through the commit 5aca7966d2a7 “Merge tag...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Correctly check for the presence of LSNLATYPEDGID The netlink response for RDMANLLSOPIPRESOLVE must always contain an LSNLATYPEDGID attribute; if it is missing, it is considered invalid. Properly utilize the nl parsing...
Astra Linux – Vulnerability in Qemu
In QEMU, the softmmu/physmem.c file, versions up to 7.0.0, can perform an uninitialized read on the translatefail path, resulting in an ioreadx or iowritex crash. NOTE: A third-party report states that the “Non-virtualization Use Case” described in the qemu.org reference applies here. In other...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: netrom: Check the buffer length before accessing it. Syzkaller reports an issue where an uninit value is read from ax25cmp when sending raw messages through the ieee802154 implementation...
Astra Linux – Vulnerability in Firefox, Thunderbird
When reading a file, an uninitialized value might have been used as the read limit. This vulnerability affects Firefox 113, Firefox ESR 102.11, and Thunderbird 102.11...
CLSA-2026-1790805563 webkit2gtk3: Fix of 7 CVEs
CVE-2026-91747: use-after-free in the Skia GPU glyph atlas after a partial atlas update - CVE-2026-91740: uninitialized GPU resource read after a failed render task in Skia - CVE-2026-91733: missing flush failure handling in the Skia GPU backend - CVE-2026-17771: uninitialized texture padding...
Linux Distros Unpatched Vulnerability : CVE-2026-94056
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...