295 matches found
CVE-2026-87043
The entropy-device random number generator in subsys/random/randomentropydevice.c returned early with -ENODEV from randget as soon as deviceisready failed, before reaching the non-cryptographic system-timer fallback further down the same function. Because zimplsysrandget returns void and discards...
CVE-2026-87043
The Zephyr RTOS entropy-device random number generator in subsys/random/random_entropy_device.c is vulnerable to an uninitialized read due to premature error handling. When device_is_ready() fails, rand_get() returns -ENODEV early, skipping the system-timer fallback. Because the sys_rand_get() sy...
CVE-2026-87043 sys_rand_get() silently returns an unwritten buffer when the entropy device is not ready
The entropy-device random number generator in subsys/random/randomentropydevice.c returned early with -ENODEV from randget as soon as deviceisready failed, before reaching the non-cryptographic system-timer fallback further down the same function. Because zimplsysrandget returns void and discards...
CVE-2015-8710
Reproducer Kudos to Mike Dalessio, Francois Chagnon, Florian Weingarten and Jun Kokatsu. See BZ 746048 Building on Linux $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2 -DLIBXML2INCLUDEDIR=/path/to/your/sources/libxml2-2.9.1/include/ $ make...
CVE-2025-5419
CVE-2025-5419 An uninitialized read vulnerability by incorrect Turboshaft Store-Store Elimination in V8. This repository contains analysis and stablized exploit to escalate this vulnerability to achieve in-V8-sandbox Arbitrary Read / Write, AddressOf & FakeObject primitives. Analysis:...
CLSA-2026-1792402249 webkit2gtk3: Fix of 4 CVEs
CVE-2026-91747: use-after-free in the Skia GPU glyph atlas after a partial atlas update - CVE-2026-91740: uninitialized GPU resource read after a failed render task in Skia - CVE-2026-91733: missing flush failure handling in the Skia GPU backend - CVE-2026-17771: uninitialized texture padding...
CVE-2026-98702
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a received CSA frame on a non-6 GHz link. It warns for this unsupported width but...
CVE-2026-98702
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a received CSA frame on a non-6 GHz link. It warns for this unsupported width but...
UBUNTU-CVE-2026-98702
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a received CSA frame on a non-6 GHz link. It warns for this unsupported width but...
EUVD-2026-103956
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a received CSA frame on a non-6 GHz link. It warns for this unsupported width but...
CVE-2026-98702 wifi: mac80211: reject invalid 320 MHz CSA bandwidth
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a received CSA frame on a non-6 GHz link. It warns for this unsupported width but...
CVE-2026-98702 wifi: mac80211: reject invalid 320 MHz CSA bandwidth
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a received CSA frame on a non-6 GHz link. It warns for this unsupported width but...
CVE-2026-98702
The Linux kernel contains a vulnerability in the wifi: mac80211 component where the HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a CSA frame on a non-6 GHz link. The system warns about the unsupported width but proceeds with an uninitialized vht_operation.ch...
PT-2026-116921
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mac80211 wifi component where the HT/VHT channel definition validator fails to properly handle a 320 MHz bandwidth indication from a received Channel Switch...
CVE-2026-98702: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a received CSA frame on a non-6 GHz link. It warns for this unsupported width but...
Astra Linux – Vulnerability in Qemu
In QEMU, the softmmu/physmem.c file, versions up to 7.0.0, can perform an uninitialized read on the translatefail path, resulting in an ioreadx or iowritex crash. NOTE: A third-party report states that the “Non-virtualization Use Case” described in the qemu.org reference applies here. In other...
Astra Linux – Vulnerability in Firefox, Thunderbird
When reading a file, an uninitialized value might have been used as the read limit. This vulnerability affects Firefox 113, Firefox ESR 102.11, and Thunderbird 102.11...
CLSA-2026-1790805563 webkit2gtk3: Fix of 7 CVEs
CVE-2026-91747: use-after-free in the Skia GPU glyph atlas after a partial atlas update - CVE-2026-91740: uninitialized GPU resource read after a failed render task in Skia - CVE-2026-91733: missing flush failure handling in the Skia GPU backend - CVE-2026-17771: uninitialized texture padding...
Linux Distros Unpatched Vulnerability : CVE-2026-94056
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...