17120 matches found
PT-2026-72584
In the Linux kernel, the following vulnerability has been resolved: hwmon: adm1275: Prevent reading uninitialized stack While adding support for the ROHM BD127X0 hot-swap controllers, sashiko reported an error in device-name comparison, which can lead to reading uninitialized stack memory. Quotin...
PT-2026-72635
In the Linux kernel, the following vulnerability has been resolved: sctp: hold socket lock when dumping endpoints in sctp diag SCTP DIAG endpoint dumping was traversing endpoint address lists without holding lock sock, while those lists could change concurrently via socket operations e.g., bindx...
Linux Distros Unpatched Vulnerability : CVE-2026-74507
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: HIDP: validate numbered report payloads When hidpgetrawreport waits for a numbered report, hidpprocessdata compares the expected report number with...
Linux Distros Unpatched Vulnerability : CVE-2026-74577
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mpls: initialize rtmtos in mplsgetroute mplsgetroute builds the RTMNEWROUTE reply to an RTMGETROUTE request by filling a struct rtmsg allocated from an sk...
Linux Distros Unpatched Vulnerability : CVE-2026-72172
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/mminit: fix uninitialized struct pages for ZONEDEVICE If DAX memory is hotplugged into an unoccupied subsection of an early section, sectionactivate reuses t...
PT-2026-72960
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: reject frames without a transaction header hidp recv ctrl frame and hidp recv intr frame read skb-data0 before checking that the L2CAP SDU contains a transaction header. A connected HIDP peer can send an empty...
PT-2026-72959
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: validate numbered report payloads When hidp get raw report waits for a numbered report, hidp process data compares the expected report number with skb-data0. A connected HIDP peer can reply with only a DATA...
MINI-49VV-9WP2-2X8G
Bulletin has no description...
MINI-357R-6HF8-FVJ3
Bulletin has no description...
CVE-2026-21279
creationtimestamp| type| source ---|---|--- 2026-08-14 20:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mt2xip67xd23...
CVE-2026-70629
A flaw was found in FFmpeg. An uninitialized heap memory read vulnerability exists in the native RSCC decoder. An attacker can supply a crafted video file with a compressed tile that decompresses fewer bytes than required. This leads to the unwritten portion of an intermediate buffer being copied...
CVE-2026-70630
A flaw was found in FFmpeg. An uninitialized heap memory read vulnerability in the native Screenpresso decoder allows attackers to recover sensitive memory contents. This occurs when a crafted SPV1 packet with a valid zlib stream is supplied, causing the screenpressodecodeframe function to fail i...
MINI-JW3W-JM8H-RPP9
Bulletin has no description...
CVE-2026-70631
A flaw was found in FFmpeg. An attacker can exploit an uninitialized heap memory disclosure vulnerability in the native TIFF decoder by providing a specially crafted TIFF file. This crafted file can cause the tiffunpackzlib function to include stale data from previous memory allocations in the...
MINI-H8PW-P7GF-C9G5
Bulletin has no description...
GO-2026-5422 vulnerabilities
Vulnerabilities for packages: dagdotdev...
SUSE CVE-2026-73072
Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting values left by setsalfirst, so a crafted spell file containing an SNSAL section before an SNSOFO section causes under-counted mapping lists and attacker-influenced...
The vulnerability in the driver/leds/led-class.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/leds/led-class.c component of the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the wireless/wext-core.c component of the Linux operating system allows a hacker to gain access to confidential data.
The vulnerability of the wireless/wext-core.c component in the Linux operating system is related to the lack of initialization for that resource. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
