11 matches found
SUSE CVE-2026-64283
In the Linux kernel, the following vulnerability has been resolved: KVM: guestmemfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a guestmemfd file, treat the offset and size as unsigned values to fix a bug where the sum of the two can result in a false negative...
CVE-2026-64283
CVE-2026-64283 : In the Linux kernel KVM guest_memfd binding, the offset and size for a memslot were treated inconsistently (signed/unsigned), enabling a potential overflow-related bypass where an extremely large positive offset plus size could be misinterpreted as smaller than the file size. The...
CVE-2026-64283 KVM: guest_memfd: Treat memslot binding offset+size as unsigned values
In the Linux kernel, the following vulnerability has been resolved: KVM: guestmemfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a guestmemfd file, treat the offset and size as unsigned values to fix a bug where the sum of the two can result in a false negative...
Linux Distros Unpatched Vulnerability : CVE-2026-64283
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: guestmemfd: Treat memslot binding offset+size as unsigned values When binding a memslot to a guestmemfd file, treat the offset and size as unsigned values ...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: usb: aqc111: Check the packet for fixup for true limits. If a device sends a packet that lies between 0 and sizeofu64, the value passed to skbtrim as the packet length will wrap around, resulting in a very large value. The driver...
CVE-2023-53707
CVE-2023-53707 concerns the Linux kernel DRM/AMDGPU driver: amdgpu_cs_pass1 contains an unsigned int overflow when size equals 0x40000000, causing size to become 0 after size *= sizeof(uint32_t) and potentially referencing uninitialized memory. The issue is in the amdgpu_cs_pass1 path of the AMDG...
EUVD-2023-59952
Malicious code in bioql PyPI...
UBUNTU-CVE-2023-53309
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix integer overflow in radeoncsparserinit The type of size is unsigned, if size is 0x40000000, there will be an integer overflow, size will be zero after size = sizeofuint32t, will cause uninitialized memory to be...
CVE-2023-53309
CVE-2023-53309 affects the Linux kernel’s drm/radeon path. The vulnerability stems from an overflow in radeon_cs_parser_init: the size field is unsigned, and if size equals 0x40000000, the calculation size *= sizeof(uint32_t) overflows, causing size to wrap to zero and leading to use of uninitial...
CVE-2023-53309 drm/radeon: Fix integer overflow in radeon_cs_parser_init
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix integer overflow in radeoncsparserinit The type of size is unsigned, if size is 0x40000000, there will be an integer overflow, size will be zero after size = sizeofuint32t, will cause uninitialized memory to be...
CVE-2023-53309 drm/radeon: Fix integer overflow in radeon_cs_parser_init
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix integer overflow in radeoncsparserinit The type of size is unsigned, if size is 0x40000000, there will be an integer overflow, size will be zero after size = sizeofuint32t, will cause uninitialized memory to be...