The vulnerability of the kernel_pgtable_work_func() function in the mm/pgtable-generic.c module, and the iommu_svaBindDevice() function in the drivers/iommu/iommu-sva.c module of the Linux operating system’s IOMMU driver, allows a attacker to influence the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the iommuallocmmdata function in the drivers/iommu/iommu-sva.c module of the Linux IOMMU driver is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informatio...

The vulnerability of the function ieee80211_parse_adv_t2l() in the module net/mac80211/mlme.c of the mac80211 stack in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function ieee80211parseadvt2l in the net/mac80211/mlme.c module of the mac80211 stack in the Linux operating system is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability could allow a remote attacker to compromise...

The vulnerability of the l2cap_information_rsp() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the l2capinformationrsp function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the `sip_help_tcp()` function in the `net/netfilter/nf_conntrack_sip.c` module of the `netfilter` component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the siphelptcp function in the net/netfilter/nfconntracksip.c module of the netfilter component of the Linux operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability in the function intel_engines_resetdefault_submission() of the drivers/gpu/drm/i915/gt/intel_engine_cs.c driver module of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the intelenginesdefaultsubmission function in the drivers/gpu/drm/i915/gt/intelenginecs.c file, a driver for the Direct Rendering Infrastructure DRI of the Linux operating system’s kernel, is related to pointer manipulation. Exploiting this vulnerability could allow an attack...

The vulnerability of the btusb_work() function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver allows a attacker to cause a service failure.

The vulnerability of the btusbwork function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver lies in a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability in the driver module/video/fbdev/smscufx.c of the Linux operating system’s kernel-based video buffer device allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the driver module/video/fbdev/smscufx.c driver for kernel-based Linux device buffer devices is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

RockyLinux 9 : nginx:1.24 (RLSA-2026:59490)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59490 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of service...

FreeBSD-SA-26:63.posixshm

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:63.posixshm Security Advisory The FreeBSD Project Topic: TOCTOU race in POSIX shared memory large page configuration Category: core Module: posixshm...

FreeBSD-SA-26:56.hwpmc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:56.hwpmc Security Advisory The FreeBSD Project Topic: hwpmc fails to detach PMCs during exec credential transitions Category: core Module: hwpmc Announced:...

TencentOS Server 4: opensc (TSSA-2026:0853)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0853 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

The vulnerability of the nxp_nci_i2c_set_mode() function in the drivers/nfc/nxp-nci/i2c.c module of the Linux operating system’s NFC driver, which allows a hacker to cause a service failure.

The vulnerability of the nxpncii2csetmode function in the drivers/nfc/nxp-nci/i2c.c module of the Linux NFC kernel driver is related to an incorrect definition of the internal state. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the rawsock_release() function in the net/nfc/rawsock.c module of the NFC subsystem in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rawsockrelease function in the net/nfc/rawsock.c module of the NFC subsystem of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...

UBUNTU-CVE-2026-54874

Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large...

UBUNTU-CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

ROS-20260825-73-0016

The vulnerability of the nfsd4decodecompound function in the fs/nfsd/nfs4xdr.c module, which supports the NFS network file system in Linux kernels, is related to the occurrence of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260825-73-0022

The vulnerability of the skbcopyubufs function in the net/core/skbuff.c module, which is part of Linux’s kernel network functions, relates to the issue of data being written outside of the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

ROS-20260825-73-0002

The vulnerability of the q6apmlpassdaiprepare function in the sound/soc/qcom/qdsp6/q6apm-lpass-dais.c file, which is part of the Linux SoC audio support module, involves a pointer manipulation issue. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

ROS-20260825-73-0003

The vulnerability of the rfkillgpioacpiprobe function in the net/rfkill/rfkill-gpio.c module, which implements networking functions of the Linux kernel, relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

ROS-20260825-73-0028

The vulnerability of the cpumapringcleanup function in the kernel/bpf/cpumap.c module, which is part of the Linux kernel’s BPF interpreter support, is related to incorrect code validation for function return operations. Exploiting this vulnerability could allow an attacker to trigger a system...