8044 matches found
CVE-2026-72028
In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1 events/kprobes/enable Unabl...
UBUNTU-CVE-2026-72028
In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1 events/kprobes/enable Unabl...
CVE-2026-72028 riscv: probes: save original sp in rethook trampoline
In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1 events/kprobes/enable Unabl...
EUVD-2026-58986
In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1 events/kprobes/enable Unabl...
CVE-2026-72026 irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure
In the Linux kernel, the following vulnerability has been resolved: irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure imsicearlyacpiinit allocates a firmware node before setting up the IMSIC state. If imsicsetupstate fails, the function returns without freeing the allocated...
EUVD-2026-59112
In the Linux kernel, the following vulnerability has been resolved: riscv: Prevent NULL pointer dereference in machinekexecprepare A NULL pointer dereference issue is noticed in riscv's machinekexecprepare, where image-segmenti.buf might be NULL and copied unchecked. The NULL buf comes from...
PT-2026-72367
In the Linux kernel, the following vulnerability has been resolved: riscv: cacheinfo: Fix node reference leak in populate cache leaves Currently, the while loop drops the reference to prev in each iteration. If the loop terminates early due to a break, the final of node putnp correctly drops the...
PT-2026-72217
In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r n tty write $stack0' dynamic events $ echo 1 events/kprobes/enable...
PT-2026-72976
In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove remove pud mapping and remove p4d mapping obtain a child table base with pud offsetp4dp, 0 and p4d offsetpgd, 0, then add the index for addr. RISC-V folds...
Linux Distros Unpatched Vulnerability : CVE-2026-74524
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove removepudmapping and removep4dmapping obtain a child table base with pudoffsetp4dp, 0 and...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the csinsnname lookup in arch/M68K/M68KInstPrinter.c and arch/RISCV/RISCVMapping.c. An attacker can crash the process by supplying an invalid instruction ID to csinsnname on an M68K or RISCV handle. On M68K, the...
CVE-2026-67201
A flaw was found in V, specifically within its net.urllib and net.http components. This vulnerability allows a remote attacker to bypass host-based allowlists by exploiting a difference in how URLs are parsed. By crafting a malicious URL with a backslash, an attacker can trick the system into...
CVE-2026-73031
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw...
EUVD-2026-56889
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw...
CVE-2026-73031 telegram-search Stored XSS via v-html in MessageList.vue
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw...
CVE-2026-73031 telegram-search Stored XSS via v-html in MessageList.vue
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw...
CVE-2026-73031
Telegram-search is affected by a stored XSS in MessageList.vue, where the highlightKeyword function passes raw message content to v-html without escaping. This allows an attacker to craft HTML-bearing messages in a shared Telegram group, enabling stored, cross-user JavaScript execution when users...
CVE-2026-73031 telegram-search Stored XSS via v-html in MessageList.vue
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw...
CVE-2026-73031
telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group. The highlightKeyword function in MessageList.vue passes raw...