CVE-2026-74751 riscv: lib: Fix ZBB strnlen reading past count boundary

In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads one word ahead before checking the aligned boundary: REGL t1, SZREGt0 // load next word addi t0, t0, SZREG // advance orc.b t1, t1 bgeu...

CVE-2025-61478: Uncontrolled Resource Consumption

An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of service via Spoofed SYN packets...

ROS-20260826-73-0003

The vulnerability of the vmbusacpiadd function in the drivers/hv/vmbusdrv.c module of the Microsoft HyperV Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-82131

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ZBB-optimized strnlen function within the RISC-V architecture implementation. The loop loads a word ahead of the aligned boundary before performing the boundary...

CVE-2026-75363

The Comfast CF-WR630AX v.2.7.0.2 is affected by a vulnerability that allows a remote attacker to achieve arbitrary code execution . The root cause is the Improper Neutralization of Special Elements used in an OS Command involving the /usr/bin/webmgnt and /cgi-bin/mbox-config endpoints, specifical...

CVE-2026-80523: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: clk: spacemit: k3: set hdma clock as critical HDMA clock is responsible for the internal TCM access path of X100 RISC-V core, so set the clock flag as critical to prevent it from being shut off, otherwise the Linux system will...

Linux Distros Unpatched Vulnerability : CVE-2026-74751

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads...

MAL-2026-14488 Malicious code in python-walletlibr-v (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6783cffec9c8f9377babacd1cb4490a278bace564b34861bf49b35258be7220c python-walletlibr-v is a wallet-lookalike PyPI package that ships no wallet functionality — only a stub hello that prints 'Hello from my custom...

Malicious code in python-walletlibr-v (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6783cffec9c8f9377babacd1cb4490a278bace564b34861bf49b35258be7220c python-walletlibr-v is a wallet-lookalike PyPI package that ships no wallet functionality — only a stub hello that prints 'Hello from my custom...

The vulnerability of the mshv_map_user_memory() function in the drivers/hv/mshv_root_main.c file of the Microsoft HyperV kernel for Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mshvmapusermemory function in the drivers/hv/mshvrootmain.c file of the Microsoft HyperV kernel for Linux operating systems is related to the reutilization of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

Wazuh Server 4.5.0 < 4.14.6 Stack Buffer Overflow (CVE-2026-45798)

The version of Wazuh Server on the remote host is at least 4.5.0 and prior to 4.14.6. It is, therefore, affected by a stack buffer overflow vulnerability: - comparewazuhversions copies the attacker-controlled enrollment V: field into a 10-byte stack buffer without explicit null termination. A...

CVE-2026-76837

Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/account/ stores the firstname value verbatim, and the mention renderer in web-frontend/modules/core/editor/mention.js builds its element with a template literal that places the name...

EUVD-2026-65009

Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/account/ stores the firstname value verbatim, and the mention renderer in web-frontend/modules/core/editor/mention.js builds its element with a template literal that places the name...

CVE-2026-76837 Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name

Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/account/ stores the firstname value verbatim, and the mention renderer in web-frontend/modules/core/editor/mention.js builds its element with a template literal that places the name...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Disabling IBT when the hypercall page lacks the ENDBR instruction. On hardware that supports Indirect Branch Tracking IBT, Hyper-V VMs with ConfigVersion 9.3 or later support IBT in the guest. However, current version...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: perf: RISC-V: Remove PERFHESSTOPPED flag checking in riscvpmustart Since commit 096b52fd2bb4 “perf: RISC-V: throttle perf events”, the perfsampleeventtook function was added to report time spent in overflow interrupts. If the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Drivers: hv: vmbus: Disabled the option to deactivate sysctlrecordpanicmsg by default in isolated guests. hvpanicpage might contain information sensitive to guests; do not dump this information to Hyper-V by default in isolate...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: RISC-V: mm: Fixed an out-of-bounds access to the page-table during memory hot removal. The functions removepudmapping and removep4dmapping obtain a child table base with pudoffsetp4dp, 0 and p4doffsetpgd, 0, then add the index...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: irqchip/irq-riscv-imsic-early: Fixed the fwnode leak that occurred when the state setup failed. imsicearlyacpiinit allocates a firmware node before setting up the IMSIC state. If imsicsetupstate fails, the function returns...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: rcv: Prevent NULL pointer dereferencing in machinekexecprepare A NULL pointer dereferencing issue was identified in riscv’s machinekexecprepare. In this function, image-segmenti.buf might be NULL, and it may be copied without...