176756 matches found
CVE-2026-68164 mm/damon/core: disallow overlapping input ranges for damon_set_regions()
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow overlapping input ranges for damonsetregions damonsetregions assumes the input ranges are sorted by the address and don't overlap each other. Hence the assumption was initially to be explicitly validated...
CVE-2026-68164
The CVE concerns the Linux kernel DAMON subsystem, specifically the function damon_set_regions() in mm/damon/core. The root cause was that input ranges were assumed to be sorted and non-overlapping, but a prior commit removed validation, allowing overlapping ranges. The consequence can be odd mon...
CVE-2026-68164 mm/damon/core: disallow overlapping input ranges for damon_set_regions()
In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow overlapping input ranges for damonsetregions damonsetregions assumes the input ranges are sorted by the address and don't overlap each other. Hence the assumption was initially to be explicitly validated...
EUVD-2026-55541
In the Linux kernel, the following vulnerability has been resolved: libceph: Reject monmaps advertising zero monitors A message of type CEPHMSGMONMAP contains a monmap that is sent from a monitor to the client. This monmap contains information about the existing monitors in the cluster. Currently...
CVE-2026-68155 libceph: Reject monmaps advertising zero monitors
In the Linux kernel, the following vulnerability has been resolved: libceph: Reject monmaps advertising zero monitors A message of type CEPHMSGMONMAP contains a monmap that is sent from a monitor to the client. This monmap contains information about the existing monitors in the cluster. Currently...
EUVD-2026-55517
In the Linux kernel, the following vulnerability has been resolved: net: gro: fix double aggregation of flush-marked skbs Commit 0ab03f353d36 "net-gro: Fix GRO flush when receiving a GSO packet." added a flush check to skbgroreceive, but skbgroreceivelist lacks the same validation. As a result,...
CVE-2026-68108 drm/amdgpu/vce: fix integer overflow in image size
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE command streams with oversized dimensions e.g. 65536×65536 cause 32-bit integer overflow, wrapping the calculated buffer size to ...
EUVD-2026-55489
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE command streams with oversized dimensions e.g. 65536×65536 cause 32-bit integer overflow, wrapping the calculated buffer size to ...
CVE-2026-68106
CVE-2026-68106 affects the Linux kernel drm/amdgpu: when processing video frames with width or height < 16, width_in_mb/height_in_mb become 0 and trigger a division by zero in num_dpb_buffer calculations for H.264/H.264 Perf decode paths. The fix adds validation to reject frames with width <...
EUVD-2026-55487
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less than 16, widthinmb or heightinmb becomes 0, leading to fsinmb being 0. This causes a division by zero when calculating numdpbbuffer in H264...
Security Bulletin:Vulnerability in Netty affects IBM Netezza Appliance
Summary The Netty package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-45673, CVE-2026-45674, CVE-2026-47691 Vulnerability Details CVEID:CVE-2026-45673 DESCRIPTION: Netty is a network application framework for development of protocol servers an...
CVE-2026-68097
Summary: CVE-2026-68097 affects the Linux kernel ksmbd path handling POSIX ACLs. The root cause is a check failure in ACE validation: set_ntacl_dacl() validates sid.num_subauth but does not ensure the declared ACE size can contain all sub-authorities, allowing an undersized ACE to be copied and l...
CVE-2026-68097 ksmbd: validate ACE size against SID sub-authorities
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size contains all sub-authorities described by that field. An undersized...
CVE-2026-68097
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities setntacldacl validates sid.numsubauth before copying an ACE, but does not verify that the declared ACE size contains all sub-authorities described by that field. An undersized...
[SECURITY] [DSA 6425-1] openjdk-21 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6425-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 10, 2026 https://www.debian.org/security/faq -...
Security update for perl-Date-Manip
This update for perl-Date-Manip fixes the following issues: CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check bsc1273063. CVE-2026-60075: CPU exhaustion due to quadratic backtracking in the unanchored time substitution in...
SUSE-SU-2026:3537-1 Security update for perl-Date-Manip
This update for perl-Date-Manip fixes the following issues: - CVE-2026-60074: corrupted dates returned when processing non-ASCII decimal digits that pass the numeric range tests in check bsc1273063. - CVE-2026-60075: CPU exhaustion due to quadratic backtracking in the unanchored time substitution...
CVE-2026-65942
CVE-2026-65942 concerns TLS hostname verification in Apache Ranger Client Code for versions
CVE-2026-44630
Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError. Thi...
EUVD-2026-55157
Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError. Thi...