36 matches found
CVE-2026-82330
A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ compressed decoder does not properly perform memory bounds checking. This missing validation results in a heap out-of-bounds read. This issue can result in an application crash, leading to ...
VQ-RefluxCore
VQ-RefluxCore: Framework di Valutazione e Ricerca delle Vulnerabilità del Kernel VQ-RefluxCore è un framework avanzato di ricerca sulla sicurezza progettato per modellare, analizzare e dimostrare le meccaniche di escalation locale dei privilegi LPE associate a race condition a livello di kernel e...
CVE-2026-82330 Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check
A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ compressed decoder does not properly perform memory bounds checking. This missing validation results in a heap out-of-bounds read. This issue can result in an application crash, leading to ...
CVE-2026-82330
GIMP's file-pvr plugin contains a heap out-of-bounds read in the VQ (compressed) decoder due to a missing memory bounds check. When a specially crafted PVR image file is processed, the decoder reads beyond allocated heap memory, which can cause an application crash (denial of service) or a limite...
EUVD-2026-67739
A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ compressed decoder does not properly perform memory bounds checking. This missing validation results in a heap out-of-bounds read. This issue can result in an application crash, leading to ...
CVE-2026-82330
A flaw was found in the file-pvr plugin in GIMP. When processing a specially crafted PVR image file, the VQ compressed decoder does not properly perform memory bounds checking. This missing validation results in a heap out-of-bounds read. This issue can result in an application crash, leading to ...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098691)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098691 advisory. In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq-logused with vq-mutex The vhost-scsi completion path may access vq-logbas...
SUSE CVE-2026-64457
In the Linux kernel, the following vulnerability has been resolved: virtiopci: fix vq info pointer lookup via wrong index Unbinding a virtio balloon device: echo virtio0 /sys/bus/virtio/drivers/virtioballoon/unbind triggers a NULL pointer dereference. The dmesg says: BUG: kernel NULL pointer...
CVE-2026-64457
In the Linux kernel, the following vulnerability has been resolved: virtiopci: fix vq info pointer lookup via wrong index Unbinding a virtio balloon device: echo virtio0 /sys/bus/virtio/drivers/virtioballoon/unbind triggers a NULL pointer dereference. The dmesg says: BUG: kernel NULL pointer...
CVE-2026-64457
In the Linux kernel, the following vulnerability has been resolved: virtiopci: fix vq info pointer lookup via wrong index Unbinding a virtio balloon device: echo virtio0 /sys/bus/virtio/drivers/virtioballoon/unbind triggers a NULL pointer dereference. The dmesg says: BUG: kernel NULL pointer...
CVE-2026-64457
In the Linux kernel, the following vulnerability has been resolved: virtiopci: fix vq info pointer lookup via wrong index Unbinding a virtio balloon device: echo virtio0 /sys/bus/virtio/drivers/virtioballoon/unbind triggers a NULL pointer dereference. The dmesg says: BUG: kernel NULL pointer...
CVE-2026-64457
The CVE-2026-64457 issue affects the Linux kernel’s virtio_pci subsystem. When unbinding a virtio balloon device (e.g., echo virtio0 > /sys/bus/virtio/drivers/virtio_balloon/unbind), a NULL pointer dereference can occur due to a mismatch between sparse queue indices and dense queue indices (ho...
CVE-2026-64457 virtio_pci: fix vq info pointer lookup via wrong index
In the Linux kernel, the following vulnerability has been resolved: virtiopci: fix vq info pointer lookup via wrong index Unbinding a virtio balloon device: echo virtio0 /sys/bus/virtio/drivers/virtioballoon/unbind triggers a NULL pointer dereference. The dmesg says: BUG: kernel NULL pointer...
Linux Distros Unpatched Vulnerability : CVE-2026-64457
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - virtiopci: fix vq info pointer lookup via wrong index Unbinding a virtio balloon device: echo virtio0 /sys/bus/virtio/drivers/virtioballoon/unbind triggers a NU...
The vulnerabilities in the functions imx_dsp_rproc_stop() and imx_dsp_rproc_vq_work() of the driver module remoteproc/imx_dsp_rproc.c, which is part of the Linux operating system’s embedded processor subsystem, allow a malicious actor to cause service failures.
The vulnerabilities of the functions imxdsprprocstop and imxdsprprocvqwork in the driver module remoteproc/imxdsprproc.c of the Linux operating system’s embedded processor subsystem are related to the lack of synchronization. Exploiting these vulnerabilities could allow an attacker to cause a...
The vulnerability of the vduse_vdpa_set_vq_affinity() function in the drivers/vdpa/vdpa_user/vduse_dev.c driver for vDPA devices in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the vdusevdpasetvqaffinity function in the drivers/vdpa/vdpauser/vdusedev.c driver for vDPA devices in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2022-50426 remoteproc: imx_dsp_rproc: Add mutex protection for workqueue
In the Linux kernel, the following vulnerability has been resolved: remoteproc: imxdsprproc: Add mutex protection for workqueue The workqueue may execute late even after remoteproc is stopped or stopping, some resources rpmsg device and endpoint have been released in rprocstopsubdevices, then...
UBUNTU-CVE-2022-50064
In the Linux kernel, the following vulnerability has been resolved: virtio-blk: Avoid use-after-free on suspend/resume hctx-userdata is set to vq in virtblkinithctx. However, vq is freed on suspend and reallocated on resume. So, hctx-userdata is invalid after resume, and it will cause...
DEBIAN-CVE-2025-38074
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: protect vq-logused with vq-mutex The vhost-scsi completion path may access vq-logbase when vq-logused is already set to false. vhost-thread QEMU-thread vhostscsicompletecmdwork - vhostaddused - vhostaddusedn if...
CVE-2024-53092
In the Linux kernel, the following vulnerability has been resolved: virtiopci: Fix admin vq cleanup by using correct info pointer vpmodernavqcleanup and vpdelvqs clean up admin vq resources by virtiopcivqinfo pointer. The info pointer of admin vq is stored in vpdev-adminvq.info instead of...