105602 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.19 contains security vulnerabilities. These vulnerabilities stem from the index used by blkrevalidatezoneCond, which is derived from the reportzones function in the device driver. This index does not verify the size of the zonescond array. When the number of regions...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.10 contains security vulnerabilities. These vulnerabilities arise from the fact that when netdevsetnumtc reduces the numtc, the tctotxq and priotcmap arrays are not cleaned up properly. This leads to netdevtxqtotc returning an out-of-range traffic category. Additionally...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities stem from the netfsreadgaps function, which does not clear the read gaps surrounding the streaming write to the dirty area. As a result, short reads on the server side or EOF responses may retain outdatedfolio...
Linux Kernel Security Vulnerabilities
Versions of the Linux kernel from 6.12.29 to 6.12.112, as well as versions from 6.14.7 to 6.15, and 6.15 itself, have security vulnerabilities. This vulnerability stems from the fbnicmbxresetdescring function, which only sets AWFLUSH without setting AWFLUSHMODE when removing the FW mailbox Rx rin...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the GUE REMSUM option not verifying the order of the checksum’s start value and the field offset. When the offset is less than the start value, underflow occurs, potentially leading to forwarded packets being written...
Linux Kernel Security Vulnerabilities
The Linux kernel version 5.11 contains security vulnerabilities. One of these vulnerabilities arises from sockmapalloc, which does not reject entries greater than INTMAX. Additionally, sockmapfree uses a signed int to iterate through the sks array, leading to integer overflows and potential...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.9 contains a security vulnerability. This vulnerability arises from the ALSA line6 driver not verifying the size of playback data packets. As a result, the frame length originating from the IN endpoint is rescaled according to the playback frame size and then written in...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.31 contains a security vulnerability. This vulnerability stems from the genericsetcmd and genericgetcmd functions in the usbgadget fuac1legacy module, which do not validate the bRequest index. They use the low half byte of ctrl-bRequest as the index for con-data, wher...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.36 contains a security vulnerability. This vulnerability arises from the icdhcpinitoptions function, which appends the hostname, vendor-class, and client-ID options to a fixed 312-byte bootppkt.exten buffer. No boundary checks are performed for writing the hostname an...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the function nvmetauthchallenge, which treats the output buffer as a void pointer. This leads to an incorrect calculation of sizeofd, resulting in the omission of 15 bytes from the fixed challenge header. The short...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.34 contains a security vulnerability. This vulnerability stems from the ALSA ua101 driver’s detectusbformat function, which does not verify whether the wMaxPacketSize and bNrChannels of the capture and playback endpoints match. As a result, out-of-bounds write...
CLSA-2026-1791949745 kernel: Fix of 69 CVEs
sctp: fix errchunk memory leaks in INIT handling CVE-2026-72413 - ACPICA: Fix use-after-free in acpidsterminatecontrolmethod CVE-2026-97455 - ACPICA: Enhance buffer validation in acpiutwalkamlresources CVE-2026-97445 - Bluetooth: L2CAP: validate connectionless PSM length CVE-2026-97408 - wifi:...
kernel: Fix of 69 CVEs
sctp: fix errchunk memory leaks in INIT handling CVE-2026-72413 - ACPICA: Fix use-after-free in acpidsterminatecontrolmethod CVE-2026-97455 - ACPICA: Enhance buffer validation in acpiutwalkamlresources CVE-2026-97445 - Bluetooth: L2CAP: validate connectionless PSM length CVE-2026-97408 - wifi:...
openssl: Fix of CVE-2026-84782
CVE-2026-84782: reset initoff before a DTLS retransmission and skip retransmitting while a handshake write is still suspended...
CLSA-2026-1792066324 openssl: Fix of CVE-2026-84782
CVE-2026-84782: reset initoff before a DTLS retransmission and skip retransmitting while a handshake write is still suspended...
CLSA-2026-1792165466 tigervnc: Fix of CVE-2026-50264
CVE-2026-50264: fix out-of-bounds heap write in DRI2 DRIGetBuffers; carried by xorg-x11-server-source = 1.20.4-99.el79.tuxcare.els14, no local patch...
portswigger-labs-writeups
PortSwigger Labs — Write-ups & Solutions Personal write-up re...
Updated libreoffice package fixes security vulnerabilities
Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality. CVE-2026-63266 LFI and GET SSRF via calcext:data-mappings and csv provider. CVE-2026-63267 LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href. CVE-2026-63268 LFI and GET SSRF via...
MGASA-2026-0514 Updated libreoffice package fixes security vulnerabilities
Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality. CVE-2026-63266 LFI and GET SSRF via calcext:data-mappings and csv provider. CVE-2026-63267 LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href. CVE-2026-63268 LFI and GET SSRF via...
MGASA-2026-0517 Updated mutt package fixes a security vulnerability
When an email is processed as a template, an out-of-bounds write vulnerability in the convertfilefromto function can be triggered by a specially crafted Content-Type header CVE-2026-107570...