105621 matches found
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.10 contains security vulnerabilities. These vulnerabilities arise from the fact that when netdevsetnumtc reduces the numtc, the tctotxq and priotcmap arrays are not cleaned up properly. This leads to netdevtxqtotc returning an out-of-range traffic category. Additionally...
Linux Kernel Security Vulnerabilities
The Linux kernel version 4.9 contains a security vulnerability. This vulnerability arises from the ALSA line6 driver not verifying the size of playback data packets. As a result, the frame length originating from the IN endpoint is rescaled according to the playback frame size and then written in...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.34 contains a security vulnerability. This vulnerability stems from the ALSA ua101 driver’s detectusbformat function, which does not verify whether the wMaxPacketSize and bNrChannels of the capture and playback endpoints match. As a result, out-of-bounds write...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the GUE REMSUM option not verifying the order of the checksum’s start value and the field offset. When the offset is less than the start value, underflow occurs, potentially leading to forwarded packets being written...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.31 contains a security vulnerability. This vulnerability stems from the genericsetcmd and genericgetcmd functions in the usbgadget fuac1legacy module, which do not validate the bRequest index. They use the low half byte of ctrl-bRequest as the index for con-data, wher...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.36 contains a security vulnerability. This vulnerability arises from the icdhcpinitoptions function, which appends the hostname, vendor-class, and client-ID options to a fixed 312-byte bootppkt.exten buffer. No boundary checks are performed for writing the hostname an...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability arises from the function nvmetauthchallenge, which treats the output buffer as a void pointer. This leads to an incorrect calculation of sizeofd, resulting in the omission of 15 bytes from the fixed challenge header. The short...
Linux Kernel Security Vulnerabilities
The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities stem from the netfsreadgaps function, which does not clear the read gaps surrounding the streaming write to the dirty area. As a result, short reads on the server side or EOF responses may retain outdatedfolio...
kernel: Fix of 69 CVEs
sctp: fix errchunk memory leaks in INIT handling CVE-2026-72413 - ACPICA: Fix use-after-free in acpidsterminatecontrolmethod CVE-2026-97455 - ACPICA: Enhance buffer validation in acpiutwalkamlresources CVE-2026-97445 - Bluetooth: L2CAP: validate connectionless PSM length CVE-2026-97408 - wifi:...
CLSA-2026-1791949745 kernel: Fix of 69 CVEs
sctp: fix errchunk memory leaks in INIT handling CVE-2026-72413 - ACPICA: Fix use-after-free in acpidsterminatecontrolmethod CVE-2026-97455 - ACPICA: Enhance buffer validation in acpiutwalkamlresources CVE-2026-97445 - Bluetooth: L2CAP: validate connectionless PSM length CVE-2026-97408 - wifi:...
CLSA-2026-1792066324 openssl: Fix of CVE-2026-84782
CVE-2026-84782: reset initoff before a DTLS retransmission and skip retransmitting while a handshake write is still suspended...
openssl: Fix of CVE-2026-84782
CVE-2026-84782: reset initoff before a DTLS retransmission and skip retransmitting while a handshake write is still suspended...
CLSA-2026-1792165466 tigervnc: Fix of CVE-2026-50264
CVE-2026-50264: fix out-of-bounds heap write in DRI2 DRIGetBuffers; carried by xorg-x11-server-source = 1.20.4-99.el79.tuxcare.els14, no local patch...
portswigger-labs-writeups
PortSwigger Labs — Write-ups & Solutions Personal write-up re...
MGASA-2026-0514 Updated libreoffice package fixes security vulnerabilities
Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality. CVE-2026-63266 LFI and GET SSRF via calcext:data-mappings and csv provider. CVE-2026-63267 LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href. CVE-2026-63268 LFI and GET SSRF via...
MGASA-2026-0517 Updated mutt package fixes a security vulnerability
When an email is processed as a template, an out-of-bounds write vulnerability in the convertfilefromto function can be triggered by a specially crafted Content-Type header CVE-2026-107570...
Updated mutt package fixes a security vulnerability
When an email is processed as a template, an out-of-bounds write vulnerability in the convertfilefromto function can be triggered by a specially crafted Content-Type header CVE-2026-107570...
Updated libreoffice package fixes security vulnerabilities
Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality. CVE-2026-63266 LFI and GET SSRF via calcext:data-mappings and csv provider. CVE-2026-63267 LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href. CVE-2026-63268 LFI and GET SSRF via...
CLSA-2026-1790583885 xorg-x11-server: Fix of 5 CVEs
CVE-2026-50262: fix reversed request length check in GLX ChangeDrawableAttributes leading to out-of-bounds read/write - CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver CreateSaverWindow after CheckScreenPrivate - CVE-2026-55999: fix heap buffer overflow in glamorfontget on...
CLSA-2026-1790584501 xorg-x11-server: Fix of 6 CVEs
CVE-2026-50262: fix reversed request length check in GLX ChangeDrawableAttributes leading to out-of-bounds read/write - CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver CreateSaverWindow after CheckScreenPrivate - CVE-2026-55999: fix heap buffer overflow in glamorfontget on...