107456 matches found
CVE-2026-98199 hwmon: (pmbus/core) increase number of phases and add new mask
In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/core increase number of phases and add new mask Increase the number of phases to 16 as a new upcoming device supports such a number. While at it, add a new mask for controlling the source of the output voltage. Note...
CVE-2026-98199 hwmon: (pmbus/core) increase number of phases and add new mask
In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/core increase number of phases and add new mask Increase the number of phases to 16 as a new upcoming device supports such a number. While at it, add a new mask for controlling the source of the output voltage. Note...
CVE-2026-98199
The Linux kernel contains a vulnerability in the hwmon (pmbus/core) component. The issue stems from the system supporting fewer phases than some hardware devices actually possess; specifically, the mp2975 driver supports up to 14 phases and the mp2856 driver supports up to 12 phases. This discrep...
CVE-2026-98189
In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix RX buffer OOB-write in wilcwlanhandleisrext wilcwlanhandleisrext takes the RX transfer size from the device-reported interrupt status register a 15-bit field shifted left by 2, up to 131068 bytes and reads tha...
EUVD-2026-93117
In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix RX buffer OOB-write in wilcwlanhandleisrext wilcwlanhandleisrext takes the RX transfer size from the device-reported interrupt status register a 15-bit field shifted left by 2, up to 131068 bytes and reads tha...
CVE-2026-98189
The Linux kernel contains an Out-of-Bounds (OOB) write vulnerability in the wilc1000 wifi driver within the wilc_wlan_handle_isr_ext() function. The driver fails to validate the RX transfer size reported by the device's interrupt status register (up to 131,068 bytes) against the rx_buffer size, w...
CVE-2026-98189 wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()
In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix RX buffer OOB-write in wilcwlanhandleisrext wilcwlanhandleisrext takes the RX transfer size from the device-reported interrupt status register a 15-bit field shifted left by 2, up to 131068 bytes and reads tha...
CVE-2026-98189 wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()
In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix RX buffer OOB-write in wilcwlanhandleisrext wilcwlanhandleisrext takes the RX transfer size from the device-reported interrupt status register a 15-bit field shifted left by 2, up to 131068 bytes and reads tha...
CVE-2026-98181 drm/gud: fix out-of-bounds write in gud_plane_atomic_check()
In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix out-of-bounds write in gudplaneatomiccheck The plane property loop uses req-propertiesnumproperties + i as write index while simultaneously incrementing numproperties inside the loop. At iteration i, numproperties ha...
CVE-2026-98181
In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix out-of-bounds write in gudplaneatomiccheck The plane property loop uses req-propertiesnumproperties + i as write index while simultaneously incrementing numproperties inside the loop. At iteration i, numproperties ha...
EUVD-2026-93109
In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix out-of-bounds write in gudplaneatomiccheck The plane property loop uses req-propertiesnumproperties + i as write index while simultaneously incrementing numproperties inside the loop. At iteration i, numproperties ha...
CVE-2026-98181 drm/gud: fix out-of-bounds write in gud_plane_atomic_check()
In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix out-of-bounds write in gudplaneatomiccheck The plane property loop uses req-propertiesnumproperties + i as write index while simultaneously incrementing numproperties inside the loop. At iteration i, numproperties ha...
CVE-2026-98181
The Linux kernel contains an out-of-bounds write vulnerability in the drm/gud component within the gud_plane_atomic_check() function. The issue is caused by a logic error where the num_properties variable is incremented inside a loop while also being used in an index calculation as num_properties...
CVE-2026-104983
A flaw was found in Xreader. A remote attacker could provide a crafted document containing a malicious attachment filename that bypasses directory restrictions. If a user attempts to save the attachment, arbitrary files may be written or overwritten outside the intended target directory,...
CVE-2026-25273
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates...
Arbitrary File Write
Apache MINA SSHD is vulnerable to arbitrary file write. The vulnerability is due to improper input validation in GitPgmCommandFactory, where the factory permits an authenticated SSH user to execute any JGit command such as git archive with the --output option, allowing attackers to write files to...
CVE-2026-25273 Out-of-bounds Write in Camera Driver
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates...
CVE-2026-25273
The Camera Driver is vulnerable to Memory Corruption caused by an out-of-bounds write during driver updates when processing camera operations. This issue is categorized under CWE-787 . The CVSS 3.1 score is 6.7 (MEDIUM) , with a local attack vector and high privileges required. Exploitation detai...