28 matches found
CVE-2026-99266
In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix buffer offsets in areas above 4GB iozcrxqueuecqe computes the offset of the buffer in its area from netiovidx, which is an unsigned int, so the shift is done in 32 bits and only the result is widened to the u64...
EUVD-2026-115791
In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix buffer offsets in areas above 4GB iozcrxqueuecqe computes the offset of the buffer in its area from netiovidx, which is an unsigned int, so the shift is done in 32 bits and only the result is widened to the u64...
CVE-2026-99266
The Linux kernel is affected by a vulnerability in the io_uring/zcrx component. The root cause is that io_zcrx_queue_cqe() computes buffer offsets using net_iov_idx(), which is an unsigned int . This causes shifts to occur in 32 bits before being widened to u64 . In areas larger than 4GB (up to 1...
PT-2026-136102
In the Linux kernel, the following vulnerability has been resolved: io uring/zcrx: fix buffer offsets in areas above 4GB io zcrx queue cqe computes the offset of the buffer in its area from net iov idx, which is an unsigned int, so the shift is done in 32 bits and only the result is widened to th...
Linux Distros Unpatched Vulnerability : CVE-2026-79607
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent...
SUSE CVE-2026-79607
During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when reading the state back in the new Xenstore, causing a crash of Xenstore or wrong Xenstore data...
UBUNTU-CVE-2026-79607
During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when reading the state back in the new Xenstore, causing a crash of Xenstore or wrong Xenstore data...
DEBIAN-CVE-2026-79607
During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when reading the state back in the new Xenstore, causing a crash of Xenstore or wrong Xenstore data...
CVE-2026-79607
During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when reading the state back in the new Xenstore, causing a crash of Xenstore or wrong Xenstore data...
CVE-2026-79607 Xenstore: Guests can crash xenstored during Live Update
During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when reading the state back in the new Xenstore, causing a crash of Xenstore or wrong Xenstore data...
CVE-2026-79607
During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when reading the state back in the new Xenstore, causing a crash of Xenstore or wrong Xenstore data...
CVE-2026-79607
During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when reading the state back in the new Xenstore, causing a crash of Xenstore or wrong Xenstore data...
EUVD-2026-98823
During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when reading the state back in the new Xenstore, causing a crash of Xenstore or wrong Xenstore data...
CVE-2026-79607
In Xen 4.22 , a vulnerability exists in Xenstore during a live update where the state record for a watch with a specified depth is written with two missing bytes. This oversight creates an inconsistent state upon reading the data in the new Xenstore, which can lead to wrong Xenstore data or a cra...
PT-2026-111663
Name of the Vulnerable Software and Affected Versions Xenstore versions prior to 4.22.0 06-1.1 Description During a live update, the state record for a Xenstore watch with a specified watch depth is written with two bytes missing. This leads to an inconsistent state when the new Xenstore reads th...
CVE-2026-79607: Improper Restriction of Operations within the Bounds of a Memory Buffer
During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when reading the state back in the new Xenstore, causing a crash of Xenstore or wrong Xenstore data...
PT-2026-47000
GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3. The earliest affected version is 3.6.4 2018-09-24 because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS...
CVE-2025-30189
CVE-2025-30189 affects Open-Xchange OX Dovecot Pro (and dovecot-based components) where enabling authentication caching causes incorrect caching: multiple users sharing the same cache key leads to the cached entry being reused for subsequent logins. The issue is described in multiple advisories (...
SUSE CVE-2017-9725
In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets truncated which makes allocation succeed when it should fail...
SUSE CVE-2018-5156
A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird 60, Firefox ESR 60.1, Firefox ESR...