45643 matches found
CVE-2026-80847 tcp: clamp route advmss to TCP_MIN_MSS
In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCPMINMSS tcpselectinitialwindow assumes that callers never pass an MSS smaller than 1, but route-derived advmss values can violate that assumption. A too-small explicit RTAXADVMSS is one way to get...
CVE-2026-80794 nfc: nci: fix uninit-value in the RF discover/activated NTF handlers
In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix uninit-value in the RF discover/activated NTF handlers ncirfdiscoverntfpacket and ncirfintfactivatedntfpacket each parse a notification into an on-stack struct ncirfdiscoverntf / ncirfintfactivatedntf that is not...
CVE-2026-80794
This Linux kernel vulnerability affects the NFC NCI subsystem, specifically the nci_rf_discover_ntf_packet() and nci_rf_intf_activated_ntf_packet() handlers. The root cause is that on-stack notification structs are not zero-initialised before parsing. When a notification reports a zero rf_tech_sp...
Exploit for CVE-2026-85046
CVE-2026-85046 Chrome Zero-Day Vulnerability Exploited in the...
net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header
...
af_packet: Don't send zero-byte data in tpacket_snd().
...
GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests
OpenAI on Thursday officially unveiled GPT‑6 Astra , which it described as the "world's most intelligent and aligned model." The development comes days after the artificial intelligence AI company said the model had reached the "Critical" cybersecurity capability threshold under its Preparedness...
kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range
A flaw was found in the Linux kernel's iomap subsystem. An unsigned subtraction underflow occurs when ifssetrangedirty or ifssetrangeuptodate are called with a zero-length range. This can lead to an out-of-bounds write via bitmapset, potentially allowing a local attacker to cause memory corruptio...
kernel: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
A flaw was found in the Linux kernel's NFSv4/pNFS implementation. The nfs4decodempdsaddr function, responsible for decoding network address information, does not properly handle zero-length raddr opaque data. A malicious or compromised metadata server can exploit this by providing a zero-length...
kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range
A flaw was found in the Linux kernel's iomap subsystem. An unsigned subtraction underflow occurs when ifssetrangedirty or ifssetrangeuptodate are called with a zero-length range. This can lead to an out-of-bounds write via bitmapset, potentially allowing a local attacker to cause memory corruptio...
Linux Distros Unpatched Vulnerability : CVE-2026-80731
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: remove CAPSYSRAWIO zero-padding in devvalidateheader devvalidateheader reads dev-hardheaderlen directly when zero-padding short link layer headers for...
Linux Distros Unpatched Vulnerability : CVE-2026-80847
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: clamp route advmss to TCPMINMSS tcpselectinitialwindow assumes that callers never pass an MSS smaller than 1, but route-derived advmss values can violate...
PT-2026-85730
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description An out-of-bounds write exists in the tls append frag function within the Linux kernel. The issue occurs when tls push data fails to properly check for available space in an open record due t...
PT-2026-85725
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A divide-by-zero issue exists in the TCP implementation. The tcp select initial window function assumes that the Maximum Segment Size MSS passed to it is never smaller than 1. However,...
CVE-2026-80847: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCPMINMSS tcpselectinitialwindow assumes that callers never pass an MSS smaller than 1, but route-derived advmss values can violate that assumption. A too-small explicit RTAXADVMSS is one way to get...
PT-2026-91345
In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCP MIN MSS tcp select initial window assumes that callers never pass an MSS smaller than 1, but route-derived advmss values can violate that assumption. A too-small explicit RTAX ADVMSS is one way to g...
Linux Distros Unpatched Vulnerability : CVE-2026-80742
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afpacket: Don't send zero-byte data in tpacketsnd. syzbot reported a WARNING in devqueuexmit triggered via tpacketsnd: skbassertlen WARNING: at...
PT-2026-85635
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFC NCI handlers where nci rf discover ntf packet and nci rf intf activated ntf packet parse notifications into uninitialized on-stack structures nci rf discover n...
