ROS-20260922-73-0095

The vulnerability of the espintcpsendmsg function in the net/xfrm/espintcp.c module, which implements networking functions in the Linux kernel, relates to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260922-73-0039

The vulnerability of the batadvtpsendercleanup function in the net/batman-adv/tpmeter.c module, which is part of the Linux kernel’s networking functions, is related to situations where there is a race condition in the signal handler. Exploiting this vulnerability could allow an attacker to...

ROS-20260922-73-0040

The vulnerability of the smcv2determineacceptedchid function in the net/smc/afsmc.c module of the SMC protocol family in the Linux operating system’s kernel is related to the use of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ROS-20260922-73-0045

The vulnerability of the rt6fillnode function in the net/ipv6/route.c module of the IPv6 protocol implementation in the Linux operating system is related to the execution of a loop with an unreachable exit condition an “infinite loop”. Exploitation of this vulnerability could allow a remote...

ROS-20260922-73-0046

The vulnerability of the adis16260writeraw function in the drivers/iio/gyro/adis16260.c module of various types of embedded sensors in the Linux operating system is related to zero-division errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, a...

ROS-20260922-73-0047

The vulnerability of the dwc2hcdurbdequeue function in the driver module/dwc2/hcd.c of the Linux operating system’s USB device driver framework is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260922-73-0050

The vulnerability of the vti6siocdevprivate function in the net/ipv6/ip6vti.c module of the Linux operating system’s IPv6 kernel implementation is related to insufficient spatial partitioning. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260922-73-0053

The vulnerability of the chapservercomputehash function in the drivers/target/iscsi/iscsitargetauth.c module of the Linux kernel’s TCM driver is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

ROS-20260922-73-0070

The vulnerability of the rdsibsetupqp function in the net/rds/ibcm.c module of the Linux kernel’s networking functions is related to unlimited distribution of resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of...

ROS-20260922-73-0013

A vulnerability in the WAV parser of the GStreamer multimedia framework allows for integer overflow when processing improperly formatted WAV files. This vulnerability enables a malicious actor to cause the application to terminate abnormally service failure...

ROS-20260922-73-0048

The vulnerability in Tomcat is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0113

The vulnerability in golang-github-rancher-local-path-provisioner is related to errors in handling relative pathnames to the directory. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

ROS-20260922-73-0099

The vulnerability of the tegra124emcpreparetimingchange function in the drivers/memory/tegra/tegra124-emc.c module of the NVIDIA Tegra system controller driver is related to the use of an erroneous operator. Exploiting this vulnerability could allow a remote attacker to compromise the...

ROS-20260922-73-0032

The vulnerability of the aasockmsgperm function in the security/apparmor/lsm.c module of the AppArmor security component of the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrit...

ROS-20260922-73-0116

The vulnerability in HProxy is related to errors in processing parameter values related to input data length. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0017

The vulnerability in gstreamer1-plugins-good is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0033

The vulnerability of the sctpsfdo526stale function in the net/sctp/smstatefuns.c module of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

ROS-20260922-73-0002

The vulnerability in gstreamer1-plugins-base is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260922-73-0007

The vulnerability in gstreamer1-plugins-good is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260922-73-0041

The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the Linux operating system’s TLS implementation is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

ROS-20260922-73-0003

The vulnerability in gstreamer1-plugins-good is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260922-73-0022

The vulnerability in gstreamer1-plugins-good is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0072

The vulnerability in Tomcat is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260922-73-0088

The vulnerability in Tomcat10 is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260922-73-0073

The vulnerability in Tomcat10 is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260922-73-0074

The vulnerability in Tomcat11 is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260922-73-0092

The vulnerability of the help function in the net/netfilter/nfconntrackirc.c module of the netfilter component of the Linux operating system is related to the issue of data being written outside of the buffer. Exploiting this vulnerability could allow a remote attacker to access protected...

ROS-20260922-73-0130

The vulnerability in HProxy is related to errors in processing parameter values related to input data length. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0129

The vulnerability in haproxy2 is related to errors in processing parameter values related to input data length. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0060

The vulnerability of the sevdbgcrypt function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

ROS-20260922-73-0066

The vulnerability of the dw8250probe function in the drivers/tty/serial/8250/8250dw.c file of the console TTY driver in the Linux kernel’s parallel port is related to the assignment of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260922-73-0042

The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the TLS protocol implementation in the Linux operating system is related to incorrect access to elements of the structure. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality...

ROS-20260922-73-0028

The vulnerability in gstreamer1-plugins-ugly is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0021

The vulnerability in log4j is related to a lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

ROS-20260921-73-0067

The vulnerability in the incus is related to incorrect external management of the name or file. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260921-73-0072

The vulnerability in the incus is related to deficiencies in the authorization process. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

ROS-20260921-73-0030

The vulnerability in curl is related to incorrect verification of certificate authenticity. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

ROS-20260921-73-0006

The vulnerability in ElasticSearch is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260921-73-0054

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0001

The vulnerability of the MixCoderCode function in the XZ Decoder component of the 7-Zip archive processor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

ROS-20260921-73-0071

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260921-73-0096

The vulnerability in Xen is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20260921-73-0112

The vulnerability of the Verify function in the Go programming language is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260921-73-0124

The vulnerability of the Cosign digital signature tool, which stems from improper verification of the certificate, allows a perpetrator to bypass verifications of identification data and the binding to the OIDC issuer...

ROS-20260921-73-0040

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260921-73-0060

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260921-73-0084

The vulnerability involves bypassing authentication through spoofing. Exploiting this vulnerability allows a remote attacker to carry out spoofing attacks...

ROS-20260921-73-0041

The vulnerability in the kernel-lt is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

ROS-20260921-73-0077

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260921-73-0074

The vulnerability in the incus is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...