Lucene search
+L
UbuntucveRecent

80010 matches found

UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.15 views

CVE-2026-80695

In the Linux kernel, the following vulnerability has been resolved: hwmon: sht3x Fix unaligned accesses Sashiko reports: In sht3xupdateclient, the 16-bit temperature and humidity values are extracted from a stack-allocated byte array using be16tocpup. The pointers passed to this function are...

5.8AI score0.00168EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.14 views

CVE-2026-80601

In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only after skb realloc The pskbmaypull called by batadvgetvid could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...

8.8CVSS6AI score0.00258EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.12 views

CVE-2026-80609

In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-lenlist Move index check before element access...

9.8CVSS5.8AI score0.00509EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.16 views

CVE-2026-80643

In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release When unloading the igen6edac driver, there is a call trace: Device 'null' does not have a release function, it is broken and must be fixed. See Documentation/core-api/kobject.rst...

5.8AI score0.00166EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.15 views

CVE-2026-80642

In the Linux kernel, the following vulnerability has been resolved: liveupdate: Reference count incoming FLB data Increment the incoming FLB refcount in liveupdateflbgetincoming so that the FLB structure cannot be freed while the caller is actively using it. Add an additional...

5.8AI score0.00155EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.14 views

CVE-2026-80603

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackirc: fix parsedcc off-by-one OOB read parsedcc treats dataend as an inclusive end pointer, but its only caller passes datalimit = ibptr + datalen, which points one past the last valid byte. The newline searc...

9.1CVSS5.8AI score0.00425EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.15 views

CVE-2026-80613

In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdprxqinforeg or xdprxqinforegmemmodel fails, the driver rolls back the changes. However, the rollback loop: for i--; i = start; i-- decrements the lo...

7.8CVSS5.8AI score0.00129EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.17 views

CVE-2026-80641

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

5.9AI score0.00155EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.14 views

CVE-2026-80619

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in aareplaceprofiles The function aareplaceprofiles was accessing udata-size after calling aaputloaddataudata, causing a potential UAF. Fixed this by saving the size to a local variable before dropping...

7.8CVSS5.8AI score0.00129EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.11 views

CVE-2026-80633

In the Linux kernel, the following vulnerability has been resolved: iommufd: Take dmaresv lock before dmabufunpin in release path dmabufunpin requires the caller to hold the exporter's dmaresv lock: void dmabufunpinstruct dmabufattachment attach ... dmaresvasserthelddmabuf-resv;...

8.8CVSS5.8AI score0.0012EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.15 views

CVE-2026-80652

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...

6AI score0.00176EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.14 views

CVE-2026-80660

In the Linux kernel, the following vulnerability has been resolved: hwmon: occ unregister sysfs devices outside occ lock occactivefalse and occshutdown unregister sysfs-backed devices while occ-lock is held. hwmondeviceunregister and sysfsremovegroup can wait for active sysfs callbacks to drain,...

5.8AI score0.00172EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.13 views

CVE-2026-80698

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double free of wq, engine, and group structs The release callbacks for wq, engine, and group devices idxdconfwqrelease, idxdconfenginerelease, idxdconfgrouprelease each call kfree on the enclosing struct. The...

5.8AI score0.00155EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.13 views

CVE-2026-80672

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix u16 truncation of restart-area length check ntfscheckrestartarea validates that the $LogFile restart area and its trailing log client record array fit within the system page size: u16 raofs, ralen, caofs; ... ralen =...

8.8CVSS5.9AI score0.0012EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.11 views

CVE-2026-80661

In the Linux kernel, the following vulnerability has been resolved: ufs: core: tracing: Do not dereference pointers in TPprintk The trace events in drivers/ufs/core/ufstrace.h were converted to take a pointer to the hba structure as an argument for the tracepoint and then in TPprintk the printing...

7.8CVSS6.1AI score0.00127EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.13 views

CVE-2026-80614

In the Linux kernel, the following vulnerability has been resolved: net: emac: Fix NULL pointer dereference in emacprobe Move devmrequestirq after devmplatformioremapresource so that dev-emacp is mapped before the interrupt handler can fire. An early interrupt hitting emacirq would dereference th...

7.5CVSS5.9AI score0.00432EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.12 views

CVE-2026-80593

In the Linux kernel, the following vulnerability has been resolved: hwmon: asusatk0110 Check package count before accessing element atkecpresent walks the management group package returned by the GGRP ACPI method and, for each sub-package, reads its first element: id = &obj-package.elements0; if...

8.4CVSS5.8AI score0.00144EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.12 views

CVE-2026-80591

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr entries Validate the xattr entry before reading its fields in f2fslistxattr. Return -EFSCORRUPTED when the entry is outside the valid xattr storage area instead of returning a...

7.8CVSS5.8AI score0.00129EPSS
SaveExploits0References20
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.14 views

CVE-2026-80592

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range parameters are invalid The comment on top of struct damonregion clearly says that For any use case, @ar should be non-zero positive size. which is now verified in...

5.9AI score0.00166EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.10 views

CVE-2026-80688

In the Linux kernel, the following vulnerability has been resolved: riscv: drop init from veccheckunalignedaccessspeedallcpus This function runs within a kthread and need not necessarily finish before system finishes boot and freeinitmem unmaps the .init.text section. This function makes calls to...

5.8AI score0.00166EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.12 views

CVE-2026-80653

In the Linux kernel, the following vulnerability has been resolved: scsi: hisisas: Add slavedestroy interface for v3 hw WARNING is triggered when executing link reset of remote PHY and rmmod SAS driver simultaneously. Following is the WARNING log: WARNING: CPU: 61 PID: 21818 at...

8.4CVSS5.9AI score0.00142EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.13 views

CVE-2026-80692

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: hold conn in hciconnectacl/lesync callbacks There is theoretical UAF if the conn is freed while the hcisync task is running. Hold refcount to avoid that...

8.8CVSS5.8AI score0.00218EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.16 views

CVE-2026-80697

In the Linux kernel, the following vulnerability has been resolved: erofs: ensure valid fpath for page cache sharing Previously, backing files for page cache sharing were set up with fpath left as NULL only finode was valid. It worked, but a recent mincore fix relies on fpath.mnt and crashes foun...

5.8AI score0.00155EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.18 views

CVE-2026-80705

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check if dml21addphantomplane is successful Verify that the phantom plane was allocated to avoid a later segfault. cherry picked from commit 5adb54abe5a8e82cbff7f8806db30a5f4924329f...

5.8AI score0.00145EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.15 views

CVE-2026-80701

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: enforce cursor size limits for MOB cursors vmwcursorplaneatomiccheck bounds cursor width and height only on the legacy update path; the SVGACAP2CURSORMOB path -- the default on modern hosts -- accepts any size. When t...

5.8AI score0.00166EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.15 views

CVE-2026-80703

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authorization check in KFDIOCDBGTRAPDISABLE Prevent unauthorized termination of active GPU debug sessions. Previously, users with /dev/kfd access could terminate another process's debug session without...

5.8AI score0.00156EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.14 views

CVE-2026-80700

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external BO copy bounds for both stride paths vmwexternalbocopy trusts caller-supplied offsets, strides, and heights and operates on imported dma-buf vmaps: - The equal-stride memcpy bound was clamped after...

7.8CVSS5.8AI score0.00128EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.14 views

CVE-2026-80707

In the Linux kernel, the following vulnerability has been resolved: can: j1939: transport: j1939sessionfreshnew: initialize receive buffer Zero the allocated buffer in j1939sessionfreshnew to ensure it contains no residual data. While there is a potential performance impact if users allocate...

7.5CVSS6AI score0.00329EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.15 views

CVE-2026-80676

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: use generic driveroverride infrastructure When a driver is probed through driverattach, the bus' match callback is called without the device lock held, thus accessing the driveroverride field without a lock,...

5.8AI score0.00168EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.15 views

CVE-2026-80668

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackexpect: use conntrack GC to reap expectations This patch replaces the timer API by GC worker approach for expectations, as it already happened in many other subsystems. Use the existing conntrack GC worker t...

9.8CVSS5.8AI score0.00379EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/28 8:16 a.m.15 views

CVE-2026-80686

In the Linux kernel, the following vulnerability has been resolved: mm: migratedevice: fix ptepfn/ptedirty called on non-present PTE ptepfn and ptedirty have undefined behaviour when called on a non-present PTE. In migratevmacollectpmd, these functions may be invoked on non-present entries e.g.,...

5.9AI score0.00172EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2026/08/28 2:16 a.m.16 views

CVE-2026-38821

A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...

7.1CVSS6.1AI score0.00201EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/08/28 2:16 a.m.18 views

CVE-2026-38822

In openNDS before 11.0.0, the clientparams.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by...

7.6CVSS6AI score0.00849EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/08/28 2:16 a.m.12 views

CVE-2026-38819

Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes...

5.3CVSS5.9AI score0.00177EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/28 2:16 a.m.14 views

CVE-2026-38820

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/ endpoint because of libopennds.sh...

8.3CVSS5.9AI score0.01743EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/08/28 12:18 a.m.15 views

CVE-2026-80179

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

5.9CVSS5.9AI score0.00251EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/08/28 12:18 a.m.14 views

CVE-2026-77358

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

8.2CVSS5.9AI score0.00287EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/28 12:18 a.m.14 views

CVE-2026-54330

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Ceph Object Gateway RGW SigV4 handler does not reject requests that carry x-amz- headers absent from the signed header set, allowing anyone holding a presigne...

8.1CVSS5.9AI score0.00229EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/28 12:18 a.m.17 views

CVE-2026-50152

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Monitor subscription handler fails to properly authorize access to the configuration-key store, allowing any CephX user with only mon allow r capabilities to...

9.1CVSS5.8AI score0.00162EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/28 12:18 a.m.8 views

CVE-2026-76060

An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HTTP request parameter is passed unsanitized into a shell command executed via PHP's exec, allowing any authenticated user with View Events permission to execute arbitrary operati...

8.8CVSS6.3AI score0.02315EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/08/28 12:18 a.m.14 views

CVE-2026-77341

cpp-httplib is a C++ header-only HTTP/HTTPS library. In version 0.49.0, the chunked-response trailer output path writes trailer header names and values directly to the socket without validating them, allowing CRLF sequences in a trailer field to inject additional headers or split the HTTP respons...

5.3CVSS5.9AI score0.00272EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/28 12:18 a.m.11 views

CVE-2026-82072

Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS6.2AI score0.00289EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/28 12:17 a.m.16 views

CVE-2026-38346

An integer overflow in the yuv2planeX8c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...

7.5CVSS5.9AI score0.00324EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/28 12:17 a.m.15 views

CVE-2026-38343

An integer overflow in the libavfilter/vfscale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...

6.5CVSS5.9AI score0.00245EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/28 12:17 a.m.14 views

CVE-2026-38349

An integer overflow in the hScale16To19c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

7.5CVSS5.9AI score0.00324EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/28 12:17 a.m.17 views

CVE-2026-38347

A heap overflow in the ffswsalphablendaway function libswscale/alphablend.c of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS5.9AI score0.00329EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/28 12:17 a.m.16 views

CVE-2026-39944

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway RGW protects STS session tokens with an AES-128-CBC handler that provides no message authentication, allowing an attacker who holds any valid ST...

8.8CVSS5.8AI score0.0017EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/28 12:17 a.m.12 views

CVE-2026-38344

A NULL pointer dereference in the getminbuffersize function /libswscale/slice.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...

7.5CVSS5.9AI score0.00324EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/28 12:17 a.m.14 views

CVE-2026-38345

A Division-by-Zero vulnerability in the ffswsinitsinglecontext function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via a crafted input...

6.5CVSS5.9AI score0.00245EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/08/28 12:17 a.m.16 views

CVE-2026-38348

An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted image file...

7.5CVSS5.9AI score0.00324EPSS
SaveExploits0References3
Total number of security vulnerabilities80010