ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()
CVE-2026-80829
ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()
#msrc
共收录 2151 条相关情报。
← 返回所有主题RDMA/rxe: Fix OOB in free_rd_atomic_resources()
CVE-2026-80863
RDMA/rxe: Fix OOB in free_rd_atomic_resources()
HID: hyperv: validate initial device info bounds
CVE-2026-80765
HID: hyperv: validate initial device info bounds
USB: c67x00: fix use-after-free in c67x00_add_iso_urb()
CVE-2026-80826
USB: c67x00: fix use-after-free in c67x00_add_iso_urb()
mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()
CVE-2026-80893
mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()
nvmet-auth: zero the AUTH_RECEIVE response buffer
CVE-2026-80791
nvmet-auth: zero the AUTH_RECEIVE response buffer
HID: magicmouse: do not keep a stale msc->input if no input is claimed
CVE-2026-80782
HID: magicmouse: do not keep a stale msc->input if no input is claimed
nfc: llcp: bound the connect_sn TLV walk to the skb
CVE-2026-80800
nfc: llcp: bound the connect_sn TLV walk to the skb
HID: nintendo: stop device IO before hid_hw_stop on probe failure
CVE-2026-80770
HID: nintendo: stop device IO before hid_hw_stop on probe failure
tcp: clamp route advmss to TCP_MIN_MSS
CVE-2026-80847
tcp: clamp route advmss to TCP_MIN_MSS
nvmet-fc: fix invalid free in LS IOD error path
CVE-2026-80790
nvmet-fc: fix invalid free in LS IOD error path
Bluetooth: hci_event: fix LE list UAF on reset
CVE-2026-80764
Bluetooth: hci_event: fix LE list UAF on reset
crypto: sun8i-ss - Remove crypto_rng interface
CVE-2026-80833
crypto: sun8i-ss - Remove crypto_rng interface
crypto: qce - fix CCM AAD buffer underallocation
CVE-2026-80832
crypto: qce - fix CCM AAD buffer underallocation
xfrm: espintcp: fix UAF during close
CVE-2026-80848
xfrm: espintcp: fix UAF during close
nfc: st21nfca: validate ATR_REQ length against the received frame
CVE-2026-80823
nfc: st21nfca: validate ATR_REQ length against the received frame
erofs: cap LZMA stream pool size
CVE-2026-80892
erofs: cap LZMA stream pool size
crypto: virtio - bound the akcipher result length
CVE-2026-80836
crypto: virtio - bound the akcipher result length
Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing
CVE-2026-18726
Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing
HID: sensor: custom: Fix use-after-free in enable_sensor
CVE-2026-80767
HID: sensor: custom: Fix use-after-free in enable_sensor