Количество 24
Количество 24
CVE-2026-64018
In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-bounds array access In mana_hwc_rx_event_handler(), rx_req_idx is derived from sge->address in DMA-coherent memory. In Confidential VMs (SEV-SNP/TDX), this memory is shared unencrypted and HW can modify WQE contents at any time. No bounds check exists on rx_req_idx, which can lead to an out-of-bounds access into reqs[]. Add bounds check on rx_req_idx in mana_hwc_rx_event_handler() before using it to index the reqs[] array.
CVE-2026-64018
In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-bounds array access In mana_hwc_rx_event_handler(), rx_req_idx is derived from sge->address in DMA-coherent memory. In Confidential VMs (SEV-SNP/TDX), this memory is shared unencrypted and HW can modify WQE contents at any time. No bounds check exists on rx_req_idx, which can lead to an out-of-bounds access into reqs[]. Add bounds check on rx_req_idx in mana_hwc_rx_event_handler() before using it to index the reqs[] array.
CVE-2026-64018
In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-bounds array access In mana_hwc_rx_event_handler(), rx_req_idx is derived from sge->address in DMA-coherent memory. In Confidential VMs (SEV-SNP/TDX), this memory is shared unencrypted and HW can modify WQE contents at any time. No bounds check exists on rx_req_idx, which can lead to an out-of-bounds access into reqs[]. Add bounds check on rx_req_idx in mana_hwc_rx_event_handler() before using it to index the reqs[] array.
CVE-2026-64018
In the Linux kernel, the following vulnerability has been resolved: n ...
ROS-20260930-80-0122
Уязвимость kernel-lt
ROS-20260930-73-0088
Уязвимость kernel-lt
GHSA-r2vm-q278-6vpv
In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-bounds array access In mana_hwc_rx_event_handler(), rx_req_idx is derived from sge->address in DMA-coherent memory. In Confidential VMs (SEV-SNP/TDX), this memory is shared unencrypted and HW can modify WQE contents at any time. No bounds check exists on rx_req_idx, which can lead to an out-of-bounds access into reqs[]. Add bounds check on rx_req_idx in mana_hwc_rx_event_handler() before using it to index the reqs[] array.
RLSA-2026:63014
Important: kernel security, bug fix, and enhancement update
ELSA-2026-63014-0
ELSA-2026-63014-0: kernel security, bug fix, and enhancement update (IMPORTANT)
RLSA-2026:63129
Important: kernel security, bug fix, and enhancement update
ELSA-2026-63129-0
ELSA-2026-63129-0: kernel security, bug fix, and enhancement update (IMPORTANT)
RLSA-2026:61887
Important: kernel security, bug fix, and enhancement update
ELSA-2026-61887-0
ELSA-2026-61887-0: kernel security, bug fix, and enhancement update (IMPORTANT)
SUSE-SU-2026:4369-1
Security update for the Linux Kernel
ALT-PU-2026-8598
ALT-PU-2026-8598: package `kernel-image-un-def` update to version 6.1.175-alt1
ELBA-2026-500163
ELBA-2026-500163: Unbreakable Enterprise kernel bug fix update (NA)
SUSE-SU-2026:4254-1
Security update for the Linux Kernel
SUSE-SU-2026:4120-1
Security update for the Linux Kernel
ALT-PU-2026-8628
ALT-PU-2026-8628: package `kernel-image-6.18` update to version 6.18.34-alt1
ALT-PU-2026-9890
ALT-PU-2026-9890: package `kernel-image-rpi-un` update to version 6.12.94-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-64018 In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-bounds array access In mana_hwc_rx_event_handler(), rx_req_idx is derived from sge->address in DMA-coherent memory. In Confidential VMs (SEV-SNP/TDX), this memory is shared unencrypted and HW can modify WQE contents at any time. No bounds check exists on rx_req_idx, which can lead to an out-of-bounds access into reqs[]. Add bounds check on rx_req_idx in mana_hwc_rx_event_handler() before using it to index the reqs[] array. | CVSS3: 9.3 | 0% Низкий | 3 месяца назад |
 | CVE-2026-64018 In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-bounds array access In mana_hwc_rx_event_handler(), rx_req_idx is derived from sge->address in DMA-coherent memory. In Confidential VMs (SEV-SNP/TDX), this memory is shared unencrypted and HW can modify WQE contents at any time. No bounds check exists on rx_req_idx, which can lead to an out-of-bounds access into reqs[]. Add bounds check on rx_req_idx in mana_hwc_rx_event_handler() before using it to index the reqs[] array. | CVSS3: 8.7 | 0% Низкий | 3 месяца назад |
 | CVE-2026-64018 In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-bounds array access In mana_hwc_rx_event_handler(), rx_req_idx is derived from sge->address in DMA-coherent memory. In Confidential VMs (SEV-SNP/TDX), this memory is shared unencrypted and HW can modify WQE contents at any time. No bounds check exists on rx_req_idx, which can lead to an out-of-bounds access into reqs[]. Add bounds check on rx_req_idx in mana_hwc_rx_event_handler() before using it to index the reqs[] array. | CVSS3: 9.3 | 0% Низкий | 3 месяца назад |
| CVE-2026-64018 In the Linux kernel, the following vulnerability has been resolved: n ... | CVSS3: 9.3 | 0% Низкий | 3 месяца назад |
 | ROS-20260930-80-0122 Уязвимость kernel-lt | CVSS3: 9.3 | 0% Низкий | 26 дней назад |
| ROS-20260930-73-0088 Уязвимость kernel-lt | CVSS3: 9.3 | 0% Низкий | 26 дней назад |
| GHSA-r2vm-q278-6vpv In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-bounds array access In mana_hwc_rx_event_handler(), rx_req_idx is derived from sge->address in DMA-coherent memory. In Confidential VMs (SEV-SNP/TDX), this memory is shared unencrypted and HW can modify WQE contents at any time. No bounds check exists on rx_req_idx, which can lead to an out-of-bounds access into reqs[]. Add bounds check on rx_req_idx in mana_hwc_rx_event_handler() before using it to index the reqs[] array. | CVSS3: 9.3 | 0% Низкий | 3 месяца назад |
 | RLSA-2026:63014 Important: kernel security, bug fix, and enhancement update | около 2 месяцев назад | ||
| ELSA-2026-63014-0 ELSA-2026-63014-0: kernel security, bug fix, and enhancement update (IMPORTANT) | около 2 месяцев назад | ||
| RLSA-2026:63129 Important: kernel security, bug fix, and enhancement update | около 2 месяцев назад | ||
| ELSA-2026-63129-0 ELSA-2026-63129-0: kernel security, bug fix, and enhancement update (IMPORTANT) | около 2 месяцев назад | ||
| RLSA-2026:61887 Important: kernel security, bug fix, and enhancement update | около 2 месяцев назад | ||
| ELSA-2026-61887-0 ELSA-2026-61887-0: kernel security, bug fix, and enhancement update (IMPORTANT) | около 2 месяцев назад | ||
 | SUSE-SU-2026:4369-1 Security update for the Linux Kernel | 27 дней назад | ||
| ALT-PU-2026-8598 ALT-PU-2026-8598: package `kernel-image-un-def` update to version 6.1.175-alt1 | CVSS3: 9.8 | 4 месяца назад | |
| ELBA-2026-500163 ELBA-2026-500163: Unbreakable Enterprise kernel bug fix update (NA) | 3 месяца назад | ||
| SUSE-SU-2026:4254-1 Security update for the Linux Kernel | около 1 месяца назад | ||
| SUSE-SU-2026:4120-1 Security update for the Linux Kernel | около 2 месяцев назад | ||
| ALT-PU-2026-8628 ALT-PU-2026-8628: package `kernel-image-6.18` update to version 6.18.34-alt1 | CVSS3: 10 | 5 месяцев назад | |
| ALT-PU-2026-9890 ALT-PU-2026-9890: package `kernel-image-rpi-un` update to version 6.12.94-alt1 | CVSS3: 10 | 4 месяца назад |
Уязвимостей на страницу