Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 14

Количество 14

ubuntu логотип

CVE-2026-53241

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: dummy: fix UMP event stack overread The dummy sequencer port forwards events by copying an incoming struct snd_seq_event into a stack temporary, rewriting source and destination, and dispatching the temporary to subscribers. That legacy event storage is smaller than struct snd_seq_ump_event. When a UMP event reaches the dummy client, the copy leaves the UMP flag set but only provides legacy-sized stack storage. The subscriber delivery path then uses snd_seq_event_packet_size() and copies a UMP-sized packet from that stack object, reading past the end of the temporary. Use the existing union __snd_seq_event storage and copy the packet size reported for the incoming event before rewriting the common routing fields. This preserves the full UMP packet for UMP events while keeping legacy event handling unchanged.

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2026-53241

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: dummy: fix UMP event stack overread The dummy sequencer port forwards events by copying an incoming struct snd_seq_event into a stack temporary, rewriting source and destination, and dispatching the temporary to subscribers. That legacy event storage is smaller than struct snd_seq_ump_event. When a UMP event reaches the dummy client, the copy leaves the UMP flag set but only provides legacy-sized stack storage. The subscriber delivery path then uses snd_seq_event_packet_size() and copies a UMP-sized packet from that stack object, reading past the end of the temporary. Use the existing union __snd_seq_event storage and copy the packet size reported for the incoming event before rewriting the common routing fields. This preserves the full UMP packet for UMP events while keeping legacy event handling unchanged.

CVSS3: 5.5
EPSS: Низкий
nvd логотип

CVE-2026-53241

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: dummy: fix UMP event stack overread The dummy sequencer port forwards events by copying an incoming struct snd_seq_event into a stack temporary, rewriting source and destination, and dispatching the temporary to subscribers. That legacy event storage is smaller than struct snd_seq_ump_event. When a UMP event reaches the dummy client, the copy leaves the UMP flag set but only provides legacy-sized stack storage. The subscriber delivery path then uses snd_seq_event_packet_size() and copies a UMP-sized packet from that stack object, reading past the end of the temporary. Use the existing union __snd_seq_event storage and copy the packet size reported for the incoming event before rewriting the common routing fields. This preserves the full UMP packet for UMP events while keeping legacy event handling unchanged.

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2026-53241

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: A ...

CVSS3: 5.5
EPSS: Низкий
redos логотип

ROS-20261009-80-0405

18 дней назад

Уязвимость kernel-lt

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-jcg9-m46h-g922

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: dummy: fix UMP event stack overread The dummy sequencer port forwards events by copying an incoming struct snd_seq_event into a stack temporary, rewriting source and destination, and dispatching the temporary to subscribers. That legacy event storage is smaller than struct snd_seq_ump_event. When a UMP event reaches the dummy client, the copy leaves the UMP flag set but only provides legacy-sized stack storage. The subscriber delivery path then uses snd_seq_event_packet_size() and copies a UMP-sized packet from that stack object, reading past the end of the temporary. Use the existing union __snd_seq_event storage and copy the packet size reported for the incoming event before rewriting the common routing fields. This preserves the full UMP packet for UMP events while keeping legacy event handling unchanged.

CVSS3: 5.5
EPSS: Низкий
altlinux логотип

ALT-PU-2026-10111

4 месяца назад

ALT-PU-2026-10111: package `kernel-image-6.18` update to version 6.18.37-alt1

CVSS3: 10
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3166-1

3 месяца назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3130-1

3 месяца назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2026-9890

4 месяца назад

ALT-PU-2026-9890: package `kernel-image-rpi-un` update to version 6.12.94-alt1

CVSS3: 10
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:21555-1

3 месяца назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2026-9892

4 месяца назад

ALT-PU-2026-9892: package `kernel-image-6.12` update to version 6.12.94-alt1

CVSS3: 10
EPSS: Низкий
oracle-oval логотип

ELSA-2026-500248

около 2 месяцев назад

ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
altlinux логотип

ALT-PU-2026-11671

3 месяца назад

ALT-PU-2026-11671: package `kernel-image-rt` update to version 6.12.98-alt1

CVSS3: 10
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-53241

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: dummy: fix UMP event stack overread The dummy sequencer port forwards events by copying an incoming struct snd_seq_event into a stack temporary, rewriting source and destination, and dispatching the temporary to subscribers. That legacy event storage is smaller than struct snd_seq_ump_event. When a UMP event reaches the dummy client, the copy leaves the UMP flag set but only provides legacy-sized stack storage. The subscriber delivery path then uses snd_seq_event_packet_size() and copies a UMP-sized packet from that stack object, reading past the end of the temporary. Use the existing union __snd_seq_event storage and copy the packet size reported for the incoming event before rewriting the common routing fields. This preserves the full UMP packet for UMP events while keeping legacy event handling unchanged.

CVSS3: 5.5
0%
Низкий
4 месяца назад
redhat логотип
CVE-2026-53241

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: dummy: fix UMP event stack overread The dummy sequencer port forwards events by copying an incoming struct snd_seq_event into a stack temporary, rewriting source and destination, and dispatching the temporary to subscribers. That legacy event storage is smaller than struct snd_seq_ump_event. When a UMP event reaches the dummy client, the copy leaves the UMP flag set but only provides legacy-sized stack storage. The subscriber delivery path then uses snd_seq_event_packet_size() and copies a UMP-sized packet from that stack object, reading past the end of the temporary. Use the existing union __snd_seq_event storage and copy the packet size reported for the incoming event before rewriting the common routing fields. This preserves the full UMP packet for UMP events while keeping legacy event handling unchanged.

CVSS3: 5.5
0%
Низкий
4 месяца назад
nvd логотип
CVE-2026-53241

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: dummy: fix UMP event stack overread The dummy sequencer port forwards events by copying an incoming struct snd_seq_event into a stack temporary, rewriting source and destination, and dispatching the temporary to subscribers. That legacy event storage is smaller than struct snd_seq_ump_event. When a UMP event reaches the dummy client, the copy leaves the UMP flag set but only provides legacy-sized stack storage. The subscriber delivery path then uses snd_seq_event_packet_size() and copies a UMP-sized packet from that stack object, reading past the end of the temporary. Use the existing union __snd_seq_event storage and copy the packet size reported for the incoming event before rewriting the common routing fields. This preserves the full UMP packet for UMP events while keeping legacy event handling unchanged.

CVSS3: 5.5
0%
Низкий
4 месяца назад
debian логотип
CVE-2026-53241

In the Linux kernel, the following vulnerability has been resolved: A ...

CVSS3: 5.5
0%
Низкий
4 месяца назад
redos логотип
ROS-20261009-80-0405

Уязвимость kernel-lt

CVSS3: 5.5
0%
Низкий
18 дней назад
github логотип
GHSA-jcg9-m46h-g922

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: dummy: fix UMP event stack overread The dummy sequencer port forwards events by copying an incoming struct snd_seq_event into a stack temporary, rewriting source and destination, and dispatching the temporary to subscribers. That legacy event storage is smaller than struct snd_seq_ump_event. When a UMP event reaches the dummy client, the copy leaves the UMP flag set but only provides legacy-sized stack storage. The subscriber delivery path then uses snd_seq_event_packet_size() and copies a UMP-sized packet from that stack object, reading past the end of the temporary. Use the existing union __snd_seq_event storage and copy the packet size reported for the incoming event before rewriting the common routing fields. This preserves the full UMP packet for UMP events while keeping legacy event handling unchanged.

CVSS3: 5.5
0%
Низкий
4 месяца назад
altlinux логотип
ALT-PU-2026-10111

ALT-PU-2026-10111: package `kernel-image-6.18` update to version 6.18.37-alt1

CVSS3: 10
4 месяца назад
suse-cvrf логотип
SUSE-SU-2026:3166-1

Security update for the Linux Kernel

3 месяца назад
suse-cvrf логотип
SUSE-SU-2026:3130-1

Security update for the Linux Kernel

3 месяца назад
altlinux логотип
ALT-PU-2026-9890

ALT-PU-2026-9890: package `kernel-image-rpi-un` update to version 6.12.94-alt1

CVSS3: 10
4 месяца назад
suse-cvrf логотип
openSUSE-SU-2026:21555-1

Security update for the Linux Kernel

3 месяца назад
altlinux логотип
ALT-PU-2026-9892

ALT-PU-2026-9892: package `kernel-image-6.12` update to version 6.12.94-alt1

CVSS3: 10
4 месяца назад
oracle-oval логотип
ELSA-2026-500248

ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)

около 2 месяцев назад
altlinux логотип
ALT-PU-2026-11671

ALT-PU-2026-11671: package `kernel-image-rt` update to version 6.12.98-alt1

CVSS3: 10
3 месяца назад

Уязвимостей на страницу