Поиск уязвимостей
Количество 14
Количество 14
CVE-2026-80887
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use check_add_overflow for shader size+offset bound vmw_shader_define() validates the user-supplied shader window against its backing buffer with (u64)buffer->tbo.base.size < (u64)size + (u64)offset drm_vmw_shader_create_arg::offset is __u64 in the uapi; when it is near U64_MAX the unsigned addition wraps and the resulting tiny value passes the check. The unbounded offset is then stored in res->guest_memory_offset and forwarded to host SVGA shader-create commands. Use check_add_overflow() to detect the wrap and compare the resulting endpoint against the buffer size.
CVE-2026-80887
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use check_add_overflow for shader size+offset bound vmw_shader_define() validates the user-supplied shader window against its backing buffer with (u64)buffer->tbo.base.size < (u64)size + (u64)offset drm_vmw_shader_create_arg::offset is __u64 in the uapi; when it is near U64_MAX the unsigned addition wraps and the resulting tiny value passes the check. The unbounded offset is then stored in res->guest_memory_offset and forwarded to host SVGA shader-create commands. Use check_add_overflow() to detect the wrap and compare the resulting endpoint against the buffer size.
CVE-2026-80887
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use check_add_overflow for shader size+offset bound vmw_shader_define() validates the user-supplied shader window against its backing buffer with (u64)buffer->tbo.base.size < (u64)size + (u64)offset drm_vmw_shader_create_arg::offset is __u64 in the uapi; when it is near U64_MAX the unsigned addition wraps and the resulting tiny value passes the check. The unbounded offset is then stored in res->guest_memory_offset and forwarded to host SVGA shader-create commands. Use check_add_overflow() to detect the wrap and compare the resulting endpoint against the buffer size.
CVE-2026-80887
drm/vmwgfx: use check_add_overflow for shader size+offset bound
CVE-2026-80887
In the Linux kernel, the following vulnerability has been resolved: d ...
GHSA-377r-p949-gf93
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use check_add_overflow for shader size+offset bound vmw_shader_define() validates the user-supplied shader window against its backing buffer with (u64)buffer->tbo.base.size < (u64)size + (u64)offset drm_vmw_shader_create_arg::offset is __u64 in the uapi; when it is near U64_MAX the unsigned addition wraps and the resulting tiny value passes the check. The unbounded offset is then stored in res->guest_memory_offset and forwarded to host SVGA shader-create commands. Use check_add_overflow() to detect the wrap and compare the resulting endpoint against the buffer size.
RLSA-2026:82807
Important: kernel security update
ELSA-2026-82807
ELSA-2026-82807: kernel security update (IMPORTANT)
RLSA-2026:81552
Important: kernel security update
ELSA-2026-81552
ELSA-2026-81552: kernel security update (IMPORTANT)
RLSA-2026:88477
Important: kernel security, bug fix, and enhancement update
ELSA-2026-88477
ELSA-2026-88477: kernel security, bug fix, and enhancement update (IMPORTANT)
SUSE-SU-2026:5091-1
Security update for the Linux Kernel
ELSA-2026-500374
ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-80887 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use check_add_overflow for shader size+offset bound vmw_shader_define() validates the user-supplied shader window against its backing buffer with (u64)buffer->tbo.base.size < (u64)size + (u64)offset drm_vmw_shader_create_arg::offset is __u64 in the uapi; when it is near U64_MAX the unsigned addition wraps and the resulting tiny value passes the check. The unbounded offset is then stored in res->guest_memory_offset and forwarded to host SVGA shader-create commands. Use check_add_overflow() to detect the wrap and compare the resulting endpoint against the buffer size. | 0% Низкий | 2 месяца назад | |
 | CVE-2026-80887 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use check_add_overflow for shader size+offset bound vmw_shader_define() validates the user-supplied shader window against its backing buffer with (u64)buffer->tbo.base.size < (u64)size + (u64)offset drm_vmw_shader_create_arg::offset is __u64 in the uapi; when it is near U64_MAX the unsigned addition wraps and the resulting tiny value passes the check. The unbounded offset is then stored in res->guest_memory_offset and forwarded to host SVGA shader-create commands. Use check_add_overflow() to detect the wrap and compare the resulting endpoint against the buffer size. | CVSS3: 7 | 0% Низкий | 2 месяца назад |
 | CVE-2026-80887 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use check_add_overflow for shader size+offset bound vmw_shader_define() validates the user-supplied shader window against its backing buffer with (u64)buffer->tbo.base.size < (u64)size + (u64)offset drm_vmw_shader_create_arg::offset is __u64 in the uapi; when it is near U64_MAX the unsigned addition wraps and the resulting tiny value passes the check. The unbounded offset is then stored in res->guest_memory_offset and forwarded to host SVGA shader-create commands. Use check_add_overflow() to detect the wrap and compare the resulting endpoint against the buffer size. | 0% Низкий | 2 месяца назад | |
 | CVE-2026-80887 drm/vmwgfx: use check_add_overflow for shader size+offset bound | 0% Низкий | около 1 месяца назад | |
| CVE-2026-80887 In the Linux kernel, the following vulnerability has been resolved: d ... | 0% Низкий | 2 месяца назад | |
| GHSA-377r-p949-gf93 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: use check_add_overflow for shader size+offset bound vmw_shader_define() validates the user-supplied shader window against its backing buffer with (u64)buffer->tbo.base.size < (u64)size + (u64)offset drm_vmw_shader_create_arg::offset is __u64 in the uapi; when it is near U64_MAX the unsigned addition wraps and the resulting tiny value passes the check. The unbounded offset is then stored in res->guest_memory_offset and forwarded to host SVGA shader-create commands. Use check_add_overflow() to detect the wrap and compare the resulting endpoint against the buffer size. | 0% Низкий | 2 месяца назад | |
 | RLSA-2026:82807 Important: kernel security update | 24 дня назад | ||
| ELSA-2026-82807 ELSA-2026-82807: kernel security update (IMPORTANT) | 26 дней назад | ||
| RLSA-2026:81552 Important: kernel security update | 26 дней назад | ||
| ELSA-2026-81552 ELSA-2026-81552: kernel security update (IMPORTANT) | 27 дней назад | ||
| RLSA-2026:88477 Important: kernel security, bug fix, and enhancement update | 15 дней назад | ||
| ELSA-2026-88477 ELSA-2026-88477: kernel security, bug fix, and enhancement update (IMPORTANT) | 17 дней назад | ||
 | SUSE-SU-2026:5091-1 Security update for the Linux Kernel | 5 дней назад | ||
| ELSA-2026-500374 ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | около 1 месяца назад |
Уязвимостей на страницу