Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 13

Количество 13

github логотип

GHSA-pwh4-8crg-2xvf

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tb_property_entry_valid() accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the null-termination logic: property->value.text[property->length * 4 - 1] = '\0'; When property->length is 0 this writes to offset -1 relative to the allocation. Reject zero-length entries early in the validator since they have no valid representation in the XDomain property protocol.

CVSS3: 5.5
EPSS: Низкий
ubuntu логотип

CVE-2026-53150

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tb_property_entry_valid() accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the null-termination logic: property->value.text[property->length * 4 - 1] = '\0'; When property->length is 0 this writes to offset -1 relative to the allocation. Reject zero-length entries early in the validator since they have no valid representation in the XDomain property protocol.

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2026-53150

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tb_property_entry_valid() accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the null-termination logic: property->value.text[property->length * 4 - 1] = '\0'; When property->length is 0 this writes to offset -1 relative to the allocation. Reject zero-length entries early in the validator since they have no valid representation in the XDomain property protocol.

CVSS3: 7
EPSS: Низкий
nvd логотип

CVE-2026-53150

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tb_property_entry_valid() accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the null-termination logic: property->value.text[property->length * 4 - 1] = '\0'; When property->length is 0 this writes to offset -1 relative to the allocation. Reject zero-length entries early in the validator since they have no valid representation in the XDomain property protocol.

CVSS3: 5.5
EPSS: Низкий
msrc логотип

CVE-2026-53150

3 месяца назад

thunderbolt: Reject zero-length property entries in validator

CVSS3: 7
EPSS: Низкий
debian логотип

CVE-2026-53150

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: t ...

CVSS3: 5.5
EPSS: Низкий
fstec логотип

BDU:2026-14010

4 месяца назад

Уязвимость функции tb_property_entry_valid() модуля drivers/thunderbolt/property.c драйвера общей поддержки USB4 и Thunderbolt ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 7
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:2914-1

2 месяца назад

Security update for the Linux Kernel

EPSS: Низкий
oracle-oval логотип

ELBA-2026-500163

около 1 месяца назад

ELBA-2026-500163: Unbreakable Enterprise kernel bug fix update (NA)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3166-1

около 2 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3130-1

2 месяца назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:21555-1

около 1 месяца назад

Security update for the Linux Kernel

EPSS: Низкий
oracle-oval логотип

ELSA-2026-500248

15 дней назад

ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-pwh4-8crg-2xvf

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tb_property_entry_valid() accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the null-termination logic: property->value.text[property->length * 4 - 1] = '\0'; When property->length is 0 this writes to offset -1 relative to the allocation. Reject zero-length entries early in the validator since they have no valid representation in the XDomain property protocol.

CVSS3: 5.5
0%
Низкий
3 месяца назад
ubuntu логотип
CVE-2026-53150

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tb_property_entry_valid() accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the null-termination logic: property->value.text[property->length * 4 - 1] = '\0'; When property->length is 0 this writes to offset -1 relative to the allocation. Reject zero-length entries early in the validator since they have no valid representation in the XDomain property protocol.

CVSS3: 5.5
0%
Низкий
3 месяца назад
redhat логотип
CVE-2026-53150

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tb_property_entry_valid() accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the null-termination logic: property->value.text[property->length * 4 - 1] = '\0'; When property->length is 0 this writes to offset -1 relative to the allocation. Reject zero-length entries early in the validator since they have no valid representation in the XDomain property protocol.

CVSS3: 7
0%
Низкий
3 месяца назад
nvd логотип
CVE-2026-53150

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject zero-length property entries in validator tb_property_entry_valid() accepts entries with length == 0 for DIRECTORY, DATA, and TEXT types. A zero-length TEXT entry passes validation but causes an underflow in the null-termination logic: property->value.text[property->length * 4 - 1] = '\0'; When property->length is 0 this writes to offset -1 relative to the allocation. Reject zero-length entries early in the validator since they have no valid representation in the XDomain property protocol.

CVSS3: 5.5
0%
Низкий
3 месяца назад
msrc логотип
CVE-2026-53150

thunderbolt: Reject zero-length property entries in validator

CVSS3: 7
0%
Низкий
3 месяца назад
debian логотип
CVE-2026-53150

In the Linux kernel, the following vulnerability has been resolved: t ...

CVSS3: 5.5
0%
Низкий
3 месяца назад
fstec логотип
BDU:2026-14010

Уязвимость функции tb_property_entry_valid() модуля drivers/thunderbolt/property.c драйвера общей поддержки USB4 и Thunderbolt ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 7
0%
Низкий
4 месяца назад
suse-cvrf логотип
SUSE-SU-2026:2914-1

Security update for the Linux Kernel

2 месяца назад
oracle-oval логотип
ELBA-2026-500163

ELBA-2026-500163: Unbreakable Enterprise kernel bug fix update (NA)

около 1 месяца назад
suse-cvrf логотип
SUSE-SU-2026:3166-1

Security update for the Linux Kernel

около 2 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:3130-1

Security update for the Linux Kernel

2 месяца назад
suse-cvrf логотип
openSUSE-SU-2026:21555-1

Security update for the Linux Kernel

около 1 месяца назад
oracle-oval логотип
ELSA-2026-500248

ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)

15 дней назад

Уязвимостей на страницу