Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 21

Количество 21

ubuntu логотип

CVE-2026-23474

7 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: mtd: Avoid boot crash in RedBoot partition table parser Given CONFIG_FORTIFY_SOURCE=y and a recent compiler, commit 439a1bcac648 ("fortify: Use __builtin_dynamic_object_size() when available") produces the warning below and an oops. Searching for RedBoot partition table in 50000000.flash at offset 0x7e0000 ------------[ cut here ]------------ WARNING: lib/string_helpers.c:1035 at 0xc029e04c, CPU#0: swapper/0/1 memcmp: detected buffer overflow: 15 byte read of buffer size 14 Modules linked in: CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.19.0 #1 NONE As Kees said, "'names' is pointing to the final 'namelen' many bytes of the allocation ... 'namelen' could be basically any length at all. This fortify warning looks legit to me -- this code used to be reading beyond the end of the allocation." Since the size of the dynamic allocation is calculated with strlen() we can use strcmp() instead of memcmp() and remain wi...

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2026-23474

7 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: mtd: Avoid boot crash in RedBoot partition table parser Given CONFIG_FORTIFY_SOURCE=y and a recent compiler, commit 439a1bcac648 ("fortify: Use __builtin_dynamic_object_size() when available") produces the warning below and an oops. Searching for RedBoot partition table in 50000000.flash at offset 0x7e0000 ------------[ cut here ]------------ WARNING: lib/string_helpers.c:1035 at 0xc029e04c, CPU#0: swapper/0/1 memcmp: detected buffer overflow: 15 byte read of buffer size 14 Modules linked in: CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.19.0 #1 NONE As Kees said, "'names' is pointing to the final 'namelen' many bytes of the allocation ... 'namelen' could be basically any length at all. This fortify warning looks legit to me -- this code used to be reading beyond the end of the allocation." Since the size of the dynamic allocation is calculated with strlen() we can use strcmp() instead of memcmp() and remain wi...

EPSS: Низкий
nvd логотип

CVE-2026-23474

7 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: mtd: Avoid boot crash in RedBoot partition table parser Given CONFIG_FORTIFY_SOURCE=y and a recent compiler, commit 439a1bcac648 ("fortify: Use __builtin_dynamic_object_size() when available") produces the warning below and an oops. Searching for RedBoot partition table in 50000000.flash at offset 0x7e0000 ------------[ cut here ]------------ WARNING: lib/string_helpers.c:1035 at 0xc029e04c, CPU#0: swapper/0/1 memcmp: detected buffer overflow: 15 byte read of buffer size 14 Modules linked in: CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.19.0 #1 NONE As Kees said, "'names' is pointing to the final 'namelen' many bytes of the allocation ... 'namelen' could be basically any length at all. This fortify warning looks legit to me -- this code used to be reading beyond the end of the allocation." Since the size of the dynamic allocation is calculated with strlen() we can use strcmp() instead

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2026-23474

7 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: m ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-hvxh-97j9-4hcx

7 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: mtd: Avoid boot crash in RedBoot partition table parser Given CONFIG_FORTIFY_SOURCE=y and a recent compiler, commit 439a1bcac648 ("fortify: Use __builtin_dynamic_object_size() when available") produces the warning below and an oops. Searching for RedBoot partition table in 50000000.flash at offset 0x7e0000 ------------[ cut here ]------------ WARNING: lib/string_helpers.c:1035 at 0xc029e04c, CPU#0: swapper/0/1 memcmp: detected buffer overflow: 15 byte read of buffer size 14 Modules linked in: CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.19.0 #1 NONE As Kees said, "'names' is pointing to the final 'namelen' many bytes of the allocation ... 'namelen' could be basically any length at all. This fortify warning looks legit to me -- this code used to be reading beyond the end of the allocation." Since the size of the dynamic allocation is calculated with strlen() we can use strcmp() inst...

CVSS3: 5.5
EPSS: Низкий
fstec логотип

BDU:2026-12502

8 месяцев назад

Уязвимость функции parse_redboot_partitions() модуля drivers/mtd/parsers/redboot.c драйвера памяти MTD ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.7
EPSS: Низкий
redos логотип

ROS-20261006-80-0114

20 дней назад

Уязвимость kernel-lt

CVSS3: 5.7
EPSS: Низкий
redos логотип

ROS-20261006-73-0113

20 дней назад

Уязвимость kernel-lt

CVSS3: 5.7
EPSS: Низкий
altlinux логотип

ALT-PU-2026-6774

7 месяцев назад

ALT-PU-2026-6774: package `kernel-image-6.18` update to version 6.18.20-alt1

CVSS3: 9.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:2217-1

5 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:2238-1

4 месяца назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:20826-1

5 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2026-6748

7 месяцев назад

ALT-PU-2026-6748: package `kernel-image-un-def` update to version 6.1.167-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-7359

6 месяцев назад

ALT-PU-2026-7359: package `kernel-image-std-def` update to version 5.10.253-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-7109

6 месяцев назад

ALT-PU-2026-7109: package `kernel-image-rt` update to version 5.10.254-alt1.rt150

CVSS3: 9.8
EPSS: Низкий
oracle-oval логотип

ELSA-2026-50372

4 месяца назад

ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
altlinux логотип

ALT-PU-2026-7350

6 месяцев назад

ALT-PU-2026-7350: package `kernel-image-pine` update to version 6.18.27-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-6044

7 месяцев назад

ALT-PU-2026-6044: package `kernel-image-rpi-un` update to version 6.12.79-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-7006

6 месяцев назад

ALT-PU-2026-7006: package `kernel-image-6.12` update to version 6.12.85-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-7004

6 месяцев назад

ALT-PU-2026-7004: package `kernel-image-rt` update to version 6.12.85-alt1

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-23474

In the Linux kernel, the following vulnerability has been resolved: mtd: Avoid boot crash in RedBoot partition table parser Given CONFIG_FORTIFY_SOURCE=y and a recent compiler, commit 439a1bcac648 ("fortify: Use __builtin_dynamic_object_size() when available") produces the warning below and an oops. Searching for RedBoot partition table in 50000000.flash at offset 0x7e0000 ------------[ cut here ]------------ WARNING: lib/string_helpers.c:1035 at 0xc029e04c, CPU#0: swapper/0/1 memcmp: detected buffer overflow: 15 byte read of buffer size 14 Modules linked in: CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.19.0 #1 NONE As Kees said, "'names' is pointing to the final 'namelen' many bytes of the allocation ... 'namelen' could be basically any length at all. This fortify warning looks legit to me -- this code used to be reading beyond the end of the allocation." Since the size of the dynamic allocation is calculated with strlen() we can use strcmp() instead of memcmp() and remain wi...

CVSS3: 5.5
0%
Низкий
7 месяцев назад
redhat логотип
CVE-2026-23474

In the Linux kernel, the following vulnerability has been resolved: mtd: Avoid boot crash in RedBoot partition table parser Given CONFIG_FORTIFY_SOURCE=y and a recent compiler, commit 439a1bcac648 ("fortify: Use __builtin_dynamic_object_size() when available") produces the warning below and an oops. Searching for RedBoot partition table in 50000000.flash at offset 0x7e0000 ------------[ cut here ]------------ WARNING: lib/string_helpers.c:1035 at 0xc029e04c, CPU#0: swapper/0/1 memcmp: detected buffer overflow: 15 byte read of buffer size 14 Modules linked in: CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.19.0 #1 NONE As Kees said, "'names' is pointing to the final 'namelen' many bytes of the allocation ... 'namelen' could be basically any length at all. This fortify warning looks legit to me -- this code used to be reading beyond the end of the allocation." Since the size of the dynamic allocation is calculated with strlen() we can use strcmp() instead of memcmp() and remain wi...

0%
Низкий
7 месяцев назад
nvd логотип
CVE-2026-23474

In the Linux kernel, the following vulnerability has been resolved: mtd: Avoid boot crash in RedBoot partition table parser Given CONFIG_FORTIFY_SOURCE=y and a recent compiler, commit 439a1bcac648 ("fortify: Use __builtin_dynamic_object_size() when available") produces the warning below and an oops. Searching for RedBoot partition table in 50000000.flash at offset 0x7e0000 ------------[ cut here ]------------ WARNING: lib/string_helpers.c:1035 at 0xc029e04c, CPU#0: swapper/0/1 memcmp: detected buffer overflow: 15 byte read of buffer size 14 Modules linked in: CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.19.0 #1 NONE As Kees said, "'names' is pointing to the final 'namelen' many bytes of the allocation ... 'namelen' could be basically any length at all. This fortify warning looks legit to me -- this code used to be reading beyond the end of the allocation." Since the size of the dynamic allocation is calculated with strlen() we can use strcmp() instead

CVSS3: 5.5
0%
Низкий
7 месяцев назад
debian логотип
CVE-2026-23474

In the Linux kernel, the following vulnerability has been resolved: m ...

CVSS3: 5.5
0%
Низкий
7 месяцев назад
github логотип
GHSA-hvxh-97j9-4hcx

In the Linux kernel, the following vulnerability has been resolved: mtd: Avoid boot crash in RedBoot partition table parser Given CONFIG_FORTIFY_SOURCE=y and a recent compiler, commit 439a1bcac648 ("fortify: Use __builtin_dynamic_object_size() when available") produces the warning below and an oops. Searching for RedBoot partition table in 50000000.flash at offset 0x7e0000 ------------[ cut here ]------------ WARNING: lib/string_helpers.c:1035 at 0xc029e04c, CPU#0: swapper/0/1 memcmp: detected buffer overflow: 15 byte read of buffer size 14 Modules linked in: CPU: 0 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.19.0 #1 NONE As Kees said, "'names' is pointing to the final 'namelen' many bytes of the allocation ... 'namelen' could be basically any length at all. This fortify warning looks legit to me -- this code used to be reading beyond the end of the allocation." Since the size of the dynamic allocation is calculated with strlen() we can use strcmp() inst...

CVSS3: 5.5
0%
Низкий
7 месяцев назад
fstec логотип
BDU:2026-12502

Уязвимость функции parse_redboot_partitions() модуля drivers/mtd/parsers/redboot.c драйвера памяти MTD ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.7
0%
Низкий
8 месяцев назад
redos логотип
ROS-20261006-80-0114

Уязвимость kernel-lt

CVSS3: 5.7
0%
Низкий
20 дней назад
redos логотип
ROS-20261006-73-0113

Уязвимость kernel-lt

CVSS3: 5.7
0%
Низкий
20 дней назад
altlinux логотип
ALT-PU-2026-6774

ALT-PU-2026-6774: package `kernel-image-6.18` update to version 6.18.20-alt1

CVSS3: 9.8
7 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:2217-1

Security update for the Linux Kernel

5 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:2238-1

Security update for the Linux Kernel

4 месяца назад
suse-cvrf логотип
openSUSE-SU-2026:20826-1

Security update for the Linux Kernel

5 месяцев назад
altlinux логотип
ALT-PU-2026-6748

ALT-PU-2026-6748: package `kernel-image-un-def` update to version 6.1.167-alt1

CVSS3: 9.8
7 месяцев назад
altlinux логотип
ALT-PU-2026-7359

ALT-PU-2026-7359: package `kernel-image-std-def` update to version 5.10.253-alt1

CVSS3: 9.8
6 месяцев назад
altlinux логотип
ALT-PU-2026-7109

ALT-PU-2026-7109: package `kernel-image-rt` update to version 5.10.254-alt1.rt150

CVSS3: 9.8
6 месяцев назад
oracle-oval логотип
ELSA-2026-50372

ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)

4 месяца назад
altlinux логотип
ALT-PU-2026-7350

ALT-PU-2026-7350: package `kernel-image-pine` update to version 6.18.27-alt1

CVSS3: 9.8
6 месяцев назад
altlinux логотип
ALT-PU-2026-6044

ALT-PU-2026-6044: package `kernel-image-rpi-un` update to version 6.12.79-alt1

CVSS3: 9.8
7 месяцев назад
altlinux логотип
ALT-PU-2026-7006

ALT-PU-2026-7006: package `kernel-image-6.12` update to version 6.12.85-alt1

CVSS3: 9.8
6 месяцев назад
altlinux логотип
ALT-PU-2026-7004

ALT-PU-2026-7004: package `kernel-image-rt` update to version 6.12.85-alt1

CVSS3: 9.8
6 месяцев назад

Уязвимостей на страницу