CVE-2026-64094
- EPSS 0.16%
- Veröffentlicht 19.07.2026 15:40:01
- Zuletzt bearbeitet 11.08.2026 16:11:41
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface Without rtnl_lock held, a hardif might be retrieved as primary interface of a meshif, but then (while operatin...
CVE-2026-64091
- EPSS 0.43%
- Veröffentlicht 19.07.2026 15:40:00
- Zuletzt bearbeitet 11.08.2026 15:36:30
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix TOCTOU race for reported vlans The local TT based TVLV is generated by first checking the number of VLANs which have at least one TT entry. A new buffer with th...
CVE-2026-64092
- EPSS 0.13%
- Veröffentlicht 19.07.2026 15:40:00
- Zuletzt bearbeitet 11.08.2026 15:56:10
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown The receiver shutdown timer handler, batadv_tp_receiver_shutdown(), is responsible for releasing the tp_vars r...
CVE-2026-64090
- EPSS 0.13%
- Veröffentlicht 19.07.2026 15:39:59
- Zuletzt bearbeitet 11.08.2026 15:36:11
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid empty VLAN responses The commit 16116dac2339 ("batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs") added checks to the local (direct)...
CVE-2026-64088
- EPSS 0.28%
- Veröffentlicht 19.07.2026 15:39:58
- Zuletzt bearbeitet 11.08.2026 15:32:36
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative tt_buff_len batadv_orig_node::tt_buff_len was declared as s16, but the field is never intended to hold a negative value. When a value greater than 3276...
CVE-2026-64089
- EPSS 0.55%
- Veröffentlicht 19.07.2026 15:39:58
- Zuletzt bearbeitet 11.08.2026 15:33:55
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative last_changeset_len batadv_piv_tt::last_changeset_len len was declared as s16, but the field is never intended to hold a negative value. When a value gr...
CVE-2026-64087
- EPSS 0.18%
- Veröffentlicht 19.07.2026 15:39:57
- Zuletzt bearbeitet 03.09.2026 16:12:43
In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) reject implausible blackbox record_count adm1266_nvmem_read_blackbox() loops over a record_count that comes straight from byte 3 of the BLACKBOX_INFO respons...
CVE-2026-64085
- EPSS 0.18%
- Veröffentlicht 19.07.2026 15:39:56
- Zuletzt bearbeitet 03.09.2026 12:36:50
In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer adm1266_pmbus_block_xfer() copies the device-supplied block payload into the caller-provided buffer u...
CVE-2026-64086
- EPSS 0.14%
- Veröffentlicht 19.07.2026 15:39:56
- Zuletzt bearbeitet 03.09.2026 16:12:53
In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer adm1266_pmbus_block_xfer() sets up the read transaction with .buf = data->read_buf, .len = ADM1266_PMBUS_...
CVE-2026-64084
- EPSS 0.14%
- Veröffentlicht 19.07.2026 15:39:55
- Zuletzt bearbeitet 03.09.2026 12:37:39
In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR adm1266_gpio_get_multiple() iterates the PDIO portion of the caller-supplied mask using for_each_set_bit_f...