| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-90832 | 4.3 | bt_hci_le_per_adv_report_common() in subsys/bluetooth/host/scan.c handles the HCI_LE_Periodic_Advertising_Report (and _v2) event. It verified that the fixed event header was present and that the controller-declared Data_Length fits the tailroom of th | 2026-11-13 14:18:01 | 2026-11-10 22:21:14 |
| CVE-2026-87042 | 6.5 | The IEEE 1588 (PTP) port implementation in subsys/net/lib/ptp/port.c adopted the logMessageInterval field of a received Delay_Resp message without any validation. port_delay_resp_msg_process() stored the raw wire value (a full-range int8_t) into port | 2026-11-13 14:18:01 | 2026-11-10 22:21:12 |
| CVE-2026-88833 | 6.5 | A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer | 2026-11-13 14:18:01 | 2026-10-13 17:17:48 |
| CVE-2026-82391 | 9.1 | The HTTP/2 front-end of the Zephyr HTTP server aliased connection receive state as a scratch output. In subsys/net/lib/http/http_server_http2.c, handle_http2_static_fs_resource() passed &client->data_len as the file_size out-parameter of http_server_ | 2026-11-13 14:18:00 | 2026-11-10 22:21:05 |
| CVE-2026-77685 | 8.3 | The RFCOMM multiplexer control-channel handler in subsys/bluetooth/host/classic/rfcomm.c computed the echo length for a BT_RFCOMM_TEST command as buf->len - 1 and passed it to rfcomm_send_test(), whose length parameter is a uint8_t. A malformed but F | 2026-11-13 14:18:00 | 2026-11-10 22:20:53 |
| CVE-2026-62929 | - | Expired pointer dereference in the MigTD's virtio-vsock implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege and information disclosure. System software adversary with a pri | 2026-11-13 14:18:00 | 2026-11-10 18:17:45 |
| CVE-2026-59609 | 8.4 | In fence_manager_extract_iif of fence_manager.c, there is a possible way to corrupt kernel memory via fence identifier reuse due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. Use | 2026-11-13 14:17:59 | 2026-11-10 20:19:31 |
| CVE-2026-62275 | - | Detection of error condition without action in the MigTD's vmcall_raw transport for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combi | 2026-11-13 14:17:59 | 2026-11-10 18:17:44 |
| CVE-2026-61887 | - | Missing critical step in authentication in the MigTD SPDM rebind implementation for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege and information disclosure. Network adversary with an u | 2026-11-13 14:17:59 | 2026-11-10 18:17:44 |
| CVE-2026-61473 | - | Authentication bypass by capture-replay in the MigTD for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity a | 2026-11-13 14:17:59 | 2026-11-10 18:17:44 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40249
Zapisa po stranici: