CVE Vulnerability Catalog

IBM Controller w wersjach 11.0.1, 11.1.0, 11.1.1 oraz 11.1.2 zawiera twardo zakodowane dane uwierzytelniające, takie jak hasło lub klucz kryptograficzny. Są one wykorzystywane do uwierzytelniania przychodzącego, komunikacji wychodzącej z komponentami zewnętrznymi oraz szyfrowania danych wewnętrznych.

CVE-2026-48972 involves improper control of filename for include/require statements in PHP, leading to PHP Local File Inclusion in SeedProd Pro.

A vulnerability has been identified in the Linux kernel related to a memory leak in the strp_abort_strp() function. When the stream parser is aborted, it may still hold a reference to a partially assembled message, leading to a memory leak.

In the Linux kernel, a vulnerability was discovered in the AFS filesystem involving a refcount leak during mmap operations. The issue stems from a partial revert of a previous change, as the .mmap_prepare call could incorrectly increment the refcount if a subsequent merge or allocation failure occurred. The previous behavior was restored pending full .mmap_prepare support.

A vulnerability was found in the Linux kernel's seg6 and rpl lightweight tunnels for IPv6. The seg6_input_core() and rpl_input() functions use a NOREF dst pointer after calling ip6_route_input(), which on PREEMPT_RT systems can lead to a race condition and use-after-free.

In the Linux kernel, a vulnerability was found in the edt-ft5x06 touchscreen driver. During debugfs teardown, a use-after-free condition could occur on the raw_buffer because manual cleanup was removed in favor of automatic I2C core handling. The debugfs read function could access the buffer after it was freed.

In the Linux kernel, a vulnerability was found in the ext4 filesystem's check_xattrs() function. The bounds check incorrectly allowed the next extended attribute entry pointer to land too close to the end of the valid region, leading to an out-of-bounds memory read on the subsequent loop iteration.

In the Linux kernel, a vulnerability was found in the vmalloc memory allocation mechanism. The decay_va_pool_node() function can be invoked concurrently from two paths: during pool purging and via the shrinker, leading to races and potential memory leaks.

In the Linux kernel, a use-after-free (UAF) vulnerability was found in the ALSA aloop driver during format change. The issue occurs when loopback_check_format() stops capture while a concurrent close can free the runtime, leaving a stale peer substream pointer in the playback trigger path.

A vulnerability in the Linux kernel related to handling misaligned crypto length in rxrpc packets has been fixed. The changes include improving error handling during decryption and removing a warning that could be remotely triggered.

A vulnerability has been identified in the Linux kernel related to improper RX steering management after WQ objects are destroyed. After destroying the RSS QP, the RX steering configuration remains active, which may lead to errors in delivering RX completions to new TX objects.

A vulnerability has been identified in the Linux kernel in the acomp_save_req() function, which stores an incorrect pointer leading to memory corruption. The issue occurs during asynchronous request completion in hardware implementations like the QAT driver.

A vulnerability has been identified in the Linux kernel regarding the handling of nameoff pointers for trailing dirents in the EROFS filesystem. The issue arises from incorrect calculations that may lead to reading past the directory block.

A vulnerability in the Linux kernel has been resolved in KVM, which involved improper handling of VMMCALL calls when L1 did not want to intercept them. In such cases, KVM generates a #UD exception, allowing L2 to make hypercalls without L1's interaction.

A vulnerability in the Linux kernel related to potential use-after-free (UAF) and memory leak in the removal path for the atmel-sha204a component has been fixed.

A vulnerability has been identified in the Linux kernel regarding the validation of payload size before accessing journal metadata in RAID5. The functions r5c_recovery_analyze_meta_block() and r5l_recovery_verify_data_checksum_for_mb() do not validate payload sizes, which can lead to out-of-bounds reads.

A vulnerability has been identified in the Linux kernel within the mwifiex_adapter_cleanup() function that may lead to a use-after-free error. The issue arises when timer_delete() is called before the adapter structure is freed, potentially allowing access to freed adapter fields by an executing callback.

A vulnerability has been identified in the Linux kernel related to bounce buffer leaks in the nx842_crypto_{alloc,free}_ctx functions. The issue is due to improper buffer release, which should use free_pages() instead of free_page().

A vulnerability has been identified in the Linux kernel that allows users to set the 'damos_quota_goal->nid' value without proper validation. This can lead to unauthorized memory access outside the allocated range.

A vulnerability in the Linux kernel related to disconnecting deferred I/O from the lifecycle of the fb_info structure has been resolved. A new fb_deferred_io_state structure has been introduced to hold the state of deferred I/O, preventing issues with accessing graphics memory after device hot-unplug.