Month: February 2026

Information published. Continue reading CVE-2025-23016 FastCGI fcgi2 (aka fcgi) 2.x through 2.4.4 has an integer overflow (and resultant heap-based buffer overflow) via crafted nameLen or valueLen values in data to the IPC socket. This occurs in ReadParams in fcgiapp.c.→

Information published. Continue reading CVE-2024-49854 block bfq: fix uaf for accessing waker_bfqq after splitting→

Information published. Continue reading CVE-2024-26785 iommufd: Fix protection fault in iommufd_test_syz_conv_iova→

Information published. Continue reading CVE-2024-42287 scsi: qla2xxx: Complete command early within lock→

Information published. Continue reading CVE-2019-11834 cJSON before 1.7.11 allows out-of-bounds access related to \x00 in a string literal.→

Information published. Continue reading CVE-2022-23523 rust-vmm linux-loader vulnerable to Out-of-bounds Read→

Information published. Continue reading CVE-2024-27018 netfilter: br_netfilter: skip conntrack input hook for promisc packets→

Information published. Continue reading CVE-2023-7192 Kernel: refcount leak in ctnetlink_create_conntrack()→