Vuldb Updates

A vulnerability marked as critical has been reported in TOTOLINK NR1800X 9.1.0u.6279_B20210910. Affected by this vulnerability is the function UploadCustomModule. The manipulation of the argument File leads to stack-based buffer overflow. This vulnerability is documented as CVE-2022-41520. The attack requires being on the local network. There is not any exploit available.

A vulnerability described as critical has been identified in TOTOLINK NR1800X 9.1.0u.6279_B20210910. Affected by this issue is the function setIpPortFilterRules. The manipulation of the argument sPort/ePort results in stack-based buffer overflow. This vulnerability is reported as CVE-2022-41521. The attacker must have access to the local network to execute the attack. No exploit exists.

A vulnerability labeled as critical has been found in TOTOLINK NR1800X 9.1.0u.6279_B20210910. Affected is the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi. Executing a manipulation can lead to command injection. This vulnerability is registered as CVE-2022-41518. The attack requires access to the local network. No exploit is available.

A vulnerability classified as critical was found in Linux Kernel up to 5.11. This affects an unknown part of the component KVM API. The manipulation results in out-of-bounds write. This vulnerability is cataloged as CVE-2021-3501. The attack must originate from the local network. There is no exploit available. Upgrading the affected component is advised.

A vulnerability was found in Linux Kernel up to 5.12-rc5. It has been declared as critical. The affected element is an unknown function of the component Nosy Driver. Executing a manipulation can lead to use after free. This vulnerability appears as CVE-2021-3483. The attacker needs to be present on the local network. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel and classified as problematic. This issue affects the function pfkey_register of the file net/key/af_key.c of the component Kernel Memory Handler. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2022-1353. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability has been found in Linux Kernel up to 6.8.2 and classified as critical. Affected by this issue is the function mac802154_llsec_key_del in the library lib/refcount.c. This manipulation causes use after free. This vulnerability is registered as CVE-2024-26961. The attack requires access to the local network. No exploit is available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.8.2 and classified as critical. This affects the function zcrypt_card of the component s390. Such manipulation leads to use after free. This vulnerability is documented as CVE-2024-26957. The attack requires being on the local network. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.8.2. It has been declared as critical. This issue affects the function nfs_generic_commit_list in the library lib/refcount.c. Executing a manipulation can lead to use after free. This vulnerability appears as CVE-2024-26958. The attacker needs to be present on the local network. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in Linux Kernel up to 6.8.2. Affected is the function free_swap_and_cache/swapoff. Executing a manipulation can lead to race condition. The identification of this vulnerability is CVE-2024-26960. The attack needs to be done within the local network. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability classified as problematic was found in Linux Kernel up to 6.8.2. Affected by this issue is the function qcom_find_freq of the component mmcc-msm8974. The manipulation results in out-of-bounds read. This vulnerability is identified as CVE-2024-26965. The attack can only be performed from the local network. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.8.2. This affects the function qcom_find_freq of the component mmcc-apq8084. This manipulation causes out-of-bounds read. This vulnerability is tracked as CVE-2024-26966. The attack is only possible within the local network. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.8.2. This vulnerability affects the function qcom_find_freq of the component camcc-sc8280xp. Such manipulation leads to out-of-bounds read. This vulnerability is listed as CVE-2024-26967. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.6.23/6.7.11/6.8.2 and classified as problematic. This issue affects the function qcom_find_freq of the component gcc-ipq9574. Performing a manipulation results in out-of-bounds read. This vulnerability is cataloged as CVE-2024-26968. The attack must originate from the local network. There is no exploit available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.8.2 and classified as problematic. Impacted is the function qcom_find_freq of the component gcc-ipq8074. Executing a manipulation can lead to out-of-bounds read. This vulnerability is registered as CVE-2024-26969. The attack requires access to the local network. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function hca_type_show of the file drivers/infiniband/core/sysfs.c of the component RDMA Ionic. Such manipulation of the argument node_desc leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2026-53371. Local access is required to approach this attack. No exploit exists. It is best practice to apply a patch to resolve this issue.

A vulnerability has been found in Linux Kernel and classified as very critical. This impacts an unknown function of the component VT-d. Performing a manipulation results in privilege escalation. This vulnerability was named CVE-2026-53372. The attack may be initiated remotely. There is no available exploit. It is recommended to apply a patch to fix this issue.

A vulnerability categorized as very critical has been discovered in Linux Kernel. This vulnerability affects the function mmap_prepare of the component Vma. Such manipulation leads to privilege escalation. This vulnerability is listed as CVE-2026-53373. The attack may be performed from remote. There is no available exploit. It is advisable to implement a patch to correct this issue.

A vulnerability classified as critical was found in Linux Kernel. The affected element is the function udf_read_tagged of the component Udf. The manipulation results in Local Privilege Escalation. This vulnerability is known as CVE-2026-53369. Attacking locally is a requirement. No exploit is available. It is advisable to implement a patch to correct this issue.

A vulnerability, which was classified as critical, has been found in Linux Kernel. The impacted element is an unknown function of the file /x86/intel of the component Acr Mask. This manipulation of the argument config2 causes privilege escalation. This vulnerability is handled as CVE-2026-53370. The attack can be initiated remotely. There is not any exploit available. Applying a patch is the recommended action to fix this issue.