https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 22:31:50 +0000 https://db.gcve.eu/vuln/cve-2026-93077 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>cxl/features: Clamp Get Feature output size to the remaining buffer</p> <p>cxl_get_feature() reads a feature in a loop but passes a fixed size_out as the output capacity every iteration. On the last partial iteration the buffer has less room left, so a device that returns more than asked can overflow feat_out.</p> <p>Use the per-iter size data_to_rd_size, which already tracks the remaining room, as the output capacity.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>cxl/features: Clamp Get Feature output size to the remaining buffer</p> <p>cxl_get_feature() reads a feature in a loop but passes a fixed size_out as the output capacity every iteration. On the last partial iteration the buffer has less room left, so a device that returns more than asked can overflow feat_out.</p> <p>Use the per-iter size data_to_rd_size, which already tracks the remaining room, as the output capacity.</p> https://db.gcve.eu/vuln/cve-2026-93077