Threat database

This vulnerability concerns a gem reference leak in the drm/nouveau component's validate_init() function. It affects Microsoft products version 3.0 and 4.0. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches.

CVE-2026-98524 is a vulnerability in Microsoft software versions 3.0 and 4.0 related to clearing the security group list when mapping a memory region (MR) fails. The advisory does not provide detailed technical information or impact specifics beyond this description.

CVE-2026-98479 is a vulnerability related to the SCSI libiscsi_tcp component in Microsoft products, specifically versions 3.0 and 4.0. The description provided is minimal and does not detail the nature or impact of the vulnerability. No CVSS score or detailed technical impact information is available.

This vulnerability involves a use-after-free (UAF) and memory leaks occurring in the function llc_mac_hdr_init() within Microsoft software versions 3.0 and 4.0. The issue has been publicly disclosed but lacks detailed technical information and a CVSS score. No known exploits are reported in the wild, and no patch or remediation details are provided.

A vulnerability identified as CVE-2026-98644 affects Microsoft products version 3.0 and 4.0. The issue relates to the bpf subsystem and involves avoiding a soft lockup in the __htab_map_lookup_and_delete_batch() function. No CVSS score or detailed impact information is provided.

A vulnerability identified as CVE-2026-98602 affects Microsoft products related to Bluetooth BNEP functionality, specifically versions 3.0 and 4.0. The issue involves out-of-bounds reads on short RX/TX frames and control fallthrough. No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild.

CVE-2026-98495 is a vulnerability related to the ARP (Address Resolution Protocol) implementation in Microsoft software versions 3.0 and 4.0. The provided information does not include technical details about the nature of the flaw or its impact. No CVSS score or exploit information is available.

CVE-2026-98569 is a vulnerability related to the ip_gre component, specifically concerning the rejection of enabling collect metadata through changelink. The advisory references Microsoft products version 3.0 and 4.0 as affected. No detailed technical information, impact, or exploit data is provided.

CVE-2026-98535 addresses a vulnerability in the fsl/fman component related to a clock reference leak in the read_dts_node() function. The issue has been identified in Microsoft products, specifically versions 3.0 and 4.0. No detailed impact or exploitation information is provided.

A race condition vulnerability exists in the Bluetooth management function read_unconf_index_list() in Microsoft software versions 3.0 and 4.0. The issue has been publicly disclosed but lacks detailed technical information and a CVSS score.

A vulnerability identified as CVE-2026-98609 involves an object leak in the drm/virtio component when the function drm_gem_handle_create() fails. This issue affects Microsoft products version 3.0 and 4.0. No CVSS score or detailed impact information is provided.

A vulnerability identified as CVE-2026-98573 affects Microsoft products, specifically versions 3.0 and 4.0. It involves a pull-bound underflow issue in the skb_checksum_setup_ipv6() function within the network socket buffer (skbuff) handling. No CVSS score or detailed impact information is provided.

CVE-2026-98646 is a vulnerability involving the skipping of the cond_resched() function in inet_csk_listen_stop() when operating under BPF context. The vulnerability affects Microsoft products with versions 3.0 and 4.0. No detailed impact or exploitation information is provided.

This vulnerability involves the Bluetooth hci_sock component where event length validation is insufficient before filtering. It affects Microsoft products versions 3.0 and 4.0. No CVSS score or detailed impact information is provided.

This vulnerability involves the network component 'xps' in Microsoft products version 3.0 and 4.0, where an out of range traffic class is rejected. No detailed technical information or impact description is provided.

A vulnerability in the Bluetooth RFCOMM component causes a NULL pointer dereference due to improper handling of dlc->session in RFCOMM_CONNINFO. This flaw affects Microsoft products with versions 3.0 and 4.0.

This vulnerability, identified as CVE-2026-98561, relates to the handling of IPsec RX state under the XArray lock in Microsoft software versions 3.0 and 4.0. No detailed technical information or impact description is provided. The advisory references Microsoft's support lifecycle for further information.

A vulnerability identified as CVE-2026-98608 involves an object leak in the function virtio_gpu_resource_create_ioctl() within the drm/virtio component. The issue has been published but lacks detailed technical information and CVSS scoring. The affected versions are Microsoft product versions 3.0 and 4.0.

A vulnerability identified as CVE-2026-98499 affects Microsoft products versions 3.0 and 4.0 related to the HID wacom driver, specifically an out-of-bounds (OOB) read issue in the function wacom_wac_pen_serial_enforce(). The advisory provides no detailed technical information or impact description beyond the identification of the flaw. No CVSS score or exploit information is available.

A vulnerability identified as CVE-2026-98531 affects Microsoft products version 3.0 and 4.0 related to IPv6 Segment Routing (SR). The issue involves enforcing exact attribute length for the SEG6_ATTR_DST attribute. No CVSS score or detailed impact information is provided.