A heap-based out-of-bounds read vulnerability (CVE-2026-4891) exists in the DNSSEC validation component of dnsmasq, a lightweight DNS forwarder and DHCP server. This vulnerability can be triggered remotely via a crafted DNS packet, potentially causing a denial of service. The issue is part of a set of vulnerabilities addressed in dnsmasq updates. Red Hat has released security advisories and patches for affected versions in Red Hat Enterprise Linux 9 and 10. The vulnerability is rated with medium severity based on CVSS metrics for confidentiality impact but no integrity or availability impact. A fix is available through vendor-provided updates.
CVE-2025-66442 is a compiler-induced timing side channel vulnerability affecting Mbed TLS through version 4.0.0 and TF-PSA-Crypto through version 1.0.0. This issue occurs specifically when LLVM's select-optimize feature is used, impacting RSA and CBC/ECB decryption operations. The vulnerability is related to improper handling of timing variations introduced by compiler optimizations. No CVSS score or patch information is provided, and no known exploits are reported in the wild. The affected software includes Mbed TLS versions up to 4.0.0 and TF-PSA-Crypto up to 1.0.0. The vulnerability is categorized under CWE-385 (Timing Side Channel).
An out-of-bounds read vulnerability exists in Mbed TLS versions 3.x prior to 3.6.6 in the function mbedtls_ccm_finish(). This flaw allows attackers to read adjacent CCM context data when using the multipart CCM API with an oversized tag length parameter. The vulnerability is identified as CWE-125 (out-of-bounds read). No CVSS score or known exploits in the wild are reported. Affected versions include Mbed TLS 3.0 and related builds. No patch information is provided in the available data.
In the Linux kernel, the following vulnerability has been resolved:
net: Drop the lock in skb_may_tx_timestamp()
skb_may_tx_timestamp() may acquire sock::sk_callback_lock. The lock must
not be taken in IRQ context, only softirq is okay. A few drivers receive
the timestamp via a dedicated interrupt and complete the TX timestamp
from that handler. This will lead to a deadlock if the lock is already
write-locked on the same CPU.
Taking the lock can be avoided. The socket (pointed by the skb) will
remain valid until the skb is released. The ->sk_socket and ->file
member will be set to NULL once the user closes the socket which may
happen before the timestamp arrives.
If we happen to observe the pointer while the socket is closing but
before the pointer is set to NULL then we may use it because both
pointer (and the file's cred member) are RCU freed.
Drop the lock. Use READ_ONCE() to obtain the individual pointer. Add a
matching WRITE_ONCE() where the pointer are cleared.
In the Linux kernel, the following vulnerability has been resolved:
dlm: validate length in dlm_search_rsb_tree
The len parameter in dlm_dump_rsb_name() is not validated and comes
from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can
cause out-of-bounds write in dlm_search_rsb_tree().
Add length validation to prevent potential buffer overflow.
CVE-2026-43053 is a vulnerability in Microsoft software related to the xfs filesystem, specifically addressing a crash window in attribute dabtree inactivation. The affected version explicitly identified is version 3.0. No CVSS score is provided for this vulnerability. There is no information about known exploits in the wild or available patches. The description does not provide technical details beyond the title, and no vendor advisory content is included to clarify remediation status.
CVE-2026-43048 is a vulnerability in Microsoft software version 3.0 related to the HID core component. The issue involves a potential out-of-bounds (OOB) condition caused by a bogus memset() operation. No detailed technical or impact information is provided beyond this. There is no CVSS score assigned, and no known exploits in the wild have been reported. No patch or remediation information is available from the vendor advisory.
CVE-2026-43036 is a vulnerability related to the net subsystem involving the use of skb_header_pointer() for TCPv4 GSO frag_off check. The information provided is minimal and does not include technical details about the nature of the vulnerability or its impact. The affected version explicitly stated is version 3.0. There is no CVSS score or detailed vendor advisory available to clarify the severity or remediation status.
CVE-2026-43049 is a vulnerability in the Logitech HID++ driver component related to force feedback initialization. The issue involves a use-after-free condition that occurs when force feedback initialization fails. This vulnerability affects version 3.0 of the affected software. No CVSS score is provided, and there are no known exploits in the wild at this time.
CVE-2026-43022 is a vulnerability related to the Bluetooth component in Microsoft software version 3.0. The issue involves the function hci_cmd_sync_queue_once() returning an error code (-EEXIST) if a command already exists in the queue. No detailed technical or impact information is provided beyond this behavior. There is no CVSS score available, and no known exploits in the wild have been reported. No patch or remediation information is currently provided.
CVE-2026-43042 is a vulnerability related to the MPLS platform_label(s) pair protection mechanism in Microsoft software version 3.0. The provided information is minimal and does not include technical details about the nature of the vulnerability or its impact. No CVSS score or patch information is available, and there are no known exploits in the wild.
CVE-2026-43052 is a vulnerability related to the wifi mac80211 component, specifically involving the check of the TDLS flag in the ieee80211_tdls_oper function. The vulnerability affects Microsoft product version 3.0. No detailed technical or impact information is provided, and there is no CVSS score available for this issue.
CVE-2026-43010 is a medium severity vulnerability related to the Linux kernel's handling of BPF (Berkeley Packet Filter) programs, specifically rejecting sleepable kprobe_multi programs at attach time. The vulnerability affects Microsoft Azure Linux kernel version 3.0. It does not impact confidentiality or integrity but can cause availability issues. No known exploits are reported in the wild. No patch or remediation information is currently provided.
CVE-2026-43019 is a vulnerability in Microsoft software related to Bluetooth functionality, specifically in the hci_conn component's set_cig_params_sync function. The issue involves a potential use-after-free (UAF) condition. The affected version explicitly identified is version 3.0. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches at this time.
CVE-2026-43009 is a vulnerability related to the BPF (Berkeley Packet Filter) subsystem involving incorrect pruning due to atomic fetch precision tracking. The affected product is Microsoft software version 3.0. No detailed technical exploitation or impact information is provided. There is no CVSS score available for this vulnerability.
CVE-2026-43248 is a vulnerability related to the vhost component, specifically involving the movement of the vdpa group bound check to vhost_vdpa. The affected product version is Microsoft version 3.0. No detailed technical or impact information is provided beyond this. There is no CVSS score or known exploits in the wild at this time.
CVE-2026-43131 is a vulnerability in Microsoft software identified as a null pointer dereference issue in the drm/amd/pm component. The affected version is exactly 3.0. No CVSS score or detailed technical information is provided. There are no known exploits in the wild and no patch or remediation details are available in the provided data.