Vuldb Updates

A vulnerability has been found in Linux Kernel up to 7.0-rc1 and classified as critical. This affects the function _next_ns_data of the component wifi. Performing a manipulation results in uninitialized pointer. This vulnerability is reported as CVE-2026-23367. The attacker must have access to the local network to execute the attack. No exploit exists. The affected component should be upgraded.

A vulnerability was found in F5 BIG-IP Next CNF, BIG-IP Next for Kubernetes and BIG-IP PEM and classified as problematic. Affected is an unknown function of the component Traffic Management Microkernel. The manipulation results in denial of service. This vulnerability was named CVE-2025-54479. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in F5 BIG-IP up to 15.1.10/16.1.6/17.1.2/17.5.1. This affects an unknown part of the component Appliance Mode. This manipulation causes os command injection. This vulnerability appears as CVE-2025-53868. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability labeled as problematic has been found in F5 BIG-IP APM up to 15.1.10/16.1.6/17.1.2/17.5.1. This affects an unknown part of the component iRules. Executing a manipulation can lead to denial of service. This vulnerability is registered as CVE-2025-53474. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

A vulnerability described as problematic has been identified in F5 BIG-IP APM up to 15.1.10/16.1.6/17.1.2/17.5.1. The impacted element is an unknown function of the component Traffic Management Microkernel. Such manipulation leads to allocation of resources. This vulnerability is documented as CVE-2025-53521. The attack can be executed remotely. Additionally, an exploit exists. Upgrading the affected component is recommended.

A vulnerability was found in F5 F5OS-A up to 1.5.2/1.8.0. It has been classified as problematic. This vulnerability affects unknown code of the component FIPS Hardware Security Module. Performing a manipulation results in information disclosure. This vulnerability was named CVE-2025-53860. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability identified as critical has been detected in F5 BIG-IP up to 15.1.10/16.1.6/17.1.2/17.5.1. The impacted element is an unknown function of the component PVA Feature. This manipulation causes incorrect control flow scoping. This vulnerability is tracked as CVE-2025-53856. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

A vulnerability marked as critical has been reported in F5 F5OS-A and F5OS-C. This vulnerability affects unknown code of the component SNMP. The manipulation leads to resource consumption. This vulnerability is documented as CVE-2025-47150. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as problematic has been found in F5 BIG-IP Next SPK and BIG-IP Next CNF. Impacted is the function HTTP::respond of the component iRule Handler. The manipulation results in resource consumption. This vulnerability is cataloged as CVE-2025-46706. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability, which was classified as critical, has been found in F5 BIG-IP, BIG-IP Next SPK and BIG-IP Next CNF. Affected is an unknown function of the component MPTCP. The manipulation leads to use after free. This vulnerability is traded as CVE-2025-48008. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability categorized as problematic has been discovered in F5 BIG-IP SSL Orchestrator up to 15.1.9/16.1.3/17.1.2/17.5.0. The affected element is an unknown function of the component Traffic Management Microkernel. The manipulation results in allocation of resources. This vulnerability is identified as CVE-2025-41430. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.0-rc2. It has been declared as critical. This issue affects the function mcp251x_open. The manipulation results in deadlock. This vulnerability is identified as CVE-2026-23357. The attack can only be performed from the local network. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.19.6/7.0-rc2 and classified as critical. The impacted element is the function __xe_exec_queue_fini. This manipulation causes allocation of resources. This vulnerability is handled as CVE-2026-23350. The attack can only be done within the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.19.6/7.0-rc2 and classified as critical. This affects the function libeth_rx_fq_create of the component ice. Such manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2026-23353. The attack can only be initiated within the local network. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.0-rc1. It has been classified as critical. This impacts the function drbd_al_begin_io_nonblock. Performing a manipulation results in improper update of reference count. This vulnerability was named CVE-2026-23356. The attack needs to be approached within the local network. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in Linux Kernel up to 6.18.16/6.19.6/7.0-rc1. This issue affects the function error_detected. Performing a manipulation results in uninitialized pointer. This vulnerability is cataloged as CVE-2026-23358. The attack must originate from the local network. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability described as critical has been identified in Linux Kernel up to 6.12.76/6.18.16/6.19.6/7.0-rc2. Impacted is the function nvme_alloc_admin_tag_set. Executing a manipulation can lead to memory leak. This vulnerability is registered as CVE-2026-23360. The attack requires access to the local network. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 7.0-rc2. It has been declared as critical. This affects the function efi_free_boot_services of the component EFI Boot Service. Executing a manipulation can lead to improper initialization. This vulnerability is handled as CVE-2026-23352. The attack can only be done within the local network. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.12.76/6.18.16/6.19.6/7.0-rc1. Affected by this vulnerability is the function fred_extint. This manipulation causes stack-based buffer overflow. The identification of this vulnerability is CVE-2026-23354. The attack needs to be done within the local network. There is no exploit available. You should upgrade the affected component.

A vulnerability described as critical has been identified in Linux Kernel up to 7.0-rc1. This vulnerability affects the function get_upper_ifindexes. Executing a manipulation can lead to out-of-bounds write. This vulnerability is tracked as CVE-2026-23359. The attack is only possible within the local network. No exploit exists. Upgrading the affected component is recommended.