diff --git a/vulns/CVE-2026-23243.yml b/vulns/CVE-2026-23243.yml new file mode 100644 index 0000000..1373726 --- /dev/null +++ b/vulns/CVE-2026-23243.yml @@ -0,0 +1,8 @@ +reachability: local +memory_corruption: true +bug_class: out of bound write +impact: crash, possible code execution, data leak +privileges_required: true +notes: User controlled data length that if negative results in exceeding segment size causing out of bound write. CONFIG_INFINIBAND_USER_MAD needs to be enabled for exploitation +author: Microsoft +version: 0.1 \ No newline at end of file diff --git a/vulns/CVE-2026-23269.yml b/vulns/CVE-2026-23269.yml new file mode 100644 index 0000000..b375cec --- /dev/null +++ b/vulns/CVE-2026-23269.yml @@ -0,0 +1,8 @@ +reachability: local +memory_corruption: true +bug_class: out of bound read +impact: crash, data leak +privileges_required: true +notes: User controlled data can affect DFA state tables index causing out of bound write if the start state exceeds the number of states in the DFA. CONFIG_SECURITY_APPARMOR needs to be enabled for exploitation +author: Microsoft +version: 0.1 \ No newline at end of file