CVE-2026-98263

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized streamconfig-type streamconfig is not initialized before being passed to sdwstreamaddslave. The type field may contain garbage and is later copied to stream-type by sdwconfigstream...

CVE-2026-98240 net: ip_tunnel: initialize `options_len` before referencing options

In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: initialize optionslen before referencing options The following command triggers a kernel panic: ip link add d0 type dummy; ip link set d0 up ip route add 10.30.0.0/16 \ encap ip id 300 geneveopts 4660:66:11223344 d...

CVE-2021-4034-pwnkit

CVE-2021-4034, PwnKit PwnKit에 대한 개념 증명 코드로, polkit의 pkexec에서 발생하는 로컬 권한 상승 취약점입니다. 기본 설치 상태에서 권한이 없는 로컬 사용자가 루트가 될 수 있습니다. 버그 정보 취약한 버전의 pkexec는 프로세스 인자 개수를 잘못 처리합니다. 이로 인해 제어된 환경 변수가 pkexec의 환경에 다시 유입되어, 공격자가 제어하는 공유 객체가 루트 권한으로 실행됩니다. 이 취약점은 2022년 1월 25일 Qualys Research Team에 의해 공개되었으며 CVSS...

RLSA-2026:75571 Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: sudo: TZ environment variable allows...

sudo security update

An update is available for sudo. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The sudo packages contain the sudo utility which allows system administrators to...

RLSA-2026:75580 Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: sudo: TZ environment variable allows...

sudo security update

An update is available for sudo. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The sudo packages contain the sudo utility which allows system administrators to...

CVE-2026-35029-PoC

CVE-2026-35029 — LiteLLM /config/update 권한 없는 접근 취약점 Broken Access Control LiteLLM 의 /config/update 엔드포인트는 호출자의 역할 권한을 확인하지 않습니다. 유효한 API Key를 가진 모든 인증된 사용자는관리자 권한 없이도 프록시 구성을 수정하고 악성 Pass-Through 엔드포인트를 등록하여 환경 변수 탈취, 임의 파일 읽기, 원격 코드 실행 등의 공격을 수행할 수 있습니다. Field| Value ---|--- CVE| CVE-2026-35029...

CVE-2023-4911

CVE-2023-4911「Looney Tunables」のPoC これは、glibc ダイナミックローダーの GLIBCTUNABLES 環境変数のパース関数 parsetunables のバグを悪用する、CVE-2023-4911（別名「Looney Tunables」）の PoC です。 コードは、glibc バージョン 2.35-0ubuntu3.3 を搭載した Ubuntu 22.04.3 でテスト済みです。この PoC を一般化する試みは行われていません（要するに「自分の環境では動く」というだけです）。したがって、環境によって動作は異なる可能性があります。...

AlmaLinux 10 : sudo (ALSA-2026:75579)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:75579 advisory. sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization CVE-2026-96512 Tenable has extracted the preceding description...

RockyLinux 9 : sudo (RLSA-2026:75571)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:75571 advisory. sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization CVE-2026-96512 Tenable has extracted the preceding description...

RockyLinux 10 : sudo (RLSA-2026:75579)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:75579 advisory. sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization CVE-2026-96512 Tenable has extracted the preceding description...

sudo security update

1.9.17-7 - CVE-2026-96512 sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization rhel-10.2.z 1.9.17-6 - Fix CVE-2026-82474: execveat2 intercept/logsubcmds bypass 1.9.17-5.p2 - Resolves: RHEL-212546 - Use canonicalized path if user path contains '..'...

AlmaLinux 9 : sudo (ALSA-2026:75571)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:75571 advisory. sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization CVE-2026-96512 Tenable has extracted the preceding description...

RockyLinux 8 : sudo (RLSA-2026:75580)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:75580 advisory. sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization CVE-2026-96512 Tenable has extracted the preceding description...

CentOS 9 : sudo-1.9.17p2-5.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the sudo-1.9.17p2-5.el9 build changelog. - TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization rhel-9.10 CVE-2026-96512 Note that Nessus has not tested for...

Oracle Linux 10 : sudo (ELSA-2026-75579)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-75579 advisory. - CVE-2026-96512 sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization rhel-10.2.z - Fix CVE-2026-82474: execveat2...

CVE-2026-98263: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized streamconfig-type streamconfig is not initialized before being passed to sdwstreamaddslave. The type field may contain garbage and is later copied to stream-type by sdwconfigstream...

PT-2026-106592

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream config-type stream config is not initialized before being passed to sdw stream add slave. The type field may contain garbage and is later copied to stream-type by sdw config...

Linux Distros Unpatched Vulnerability : CVE-2026-98263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: codecs: rt712-sdca-dmic: fix uninitialized streamconfig-type streamconfig is not initialized before being passed to sdwstreamaddslave. The type field may...