Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc (ALMALINUX9.6:CLSA-2026:1778930898)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778930898 advisory. - In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'getdumpable' logic The 'dumpability' of a tas...

CVE-2026-97491

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. When tearing down InfiniBand network connection paths, a shutdown worker thread may sleep indefinitely while waiting for pending operations to finish, blocking other work items in the queue. This condition can lead to...

CVE-2026-102714

nxicmpv6validateoptions scans the option area with while length 2 common/src/nxicmpv6validateoptions.c:79. An area whose size leaves a one- or two-byte residue exits the loop with that tail unexamined; the residue is not negative, so the function returns NXSUCCESS. Its zero-length rejection never...

OpenSSL Security Advisory 20260929

OpenSSL Security Advisory 20260929 - The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs t...

ROS-20260929-73-0004

The vulnerability of the nvme-multipath component of the Linux operating system’s kernel is related to errors during thread blocking. Exploiting this vulnerability allows an attacker to cause a service failure...

ROS-20260929-73-0153

The vulnerability of the Linux operating system’s kernel is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-18414

The ADI MAX32 ADC driver contains an out-of-bounds write vulnerability due to incorrect buffer size validation in drivers/adc/adc_max32.c. The start_read() function fails to account for sizeof(uint16_t) when comparing the buffer size against the sample count, allowing buffers that are half the re...

CVE-2026-18413 Out-of-bounds write in the NXP MCUX LPADC ADC driver due to missing adc_sequence buffer size validation

The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffersize field of struct adcsequence in include/zephyr/drivers/adc.h documents that "the driver must ensure that samples are not written beyond the limit and it must return an error if the...

CVE-2026-93829

A flaw was found in the Linux kernel. A race condition exists in the Server Message Block SMB client during background worker thread creation, allowing a newly spawned thread to access connection session data before it has been completely initialized. A local user initiating an SMB connection can...

ROS-20260928-73-0049

The vulnerability of the fs/fuse component in Linux operating systems is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-100647

vLLM versions before 0.29.0 contain a denial-of-service vulnerability in the cachesalt parameter accepted on OpenAI-compatible and Anthropic API endpoints, which lacks maximum length validation and is processed on the single EngineCore scheduler thread. Unauthenticated attackers can send HTTP...

PT-2026-99318

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.0 Description A denial-of-service issue exists in OpenAI-compatible and Anthropic API endpoints. The cache salt parameter lacks maximum length validation and is processed on the single EngineCore scheduler thread...

UBUNTU-CVE-2026-97932

In the Linux kernel, the following vulnerability has been resolved: tracing: Don't dereference traceeventfile in deferred trigger free The enableevent trigger defers traceeventputref to the trigger free kthread, but the traceeventfile can already be freed when the instance is removed. Keep the...

CVE-2026-98112 ksmbd: fix listener task lifetime on netdev events

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events The listener thread exits when its listening socket is shutdown. The netdevice notifier shuts down the socket before calling kthreadstop, so the taskstruct can be freed before...

CVE-2026-97951: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix hang for aborted WRITEPENDING commands When a LUNRESET aborts a WRITE command that is in the TRANSPORTWRITEPENDING state, the target core sets CMDTABORTED and waits for the frontend to finish processing. ...

PT-2026-98615

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iSCSI target of the SCSI subsystem where a LUN RESET a command used to reset a Logical Unit that aborts a WRITE command in the TRANSPORT WRITE PENDING state can...

SUSE CVE-2026-97513

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Release m2mctx after Instance Removed from List Possible use after free if IRQ thread manages to obtain spinlock between m2mctx release and wave5release function removing stream instance from list of...

CVE-2026-87721

Uncontrolled Resource Consumption CWE-400 / CWE-407 in the ANTLR 3 search query parser QueryParser / Query.g in Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allows an unauthenticated remote attacker or an authenticated user if anonymous read...

CVE-2026-87721 Denial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code Review

Uncontrolled Resource Consumption CWE-400 / CWE-407 in the ANTLR 3 search query parser QueryParser / Query.g in Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 allows an unauthenticated remote attacker or an authenticated user if anonymous read...

CVE-2026-87721

Gerrit Code Review versions 2.0.19 through 3.12.9, 3.13.0 through 3.13.8, and 3.14.0 through 3.14.2 are vulnerable to Uncontrolled Resource Consumption (CWE-400 / CWE-407) in the ANTLR 3 search query parser (QueryParser / Query.g ). An unauthenticated remote attacker can trigger a persistent deni...