EUVD-2026-67513

In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: fix unaligned memory access in timestamp adjustment Use getunalignedbe32 and putunalignedbe32 to safely read and write the timestamp fields. This prevents performance degradation due to unaligned memory acces...

PT-2026-82937

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter synproxy component where unaligned memory access occurs during timestamp adjustment. This can lead to performance degradation or system crashes on...

PT-2026-82995

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sht3x update client function where 16-bit temperature and humidity values are extracted from a stack-allocated byte array using be16 to cpup. Because the pointers...

PT-2026-82982

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RISC-V memory management where vmemmap start pfn is computed by rounding phys ram base down to VMEMMAP ADDR ALIGN. A unit mismatch occurs because MAX FOLIO VMEMMAP...

SUSE CVE-2026-72487

In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr before accessing We meet a crash when running stress-ng on x8664 machine: BUG: unable to handle page fault for address: ffa0000007f40000 RIP: 0010:pcigetromsize+0x52/0x220 Call Trace:...

PT-2026-82131

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ZBB-optimized strnlen function within the RISC-V architecture implementation. The loop loads a word ahead of the aligned boundary before performing the boundary...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099012)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099012 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4: replace BUGON with WARNON in fence emission sdmav40ringemitfence contains two...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: kho: Make sure that the scratch size is always aligned by CMAMINALIGNMENTBYTES. When using scratchscale, the scratch sizes are rounded up to CMAMINALIGNMENTBYTES, since they will be released as MIGRATECMA. This is not done when...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: gpu/buddy: Abandon the tryharder attempt when alignment cannot be respected. The tryharder contiguous fallback might return a range whose start offset does not match the caller’s minblocksize. When a candidate’s start is...

SUSE CVE-2026-68287

In the Linux kernel, the following vulnerability has been resolved: dropmonitor: fix size calculations for 64-bit attributes netdmpacketreportfill and netdmhwpacketreportfill use nlaputu6464bit to append 64-bit attributes NETDMATTRPC and NETDMATTRTIMESTAMP. On 32-bit architectures without...

CVE-2026-74551

A flaw was found in the Linux kernel's hwmon: nzxt-smart2 driver. This vulnerability allows for immediate and deterministic memory corruption on systems with non-coherent CPU architectures, such as ARM or MIPS. When operations like setting a fan speed or updating an interval trigger a USB Direct...

CVE-2026-72487

A flaw was found in the Linux kernel's handling of PCI Peripheral Component Interconnect ROM Read-Only Memory space. A local attacker could trigger an out-of-bounds read or an alignment fault by providing a malformed ROM image or an unaligned data structure address. This could lead to a system...

OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior

OpenAI on Tuesday revealed that it paused reinforcement learning RL training for its latest artificial intelligence AI models for two weeks while it shored up additional defenses and increased the scope of its monitoring to avert another Hugging Face-like incident. "As models become more capable,...

CVE-2026-72169

A flaw was found in the Linux kernel's 'kho' component, responsible for memory management. When a user specifies fixed scratch sizes via the command line, these sizes are not consistently aligned to 'CMAMINALIGNMENTBYTES'. This can result in the kernel releasing a pageblock that is only partially...

CVE-2026-72244

A flaw was found in the Linux kernel's gpu/buddy subsystem. The tryharder memory allocation fallback mechanism could return a memory range whose starting offset did not match the required minimum block size. This incorrect memory alignment could lead to improper memory handling within the kernel,...

Linux Distros Unpatched Vulnerability : CVE-2026-72244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpu/buddy: bail out of tryharder when alignment cannot be honoured The tryharder contiguous fallback could return a range whose start offset did not match the...

Linux Distros Unpatched Vulnerability : CVE-2026-72169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kho: make sure scratch size is always aligned by CMAMINALIGNMENTBYTES When using scratchscale, the scratch sizes are rounded up to CMAMINALIGNMENTBYTES since th...

ANT-2026-45SRWS4Q · bearssl · Heap Buffer Overflow

heap-buffer-overflow high Severity Claude high · Security research firm - · Maintainer - REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-45SRWS4Q: BearSSL Missing Block-Alignment Check in cbcchecklength → Unbounded Heap/Stack Write vi...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100135)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100135 advisory. In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring read pointer Though we do check the event ring...

SUSE CVE-2026-74551

In the Linux kernel, the following vulnerability has been resolved: hwmon: nzxt-smart2 DMA-align output buffer Sashiko reports: When sendoutputreport calls hidhwoutputreport, the underlying USB HID core calls usbinterruptmsg which maps this buffer directly for DMA. When the DMA mapping flushes or...