Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fixed a possible double-free in the error handling path. When auxiliarydeviceadd returns an error and then calls auxiliarydeviceuninit, the callback function adevrelease calls kfreemadev. We should not call kfreemadev...

CVE-2026-8173

The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web...

CVE-2026-8173 Information Disclosure via 'Copy learned MAC Addresses' Function

The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web...

EUVD-2026-64744

The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web...

CVE-2026-8173

The web GUI of Murrelektronik Xelity switches is affected by an information disclosure vulnerability. When an authenticated administrator uses the 'Copy learned MAC Addresses' function, MAC addresses from the device's MAC address table are logged. Due to improper generation of error messages , an...

CVE-2026-8173 Information Disclosure via 'Copy learned MAC Addresses' Function

The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web...

libcupsfilters: cups-filters: libcupsfilters: CUPS image filter process abort via malformed PNG

A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit this by submitti...

MiracleLinux 9 : dracut-057-120.git20260728.el9_8 (AXSA:2026-1634:06)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1634:06 advisory. dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die CVE-2026-15816 Tenable has extracted the...

PT-2026-79832

The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web...

IPC web Firefox Thunderbird DoS

The vulnerability of the IPC web browser Firefox and the email client Thunderbird is related to context privilege switching errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ImageMagick Pointer Assignment DoS

The vulnerability of the console-based graphic editor ImageMagick is related to pointer assignment errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Linux kernel i2c-i801 DoS

The vulnerability in the i2c/busses/i2c-i801.c component of the Linux kernel is related to dereferencing errors. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

gfs2 DoS

The vulnerability of the gfs2 component in Linux operating systems is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel verifier DoS

The vulnerability in the verifier.c component of the Linux kernel is related to errors occurring during link count updates. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Firefox Thunderbird Confidential Data Access

The vulnerability in the Firefox web browser and Thunderbird email client is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...

Linux kernel TCP SYN recv Data Compromise

The vulnerability of the tcpv6synrecvsock and tcpv4synrecvsock functions in the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux kernel RDMA DoS

The vulnerability in the RDMA/rxe components of the Linux kernel is related to errors occurring during link counter updates. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

SUSE CVE-2026-74718

In the Linux kernel, the following vulnerability has been resolved: devlink: fix net namespace reference leak in reload devlinknlreloaddoit calls devlinknetnsget, which returns a net with a held reference. When the requested namespace differs from the current one and the reload action is not...

EUVD-2026-64597

The Infineon Airoc Wi-Fi driver's transmit callback airocmgmtsend in drivers/wifi/infineon/airocwifi.c allocates a netbuf from the fixed airocpool for every outbound packet. When whdnetworksendethernetdata returns a synchronous failure, the underlying WHD library does not take ownership of the...

CVE-2026-74721

In the Linux kernel, the following vulnerability has been resolved: accel/amxdna: Fix page-insertion errors in amdxdnainsertpages Two error paths in amdxdnainsertpages called vma-vmops-closevma before returning an error code to the caller. This is incorrect: amdxdnagemobjmmap registers an HMM...