ROS-20260930-73-0141

The vulnerability of the setupnicdevices function in the drivers/net/ethernet/cavium/liquidio/liomain.c file of the Linux kernel is related to a offset error. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260930-73-0139

The vulnerability of the ptypeseqnext and ptypeseqshow functions in the net/core/net-procfs.c module of the Linux operating system is related to a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260930-73-0149

The vulnerability of the tcfctinit function in the net/sched/actct.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

PT-2026-103080

Name of the Vulnerable Software and Affected Versions EasyFlow .NET affected versions not specified Description Missing authentication allows unauthenticated remote attackers to obtain the plaintext passwords of other users through a specific API endpoint. Recommendations At the moment, there is ...

ALSA-2026:74132 Moderate: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math CVE-2026-64102 kernel: vmxnet3: fix BUGON in vmxnet3gethdrle...

ROS-20260930-73-0009

The vulnerability of the osdmapapplyincremental function in the net/ceph/osdmap.c module of the Linux kernel is related to an uncontrolled, exploitable condition. Exploitation of this vulnerability could allow a remote attacker to compromise the integrity of protected information or cause service...

CVE-2026-102457: Improper Limitation of a Pathname to a Restricted Directory

EasyFlow .NET developed by Digiwin has an Arbitrary File Read vulnerability. Authenticated remote attackers can exploit this vulnerability to download arbitrary system files...

ROS-20260930-73-0012

The vulnerability of the bpfprogtestrunxdp function in the net/bpf/testrun.c module, which is part of the networking functions in the Linux kernel, relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause service...

ROS-20260930-73-0034

The vulnerability of the updateeth regs async function in the drivers/net/usb/pegasus.c file of the Linux network adapter driver module is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20260930-73-0003

The vulnerability of the asyncsetregisters function in the drivers/net/usb/rtl8150.c file of the Linux kernel’s USB network adapter driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-66900

hw/net/virtio-net: strip trailing padding when caching RSC segment...

PT-2026-103077

Name of the Vulnerable Software and Affected Versions EasyFlow .NET affected versions not specified Description Insecure Deserialization allows unauthenticated remote attackers to execute arbitrary code on the server by sending maliciously crafted serialized content. Deserialization is the proces...

MiracleLinux 9 : kernel-5.14.0-687.39.1.el9_8 (AXSA:2026-1938:87)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1938:87 advisory. kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action...

RHEL 8 : kernel-rt (RHSA-2026:74132)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74132 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

AlmaLinux 9.2 [TuxCare] Security Update: containernetworking-plugins Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1772575666)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1772575666 advisory. - Non-random values for ticketageadd in session tickets in crypto/tls before Go 1.17.11 and Go 1.18.3 allow an attacker that can...

Moderate: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math CVE-2026-64102 kernel: vmxnet3: fix BUGON in vmxnet3gethdrle...

Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math CVE-2026-64102 kernel: vmxnet3: fix BUGON in vmxnet3gethdrlen for Geneve packets CVE-2026-68299 kernel: net/liquidio:...

AlmaLinux 9.6 [TuxCare] Security Update: grafana / grafana-selinux Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1772448200)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772448200 advisory. - The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters ...

Oracle Linux 8 : ruby:3.3 (ELSA-2026-72285)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-72285 advisory. - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252036 - Fix DoS via crafted IMAP responses in net-imap...

Rocky Linux 9.6 [TuxCare] Security Update: skopeo / skopeo-tests Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1772620440)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772620440 advisory. - The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameter...