1041102 matches found
PT-2026-94969
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF LSM component where security bpf prog free is called via bpf prog put rcu, which serves as the call rcu callback for non-sleepable programs. This sequence...
CVE-2026-93044: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for arena-related insns Since the interpreter does not support the arena-related insns, interpreter fallback should not be allowed for these insns in core.c::bpfprogselectruntime. Currently, whe...
PT-2026-94647
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the verifier fails to distinguish between kernel functions and BPF programs when checking for sleepable tracing or LSM...
CVE-2026-90299: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix sleepable check for tracing/lsm prog When CONFIGFUNCTIONERRORINJECTION is disabled, a sleepable tracing prog is allowed to attach to 'x64'-alike prefix symbols. It is because the verifier does not verify whether the symb...
PT-2026-94979
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/lima component where the lima vm create function is executed before the va start and va end variables are properly initialized. Consequently, these variables a...
CVE-2026-93183: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: drm/lima: call drmmminit with a valid allocation range limavmcreate is currently run before vastart and vaend are set up, meaning they are both 0. limavmcreate runs drmmminit with them as arguments for the allocator, and if...
CVE-2026-93173: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bpf,lsm: Drop bpfprogfree from sleepablelsmhooks bpfprogputrcu is the callrcu callback for non-sleepable programs. securitybpfprogfree called from there fires bpfprogfree in softirq; if a sleepable LSM prog is attached to that...
CVE-2026-90418: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix BUG in nilfscopydirtypages on dirty state mismatch Syzbot reported a kernel BUG triggered within nilfscopydirtypages, which copies dirty DAT file folios/pages to its shadow page cache. The BUG occurs when a retrieved...
Specter NFC Reader / Skimmer Bug-Sweep 2.9
Specter turns your Flipper Zero into a pocket counter-surveillance bug-sweep for active 13.56 MHz NFC readers - a hidden card skimmer slipped into a payment terminal, a covert reader behind a door panel, a rogue logger taped under a desk. It passively senses the RF carrier that any powered-on...
PT-2026-94841
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF interpreter where it fails to recognize the BPF JMP|BPF JA|BPF X instruction used for insn array maps. This failure leads to a kernel BUG triggered by the BUG ...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.161.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-contrib-0.161.0-0.1.hum1.src src...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: bind: bind-9.20.29-0.1.hum1 aarch64, x8664 bind-chroot-9.20.29-0.1.hum1 aarch64, x8664 bind-devel-9.20.29-0.1.hum1 aarch64, x8664 bind-dnssec-utils-9.20.29-0.1.hum1 aarch64, x8664...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector: opentelemetry-collector-0.161.0-0.1.hum1 aarch64, x8664 opentelemetry-collector-0.161.0-0.1.hum1.src src...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tomcat11: tomcat11-11.0.26-0.1.hum1 noarch tomcat11-admin-webapps-11.0.26-0.1.hum1 noarch tomcat11-common-11.0.26-0.1.hum1 noarch tomcat11-docs-webapp-11.0.26-0.1.hum1 noarch...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tomcat10: tomcat10-10.1.60-0.1.hum1 noarch tomcat10-admin-webapps-10.1.60-0.1.hum1 noarch tomcat10-common-10.1.60-0.1.hum1 noarch tomcat10-docs-webapp-10.1.60-0.1.hum1 noarch...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nats-server2.14: nats-server2.14-2.14.7-0.1.hum1 aarch64, x8664 nats-server2.14-2.14.7-0.1.hum1.src src...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nginx: nginx-1.30.5-4.hum1 aarch64, x8664 nginx-all-modules-1.30.5-4.hum1 noarch nginx-core-1.30.5-4.hum1 aarch64, x8664 nginx-filesystem-1.30.5-4.hum1 noarch nginx-mod-devel-1.30.5-4.hum1 aarch6...
CVE-2026-89950
In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: linearize skbuff for packet generation batadvmcastforwpacket and batadvmcastforwscrape is not only called indirectly by the unsharing+linearizing batadvrecvmcastpacket handler. When it is called indirectly by...
CVE-2026-89885
In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Fix SCP device refcounting mdpprobe first tries to get the SCP handle with scpget. When that fails, it falls back to looking up the SCP platform device with getpdevbyid and then reads its driver data. T...
CVE-2026-89950 batman-adv: mcast: linearize skbuff for packet generation
In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: linearize skbuff for packet generation batadvmcastforwpacket and batadvmcastforwscrape is not only called indirectly by the unsharing+linearizing batadvrecvmcastpacket handler. When it is called indirectly by...