RLSA-2026:51075 Important: gpsd security update

gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications such as...

gpsd-minimal security update

An update is available for gpsd-minimal. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list gpsd is a service daemon that mediates access to a GPS sensor connected ...

RLSA-2026:51153 Important: gpsd-minimal security update

gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. The Rocky Enterprise Software Foundation support fo...

xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()

...

btrfs: do not trim a device which is not writeable

...

usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown

...

CVE-2026-49008

The CVE-2026-49008 entry concerns the ZTE F689 product and describes an integrity-check credential leakage in an application function. The vulnerability arises from unencrypted information in device firmware that could allow an attacker to obtain credentials related to the integrity verification ...

EUVD-2026-54408

By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface...

CVE-2026-49007

By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface...

MINI-RF84-VC2X-FJWR

Bulletin has no description...

net: usb: net1080: validate packet_len before pad-byte access in rx_fixup

...

CVE-2026-49006 TLS credential leakage vulnerability in ZTE F689 product

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission...

EUVD-2026-54396

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission...

CVE-2026-49005

The root password hash of the device can be obtained through unencrypted information in the firmware...

CVE-2026-49005

CVE-2026-49005 affects ZTE F689 devices, where the root password hash can be obtained from unencrypted firmware information. The CVSS 3.1 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) yields a LOW base score (2.4), indicating limited impact to confidentiality. The description confirms leakage of t...

MINI-V235-HHP8-4Q2C

Bulletin has no description...

CVE-2026-45204 GPU DDK - Out of bounds memory access and kernel NULL pointer dereference in DmaTransfer when pui64Address is a pointer to device memory

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error path. Null pointer dereference occurs in an error path of a function running in kernel thread of execution leading to kernel exceptions,...

CVE-2026-45204 GPU DDK - Out of bounds memory access and kernel NULL pointer dereference in DmaTransfer when pui64Address is a pointer to device memory

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error path. Null pointer dereference occurs in an error path of a function running in kernel thread of execution leading to kernel exceptions,...

CVE-2026-45204

A vulnerability exists in the GPU DDK where software running as a non-privileged user can conduct improper GPU system calls. This triggers out-of-bounds (OOB) memory access and a kernel null pointer dereference within the DmaTransfer function when pui64Address points to device memory. The null po...

On a General Theoretical Framework for Radio Frequency Fingerprint-Based Authentication

While radio frequency fingerprint RFF-based wireless device authentication has been widely studied across different datasets and scenarios, there still lacks a fundamental theory to explain why and how RFF can serve as a reliable device identity, significantly hindering the practical application ...