AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1782908606)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782908606 advisory. - When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to...

AlmaLinux 9.2 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc (ALMALINUX9.2:CLSA-2026:1783695736)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783695736 advisory. - Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, symbo...

Rocky Linux 9.6 [TuxCare] Security Update: grafana / grafana-selinux Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1772448200)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772448200 advisory. - The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameter...

The vulnerability of the batadv_bla_purge_claims() function in the net/batman-adv/bridge_loop_avoidance.c module, a part of the network functions of the Linux operating system’s kernel, allows a hacker to trigger a service failure.

The vulnerability of the function batadvblapurgeclaims in the net/batman-adv/bridgeloopavoidance.c module, which is part of the network functions of the Linux operating system’s kernel, relates to the assignment of pointers. Exploiting this vulnerability could allow a remote attacker to cause...

The vulnerability of the inet_csk_listen_stop() function in the net/ipv4/inet_connection_sock.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the inetcsklistenstop function in the net/ipv4/inetconnectionsock.c module of the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the function ieee80211_dfs_radar_detected_work() in the net/mac80211/util.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function ieee80211dfsradardetectedwork in the net/mac80211/util.c module of the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the xfrm6_rcv_encap() function in the net/ipv6/xfrm6Protocol.c module of the Linux operating system allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xfrm6rcvencap function in the net/ipv6/xfrm6Protocol.c module of the Linux operating system is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the ceph_handle_auth_reply() function in the net/ceph/auth.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the cephhandleauthreply function in the net/ceph/auth.c module, which is part of the networking functions in the Linux kernel, is related to incorrect checking of the type of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the icmp_glue_bits() function in the net/ipv4/icmp.c module of the Linux operating system allows a attacker to access protected information or cause a service denial.

The vulnerability of the icmpgluebits function in the net/ipv4/icmp.c module of the Linux operating system is related to the incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability may allow an attacker to gain access to protected informatio...

The vulnerability of the `rxkad_verify_packet_2()` function in the `net/rxrpc/rxkad.c` module allows a hacker to cause a service failure within the Linux operating system’s RxRPC session support.

The vulnerability of the rxkadverifypacket2 function in the net/rxrpc/rxkad.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, stems from insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of the cfsrvl PhyidMatch() function in the net/caif/cfsrvl.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cfsrvl PhyidMatch function in the net/caif/cfsrvl.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the strp_abort_strp() function in the net/strparser/strparser.c module of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the strpabortstrp function in the net/strparser/strparser.c module of the Linux kernel is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the function ieee80211_invoke_fast_rx() in the module net/mac80211/rx.c, part of the mac80211 stack in the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function ieee80211invokefastrx in the module net/mac80211/rx.c, part of the mac80211 stack in the Linux operating system, is related to the control element that is called in a multi-threaded context with a non-final static element or member. Exploiting this vulnerability...

The vulnerability of the mptcp_pm_add_timer() function in the net/mptcp/pm.c module of the MPTCP protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mptcppmaddtimer function in the net/mptcp/pm.c module of the MPTCP protocol implementation in Linux operating systems is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

The vulnerability of the function batadv_bla_del_backbone_claims() in the net/batman-adv/bridge_loop_avoidance.c module, which is part of the networking functions of the Linux operating system’s kernel, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function batadvbladelbackboneclaims in the net/batman-adv/bridgeloopavoidance.c module, which is part of the networking functions of the Linux kernel, is related to the state of the race. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the sctp_sendmsg() function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sctpsendmsg function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to compromise the...

The vulnerability of the batadv_iv_ogm_send_to_if() function in the net/batman-adv/bat_iv_ogm.c module, which is part of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the batadvivogmsendtoif function in the net/batman-adv/bativogm.c module, which is part of the Linux kernel’s networking functions, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the...

AlmaLinux 9.6 [TuxCare] Security Update: grafana / grafana-selinux Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1772448200)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772448200 advisory. - The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters ...

Rocky Linux 9.6 [TuxCare] Security Update: skopeo / skopeo-tests Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1772620440)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772620440 advisory. - The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameter...

AlmaLinux 9.6 [TuxCare] Security Update: containernetworking-plugins Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1772576264)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772576264 advisory. - The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters ...