ROS-20260929-73-0063

The vulnerability of the cgwcsumcrc8rel function in the net/can/gw.c module of the Linux operating system’s CAN subsystem relates to access to a memory cell preceding the buffer’s start. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260929-73-0189

The vulnerability of the decodepool function in the net/ceph/osdmap.c module, which implements kernel networking functions in the Linux operating system, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected...

ROS-20260929-73-0147

The vulnerability of the etsqdiscchange function in the net/sched/schets.c file, within the net/sched subsystem of the Linux kernel’s network management mechanism, relates to operations involving resources after their expiration. Exploiting this vulnerability could allow an attacker to compromise...

ROS-20260929-73-0017

The vulnerability of the netpollcleanup function in the net/core/netpoll.c module of the Linux kernel is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

ROS-20260929-73-0047

The vulnerability of the sctprcvasconflookup function in the net/sctp/input.c module of the Linux operating system’s SCTP protocol implementation is related to improper handling of length parameter discrepancies. Exploiting this vulnerability can allow an attacker to gain access to protected...

Important: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decodelockers CVE-2026-68082 In the Linux kernel, the following vulnerability has been resolved: libceph: bound pgtemp,upmap,upmapitems length to CEPHPGMAXSIZE CVE-2026-6815...

SUSE SLES15 Security Update : kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:4359-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4359-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: -...

ROS-20260929-73-0192

The vulnerability of the gssreadproxyverf function in the net/sunrpc/authgss/svcauthgss.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260929-73-0196

The vulnerability of the mptcpretrans function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to compromise the confidentiality, integrity, and...

ROS-20260929-73-0163

The vulnerability of the nfcunregisterdevice function in the net/nfc/core.c module of the Linux NFC subsystem is related to the mutual locking of execution threads. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

ROS-20260929-73-0156

The vulnerability of the etsqdiscchange function in the net/sched/schets.c file, within the network scheduling subsystem of the Linux kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260929-73-0177

The vulnerability of the fibtableFlush function in the net/ipv4/fibtrie.c module of the Linux kernel allows an attacker to cause a service failure by failing to release resources after their useful life has ended. Exploiting this vulnerability can enable an attacker to trigger a service failure...

ROS-20260929-73-0034

The vulnerability of the havemonandosdmap function in the net/ceph/cephcommon.c kernel module of the Linux operating system is related to the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-3139)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3139 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decodelockers CVE-2026-68082 In the Linux kernel, the following vulnerability has be...

ruby:3.3 security update

ruby 3.3.12-9 - Fix memory exhaustion via unknown DNS resource types in resolv. CVE-2026-80212 Resolves: RHEL-252039 3.3.12-8 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 3.3.10-7 - Fix DoS via crafted IMAP responses in net-imap. CVE-2026-42245 Resolves: RHEL-181693 - Fix...

ROS-20260929-73-0045

The vulnerability of the ipip6tunnelxmit function in the net/ipv6/sit.c module of the Linux kernel’s IPv6 implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

ROS-20260929-73-0033

The vulnerability of the handleauthsessionkey function in the net/ceph/authx.c module, which is part of the Linux kernel’s networking functions, relates to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

RHCOS 4 : OpenShift Container Platform 4.22.16 (RHSA-2026:71445)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71445 advisory. - encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 - net/http: golang...

ROS-20260929-73-0048

The vulnerability of the vti6tnllookup function in the net/ipv6/ip6vti.c module of the IPv6 protocol implementation in the Linux operating system is related to incorrect checking of the unsafe equivalence of input data. Exploiting this vulnerability could allow an attacker, acting remotely, to...

RHCOS 4 : Red Hat build of MicroShift 4.22.16 (RHSA-2026:71672)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71672 advisory. - encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 - net/http: golang...