DEBIAN-CVE-2026-99282

In the Linux kernel, the following vulnerability has been resolved: net/sched: schteql: fix use-after-free on lower qdisc drop The issue: teqlmasterxmit tests the slave's ndostartxmit return value against NETDEVTXOK alone. A slave that consumes the skb but returns an error code rc dev and calls...

CVE-2026-99282

In the Linux kernel, the following vulnerability has been resolved: net/sched: schteql: fix use-after-free on lower qdisc drop The issue: teqlmasterxmit tests the slave's ndostartxmit return value against NETDEVTXOK alone. A slave that consumes the skb but returns an error code rc dev and calls...

CVE-2026-99282

The Linux kernel contains a use-after-free vulnerability in the net/sched component, specifically within the sch_teql qdisc. The root cause is that teql_master_xmit() incorrectly tests the slave's ndo_start_xmit() return value against NETDEV_TX_OK alone. When a slave (such as a VLAN slave ) consu...

CVE-2026-99282 net/sched: sch_teql: fix use-after-free on lower qdisc drop

In the Linux kernel, the following vulnerability has been resolved: net/sched: schteql: fix use-after-free on lower qdisc drop The issue: teqlmasterxmit tests the slave's ndostartxmit return value against NETDEVTXOK alone. A slave that consumes the skb but returns an error code rc dev and calls...

Linux Distros Unpatched Vulnerability : CVE-2026-99282

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: schteql: fix use-after-free on lower qdisc drop The issue: teqlmasterxmit tests the slave's ndostartxmit return value against NETDEVTXOK alone. A...

Security update for fuse-overlayfs

This update for fuse-overlayfs fixes the following issue: CVE-2026-77478: chmod on a hardlinked lower-layer file is silently dropped in the built image bsc1286378. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch...

Security update for fuse-overlayfs

This update for fuse-overlayfs fixes the following issue: CVE-2026-77478: chmod on a hardlinked lower-layer file is silently dropped in the built image bsc1286378. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch...

OPENSUSE-SU-2026:22234-1 Security update for fuse-overlayfs

This update for fuse-overlayfs fixes the following issue: - CVE-2026-77478: chmod on a hardlinked lower-layer file is silently dropped in the built image bsc1286378...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: xHCI: Corruption of the command ring pointer occurred during command aborts. The command ring pointer is located at bits 6:63 of the command ring control register CRCR. All control bits, such as those related to command stopping...

CVE-2026-44035 Uncontrolled recursion in DCMTK DICOMDIR parsing allows denial of service

Uncontrolled recursion in DcmDicomDir::moveRecordToTree in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted DICOMDIR file with a deeply chained sequence of directory records linked through the Offset o...

CVE-2026-90987

The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticated attacker sets an arbitrary lower price for a purchase...

CVE-2026-90987

The Easy PayPal & Stripe Buy Now Button WordPress plugin, in versions 1.8 through 2.0.5 , is vulnerable to unauthenticated payment amount manipulation . The root cause is that the plugin fails to derive the payment amount on the server, instead relying on a client-supplied field . This allows an ...

PT-2026-104112

The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticated attacker sets an arbitrary lower price for a purchase...

CVE-2026-90987: External Control of Assumed-Immutable Web Parameter

The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticated attacker sets an arbitrary lower price for a purchase...

CVE-2026-93894

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper and .lower string type methods of VCL. This can be used as a remote denial of service DoS vector to make the child process segfault or assert, and then restart. Effectively exploiting this vulnerability...

CVE-2026-93894

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper and .lower string type methods of VCL. This can be used as a remote denial of service DoS vector to make the child process segfault or assert, and then restart. Effectively exploiting this vulnerability...

CVE-2026-93894

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper and .lower string type methods of VCL. This can be used as a remote denial of service DoS vector to make the child process segfault or assert, and then restart. Effectively exploiting this vulnerability...

CVE-2026-93894

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper and .lower string type methods of VCL. This can be used as a remote denial of service DoS vector to make the child process segfault or assert, and then restart. Effectively exploiting this vulnerability...

CVE-2026-93894

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper and .lower string type methods of VCL. This can be used as a remote denial of service DoS vector to make the child process segfault or assert, and then restart. Effectively exploiting this vulnerability...

CVE-2026-93894: Out-of-bounds Write

In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper and .lower string type methods of VCL. This can be used as a remote denial of service DoS vector to make the child process segfault or assert, and then restart. Effectively exploiting this vulnerability...