Amazon Linux 2023 : libnvsdm, libnvsdm-devel (ALAS2023NVIDIA-2026-307)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-307 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : cuda-drivers (ALAS2023NVIDIA-2026-312)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-312 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : libnvidia-cfg, libnvidia-fbc, libnvidia-gpucomp (ALAS2023NVIDIA-2026-309)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-309 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : nvidia-imex (ALAS2023NVIDIA-2026-305)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-305 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Amazon Linux 2023 : nvidia-xconfig (ALAS2023NVIDIA-2026-299)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-299 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Important: nvidia-kmod-common

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...

Amazon Linux 2023 : cuda-compat-13-0 (ALAS2023NVIDIA-2026-313)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023NVIDIA-2026-313 advisory. NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out- of-bounds write. A successful exploit of this vulnerability might lead to denial of...

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

RefluXFS, a Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Qualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and...

Amazon Linux 2 : libXfont, --advisory ALAS2-2026-3815 (ALAS-2026-3815)

The version of libXfont installed on the remote host is prior to 1.5.4-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3815 advisory. BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow CVE-2026-56001 PCF Font Parsing Heap Buffer Overflow...

Amazon Linux 2 : python3, --advisory ALAS2-2026-3826 (ALAS-2026-3826)

The version of python3 installed on the remote host is prior to 3.7.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3826 advisory. When using the tarfile module with a file opened in streaming mode mode=r| the tarfile module did not properly handle EOF...

Amazon Linux 2 : python3-pygments, --advisory ALAS2-2026-3817 (ALAS-2026-3817)

The version of python3-pygments installed on the remote host is prior to 2.2.0-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3817 advisory. A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file...

Amazon Linux 2 : python, --advisory ALAS2-2026-3810 (ALAS-2026-3810)

The version of python installed on the remote host is prior to 2.7.18-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3810 advisory. When using the tarfile module with a file opened in streaming mode mode=r| the tarfile module did not properly handle EOF, making...

Amazon Linux 2 : corosync, --advisory ALAS2-2026-3811 (ALAS-2026-3811)

The version of corosync installed on the remote host is prior to 2.4.3-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3811 advisory. Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack- based buffer overflow in...

Amazon Linux 2 : compat-libtiff3, --advisory ALAS2-2026-3822 (ALAS-2026-3822)

The version of compat-libtiff3 installed on the remote host is prior to 3.9.4-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3822 advisory. A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted...

Amazon Linux 2 : vim, --advisory ALAS2-2026-3804 (ALAS-2026-3804)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3804 advisory. Vim is an open source, command line text editor. Prior to 9.2.0653, the treecountwords function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iterative...

Amazon Linux 2 : python-pillow, --advisory ALAS2-2026-3816 (ALAS-2026-3816)

The version of python-pillow installed on the remote host is prior to 2.0.0-23.gitd1c6db8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3816 advisory. Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py loadbitmaps read glyph dimension...

Amazon Linux 2 : golang, --advisory ALAS2-2026-3819 (ALAS-2026-3819)

The version of golang installed on the remote host is prior to 1.25.12-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3819 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final...

Amazon Linux 2 : rust, --advisory ALAS2-2026-3808 (ALAS-2026-3808)

The version of rust installed on the remote host is prior to 1.97.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3808 advisory. gix-submodule before 0.29.0 gitoxide before 0.5.21, gix before 0.84.0 incorrectly validates the update field in .gitmodules, allowing...

Amazon Linux 2 : libssh2, --advisory ALAS2-2026-3813 (ALAS-2026-3813)

The version of libssh2 installed on the remote host is prior to 1.4.3-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3813 advisory. libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses i...

Amazon Linux 2 : perl-CGI-Session, --advisory ALAS2-2026-3805 (ALAS-2026-3805)

The version of perl-CGI-Session installed on the remote host is prior to 4.35-16. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3805 advisory. CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. The...