USN-8681-1: OpenJDK 25 vulnerabilities

It was discovered that the JSSE component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. CVE-2026-46968 It was discovered that the JSSE component of OpenJDK 25 did not correctly authorize users. A remote attack...

CVE-2026-80545: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB length and overflow checks The xcrbmsgtotype6ep11cprbmsgx function lacks proper input validation, creating security vulnerabilities: 1. Missing minimum size validation: The ep11cprb structure and...

Linux Distros Unpatched Vulnerability : CVE-2026-80545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB length and overflow checks The xcrbmsgtotype6ep11cprbmsgx...

PT-2026-82161

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The xcrb msg to type6 ep11cprb msgx function fails to properly validate input, leading to several security issues. Specifically, the ep11 cprb structure and payload fields pld tag and pl...

TencentOS Server 4: jq (TSSA-2026:0863)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0863 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2026-74720

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. When a scalar value is added to a pointer during certain arithmetic operations, the system fails to fully preserve the pointer's state. This inconsistency in how the pointer's origin and properties are tracked can lead t...

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel through version 5.11.x. The kernel/bpf/verifier.c file contains unwanted out-of-bounds speculation during pointer arithmetic operations, which allows for side-channel attacks that circumvent Spectre mitigations and extract sensitive information from kern...

The vulnerability of the ceph kernel component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the ceph kernel component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the i2c/busses/i2c-i801.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the i2c/busses/i2c-i801.c component of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the imx8qm-hsio component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the imx8qm-hsio component of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the wmem_strbuf_get_str() function in the Wireshark network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the wmemstrbufgetstr function in the Wireshark network traffic analyzer is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the driver/platform/x86/hp/hp-bioscfg/bioscfg.h component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/platform/x86/hp/hp-bioscfg/bioscfg.h component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to pointer arithmetic errors, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the Linux operating system’s driver/dclk/clk-renesas-pcie.c component allows a hacker to cause a service failure.

The vulnerability of the drivers/clk/clk-renesas-pcie.c component of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

SUSE CVE-2026-74720

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

AZL-97209 CVE-2026-74720 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

CVE-2026-74720

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

UBUNTU-CVE-2026-74720

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

CVE-2026-74720

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

CVE-2026-74720

CVE-2026-74720 affects the BPF component of the Linux kernel . In adjust_ptr_min_max_vals(), handling of the commuted arithmetic operation scalar += pointer copies only selected fields from the source pointer state to the destination register. Because pointer provenance is tracked across multiple...