The vulnerability of the ath9k_wmi_cmd() function in the drivers/net/wireless/ath/ath9k/wmi.c driver for the Atheros/Qualcomm wireless adapter driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath9kwmicmd function in the drivers/net/wireless/ath/ath9k/wmi.c driver for the Atheros/Qualcomm wireless adapter in the Linux operating system is related to buffer overflow exploits. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the cp2112_xfer() function in the drivers/hid/hid-cp2112.c driver module of the Linux kernel’s input device subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cp2112xfer function in the drivers/hid/hid-cp2112.c driver of the Linux kernel’s input device subsystem relates to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...

CVE-2026-3608

Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2...

OPENSUSE-SU-2026:10426-1 python311-intake-2.0.9-1.1 on GA media

These are all security issues fixed in the python311-intake-2.0.9-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-23923

A flaw was found in Zabbix. An unauthenticated attacker can exploit the Frontend 'validate' action to blindly instantiate arbitrary PHP classes. This could lead to a limited impact on the availability of the system, depending on the environment setup. Mitigation Mitigation for this issue is eithe...

CVE-2025-33215

CVE-2025-33215 affects NVIDIA SNAP-4 Container, specifically a vulnerability in the VIRTIO-BLK component. A malicious guest VM can trigger an out-of-range pointer offset by sending crafted messages, potentially causing a denial of service and impacting storage availability for other VMs. The NVID...

CVE-2026-32854

A flaw was found in LibVNCServer. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending specially crafted HTTP requests. The flaw exists in the HTTP proxy handlers, where missing validation of certain return values can lead to a null pointer dereference, causing...

OPENSUSE-SU-2026:10419-1 rclone-1.73.3-1.1 on GA media

These are all security issues fixed in the rclone-1.73.3-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20260324-73-0011

A vulnerability in the f2fs component of the Linux operating system kernel is related to the use of an uninitialized resource. Exploitation of the vulnerability allows an attacker to affect confidentiality, integrity and availability of protected information...

ROS-20260324-73-0028

A vulnerability in the vsock component of the Linux operating system kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability allows an intruder to affect confidentiality, integrity and availability of protected information...

The vulnerability of the smb2_rename_path() function in the fs/smb/client/smb2inode.c module allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information within the Linux operating system’s SMB kernel client.

The vulnerability of the smb2renamepath function in the fs/smb/client/smb2inode.c module, which is part of the SMB client support in Linux kernel, relates to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

OPENSUSE-SU-2026:10415-1 glances-common-4.5.2-1.1 on GA media

These are all security issues fixed in the glances-common-4.5.2-1.1 package on the GA media of openSUSE Tumbleweed...

The vulnerability of the __bpf in the kernel/bpf/helpers.c file, which is part of the BPF interpreter support for Linux’s kernel, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpf function in the kernel/bpf/helpers.c file, which is part of the BPF interpreter support for Linux’s operating system, relates to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260324-73-0017

A vulnerability in the discoveryinit function in the include/net/bluetooth/hcicore.h module of the Linux kernel is related to pointer dereferencing. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected information...

ROS-20260324-73-0021

A vulnerability in the bpf and ktls components of the Linux operating system kernel is related to the use of an uninitialized resource. Exploitation of the vulnerability allows an intruder to affect confidentiality and availability of protected information...

The vulnerability of the zpci_device_reserved() function in the arch/s390/pci/pci.c module of the S390 platform support module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the zpcidevicereserved function in the arch/s390/pci/pci.c module of the S390 platform support library in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

OPENSUSE-SU-2026:10413-1 firefox-esr-140.9.0-1.1 on GA media

These are all security issues fixed in the firefox-esr-140.9.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10416-1 python313-PyMuPDF-1.27.2.2-1.1 on GA media

These are all security issues fixed in the python313-PyMuPDF-1.27.2.2-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20260324-73-0009

A vulnerability in the f2fs component of the Linux operating system kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability allows an attacker to affect confidentiality, integrity and availability of protected information...

ROS-20260324-73-0010

A vulnerability in the f2fs component of the Linux operating system kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability allows an attacker to affect confidentiality, integrity and availability of protected information...