PT-2026-90257

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss unwrap resp priv length checks gss unwrap resp priv validates the RPCSEC GSS opaque length with offset = u8 p - u8 head-iov base; if offset + opaque len rcv buf-len goto unwrap failed; maj stat = gss unwrapctx-...

PT-2026-90209

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate rl used against rl count in refcount block validator ocfs2 find refcount rec in rl walks the on-disk refcount record array with: for ; i rf records.rl used; i++ rec = &rb-rf records.rl recsi; ... rl recs lives in ...

PT-2026-90289

In the Linux kernel, the following vulnerability has been resolved: dm array: reject an array block whose value size is not the caller's array block check can only compare the header against itself, so a block with value size 4 and max entries 1018 is internally consistent and passes. dm-cache...

PT-2026-90241

In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count UDF 1.50 virtual partition mapping uses the VAT as an array of physical block mappings. s num entries stores the number of entries in that array, not the highest valid index. The...

PT-2026-90447

In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix cxl rch get aer info out-of-bounds AER register read cxl rch get aer info copies the RCH Downstream Port AER capability from the RCRB MMIO block using a readl loop bounded by sizeofstruct aer capability regs. This...

PT-2026-90275

In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in nd label validate The on-media namespace index field nslot is a u32 read from the DIMM label storage area. nd label validate bounds it against the config area size, but sizeof namespa...

The vulnerability in the `update_snapshot()` function of the `src/terminal.c` file in the Vim text editor allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the updatesnapshot function in the src/terminal.c file of the Vim text editor is related to the execution of the operation outside the buffer’s memory limits. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the...

PT-2026-90186

In the Linux kernel, the following vulnerability has been resolved: power: supply: cros usbpd: Limit port counts to EC USB PD MAX PORTS Currently the cros usbpd-charger driver probe iterates based on raw charger port count returned by the embedded controller. The only check is against the number ...

PT-2026-90229

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Fix PMU event info array size overflow SBI PMU EVENT GET INFO stores guest-controlled num events sizeofeinfo in a 32-bit integer. On RV64, num events = 0x10000001 makes 0x100000010 truncate to 16. KVM then allocates...

Linux Distros Unpatched Vulnerability : CVE-2026-88051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independe...

Linux Distros Unpatched Vulnerability : CVE-2026-79592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read vulnerability exists in the xlsdumpSummary function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets...

Linux Distros Unpatched Vulnerability : CVE-2026-57222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, crafted IPv4 an...

Oracle Linux 10 : glibc (ELSA-2026-500297)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500297 advisory. - CVE-2026-5425: Fix out-of-bounds write via TSIG record processing RHEL-180652, RHEL-185612 - CVE-2026-5928: Fix ungetwc operating on byte stream...

CVE-2026-16172

Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP EPDLP service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, likely crashing the kernel driver handler. Successful...

CVE-2026-16172

CVE-2026-16172 affects the Endpoint DLP (EPDLP) service of the Netskope Client , where an out-of-bounds heap read occurs due to a missing bounds check on a specially crafted message. A local standard user can trigger the flaw, causing the kernel driver handler to crash and potentially interruptin...

CVE-2026-16172 Netskope Endpoint DLP Service Out-of-Bounds Read Leading to Process Crash

Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP EPDLP service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, likely crashing the kernel driver handler. Successful...

CVE-2026-86093

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients due to a stack-based buffer overflow that improperly copies user-controlled data into a fixed-size stack...

DEBIAN-CVE-2026-45765

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, DNP3 reassembly could buffer data without sufficient parser-level bounds. Crafted DNP3 traffic may cause Suricata to consume excessive memory,...

CVE-2026-45765

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, DNP3 reassembly could buffer data without sufficient parser-level bounds. Crafted DNP3 traffic may cause Suricata to consume excessive memory,...

CVE-2026-49837 GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries

GoBGP is an open source Border Gateway Protocol BGP implementation in the Go Programming Language. Versions prior to 4.6.0 contain a BGP OPEN capability parsing issue where several concrete capability decoders may parse data from the full remaining capability buffer instead of the slice bounded b...