PT-2026-106568

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free write occurs in the lan743x driver when a packet spans more than one receive buffer. The function lan743x rx process buffer adds non-first receive buffers to the head...

Security Advisory 0198

Security Advisory 0198 . CSAF PDF Date: October 6, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 6, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-102165 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSSv4.0 Base Score: 7.7...

PT-2026-106350

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization...

ALSA-2026:76781 Moderate: glibc security, bug fix, and enhancement update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

Linux Distros Unpatched Vulnerability : CVE-2026-98184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mwifiex: prevent authentication frame length truncation mwifiexcfg80211authenticate derives the authentication frame length from req-ielen and...

SUSE SLES15: libX11-6 / libX11-6-32bit / libX11-data / libX11-devel / etc (SUSE-SU-2026:4501-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4501-1 advisory. - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow bsc1280910. - CVE-2026-94283: out-of-bounds read vulnerability in...

AlmaLinux 9.6 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791281631)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791281631 advisory. - The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined...

Rocky Linux 9.6 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791281631)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791281631 advisory. - The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined...

MiracleLinux 8 : webkit2gtk3-2.54.0-1.el8_10.ML.1 (AXSA:2026-1970:09)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1970:09 advisory. chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia CVE-2023-4860 chromium-browser: angle: Out of bounds memory...

Cisco ASA Heap-based Buffer Overflow (CVE-2023-20081)

A vulnerability in the IPv6 DHCP DHCPv6 client module of Cisco Adaptive Security Appliance ASA Software, Cisco Firepower Threat Defense FTD Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an...

PT-2026-106347

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver...

CVE-2026-98272: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: prevent buffer overflow in pagepool allocation The per‑processor buffering scheme is supported only if the number of pools nrxqs 2 does not exceed MVPP2BMMAXPOOLS 8. This is already checked in mvpp2probe during the...

CVE-2026-98184: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length truncation mwifiexcfg80211authenticate derives the authentication frame length from req-ielen and req-authdatalen, both of type sizet, but stores it in a u16. NL80211ATTRAUTHDATA...

ghostscript security update

9.27-18 - RHEL-264919 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 output adapter via component subsampling mismatch...

PT-2026-106920

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A buffer overflow exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker who has already compromised...

PT-2026-106965

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A buffer overflow exists in the Fonts component. A remote attacker who has already compromised the renderer process can potentially execute arbitrary code outside the sandbox by using a...

PT-2026-106346

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs when processing camera requests. This happens when excessive batch and IO buffer configurations exceed the allocated memory size...

PT-2026-106683

In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Fix receive buffer leak when PKey enforcement fails ib mad complete recv initializes mad recv wc-rmpp list and then runs ib mad enforce security before linking recv buf onto that list. On failure it calls ib free recv...

PT-2026-106838

Name of the Vulnerable Software and Affected Versions ImageSharp versions 3.0.0 through 4.1.0 Description Decoding a strip TIFF using CCITT Group 3 or Modified Huffman compression allows the passing of attacker-expanded runs to BitWriterUtils.WriteBits without verifying the current row width...

ROS-20261006-73-0407

The vulnerability of the ext4extcorrectindexes function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploitation of this vulnerability could allow an attacker to compromise the...