11657 matches found
RHSA-2026:2688 Red Hat Security Advisory: osbuild-composer security update
Bulletin has no description...
CVE-2026-23184
In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in bindernetlinkreport Oneway transactions sent to frozen targets via binderproctransaction return a BRTRANSACTIONPENDINGFROZEN error but they are still treated as successful since the target is expected to thaw a...
CVE-2026-23130
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dead lock while flushing management frames Commit 1 converted the management transmission work item into a wiphy work. Since a wiphy work can only run under wiphy lock protection, a race condition happens in bel...
CVE-2026-23161
A race condition was found in the Linux kernel's shmem/swap handling during truncate operations. The swap entry order is retrieved without proper lock protection, allowing it to become stale before the subsequent xacmpxchgirq operation. This can cause truncation to erase data beyond the intended...
CGA-RRXM-GW72-HMX6
Bulletin has no description...
CVE-2026-23158
In the Linux kernel, the following vulnerability has been resolved: gpio: virtuser: fix UAF in configfs release path The gpio-virtuser configfs release path uses guardmutex to protect the device structure. However, the device is freed before the guard cleanup runs, causing mutexunlock to operate ...
CVE-2026-23196
A NULL pointer dereference was found in the Intel THC Touch Host Controller HID driver. The driver reads from a DMA buffer without first checking if the buffer is ready, which can result in accessing a NULL pointer and crashing the kernel...
CVE-2026-23209
A use-after-free vulnerability was found in the macvlan driver. When creating a macvlan interface in source mode fails after the source MAC has been added to the hash table e.g., due to an invalid interface name, the hash entry still references the freed netdevice structure. Subsequent packets...
CVE-2026-23166
In the Linux kernel, the following vulnerability has been resolved: ice: Fix NULL pointer dereference in icevsisetnapiqueues Add NULL pointer checks in icevsisetnapiqueues to prevent crashes during resume from suspend when ringsqidx-qvector is NULL. Tested adaptor: 60:00.0 Ethernet controller 020...
MINI-935M-JVJ5-VCGX
Bulletin has no description...
CGA-2VV7-P7CC-JQ9R
Bulletin has no description...
MINI-PCX8-F4WP-6938
Bulletin has no description...
CVE-2026-23135
A flaw was found in the Linux kernel's ath12k wifi driver. A local attacker could exploit this vulnerability by triggering the device driver teardown path. The driver incorrectly passes aligned memory addresses to dmafreecoherent instead of the original unaligned addresses during cleanup. This...
CVE-2026-23123
A flaw was found in the Linux kernel's interconnect debugfs test client. This vulnerability arises from the use of uninitialized pointers when handling debugfs entries. A local user with sufficient privileges could exploit this by accessing these debugfs entries. Successful exploitation could lea...
CVE-2026-2575
A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service DoS by sending a highly compressed SAMLRequest through the SAML Redirect Binding. The server fails to enforce size limits during DEFLATE decompression, leading to an OutOfMemoryErro...
CVE-2026-23181
A race condition was found in the Linux kernel's Btrfs filesystem when reading the disk superblock. If a user changes the block device's block size via BLKBSZSET ioctl while Btrfs is mounting, the inconsistency between folio allocation and the new block size can trigger a VMBUGON assertion or NUL...
ECHO-FB35-8573-FE52
Bulletin has no description...
ECHO-937F-2201-5677
Bulletin has no description...