CVE-2026-97578

A flaw was found in the Linux kernel's Verisilicon Rockchip AV1 video decoder driver. A local user could exploit this vulnerability by submitting a specially crafted video stream with invalid tile parameters. This flaw can trigger a division-by-zero error or an out-of-bounds write to memory,...

CVE-2026-97577

A flaw was found in the Linux kernel's Verisilicon Rockchip AV1 video decoder driver. A local attacker can exploit this vulnerability by submitting a specially crafted AV1 video frame that specifies more tiles than provided by userspace or supported by hardware limits. This lack of bounds...

CVE-2026-97569

A flaw was found in the Linux kernel's Broadcom NetXtreme-E bnxten network driver. An attacker can cause a Denial of Service DoS by sending a burst of network traffic followed by a large UDP Segmentation Offload USO packet. When operating with small transmit ring configurations, the driver...

CVE-2026-98074

A flaw was found in the Linux kernel's network bonding driver. A local user with network administration privileges can cause a physical network adapter to permanently remain in promiscuous mode a configuration where an interface captures all traffic on the local network segment, rather than only...

CVE-2026-98066

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture caiaq USB audio driver. A local user could exploit this vulnerability to cause a Denial of Service DoS or memory corruption by triggering an initialization failure. The issue stems from improper resource management in t...

CLEANSTART-2026-WO79894 websocket-driver is a WebSocket protocol handler with pluggable I/O

Security vulnerability affects the argo-workflows package. websocket-driver is a WebSocket protocol handler with pluggable I/O...

CLEANSTART-2026-EP87494 pgjdbc is an open source postgresql JDBC Driver

Security vulnerability affects the sonarqube package. pgjdbc is an open source postgresql JDBC Driver...

CLEANSTART-2026-MI43337 websocket-driver is a WebSocket protocol handler with pluggable I/O

Security vulnerability affects the argo-workflows package. websocket-driver is a WebSocket protocol handler with pluggable I/O...

CVE-2026-98056

A flaw was found in the Linux kernel's Non-Volatile Memory Express NVMe driver, which can lead to a Denial of Service DoS. When scanning for storage namespaces, the driver iterates through gaps between namespace identifiers individually instead of processing only registered devices. A malicious o...

ROS-20260929-73-0069

The vulnerability of the ibmvfcdiscovertargetsdone function in the drivers/scsi/ibmvscsi/ibmvfc.c file of the Linux SCSI device driver module is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to access protected...

ROS-20260929-73-0003

The vulnerability of the pegasusprobe function in the drivers/input/tablet/pegasusnotetaker.c module of the Linux device driver framework is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to compromise the...

ROS-20260929-73-0038

The vulnerability of the eemunwrap function in the drivers/usb/gadget/function/feem.c file of the Linux operating system’s USB gadget driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20260929-73-0142

The vulnerability of the crosecishtpremove function in the drivers/platform/chrome/crosecishtp.c module of the Chrome OS device driver support module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260929-73-0172

The vulnerability of the teamqueueoverrideenabledcheck function in the drivers/net/team/teamcore.c file of the Linux kernel’s network device driver is related to the occurrence of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260929-73-0096

The vulnerability of the aqc111suspend function in the drivers/net/usb/aqc111.c module of the Linux USB network adapter driver leads to mutual locking. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20260929-73-0041

The vulnerability of the aqringrxclean function in the drivers/net/ethernet/aquantia/atlantic/aqring.c module of the Ethernet network adapter driver for the AQuantia Atlantic chipset in the Linux operating system is related to buffer out-of-buffer writing. Exploiting this vulnerability could allo...

CVE-2026-102762: Missing Release of Memory after Effective Lifetime

The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets, from the network driver's receive pool, and nothing returns it. A peer that can deliver a few dozen such messages exhausts the pool and stops all inbou...

PT-2026-108466

Security vulnerability affects the argo-workflows package. websocket-driver is a WebSocket protocol handler with pluggable I/O...

ROS-20260929-73-0201

The vulnerability of the irdmanetevent function in the drivers/infiniband/hw/irdma/utils.c file of the InfiniBand driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260929-73-0056

The vulnerability of the s3fwrn82uartread function in the drivers/nfc/s3fwrn5/uart.c file of the Linux NFC driver module is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...