EUVD-2026-58724

CKAN MCP Server: Information disclosure via verbose error reflection...

Security update for python-msgpack

This update for python-msgpack fixes the following issue: CVE-2026-57585: reusing an Unpacker instance after an error has been caught can lead to an out-of-bounds read bsc1269947. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate ...

SUSE CVE-2026-72378

In the Linux kernel, the following vulnerability has been resolved: afs: Fix error code in afsextractvladdrs The error codes on these paths are only set on the first iteration through the loop. Set the correct error code on every iteration...

SUSE CVE-2026-74367

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix inconsistent arvif state in vdevcreate error paths ath12kmacvdevcreate has three error path issues that leave arvif in an inconsistent state: 1. When ath12kwmivdevcreate fails, the function returns directly...

Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105435)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105435 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/fslpamu: Fix resource leak in fslpamuprobe The fslpamuprobe returns directly when createcsd...

The vulnerability of the invlpga_interception() function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the invlpgainterception function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to error handling deficiencies. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the arch_set_shadow_stack_status() function in the arch/arm64/mm/gcs.c module of the ARM 64-bit kernel support for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the archsetshadowstackstatus function in the arch/arm64/mm/gcs.c module of the Linux operating system’s ARM 64-bit kernel support is related to error handling flaws. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-84910

Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhaustion and failure...

DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution

A flaw was found in DBI, a Perl database interface. This vulnerability allows an attacker to trigger a buffer overflow by manipulating error messages within an application. When specific error handling options are active, an attacker can provide oversized error text, which may lead to arbitrary...

SUSE CVE-2026-72364

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writeback error handling Fix the error handling in writebackiter loop. If an error occurs, writebackiter needs to be called again with error set to the error so that it can clean up iteration state. Further, the curren...

CVE-2026-84639

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Security Bypass.

Summary golang-jwt/jwt is used by IBM Storage Fusion Data Foundation, which could cause Security Bypass. CVE-2024-51744, CVE-2025-30204. Vulnerability Details CVEID:CVE-2024-51744 DESCRIPTION: golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in...

CVE-2026-80687

A flaw was found in the Linux kernel's iommufd/viommu component. An error in the iommufdvdeviceallocioctl function's error handling path can lead to a lock being held indefinitely. This can cause a deadlock, preventing further virtual device vDEVICE operations and resulting in a Denial of Service...

SUSE CVE-2026-72140

In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: Fix use-after-free in mlxbfi2cinitresource If devmplatformgetandioremapresource returns an error, mlxbfi2cinitresource frees tmpres before reading tmpres-io to get the error code. This results in a use-after-free. Sav...

CVE-2026-80620

A flaw was found in the Linux kernel. During the error handling of Message Signaled Interrupts eXtended MSI-X region setup, the kernel attempts to unmap an already freed memory region. This double unmap operation on a null pointer can lead to a kernel warning or crash. A local attacker could...

Linux Distros Unpatched Vulnerability : CVE-2026-80657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer The management...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001494)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001494 advisory. In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling path in itsvpeirqdomainalloc...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001502)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001502 advisory. In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in registerintccontroller In the error handling for this functio...

MongoDB Connector for BI Improper Error Handling of Log Write Failures May Cause Loss of SQL Service

An unauthenticated party able to reach the port of a MongoDB Connector for BI mongosqld instance may generate enough routine connection log activity to exhaust the storage backing the configured log path. When a log write or log rotation operation subsequently fails, the resulting error is not...

CVE-2026-81517 MongoDB Connector for BI Improper Error Handling of Log Write Failures May Cause Loss of SQL Service

An unauthenticated party able to reach the port of a MongoDB Connector for BI mongosqld instance may generate enough routine connection log activity to exhaust the storage backing the configured log path. When a log write or log rotation operation subsequently fails, the resulting error is not...