CVE-2026-26449

In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid memory while processing the frame, causing the process to crash...

EUVD-2026-66752

In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid memory while processing the frame, causing the process to crash...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104603)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104603 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETHHLEN to be pullable in ifedecode ife decode may return after making only the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098692)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098692 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix vmalloc out-of-bounds write in fastimageblit This issue triggers when a userspace...

CVE-2026-26449: NULL Pointer Dereference

In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid memory while processing the frame, causing the process to crash...

CVE-2026-26449

In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid memory while processing the frame, causing the process to crash...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-104821)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104821 advisory. FFmpeg's RASC video decoder decodedlta in libavcodec/rasc.c performs 32-bit reads and writes at the row cursor before the NEXTLINE row-boundary check and validates t...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098848)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098848 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix out-of-bounds read in rtwgetie parser The Information Element IE parser...

CVE-2026-26449

In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid memory while processing the frame, causing the process to crash...

USN-8666-2 linux-azure-5.4, linux-azure-fips vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

CVE-2026-66276

A flaw was found in Apache Qpid Proton-J. An authenticated attacker can exploit this vulnerability by crafting a specially designed disposition frame with large or illegal ranges. This can cause excessive CPU usage due to naive range handling, leading to a denial of service DoS for the affected...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.11 security and extras update

Red Hat OpenShift Container Platform release 4.22.11 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of...

SUSE CVE-2026-63335

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.31.0, inbound AMQP command assembly in src/main/java/com/rabbitmq/client/impl/CommandAssembler.java processes a content-bearing method and header whose...

The vulnerability of the tdfxfb_checkvar() function in the drivers/video/fbdev/tdfxfb.c driver module of the Linux kernel’s frame buffer device driver allows a attacker to cause a service failure.

The vulnerability of the tdfxfbcheckvar function in the drivers/video/fbdev/tdfxfb.c driver for kernel-based frame buffer devices in the Linux operating system is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-74616

A flaw was found in the Linux kernel's XDP eXpress Data Path component. When XDP frames are cloned, a specially crafted frame can cause the skbsharedinfo structure to overwrite live packet data. This improper handling of memory during frame cloning can lead to corruption of XDP return metadata,...

CVE-2026-74648

A flaw was found in the Linux kernel's rtl8723bs Wi-Fi driver. This vulnerability occurs because the rtwcfg80211monitorifxmitentry function does not properly validate the length of monitor transmit frames after processing. A remote attacker could exploit this by sending a specially crafted,...

Astra Linux – Vulnerability in Firefox and Thunderbird

Web-accessible extension pages pages with a moz-extension:// scheme did not correctly enforce the frame-ancestors directive when it was used in the Web Extension’s Content Security Policy. This vulnerability affects Firefox 97, Thunderbird 91.6, and Firefox ESR 91.6...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: btmtksdio: fixed a use-after-free in btmtksdiorecvevent We should no longer access the skb buffer data after the hcirecvframe function is called. 39.634809 BUG: KASAN: use-after-free in btmtksdiorecvevent+0x1b0...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: tun: Added missing verification for short frames. The referenced commit failed to check the validity of the frame length in the tunxdpone path, which could result in a corrupted skb being sent down the stack. Even before the skb ...

Astra Linux – Vulnerability in nghttp2

In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload caused a denial of service. The proof-of-concept attack involved a malicious client repeatedly constructing SETTINGS frames with a size of 14,400 bytes 2400 individual setting entries. This attack caused the CPU usag...