CVE-2026-42804: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPIC-Library in versions up to and including commit d6b200416a. The vulnerability is located within the FIFO parsing and debug logging subsystem inside the function bhi360parsedebugmessage in bhi360parse.c line...

CVE-2026-85201

In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-delimited protobuf message received through the Control Interface FIFO. A workload granted Control Interface access can specify an excessive message length, causing an unbounded...

CVE-2026-85201

In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-delimited protobuf message received through the Control Interface FIFO. A workload granted Control Interface access can specify an excessive message length, causing an unbounded...

CVE-2026-85201: Memory Allocation with Excessive Size Value

In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-delimited protobuf message received through the Control Interface FIFO. A workload granted Control Interface access can specify an excessive message length, causing an unbounded...

RUSTSEC-2026-0272 Panic-safety unsoundness in `Stack::pop`, `Fifo::pop_front` and `Value::replace_stable` (use-after-free / double-free)

Three removal and replacement paths destroy an initialized value before committing the metadata change that removes it. Destruction runs T::drop, which is user code and may panic. If it does, the commit is skipped and the container still claims ownership of the already-destroyed value, so its own...

Panic-safety unsoundness in `Stack::pop`, `Fifo::pop_front` and `Value::replace_stable` (use-after-free / double-free)

Three removal and replacement paths destroy an initialized value before committing the metadata change that removes it. Destruction runs T::drop, which is user code and may panic. If it does, the commit is skipped and the container still claims ownership of the already-destroyed value, so its own...

PT-2026-86562

Three removal and replacement paths destroy an initialized value before committing the metadata change that removes it. Destruction runs T::drop, which is user code and may panic. If it does, the commit is skipped and the container still claims ownership of the already-destroyed value, so its own...

MiracleLinux 8 : kernel-4.18.0-553.154.1.el8_10 (AXSA:2026-1678:68)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1678:68 advisory. kernel: iio: event: Fix event FIFO reset race CVE-2026-64496 Tenable has extracted the preceding description block directly from the MiracleLinux security...

SUSE CVE-2026-74261

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: avoid stale FIFO cells during resize sndseqfiforesize still needs to publish the replacement pool before it waits for FIFO users. A blocking sndseqread holds f-uselock while it sleeps, so concurrent senders must be abl...

SUSE CVE-2026-74276

In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently does is this: It stops the SPI hardware and writes to the TX FIFO...

The vulnerability of the st_lsm6dsx_fifo_setup() function in the drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c driver module allows attackers to compromise the confidentiality, integrity, and accessibility of protected information in various types of embedded sensors integrated into the Linux operating system.

The vulnerability of the stlsm6dsxfifosetup function in the drivers/iio/imu/stlsm6dsx/stlsm6dsxbuffer.c module of various types of embedded sensors in the Linux operating system is related to reading beyond the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to compromi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098937)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098937 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: event: Fix event FIFO reset race iioeventgetfd creates the event file descriptor with...

CVE-2026-74653

In the Linux kernel, the following vulnerability has been resolved: serial: 8250of: clear stuck empty-FIFO RX-timeout on LPC32xx The NXP LPC32xx UART PORTLPC3220 can latch an RX character-timeout interrupt while the RX FIFO is empty: IIR reports UARTIIRRXTIMEOUT 0x0c but LSR.DR is clear. A...

CVE-2026-74261

A flaw was found in the ALSA Advanced Linux Sound Architecture sequencer component of the Linux kernel. A local attacker could exploit a race condition during the FIFO First-In, First-Out resize operation. This vulnerability allows stale data cells to persist, preventing the proper deallocation o...

Linux Distros Unpatched Vulnerability : CVE-2026-74276

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100130)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100130 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery In case of a TX error CQE, a recovery flo...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100732)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100732 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery In case of a TX error CQE, a recovery flo...

Important: python-urwid

Issue Overview: The urwid web display backend urwid/display/web.py generates web session identifiers urwidid in Screen.start by concatenating two random.randrange109 calls that use Python's Mersenne Twister PRNG, which is not cryptographically secure. Each call consumes approximately 30 bits of...

Important: python-urwid

Issue Overview: The urwid web display backend urwid/display/web.py generates web session identifiers urwidid in Screen.start by concatenating two random.randrange109 calls that use Python's Mersenne Twister PRNG, which is not cryptographically secure. Each call consumes approximately 30 bits of...

CVE-2026-74276

In the Linux kernel, the following vulnerability has been resolved: spi: xilinx: use FIFO occupancy register to determine buffer size The method the driver uses to determine the size of the FIFO has a problem. What it currently does is this: It stops the SPI hardware and writes to the TX FIFO...