SUSE CVE-2026-93085

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Reject out of range DT protocol IDs SCMI protocol IDs carried in message headers are limited by MSGPROTOCOLIDMASK. The DT parsing paths noticed protocol IDs outside that range, but only logged an error and then...

PT-2026-95210

Name of the Vulnerable Software and Affected Versions Deck affected versions not specified Description The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs. This occurs because the system fails to validate whether the user owns or has the...

PT-2026-95371

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.28.0 Description The software fails to validate the lower bound of token IDs in the '/v1/embeddings' and '/pooling' endpoints. This allows unauthenticated attackers to crash the engine by submitting negative token IDs....

CVE-2026-93592: Improper Validation of Array Index

vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by submitting negative token IDs. A single request with a negative token ID triggers a CUDA device-side assertion that...

PT-2026-102783

vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by submitting negative token IDs. A single request with a negative token ID triggers a CUDA device-side assertion that...

DEBIAN-CVE-2026-93085

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Reject out of range DT protocol IDs SCMI protocol IDs carried in message headers are limited by MSGPROTOCOLIDMASK. The DT parsing paths noticed protocol IDs outside that range, but only logged an error and then...

AZL-101957 CVE-2026-93085 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Reject out of range DT protocol IDs SCMI protocol IDs carried in message headers are limited by MSGPROTOCOLIDMASK. The DT parsing paths noticed protocol IDs outside that range, but only logged an error and then...

CVE-2026-93085 firmware: arm_scmi: Reject out of range DT protocol IDs

In the Linux kernel, the following vulnerability has been resolved: firmware: armscmi: Reject out of range DT protocol IDs SCMI protocol IDs carried in message headers are limited by MSGPROTOCOLIDMASK. The DT parsing paths noticed protocol IDs outside that range, but only logged an error and then...

CVE-2026-90350: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: reject out-of-range link ids in mt76viflink mt76viflink indexes mvif-link without validating linkid, but callers pass mvif-deflinkid / msta-deflinkid, which hold IEEE80211LINKUNSPECIFIED 0xf until the first link has...

PT-2026-94248

A flaw was found in the foreman remote execution plugin's template invocations controller. The show template invocation by host action resolves the job invocation by ID without evaluating the caller's view job invocations permission filter against the record. An authenticated user whose job...

CVE-2026-92586

AVideo through 29.0 commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify video access permissions in the setapicomment function, allowing authenticated users to post comments on password-protected and group-restricted videos. Attackers can submit POST requests to the comment API endpoi...

CVE-2026-92773

Trigger.dev before 4.6.0 contains a GitHub App installation takeover vulnerability in its GitHub integration service (gitHub.server.ts). The root cause is a failure to verify that an authenticated user actually controls a GitHub App installation before binding it to their organization. An attacke...

suricata suricata-8.0.7

Suricata Introduction Suricata is a network IDS, IPS and NSM engine developed by the OISF and the Suricata community. Resources Home Page Bug Tracker User Guide Dev Guide Installation Guide User Support Forum Contributing We're happily taking patches and other contributions. Please see our...

PT-2026-93545

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An array overflow occurs in the acpi package ids array when using a LoongArch virtual machine. This issue is triggered by the PPTT ACPI table in configurations where there is one core pe...

Fedora 43 : perl-Dancer2 (2026-d0bededb87)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d0bededb87 advisory. Dancer2 gnrates sessions id from low-entropy sources if Crypt::URandom and Math::Random::ISAAC::XS are not present. With this update, they are always there...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Mark invalid entities with id UVCINVALIDENTITYID According to UVC 1.1+ specification 3.7.2, units and terminals must have a non-zero unique ID. Each unit and terminal within the video function is assigned a uniqu...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs: dropping peer group IDs under namespace lock When cleaning up peer group IDs in the failure path, we need to ensure that the namespace lock is retained. Otherwise, another thread might simultaneously change the mount status...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: sh: cpuinfo: Fixed a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS are selected, cpumaxbitswarn generates a runtime warning similar to the following when showing /proc/cpuinfo. This issue...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: UM: cpuinfo: Fixed a warning for CONFIGCPUMASKOFFSTACK When CONFIGCPUMASKOFFSTACK and CONFIGDEBUGPERCPUMAPS are selected, cpumaxbitswarn generates a runtime warning similar to the following, while we display /proc/cpuinfo. This...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: Gadget: uaudio: Fixed a race condition related to the use of controls after freeing resources during the gadget unbinding process. It is recommended to use control IDs instead of pointers, as these are handled correctly usin...