CLSA-2026-1792628290 openexr: Fix of 11 CVEs

CVE-2026-54920: validate the data window and pre-initialise every level pointer in OpenEXRUtil Image::resize, so an overflowing level size no longer leaves clearLevels deleting uninitialised ImageLevel pointers - CVE-2026-55059: map the row index with dataWindow.min.y instead of min.x in...

CLSA-2026-1792627161 openexr: Fix of 11 CVEs

CVE-2026-54920: validate the data window and pre-initialise every level pointer in OpenEXRUtil Image::resize, so an overflowing level size no longer leaves clearLevels deleting uninitialised ImageLevel pointers - CVE-2026-55059: map the row index with dataWindow.min.y instead of min.x in...

SUSE CVE-2026-91142

A flaw was found in Cockpit. An authenticated local user with a large user identifier UID can cause unauthorized modification and disclosure of login records. On 32-bit systems, an integer overflow during session accounting allows the user's login process to read or overwrite the legacy log entri...

Linux Distros Unpatched Vulnerability : CVE-2026-91142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Cockpit. An authenticated local user with a large user identifier UID can cause unauthorized modification and disclosure of login records. O...

CVE-2026-91142

A flaw was found in Cockpit. An authenticated local user with a large user identifier UID can cause unauthorized modification and disclosure of login records. On 32-bit systems, an integer overflow during session accounting allows the user's login process to read or overwrite the legacy log entri...

CVE-2026-91142

A flaw was found in Cockpit. An integer overflow vulnerability in the dolastlog function, specifically in the offset calculation for lastlog entries on ILP32 Integer, Long, Pointer 32-bit builds, can be exploited. A low-privileged authenticated user with a specially provisioned large User ID UID...

UBUNTU-CVE-2026-91142

A flaw was found in Cockpit. An integer overflow vulnerability in the dolastlog function, specifically in the offset calculation for lastlog entries on ILP32 Integer, Long, Pointer 32-bit builds, can be exploited. A low-privileged authenticated user with a specially provisioned large User ID UID...

CVE-2026-91142

A flaw was found in Cockpit. An authenticated local user with a large user identifier UID can cause unauthorized modification and disclosure of login records. On 32-bit systems, an integer overflow during session accounting allows the user's login process to read or overwrite the legacy log entri...

EUVD-2026-83176

A flaw was found in Cockpit. An integer overflow vulnerability in the dolastlog function, specifically in the offset calculation for lastlog entries on ILP32 Integer, Long, Pointer 32-bit builds, can be exploited. A low-privileged authenticated user with a specially provisioned large User ID UID...

CVE-2026-91142

Cockpit contains an integer overflow in the do_lastlog() function's offset calculation for lastlog entries, specifically on ILP32 (32-bit) builds. A low-privileged authenticated user with a specially provisioned large UID can cause the computed offset to wrap around, enabling unauthorized reads a...

CVE-2026-91142 Cockpit: cockpit: unauthorized modification of login records via integer overflow

A flaw was found in Cockpit. An authenticated local user with a large user identifier UID can cause unauthorized modification and disclosure of login records. On 32-bit systems, an integer overflow during session accounting allows the user's login process to read or overwrite the legacy log entri...

CVE-2026-91142 Cockpit: cockpit: unauthorized modification of login records via integer overflow

A flaw was found in Cockpit. An authenticated local user with a large user identifier UID can cause unauthorized modification and disclosure of login records. On 32-bit systems, an integer overflow during session accounting allows the user's login process to read or overwrite the legacy log entri...

CVE-2026-91142

A flaw was found in Cockpit. An authenticated local user with a large user identifier UID can cause unauthorized modification and disclosure of login records. On 32-bit systems, an integer overflow during session accounting allows the user's login process to read or overwrite the legacy log entri...

CVE-2026-91142: Integer Overflow or Wraparound

A flaw was found in Cockpit. An authenticated local user with a large user identifier UID can cause unauthorized modification and disclosure of login records. On 32-bit systems, an integer overflow during session accounting allows the user's login process to read or overwrite the legacy log entri...

Linux Distros Unpatched Vulnerability : CVE-2026-89665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder converts the wire useconds to nanoseconds in svcxdrdecodesattr:...

AZL-100400 CVE-2026-89665 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder converts the wire useconds to nanoseconds in svcxdrdecodesattr: iap-iaatime.tvnsec = tmp2 NSECPERUSEC; tmp2 is a u32 and NSECPERUSEC is 1000, so t...

CVE-2026-89665

In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder converts the wire useconds to nanoseconds in svcxdrdecodesattr: iap-iaatime.tvnsec = tmp2 NSECPERUSEC; tmp2 is a u32 and NSECPERUSEC is 1000, so t...

CVE-2026-89665

In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder converts the wire useconds to nanoseconds in svcxdrdecodesattr: iap-iaatime.tvnsec = tmp2 NSECPERUSEC; tmp2 is a u32 and NSECPERUSEC is 1000, so t...

CVE-2026-89665 nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE

In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder converts the wire useconds to nanoseconds in svcxdrdecodesattr: iap-iaatime.tvnsec = tmp2 NSECPERUSEC; tmp2 is a u32 and NSECPERUSEC is 1000, so t...

CVE-2026-89665 nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE

In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE The NFSv2 sattr decoder converts the wire useconds to nanoseconds in svcxdrdecodesattr: iap-iaatime.tvnsec = tmp2 NSECPERUSEC; tmp2 is a u32 and NSECPERUSEC is 1000, so t...