CVE-2026-25290 Integer Overflow or Wraparound in OOBM

Memory Corruption when validating large data buffers from external sources using addition to check buffer length...

RHEL 10 : libvirt (RHSA-2026:68510)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:68510 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

EulerOS 2.0 SP15 : openssl (EulerOS-SA-2026-3812)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destinationx000D buffer for Unicode output in ASN1mbstringncopy can lead to a heapx000D...

RHEL 9 : libvirt (RHSA-2026:68511)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:68511 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: freerdp (UTSA-2026-109826)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109826 advisory. FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel audin across ALSA, sndio, WinMM, and OpenSL ES backends that...

RHEL 9 : libvirt (RHSA-2026:68509)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:68509 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

CVE-2026-25290: Integer Overflow or Wraparound

Memory Corruption when validating large data buffers from external sources using addition to check buffer length...

PT-2026-94548

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the ntfs init from boot function within the ntfs3 file system. The issue occurs during the validation of Master File Table MFT cluster numbers read from the...

CVE-2026-90076: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: fq: add overflow bounds to quantum and initial quantum fqinit computes quantum = 2 pschedmtu and initialquantum = 10 pschedmtu with no overflow check. A device with a huge MTU e.g. dummy with maxmtu == 0 accepting MTU...

CVE-2026-90435: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix integer overflow of user QP buffer size setuserbufsize computes the QP buffer size by left-shifting the user-supplied rq.wqecnt and rq.wqeshift values as signed integers. A sufficiently large rq.wqecnt causes signe...

libsoup3 security update

3.6.5-14 - Fix CVE-2026-85197: http2 crash after connection destroyed 3.6.5-13 - Fix CVE-2026-15711: Reject oversized WebSocket control frames 3.6.5-12 - Fix CVE-2026-15709: bound decompressed WebSocket message size 3.6.5-11 - Add patches for CVE-2026-4271 and CVE-2026-5119 3.6.5-10 - Add patch f...

CVE-2026-54571: Integer Overflow or Wraparound

ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. Prior to 3.11.1, the multipart/form-data parser in src/WebRequest.cpp stores boundaryPosition as an 8-bit value while parseMultipartPostByte processes the boundary. A remote request...

PT-2026-94411

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the virtio-net component where a user can specify an arbitrary gso size in a packet crafted with an AF PACKET PACKET VNET HDR socket. If the gso size is set to a value...

PT-2026-94421

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the net/sched component when handling the quantum value. The hhf init function sets q-quantum using psched mtu without an overflow check. On devices with an...

CVE-2026-90063: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets don't overflow gsosegs The user can specify any gsosize in a packet crafted with an AFPACKET PACKETVNETHDR socket, even smaller than TCPMINGSOSIZE = 8. At the same time, GSOMAXSIZE = 8 GSOMAXSE...

PT-2026-94544

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASoC SOF component where topology mixer minimum and maximum values are treated as non-negative indices for the volume table. These values are stored in signed...

PT-2026-94424

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fq init function where quantum and initial quantum are computed using psched mtu without overflow checks. When a device has an excessively large Maximum Transmissi...

PT-2026-94594

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the AppArmor module during the validation of the tagset table unpacked from a policy blob. The verify tags function performs a bounds check by adding an ind...

CVE-2026-90246: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix integer overflow in verifytags bounds check verifytags validates the tagset table unpacked from a policy blob. For each set it reads a count and checks that advancing the index by that count stays inside sets.table:...

PT-2026-94489

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the IPVS FTP helper during port and address parsing. The function ip vs ftp get addrport accumulates decimal digits into a u16 hport and an unsigned char p...