Security update for corosync

This update for corosync fixes the following issues: CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly bsc1278738. CVE-2026-81666: integer overflow in checkmembcommittokensanity may bypass message length validation on 32-bit systems...

SUSE-SU-2026:4202-1 Security update for corosync

This update for corosync fixes the following issues: - CVE-2026-81665: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly bsc1278738. - CVE-2026-81666: integer overflow in checkmembcommittokensanity may bypass message length validation on 32-bit systems...

RLSA-2026:67469 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: EDAC/bluefield: Fix potential integer overflow CVE-2024-53161 kernel: wifi: mac80211: Discard Beacon frames to non-broadcast addre...

EUVD-2026-80013

Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-based buffer overflow and denial of service via a crafted cache file. This issue affects Escargot: ac94df78493ee6fede286620d94f724e46b4d23...

EUVD-2026-80049

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specially crafted PSD Photoshop Document image file, an integer overflow occurs during the multiplication of values from an embedded JPEG header. This leads to an undersized heap allocation, resulting in a...

SUSE CVE-2026-89559

In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in ndlabelvalidate The on-media namespace index field nslot is a u32 read from the DIMM label storage area. ndlabelvalidate bounds it against the config area size, but sizeofnamespacelab...

PT-2026-93517

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow can occur when the variable exp equals zero. This leads to undefined behavior during the shift operation 1 exp - 1. Recommendations At the moment, there is no...

CVE-2026-89826: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: harden firmware build-info bounds checks panthorfwreadbuildinfo checks whether the metadata range fits in the firmware image with hdr.metastart + hdr.metasize. Both fields are u32, so the addition can wrap and let an...

CVE-2026-77408: Integer Overflow or Wraparound

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, the writeShortstr function in write.go casts the byte length of AMQP shortstr property values to uint8 without first rejecting values longer than 255 bytes. An application that accepts an oversized CorrelationId, ReplyTo, MessageId,...

CVE-2026-89876: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: tda18250: fix possible integer overflow Integer overflow may occur, when variable exp equals to zero. Result of shift 1 exp - 1 may then leads to undefined behavior...

PT-2026-93568

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM x86 Hyper-V synthetic timer emulation where userspace or a guest can program a timer with a deadline in the past by causing an integer overflow. This occurs wh...

CVE-2026-89818: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: fix integer overflow in decmsg buffer count check If the supplied msg2 numbuffers is 0x3FFFFFFF, the expression 6 + numbuffers 4 wraps to 2 and the bounds check passes, letting the parser loop far past the end of...

CVE-2026-89796: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamondmergeregions internal loop Patch series "mm/damon: unurgent fixes for infinite loop, NULL de-ref and races", v1.1. Sashiko found a few issues in DAMON that could cause infinite loop, NULL...

CVE-2026-89806: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: ofdrm: Fix integer overflow in fbsize calculation The framebuffer size calculation fbsize = linebytes height can overflow when both values are large e.g., 46341 46341 INTMAX. Since linebytes and height are both int...

PT-2026-93447

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs during the framebuffer size calculation fb size = linebytes height when both linebytes and height variables contain large values. Because these variables are...

PT-2026-93459

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the drm/amdgpu/vcn component during the dec msg buffer count check. When the num buffers variable is set to 0x3FFFFFFF, the calculation 6 + num buffers 4...

PT-2026-93466

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/panthor component where the functions panthor init cs iface and panthor init csg iface perform bounds checks on firmware control interface offsets using 32-bit...

CVE-2026-63126: Integer Overflow or Wraparound

Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0.0-alpha04, Wire protobuf readers do not consistently validate attacker-controlled lengths against the current logical message boundary before advancing cursors, pointers, limits, slices, or...

ROS-20260916-73-0079

The vulnerability of the functions ioam6fillTraceData and ioam6fillTraceData in the net/ipv6/ioam6.c module of the Linux operating system is related to integer overflow. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibilit...

Linux Distros Unpatched Vulnerability : CVE-2026-89818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/vcn: fix integer overflow in decmsg buffer count check If the supplied msg2 numbuffers is 0x3FFFFFFF, the expression 6 + numbuffers 4 wraps to 2 and...