Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

kernel: Kernel: Privilege escalation and denial of service via integer truncation in accel/ivpu

A flaw was found in the Linux kernel's accel/ivpu component. A local attacker could exploit a signed integer truncation vulnerability in the Inter-Process Communication IPC receive path. This flaw occurs when a firmware-supplied data size is incorrectly converted, leading to an oversized memory...

RHEL 9 : kernel (RHSA-2026:54443)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54443 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: accel/ivpu: Fix signed intege...

RockyLinux 10 : kernel (RLSA-2026:54343)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54343 advisory. kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

kernel: Kernel: Privilege escalation and denial of service via integer truncation in accel/ivpu

A flaw was found in the Linux kernel's accel/ivpu component. A local attacker could exploit a signed integer truncation vulnerability in the Inter-Process Communication IPC receive path. This flaw occurs when a firmware-supplied data size is incorrectly converted, leading to an oversized memory...

ALSA-2026:54343 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action lifecycle CVE-2026-53264 kernel: scsi: target:...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action lifecycle CVE-2026-53264 Bug Fixes and...

RHEL 10 : kernel (RHSA-2026:54343)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54343 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: accel/ivpu: Fix signed integ...

CVE-2026-73152

A flaw was found in svxlink's EchoLink proxy implementation. An integer truncation in message-length handling can result in incorrect buffer sizes, leading to potential memory corruption when processing specially crafted proxy messages. Mitigation Update svxlink to version 26.05.1 or later...

CVE-2026-64280

In the Linux kernel, the following vulnerability has been resolved: fpga: dfl-afu: validate DMA mapping length in afudmamapregion afuioctldmamap accepts a 64-bit length from userspace via DFLFPGAPORTDMAMAP ioctl without an upper bound check. The value is passed to afudmapinpages where npages is...

CVE-2026-12548 Libsoup: heap out-of-bounds read in libsoup due to integer truncation

A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soupheadersparse can cause the length parameter to be incorrectly truncated, leading to a heap buffer over-read. A remote attacker could use this flaw to cras...

CVE-2026-12548

CVE-2026-12548: A heap out-of-bounds read in libsoup during multipart HTTP parsing arises from an integer type mismatch in soup_headers_parse(), which truncates the length parameter and triggers a heap buffer over-read. This could crash applications using libsoup or potentially disclose heap memo...

JLSEC-2026-753 A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer...

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This...

CVE-2026-53923

A flaw was found in vLLM. Integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels leads to partial tensor processing. This results in the output tensor retaining previously used GPU memory, which, in multi-tenant inference deployments, can expose sensitive tensor data from other...

UBUNTU-CVE-2026-6679

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This...

CVE-2026-6679 DTLS 1.3 ACK serialization heap buffer overflow via integer truncation

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This...

CVE-2026-6679 DTLS 1.3 ACK serialization heap buffer overflow via integer truncation

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This...

CVE-2026-6679

CVE-2026-6679 describes a heap buffer overflow in the DTLS 1.3 ACK serialization path that occurs before the peer is authenticated. The root cause is an integer truncation when computing the length of the ACK record-number list, which leads to an undersized buffer and an overrun. Impact is on wol...

CVE-2026-6679

A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to be allocated and then overrun. This...