Apache bRPC digital error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a numeric error vulnerability. This vulnerability stems from UnparsedValue::asstring in the mcpack2pb component, which fails to validate valuesize. When valuesize is set to 0, an integer underflow occurs during calculation of size-1. This results in...

Red Hat: CVE-2026-114045: freerdp: FreeRDP: heap buffer overflow in server rdpsnd via crafted audio formats

FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparound in rdpsndserverselectformat DVIADPCM block-alignment arithmetic bypasses validation. A malicious RDP client can send two SNDCFORMATS PDUs with an nBlockAlign too small for...

Linux Distros Unpatched Vulnerability : CVE-2026-109976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AFUNIX client connects to the data socket without a bou...

MiracleLinux 9 : xorg-x11-server-1.20.11-34.el9_8.5 (AXSA:2026-2111:17)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2111:17 advisory. xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server:...

AlmaLinux 9 : xorg-x11-server (ALSA-2026:84574)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:84574 advisory. xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server:...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: pcre2 (UTSA-2026-142351)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142351 advisory. PCRE2 before 10.48, on 32-bit platforms, has a pcre2compile32 integer overflow and resultant out-of- bounds write. Tenable has extracted the preceding description...

PT-2026-120819

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description An issue exists in the PILfont text-width accumulation within src/ imaging.c where positive glyph advances are checked against INT MAX, but negative advances are not checked against INT MIN. Repeatin...

SUSE CVE-2026-98591

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bounds check for skb-backed dynptrs The skbpointeriflinear function checks whether a memory region of length len starting at offset off into the skb is in the linear area, and returns a pointer to the region if so. The...

SUSE CVE-2026-98634

In the Linux kernel, the following vulnerability has been resolved: scsi: sdzbc: Reject disks with too many zones sdzbcreadzones computes the number of zones with 64-bit arithmetic and stores the result in the unsigned int nrzones field of struct zoneddiskinfo, silently truncating counts that...

SUSE CVE-2026-98860

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssizet when checking hidbpfhwrequest As reported by Sashiko: If a transport driver encounters a hardware error and returns a negative error code such as -EPIPE, ret is implicitly promoted to sizet when...

CLSA-2026-1792539934 gstreamer1: Fix of CVE-2024-47606

CVE-2024-47606: allocator: avoid integer overflow when allocating sysmem - Fix documentation build with the newer gtk-doc...

SUSE CVE-2026-111881

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZEMAX - 3 to StreamZero for sub-byte images. A malicious RDP clipboard peer can return a crafted 1-bpp BMP processed by clipboardsynthesizeimageformattobmp for...

CLSA-2026-1792445930 kernel: Fix of 92 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - smb: client: fix UAF and buffer leak in cifschecktrans2 for malformed secondary T2 CVE-2026-89637 - smb: client: fix OOB read/write from unvalidated DataOffset in coalescet2 CVE-2026-89633 - sunrpc: defer rqargp and rqresp...

Security Bulletin: Publicly disclosed krb5 vulnerabilities affect IBM Safer Payments (CVE-2026-40355, CVE-2026-40356)

Summary krb5 is used by IBM Safer Payments to support user logins via LDAP/kerberos5. This vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-40355 DESCRIPTION: In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls...

kernel: xfrm: Check for underflow in xfrm_state_mtu

A flaw was found in the Linux kernel's xfrm IPSec framework component. A local, unprivileged user can trigger an integer underflow in the Encapsulating Security Payload ESP module's Maximum Transmission Unit MTU calculation. This underflow leads to a severe out-of-bounds write, which can cause...

CLSA-2026-1792519351 Update of tzdata

New upstream 2026e version: - Manitoba moves to permanent -05 on 2026-10-31. - Canada’s Northwest Territories moved to permanent -06 on 2026-08-21. - Fix security, performance and porting bugs in zic and localtime. - Alberta moved to permanent -06 on 2026-06-18. - Morocco moves to permanent +00 o...

CLSA-2026-1792519236 Update of tzdata

New upstream 2026e version: - Manitoba moves to permanent -05 on 2026-10-31. - Canada’s Northwest Territories moved to permanent -06 on 2026-08-21. - Obsolescent settings like TZ="EST5EDT" now conform better to POSIX. - Fix security, performance and porting bugs in zic and localtime. - Alberta...

CVE-2026-98095

A flaw was found in the Linux kernel's afpacket network subsystem. When parsing packet headers, user-supplied length values are improperly converted from an unsigned integer to a signed integer. A local user can exploit this vulnerability by submitting an excessively large packet length, causing ...

CVE-2026-89926

A flaw was found in the Linux kernel's KVM s390 component. A local user can exploit this vulnerability by providing a specially crafted length value to the hardware breakpoint kvmhwbreakpoint mechanism. This integer truncation can lead to an attempted allocation of over 4GB of memory, causing the...

CVE-2026-89876

A flaw was found in the Linux kernel's media driver for tda18250. An integer overflow can occur when a specific variable, exp, is zero, leading to undefined behavior. This issue arises from a shift operation 1 exp - 1 which can result in unexpected system behavior...