Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.

Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details...

CVE-2026-120954

A weakness in the BSON library 's handling of a specialized binary vector data type allows an arithmetic wraparound (CWE-190) when processing an oversized attacker-supplied value. On builds with a 32-bit platform word size , an application parsing untrusted BSON data may only process a small frac...

CVE-2026-120954 Silent element-count truncation via 32-bit bit-length overflow in packed-bit vector views

A weakness in the BSON library's handling of a specialized binary vector data type allows an arithmetic wraparound when computing the number of elements described by an oversized attacker-supplied value. On builds where the platform word size is 32 bits, an application that parses untrusted BSON...

CLEANSTART-2026-WA80249 NewNTUnicodeString does not check for string length overflow

CVE-2026-39824 affects multiple packages. NewNTUnicodeString does not check for string length overflow. See references for individual vulnerability details...

CLEANSTART-2026-OE38075 NewNTUnicodeString does not check for string length overflow

CVE-2026-39824 affects multiple packages. NewNTUnicodeString does not check for string length overflow. See references for individual vulnerability details...

CLEANSTART-2026-NY92907 NewNTUnicodeString does not check for string length overflow

CVE-2026-39824 affects multiple packages. NewNTUnicodeString does not check for string length overflow. See references for individual vulnerability details...

CLEANSTART-2026-NM66385 NewNTUnicodeString does not check for string length overflow

CVE-2026-39824 affects multiple packages. NewNTUnicodeString does not check for string length overflow. See references for individual vulnerability details...

Linux Distros Unpatched Vulnerability : CVE-2026-99066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: dev: initcanskb: restore skb header initialization Commit 9f10374bb024 can: remove private CAN skb headroom infrastructure removed the...

SUSE CVE-2026-99066

In the Linux kernel, the following vulnerability has been resolved: can: dev: initcanskb: restore skb header initialization Commit 9f10374bb024 "can: remove private CAN skb headroom infrastructure" removed the skbresetmacheader/skbresetnetworkheader/ skbresettransportheader calls from initcanskb...

DEBIAN-CVE-2026-99066

In the Linux kernel, the following vulnerability has been resolved: can: dev: initcanskb: restore skb header initialization Commit 9f10374bb024 "can: remove private CAN skb headroom infrastructure" removed the skbresetmacheader/skbresetnetworkheader/ skbresettransportheader calls from initcanskb...

CVE-2026-99066

In the Linux kernel, the following vulnerability has been resolved: can: dev: initcanskb: restore skb header initialization Commit 9f10374bb024 "can: remove private CAN skb headroom infrastructure" removed the skbresetmacheader/skbresetnetworkheader/ skbresettransportheader calls from initcanskb...

CVE-2026-99066 can: dev: init_can_skb(): restore skb header initialization

In the Linux kernel, the following vulnerability has been resolved: can: dev: initcanskb: restore skb header initialization Commit 9f10374bb024 "can: remove private CAN skb headroom infrastructure" removed the skbresetmacheader/skbresetnetworkheader/ skbresettransportheader calls from initcanskb...

PT-2026-122043

In the Linux kernel, the following vulnerability has been resolved: can: dev: init can skb: restore skb header initialization Commit 9f10374bb024 "can: remove private CAN skb headroom infrastructure" removed the skb reset mac header/skb reset network header/ skb reset transport header calls from...

CLEANSTART-2026-JU41154 NewNTUnicodeString does not check for string length overflow

Security vulnerability affects the gatekeeper-fips package. NewNTUnicodeString does not check for string length overflow...

PT-2026-132959

Security vulnerability affects the gatekeeper-fips package. NewNTUnicodeString does not check for string length overflow...

Eclipse ThreadX – NetX Duo: Improper exception handling leads to vulnerabilities

Eclipse ThreadX – The version 6.4.2 to 6.5.1.202602 of NetX Duo contains security vulnerabilities. These vulnerabilities arise from the HTTP server of Web Add-ons detecting a Content-Length overflow when processing PUT requests. This leads to the dereferencing and release of uninitialized pointer...

Astra Linux – vulnerability in linux-5.15

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Add overflow check in sgxvalidateoffsetlength The sgxvalidateoffsetlength function validates “offset” and “length” arguments provided by user space; however, it lacked an overflow check on their addition. This check shou...

Astra Linux – vulnerability in nbd

In nbd-server in nbd prior to version 3.24, there is an integer overflow that leads to a heap-based buffer overflow. A value of 0xffffffff in the name length field causes a zero-sized buffer to be allocated for the name, resulting in a write to a dangling pointer. This issue affects the NBDOPTINF...

CLEANSTART-2026-ST70744 NewNTUnicodeString does not check for string length overflow

CVE-2026-39824 affects multiple packages. NewNTUnicodeString does not check for string length overflow. See references for individual vulnerability details...

UBUNTU-CVE-2026-98393

In the Linux kernel, the following vulnerability has been resolved: net: ipv4: Fix UDP length overflow with PMTU discover and big MTU This commit bounds cork-base.fragsize to IPMAXMTU to avoid a possible overflow of UDP length that triggers a WARN in udpsetlenshort when setsockopt IPMTUDISCOVER i...