ROS-20261013-73-0219

The vulnerability of the sun4ibackendatomiccheck function in the drivers/gpu/drm/sun4i/sun4ibackend.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service...

ROS-20261013-73-0115

The vulnerability of the inetcsklistenstop function in the net/ipv4/inetconnectionsock.c module of the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

ROS-20261013-73-0011

The vulnerability in the fs/ext4/extents.c component of the Linux operating system is related to incomplete recognition of the internal state. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0217

The vulnerability of the komedafbafbcsizecheck function in the drivers/gpu/drm/arm/display/komeda/komedaframebuffer.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux kernel, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability...

ROS-20261013-73-0002

The vulnerability of the bq256xxcharger.c component in the Linux operating system is related to a situation where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0057

The vulnerability of the drivers/hid/hid-playstation.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0035

The vulnerability of the goldfishbattery.c component in the Linux operating system is related to a situation involving signal processing. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0364

The vulnerability of the nftctexpectobjeval function in the net/netfilter/nftct.c module of the netfilter component of the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to compromise t...

ROS-20261013-73-0157

The vulnerability of the cephhandleauthreply function in the net/ceph/auth.c module, which is part of the networking functions in the Linux kernel, is related to incorrect checking of the type of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ROS-20261013-73-0055

The vulnerability of the drivers/cpuidle/cpuidle.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0107

The vulnerability of the cfg80211mergeprofile function in the net/wireless/scan.c module related to Linux’s wireless communication support is associated with the execution of a loop with an unreachable exit condition an “infinite loop”. Exploiting this vulnerability could allow an attacker to...

ROS-20261013-73-0403

The vulnerability of the rdsibsendunmapop function in the net/rds/ibsend.c module, which is part of the networking functions in the Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261013-73-0417

The vulnerability of the hbhmt6check function in the net/ipv6/netfilter/ip6thbh.c module of the Linux operating system’s IPv6 kernel implementation is related to the execution of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to access protected...

Oracle Linux 8 : libxml2 (ELSA-2026-80675)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-80675 advisory. 2.9.7-21.10 - Fix CVE-2026-86144 RHEL-269184 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

CentOS Linux 8.5 [TuxCare] Security Update: zlib / zlib-devel / zlib-static (CENTOS8.5:CLSA-2026:1791916248)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791916248 advisory. - zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write fails, gzwrite returns without resetting strm.nextin,...

CentOS Linux 8.4 [TuxCare] Security Update: zlib / zlib-devel / zlib-static (CENTOS8.4:CLSA-2026:1791915688)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791915688 advisory. - zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write fails, gzwrite returns without resetting strm.nextin,...

Ubuntu 26.04 LTS : Linux kernel (OEM) vulnerabilities (USN-8637-1)

The remote Ubuntu 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8637-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

ROS-20261013-73-0210

The vulnerability of the hciuartregisterdev function in the drivers/bluetooth/hcildisc.c device driver of the Linux operating system’s Bluetooth driver is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise...

PT-2026-112874

VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string that QProcess::startconst QString& reparses into arguments through ProcessUtils::startDetached. The automatic path in...

Microsoft Windows: CVE-2026-70027: Windows Subsystem for Linux Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...