Microsoft Windows: CVE-2026-96309: Windows Subsystem for Linux Elevation of Privilege Vulnerability

Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

ROS-20261013-73-0049

The vulnerability in the drivers/block/ublkdrv.c component of the Linux operating system is related to incorrect checking of the specified index, position, or offset in input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0053

The vulnerability of the apparmor module in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0121

The vulnerability of the udpreadskb function in the net/ipv4/udp.c module of the Linux kernel’s IPv4 protocol implementation is related to the lack of resource initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

UBUNTU-CVE-2026-98376

In the Linux kernel, the following vulnerability has been resolved: bpf: Use arraymapmetaequal for percpu array inner map replacement percpuarraymapops.mapmetaequal points to the generic bpfmapmetaequal, which does not compare maxentries. When a percpu array serves as an inner map, replacing it...

ROS-20261013-73-0045

The vulnerability of the vidiconnectionioctl function in the drivers/gpu/drm/exynos/exynosdrmvidi.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to the use of an unreliable pointer. Exploiting this vulnerability can allow an attacker to access protected...

ROS-20261013-73-0105

The vulnerability of the pepdorcv function in the net/phonet/pep.c module, which is part of the Linux kernel’s networking functions, leads to mutual locking. Exploiting this vulnerability can allow a attacker to cause service failures...

ROS-20261013-73-0288

The vulnerability of the replacenexthopsingle function in the net/ipv4/nexthop.c module of the Linux operating system’s IPv4 protocol implementation is related to the swapping of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261013-73-0460

The vulnerability of the apparmor/resource.c component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-8631-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8631-1 advisory. Siebe Devroe, Hlose Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-8636-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8636-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

ROS-20261013-73-0203

The vulnerability of the bpfprogtestrunskb function in the net/bpf/testrun.c module, which implements networking functions in the Linux kernel, is related to incorrect input of configuration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

ROS-20261013-73-0294

The vulnerability of the dorbdadd function in the drivers/block/rbd.c module of the Linux kernel’s block devices driver is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261013-73-0249

The vulnerability of the vpum2mdevicerun function in the drivers/media/platform/amphion/vpuv4l2.c file of the Linux multimedia device driver module is related to the state of the race condition involving the signal handler. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20261013-73-0060

The vulnerability of the fs/btrfs/qgroup.c component in the Linux operating system is related to deficiencies in handling error situations. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0359

The vulnerability of the afalgcmsgsend function in the crypto/afalg.c module of the Linux kernel’s cryptographic subsystem is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Oracle Linux 8 : perl-DBI (ELSA-2026-77576)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-77576 advisory. 1.641-4 - CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting memory read during numeric type casting...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-8646-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8646-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Ubuntu 14.04 LTS : Linux kernel (Azure) vulnerabilities (USN-8635-1)

"The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8635-1 advisory. Siebe Devroe, Hlose Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-8645-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8645-1 advisory. Siebe Devroe, Hlose Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated...