CentOS Linux 6 [TuxCare] Security Update: dmidecode (CENTOS6:CLSA-2025:1755271747)

The CentOS Linux 6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1755271747 advisory. - Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via...

AlmaLinux 9.6 [TuxCare] Security Update: elfutils / elfutils-debuginfod / elfutils-debuginfod-client / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1766501126)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766501126 advisory. - A vulnerability has been found in GNU elfutils 0.192 and classified as problematic. This vulnerability affects the function...

AlmaLinux 9.6 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1775726631)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775726631 advisory. - A potential heap based buffer overflow was found in bfdelfslurpversiontables in bfd/elf.c. This may lead to loss of availability...

CentOS Linux 8.4 [TuxCare] Security Update: binutils / binutils-devel (CENTOS8.4:CLSA-2025:1767090011)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2025:1767090011 advisory. - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library bfd/elfcode.h of the...

AlmaLinux 9.6 [TuxCare] Security Update: qt5-qt3d / qt5-qt3d-devel / qt5-qt3d-examples / qt5-qt3d-tests (ALMALINUX9.6:CLSA-2025:1766598916)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766598916 advisory. - A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file...

Rocky Linux 9.6 [TuxCare] Security Update: libipa_hbac / libipa_hbac-devel / libsss_autofs / libsss_certmap / etc (ALMALINUX9.6:CLSA-2026:1788195197)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788195197 advisory. - A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but...

AlmaLinux 9.6 [TuxCare] Security Update: python3-rrdtool / rrdtool / rrdtool-devel / rrdtool-doc / etc (ALMALINUX9.6:CLSA-2026:1784070663)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784070663 advisory. - A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer...

CentOS Linux 8 [TuxCare] Security Update: binutils / binutils-devel (CENTOS-STREAM8:CLSA-2025:1766586503)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2025:1766586503 advisory. - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library bfd/elfcode.h of t...

Rocky Linux 8.6 [CIQ] Security Update: dnf-plugin-subscription-manager / etc (ciqsa-2026_0033)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260033 advisory. This advisory aggregates security fixes for the subscription-manager SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-3899. Tenable has extracted the preceding...

Rocky Linux 9.6 [TuxCare] Security Update: inkscape / inkscape-docs / inkscape-view (ALMALINUX9.6:CLSA-2026:1787131590)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787131590 advisory. - A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read...

AlmaLinux 9.2 [TuxCare] Security Update: qt5-qt3d / qt5-qt3d-devel / qt5-qt3d-examples / qt5-qt3d-tests Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1763033515)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1763033515 advisory. - A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issu...

rsync: rsync: Arbitrary File Read via Symlink Following

A flaw was found in rsync. A local attacker with low privileges can exploit a symlink following vulnerability in the handling of input configuration files, such as those specified by --files-from or --password-file. This allows the attacker to read arbitrary files accessible to the rsync daemon...

kernel: net/liquidio: drop cached VF pci_dev LUT

A flaw was found in the net/liquidio component of the Linux kernel. The Single Root I/O Virtualization SR-IOV enable path incorrectly cached Virtual Function VF pcidev pointers. This improper handling of references could lead to a use-after-free vulnerability when the cached pointer is later...

CVE-2026-47511

A flaw was found in the NVIDIA GPU display driver. An out-of-bounds write vulnerability in the kernel mode layer allows a local user with basic privileges to write data beyond allocated memory boundaries. Successful exploitation could allow an attacker to achieve arbitrary code execution, escalat...

CVE-2026-47504

A flaw was found in nvidia-driver. The driver's NGX updater relies on an outdated embedded cryptographic library that is susceptible to type confusion, an issue where data of one type is incorrectly treated as another. A local attacker with low privileges can exploit this vulnerability to achieve...

CVE-2026-47491

A flaw was found in nvidia-driver. A local unprivileged attacker can trigger the improper release of memory resources in the kernel mode layer, leaving a memory mapping accessible after the underlying memory is reused. A successful exploit could allow an attacker to achieve privilege escalation,...

CVE-2026-47534

A flaw was found in the NVIDIA GPU display driver. A local user with basic privileges can trigger a divide-by-zero error within the driver's kernel mode layer. A successful exploit can crash the system, resulting in a Denial of Service DoS...

CVE-2026-47602

A flaw was found in nvidia-driver. A local user can cause the kernel-mode driver to dereference an untrusted pointer, which is an unverified reference to a memory location. A successful exploit can lead to a Denial of Service DoS through a system crash or result in unauthorized information...

CVE-2026-47554

A flaw was found in nvidia-driver. Under conditions of memory pressure, the kernel mode layer improperly verifies cryptographic signatures, allowing verification checks to be bypassed. A local attacker with low privileges could exploit this vulnerability to tamper with system data or cause a Deni...

CVE-2026-47540

A flaw was found in the NVIDIA GPU Display Driver. An integer underflow vulnerability exists in the driver's kernel mode layer, occurring when an arithmetic calculation results in a value smaller than the minimum representable limit. A local attacker with low-level privileges can exploit this fla...