PT-2026-98929

Name of the Vulnerable Software and Affected Versions NetworkManager-iodine affected versions not specified Description A flaw exists in the iodine VPN plugin for NetworkManager. A local unprivileged user can achieve local privilege escalation by exploiting the way the nameserver setting is...

SUSE CVE-2026-89791

In the Linux kernel, the following vulnerability has been resolved: perf: Fix use-after-free when perf mmap revival races with the last munmap perfmmapclose drops rb-mmapcount without holding event-mmapmutex the refcountdecandtest right before the refcountdecandmutexlock of event-mmapcount. A...

Security update for kbd

This update for kbd fixes the following issue: CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

CVE-2026-90046

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't spintrylock in NMI on UP Patch series "mm/pagealloc: fixes for freepagesnolock on RT/UP". Pre-existing bugs found by Sashiko during review of this other series:...

DEBIAN-CVE-2026-90046

In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: don't spintrylock in NMI on UP Patch series "mm/pagealloc: fixes for freepagesnolock on RT/UP". Pre-existing bugs found by Sashiko during review of this other series:...

DEBIAN-CVE-2026-89791

In the Linux kernel, the following vulnerability has been resolved: perf: Fix use-after-free when perf mmap revival races with the last munmap perfmmapclose drops rb-mmapcount without holding event-mmapmutex the refcountdecandtest right before the refcountdecandmutexlock of event-mmapcount. A...

CVE-2026-89791

In the Linux kernel, the following vulnerability has been resolved: perf: Fix use-after-free when perf mmap revival races with the last munmap perfmmapclose drops rb-mmapcount without holding event-mmapmutex the refcountdecandtest right before the refcountdecandmutexlock of event-mmapcount. A...

SUSE-SU-2026:23742-1 Security update for kbd

This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441...

SUSE-SU-2026:23844-1 Security update for kbd

This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441...

CVE-2026-89791

CVE-2026-89791 is a use-after-free race condition in the Linux kernel's perf subsystem . The root cause is that perf_mmap_close() drops rb->mmap_count without holding event->mmap_mutex, allowing a concurrent perf_mmap_rb() revival path to free a newly allocated ring buffer that another proc...

SUSE-SU-2026:4207-1 Security update for kbd

This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441...

kernel: packet: use consistent hard_header_len in non-ring send paths

An out-of-bounds write problem was observed in packetsendmsgspkt in net/packet/afpacket.c in the Linux Kernel. In this flaw, AFPACKET hardheaderlen race may allow local privilege escalation...

kernel: packet: use consistent hard_header_len in non-ring send paths

An out-of-bounds write problem was observed in packetsendmsgspkt in net/packet/afpacket.c in the Linux Kernel. In this flaw, AFPACKET hardheaderlen race may allow local privilege escalation...

SUSE CVE-2026-19624

A flaw was found in NetworkManager-l2tp. The plugin writes attacker-controlled VPN connection properties vpn.data and vpn.secrets values unescaped into a generated ipsec.conf file that pluto loads as root. A local unprivileged user can create and activate their own L2TP VPN profile containing a...

VulnCheck KEV: CVE-2026-32996

This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation...

CVE-2026-89791: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: perf: Fix use-after-free when perf mmap revival races with the last munmap perfmmapclose drops rb-mmapcount without holding event-mmapmutex the refcountdecandtest right before the refcountdecandmutexlock of event-mmapcount. A...

CVE-2026-82964: Improper Preservation of Permissions

Improper preservation of permissions in the Avast sandbox minifilter driver aswSnx.sys on Windows allows a local, low-privileged attacker executing inside the sandbox to escape file isolation and escalate to SYSTEM. When the sandbox virtualizes a file it copies the original security descriptor, b...

PT-2026-93687

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory management subsystem where the use of spin trylock within a Non-Maskable Interrupt NMI on Uniprocessor UP systems is unsafe. This occurs specifically during...

PT-2026-94129

NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability...

SUSE SLED15: NetworkManager / NetworkManager-bluetooth / etc (SUSE-SU-2026:4148-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4148-1 advisory. - CVE-2026-10805: Local privilege escalation via malformed MUD URLs in dhclient backend bsc1267696. -...