AlmaLinux 9.2 [TuxCare] Security Update: qt5-qt3d / qt5-qt3d-devel / qt5-qt3d-examples / qt5-qt3d-tests (ALMALINUX9.2:CLSA-2025:1764083719)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764083719 advisory. - A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file...

Rocky Linux 9.6 [TuxCare] Security Update: libtiff / libtiff-devel / libtiff-static / libtiff-tools Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1772642268)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772642268 advisory. - libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function. CVE-2025-61144 -...

CentOS Linux 7 [TuxCare] Security Update: jasper / jasper-devel / jasper-libs / jasper-utils (CENTOS7:CLSA-2025:1759864646)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1759864646 advisory. - A vulnerability was identified in JasPer up to 4.2.5. This affects the function jpcdecdump of the file src/libjasper/jpc/jpcdec.c of the...

AlmaLinux 9.2 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1777949670)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777949670 advisory. - A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tgtagtype of the file prdbg.c. Performing a...

CVE-2026-72018

CVE-2026-72018 — Linux 内核越界写入 Linux 内核 • DIBS 回环 • 越界写入 CVE-2026-72018 的安全研究与技术分析。 01 — 概述 CVE-2026-72018 是一个影响 DIBS/ISM 回环功能的 Linux 内核越界写入 漏洞。 该漏洞与传入已注册 DMB（数据内存缓冲区） 的数据处理有关。 受影响的实现未在执行内存操作之前充分验证所提供的偏移量、传输大小与实际 DMB 边界之间的关系。 漏洞分类 属性| 值 ---|--- CVE| CVE-2026-72018 CWE| CWE-787 — 越界写入 CVSS v3.1| 7....

rsync: rsync: Arbitrary File Read via Symlink Following

A flaw was found in rsync. A local attacker with low privileges can exploit a symlink following vulnerability in the handling of input configuration files, such as those specified by --files-from or --password-file. This allows the attacker to read arbitrary files accessible to the rsync daemon...

kernel: net/liquidio: drop cached VF pci_dev LUT

A flaw was found in the net/liquidio component of the Linux kernel. The Single Root I/O Virtualization SR-IOV enable path incorrectly cached Virtual Function VF pcidev pointers. This improper handling of references could lead to a use-after-free vulnerability when the cached pointer is later...

CVE-2026-47511

A flaw was found in the NVIDIA GPU display driver. An out-of-bounds write vulnerability in the kernel mode layer allows a local user with basic privileges to write data beyond allocated memory boundaries. Successful exploitation could allow an attacker to achieve arbitrary code execution, escalat...

CVE-2026-47504

A flaw was found in nvidia-driver. The driver's NGX updater relies on an outdated embedded cryptographic library that is susceptible to type confusion, an issue where data of one type is incorrectly treated as another. A local attacker with low privileges can exploit this vulnerability to achieve...

CVE-2026-47491

A flaw was found in nvidia-driver. A local unprivileged attacker can trigger the improper release of memory resources in the kernel mode layer, leaving a memory mapping accessible after the underlying memory is reused. A successful exploit could allow an attacker to achieve privilege escalation,...

CVE-2026-47534

A flaw was found in the NVIDIA GPU display driver. A local user with basic privileges can trigger a divide-by-zero error within the driver's kernel mode layer. A successful exploit can crash the system, resulting in a Denial of Service DoS...

CVE-2026-47602

A flaw was found in nvidia-driver. A local user can cause the kernel-mode driver to dereference an untrusted pointer, which is an unverified reference to a memory location. A successful exploit can lead to a Denial of Service DoS through a system crash or result in unauthorized information...

CVE-2026-47554

A flaw was found in nvidia-driver. Under conditions of memory pressure, the kernel mode layer improperly verifies cryptographic signatures, allowing verification checks to be bypassed. A local attacker with low privileges could exploit this vulnerability to tamper with system data or cause a Deni...

CVE-2026-47540

A flaw was found in the NVIDIA GPU Display Driver. An integer underflow vulnerability exists in the driver's kernel mode layer, occurring when an arithmetic calculation results in a value smaller than the minimum representable limit. A local attacker with low-level privileges can exploit this fla...

CVE-2026-47604

A flaw was found in the NVIDIA GPU display driver. Missing authorization checks in the kernel-mode driver allow a local user to access another process's graphics processing unit GPU channel state. Successful exploitation can lead to unauthorized information disclosure...

CVE-2026-47549

A flaw was found in nvidia-driver. This vulnerability allows an unprivileged local user to cause a Denial of Service DoS by triggering an invalid memory access NULL pointer dereference in the kernel module. A successful exploit results in a system crash...

CVE-2026-47531

A flaw was found in the NVIDIA GPU Display Driver. A local attacker with high privileges can trigger an invalid memory access null pointer dereference within the kernel mode layer. Successful exploitation leads to a Denial of Service DoS by causing the driver or host system to crash...

CVE-2026-47528

A flaw was found in the NVIDIA GPU Display Driver. A local attacker with standard user access can trigger the driver firmware to access an uninitialized memory pointer. Successful exploitation could allow the attacker to execute arbitrary code, escalate system privileges, tamper with data, access...

CVE-2026-47559

A flaw was found in the NVIDIA GPU display driver. A local user can exploit an issue in the driver's kernel mode layer to access memory belonging to another user's process. A successful exploit could allow an attacker to escalate privileges, execute arbitrary code, tamper with sensitive data, or...

DEBIAN-CVE-2026-47598

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful exploit of this vulnerability might lead ...