13433 matches found
CVE-2026-89920 KVM: s390: Fix memory corruption by not reinjecting CK machine checks
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory corruption by not reinjecting CK machine checks Channel-subsystem damage machine checks are for the host channel subsystem. The guest channel subsystem is emulated in the userspace VMM. There is no point in...
CVE-2026-89920 KVM: s390: Fix memory corruption by not reinjecting CK machine checks
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory corruption by not reinjecting CK machine checks Channel-subsystem damage machine checks are for the host channel subsystem. The guest channel subsystem is emulated in the userspace VMM. There is no point in...
CVE-2026-89920: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory corruption by not reinjecting CK machine checks Channel-subsystem damage machine checks are for the host channel subsystem. The guest channel subsystem is emulated in the userspace VMM. There is no point in...
Linux Distros Unpatched Vulnerability : CVE-2026-89920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: Fix memory corruption by not reinjecting CK machine checks Channel-subsystem damage machine checks are for the host channel subsystem. The guest...
CVE-2025-11395
A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...
CVE-2026-83071
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Machine Learning. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...
CVE-2026-83071
Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics) has a vulnerability in its Machine Learning component affecting versions 8.2.0.0.0 and 26.01.0.0.0 . The flaw is locally exploitable with low privileges and no user interaction, allowing an attacker with logon access to th...
EUVD-2026-79399
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Machine Learning. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...
rabbitmq-server: RabbitMQ: Denial of Service via AMQP 1.0 array32 parsing
A flaw was found in RabbitMQ. An unauthenticated network attacker can exploit an issue in the AMQP 1.0 listener by sending a specially crafted 19-byte frame. This causes the system to attempt to build a list of approximately 4 billion empty elements, exhausting heap memory and terminating the...
PT-2026-92595
Name of the Vulnerable Software and Affected Versions Oracle Business Intelligence Enterprise Edition version 8.2.0.0.0 Oracle Business Intelligence Enterprise Edition version 26.01.0.0.0 Description A flaw in the Machine Learning component of Oracle Business Intelligence Enterprise Edition allow...
PT-2026-93217
Name of the Vulnerable Software and Affected Versions Podman affected versions not specified Description An issue exists where an attacker can create arbitrary files on the host machine with the privileges of the user running the software. This occurs when a specially crafted tar archive is...
CVE-2026-83071: Improper Access Control
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Machine Learning. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerabilities have been resolved: net: bonding: Fix for use-after-free after 802.3ad slave unbind Commit 0622cab0341c “bonding: fix 802.3ad aggregator reselection” resolves a issue where, when there are several aggregation groups within the same bond,...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Clear XSTATEBVi in the guest XSAVE state whenever XFDi=1 When loading the guest XSAVE state via KVMSETXSAVE, and when updating XFD in response to a guest WRMSR, the disabled features in XSTATEBV are cleared to ensure tha...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel before version 6.6.7, a untrusted VMM could trigger the int80 syscall handling at any given point. This issue is related to the files arch/x86/coco/tdx/tdx.c and arch/x86/mm/memencryptamd.c...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: Platform/x86: ISST: Fixed the KASAN report “slab-out-of-bounds” bug. Attaching an SST PCI device to a virtual machine causes the issue “BUG: KASAN: slab-out-of-bounds”. Kasan report: 19.411889...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: igb: Initialize the mailbox message for VF reset When a MAC address is not assigned to the VF, that portion of the message sent to the VF is not set. However, memory is allocated from the stack, which means that information may b...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: serial: imx: fix tx statemachine deadlock When using the serial port as a RS485 port, the tx statemachine is used to control the RTS pin to drive the RS485 transceiver’s TXEN pin. When the TTY port is closed mid-transmission e.g....
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Do not retire an aborted MMIO instruction Returning an abort to the guest for an unsupported MMIO access is a documented feature of the KVM UAPI. However, it’s clear that this functionality has been tested limitedly, ...