AlmaLinux 9.6 [TuxCare] Security Update: perl-XML-LibXML (ALMALINUX9.6:CLSA-2026:1784554254)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784554254 advisory. - XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte...

AlmaLinux 9.2 [TuxCare] Security Update: perl-XML-LibXML (ALMALINUX9.2:CLSA-2026:1784553427)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784553427 advisory. - XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte...

Rocky Linux 9.6 [TuxCare] Security Update: perl-XML-LibXML (ALMALINUX9.6:CLSA-2026:1784554254)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784554254 advisory. - XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte...

Linux Distros Unpatched Vulnerability : CVE-2026-102313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted...

Rocky Linux 8 [CIQ] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc Multiple Vulnerabilities (crlsa-2026_42733)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202642733 advisory. glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings CVE-2026-5928 glibc: glibc:...

CVE-2026-47515

A flaw was found in the NVIDIA GPU display driver. A local user with elevated privileges can trigger an unbounded string operation within the kernel mode layer, causing an out-of-bounds memory read. Successful exploitation could allow the attacker to execute arbitrary code, escalate privileges,...

SUSE CVE-2026-102307

Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-102313

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-102318

Out of bounds read in WebGL in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-97995

A flaw was found in the virtioconsole driver in the Linux kernel. When unbinding or removing a virtio console device while control messages remain queued, the driver misidentifies internal control buffers and attempts to release them as standard data buffers. This issue results in an out-of-bound...

CVE-2026-97500

A flaw was found in the Linux kernel's Realtek Wi-Fi driver rtw89. The driver fails to validate the length of physical layer PHY status information elements before parsing received data. A malicious or malfunctioning wireless device could exploit this flaw by providing status data with an...

CVE-2026-97496

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. A local attacker can trigger this vulnerability during process restoration by supplying manipulated queue descriptor values that lack proper boundary validation. This issue results in an out-of-bounds memory read, potentially exposing...

CVE-2026-97976

A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. The driver fails to validate the packet length received from the hardware buffer before copying data. A compromised or malicious Bluetooth device providing an oversized packet length can trigger an out-of-bounds memory read,...

Linux Distros Unpatched Vulnerability : CVE-2026-102311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read...

AlmaLinux 9.2 [TuxCare] Security Update: compat-openssl11 (ALMALINUX9.2:CLSA-2025:1764692769)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764692769 advisory. - There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an...

AlmaLinux 9.6 [TuxCare] Security Update: webkit2gtk3 / webkit2gtk3-devel / webkit2gtk3-jsc / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790805563)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790805563 advisory. - Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross- origin data via a craft...

Linux Distros Unpatched Vulnerability : CVE-2026-102307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-102319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside...

AlmaLinux 9.2 [TuxCare] Security Update: krb5-devel / krb5-libs / krb5-pkinit / krb5-server / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2024:1726769331)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1726769331 advisory. - In MIT Kerberos 5 aka krb5 before 1.21.3, an attacker can modify the plaintext Extra Count field of a confidential GSS krb5 wrap...

CVE-2026-102319

An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=562042411 https://code.google.com/p/chromium/issues/detail?id=102319...