CVE-2026-93049

A flaw was found in the Linux kernel's mtdswap module. A double free vulnerability exists in the mtdswapaddmtd function, where a debugfs setup failure after successful blktrans registration can cause a device to be freed twice. This memory corruption issue could potentially allow a local attacker...

CVE-2026-98486

A flaw was found in the Linux kernel's Amazon Elastic Network Adapter ENA driver. When the driver encounters an error during device initialization, it fails to release an allocated Direct Memory Access DMA buffer. A local user capable of triggering repeated device probe failures could exploit thi...

CVE-2026-98485

A flaw was found in the Linux kernel's netfilter subsystem. This flaw allows a remote attacker to cause a Denial of Service DoS by sending specially crafted IPv6 packets to an affected system. The issue occurs when an IPv6 routing header match rule is configured with zero addresses, causing the...

RLSA-2026:84799 Important: mariadb11.8 security update

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs a...

RLSA-2026:84796 Important: openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...

mariadb11.8 security update

An update is available for mariadb11.8. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MariaDB is a community developed fork from MySQL - a multi-user,...

openexr security update

An update is available for openexr. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenEXR is an open-source high-dynamic-range floating-point image file forma...

python3.14-urllib3 security update

An update is available for python3.14-urllib3. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programmin...

RLSA-2026:84578 Important: python3.14-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

python3.14-urllib3 security update

An update is available for python3.14-urllib3. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limits

Pingora versions prior to 0.8.1 used the h2 crate's default HTTP/2 server limits, a 16 MiB decoded header-list size and no limit on concurrent streams, unless the application set its own. A remote, unauthenticated client can send 1-byte HPACK references to a near-empty header, making the server...

CVE-2026-90428

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv driver. This vulnerability occurs because the error interrupt is requested before a critical array is properly set up. If a Command Queue Virtualization CMDQV device has a pending error during a kernel restart kexec, the interrupt handle...

CVE-2026-90387

A flaw was found in the swiotlb component of the Linux kernel. When CONFIGDMADIRECTREMAP is enabled, the swiotlbinitiotlbpool function incorrectly reconstructs the virtual address for dynamic memory pools. This error causes swiotlbfreetlb to fail in recognizing allocated memory chunks, potentiall...

CVE-2026-80915

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability involves incorrect memory allocation paths for Display Page Tables DPTs, which are used by the graphics processing unit. Under certain conditions, this could lead to the exhaustion of a specific memory region,...

CVE-2026-113351

A flaw was found in expat. This vulnerability allows a remote attacker to cause a Denial of Service DoS by submitting a large XML document to an application that reuses parser instances. When the XML parser is reset using XMLParserReset, it clears the direct byte count but fails to offset tracked...

CVE-2026-98481

A flaw was found in the Linux kernel's Near Field Communication NFC Port-100 driver. An attacker connecting a malicious USB device can provide a response frame whose declared length exceeds the actual received data size. This flaw causes an out-of-bounds memory read during frame validation, which...

CVE-2026-98479

A flaw was found in the Linux kernel's iSCSI TCP subsystem. A malicious or compromised iSCSI storage server can cause memory corruption and data integrity loss on a connected client by sending an unexpected Data-In Protocol Data Unit PDU in response to a write command. Because the kernel fails to...

CVE-2026-93046

A flaw was found in the Linux kernel's software node component. A local attacker could exploit a failing bounds check in the softwarenodegetreferenceargs function when an index of UINTMAX is passed. This could lead to an out-of-bounds access in the property array, potentially resulting in memory...

CVE-2026-93045

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF arena component. The bpfarenafreepages function incorrectly handles scalar arena addresses. When a scalar value is below the arena base, it can lead to an out-of-range memory offset. This issue could allow a local attacker to reuse...

CVE-2026-92522

A flaw was found in the Linux kernel's handling of ACPI Advanced Configuration and Power Interface tables, specifically within the IOAPIC I/O Advanced Programmable Interrupt Controller hotplug lookup. The system did not properly validate the bounds of MADT Multiple APIC Description Table and MAT...