FreeBSD : OpenEXR -- 3.4.14 fixes multiple vulnerabilities (56449320-97c5-11f1-84d7-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 56449320-97c5-11f1-84d7-3c7c3fba4204 advisory. Cary Phillips reports: The OpenEXR 3.4.14 release addresses the following security...

PT-2026-72461

In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: fix memory leak in efifb probe Since commit 73ce73c30ba9 "fbdev: Transfer video= option strings to caller; clarify ownership" the string returned from fb get options is expected to be freed by the caller, but the...

PT-2026-72458

In the Linux kernel, the following vulnerability has been resolved: fbdev: s3fb: fix potential memory leak in s3 pci probe In s3 pci probe, the memory allocated for modelist using fb videomode to modelist is not freed in subsequent error paths. Fix that by calling fb destroy modelist...

PT-2026-72644

In the Linux kernel, the following vulnerability has been resolved: apparmor: release exe file resources on path failure get current exe path takes both an exe file reference and a path reference before resolving the path name. If aa path name failed, it returned immediately and leaked both...

PT-2026-72833

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier mlx5 ib alloc transport domain allocates a transport domain and then may fail in mlx5 ib enable lb. In that case, the allocated TD is leaked. Fix this by...

PT-2026-72392

In the Linux kernel, the following vulnerability has been resolved: ntfs: centalize $INDEX ROOT header validation Add a dedicated helper to perform stricter validation of $INDEX ROOT and use it for both directory inodes and named index inodes. This keeps the root size and header geometry checks...

PT-2026-72840

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix snp filter reserved mem regions off-by-one Sashiko notes: regarding the bounds check in snp filter reserved mem regions called via walk iomem res desc: does the check if range list-num elements 16 + 8 PAGE SIZE...

OPENSUSE-SU-2026:11515-1 ffmpeg-9-libavcodec-devel-9.0.1-1.1 on GA media

These are all security issues fixed in the ffmpeg-9-libavcodec-devel-9.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-74314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Cancel special fields on map value recycle Map update and delete paths currently call bpfobjfreefields when a value is being replaced or recycled. That mak...

PT-2026-72966

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix memory accounting for pinned/unpinned pages The account mem and unaccount mem functions call get uid which increments the reference count of struct user struct on every invocation. But we don't decrement the...

Linux Distros Unpatched Vulnerability : CVE-2026-72413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix errchunk memory leaks in INIT handling When sctpverifyinit encounters unrecognized parameters, it allocates an errchunk to report them. However, this...

PT-2026-72308

In the Linux kernel, the following vulnerability has been resolved: can: bcm: extend bcm tx lock usage for data and timer updates Stage new CAN frame content for an existing tx op into a kmalloc'd buffer and validate it there, mirroring the approach already used in bcm rx setup. Only copy the...

PT-2026-72366

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: always put unsuccessfully committed target pids damon commit target puts and gets the destination and the source target pids. It puts the destination target pid because it will be overwritten by the source target...

PT-2026-72364

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: put stats for scheme add dirs internal error damon sysfs scheme add dirs setup the tried regions directory after the stats directory setup is completed. When the tried regions directory setup is failed, th...

PT-2026-72460

In the Linux kernel, the following vulnerability has been resolved: fbdev: radeon: fix potential memory leak in radeonfb pci register The function radeonfb pci register allocates memory for modelist by calling radeon check modes which calls fb add videomode. The memory is appended to info-modelis...

PT-2026-72456

In the Linux kernel, the following vulnerability has been resolved: fbdev: tdfxfb: fix potential memory leak in tdfxfb probe In tdfxfb probe, the memory allocated for modelist using fb videomode to modelist when CONFIG FB 3DFX I2C is defined, is not freed in the subsequent error paths. Fix that b...

PT-2026-72305

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix stale rx/tx ops after device removal RX: an RX SETUP update! for an existing op skipped can rx register unconditionally, even when a concurrent NETDEV UNREGISTER had already torn down its registration op-rx reg dev ...

PT-2026-72978

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix potential deadlock in mpi3mr fault uevent emit mpi3mr fault uevent emit runs from the fault watchdog and reset paths where host I/O may already be blocked. GFP KERNEL allocations here, both the local kzalloc obj...

PT-2026-72193

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix memory leak in ieee80211 register hw If kmemdup fails while copying supported band structures, the error path jumps to fail rate. This skips rate control deinitialize and leaks the initialized local-rate ctrl...

PT-2026-72187

In the Linux kernel, the following vulnerability has been resolved: reset: sunxi: fix memory region leak on ioremap failure In sunxi reset init, when ioremap fails, the memory region obtained via request mem region is not released, leading to a resource leak. Add an err mem region label to proper...