Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: Fixed a warning during rehash As previously explained, the rehash process delays the migration of filters from one region to another. This is done by iterating over all chunks all filters with the same...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: sched/core: Do not requeue tasks on CPUs excluded from cpusmask. The following warning was triggered on a large machine during boot time in a distribution kernel; the same issue should also affect the mainline version of the...

Security Bulletin: IBM MQ queue manager is vulnerable to remote code execution (CVE-2026-11716)

Summary IBM MQ has addressed a heap buffer overflow vulnerability in the queue manager's cluster migration message handler Vulnerability Details CVEID:CVE-2026-11716 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during...

The vulnerability of the migration and mirroring mechanism of Git repository management system Gitea, which allows a attacker to perform an SSRF attack

The vulnerability of the migration and mirroring mechanism of the Git repository management system Gitea is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-89459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/percpu: Fix MVIYPERCPU with older binutils Commit a737737cdb9c s390/percpu:...

CVE-2026-89459

A flaw was found in the Linux kernel's s390/percpu component. This vulnerability arises when the kernel is compiled with older versions of GNU as prior to binutils 2.39. A parsing error prevents a crucial instruction from being correctly processed, which can lead to issues with system resource...

Linux Distros Unpatched Vulnerability : CVE-2026-89495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: bound namelen in dlmmigraterequesthandler Patch series ocfs2/dlm: bound peer-controlled lengths in the o2dlm. The o2dlm receive handlers trust u8 length...

CVE-2026-89755

A flaw was found in the Linux kernel's device migration mechanism. When a memory page is freed from the swap cache, a stale mapping of that page might still be used. This incorrect memory accounting can lead to a system crash or instability...

CVE-2026-89758

A flaw was found in the Linux kernel's memory management subsystem. When an HMM-based Graphics Processing Unit GPU driver migrates a Transparent Huge Page THP to device memory, it can leave a device-private Page Middle Directory PMD entry. If a user-space application then attempts to manage this...

CVE-2026-89756

A flaw was found in the Linux kernel. When performing memory migration on KVM Kernel-based Virtual Machine hosts, the migratepagesbatch function fails to report RCU Read-Copy Update tasks quiescent states during large batch unmapping operations. This oversight causes the migrating task to become ...

CVE-2026-44715 OpenMRS has Broken Access Control in HL7 Configuration

OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specifically, the startHl7ArchiveMigration method is accessible, which should be restricted to admin-level accounts. Versions...

EUVD-2026-76761

OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specifically, the startHl7ArchiveMigration method is accessible, which should be restricted to admin-level accounts. Versions...

CVE-2026-44715

OpenMRS , an open-source electronic medical record platform, is affected by a Broken Access Control vulnerability in its HL7 configuration. Prior to versions 1.23.0 and 2.10.0 , the administrative DWR method startHl7ArchiveMigration, which should be restricted to admin-level accounts, is accessib...

CVE-2026-89758

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: skip non-present PMDs when queueing folios Patch series "mm: handle device-private PMDs in walk callbacks", v3. Since commit 368076f52ebe "mm/hugememory: add device-private THP support to PMD operations" a PMD may...

AZL-100887 CVE-2026-89756 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/migrate: report RCU-tasks quiescent states in migratepagesbatch migratepagesbatch unmaps each folio before moving it, and every unmap runs the mmunotifier invalidate callbacks. On KVM hosts trytomigrate ends up in...

AZL-100413 CVE-2026-89755 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: clear stale mapping after freeing swapcache migratedevicepages reads the folio mapping before calling foliofreeswap. When foliofreeswap succeeds, the folio is removed from the swap cache, but the saved mapping...

UBUNTU-CVE-2026-89755

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: clear stale mapping after freeing swapcache migratedevicepages reads the folio mapping before calling foliofreeswap. When foliofreeswap succeeds, the folio is removed from the swap cache, but the saved mapping...

CVE-2026-89758

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: skip non-present PMDs when queueing folios Patch series "mm: handle device-private PMDs in walk callbacks", v3. Since commit 368076f52ebe "mm/hugememory: add device-private THP support to PMD operations" a PMD may...

CVE-2026-89755

In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: clear stale mapping after freeing swapcache migratedevicepages reads the folio mapping before calling foliofreeswap. When foliofreeswap succeeds, the folio is removed from the swap cache, but the saved mapping...

UBUNTU-CVE-2026-89758

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: skip non-present PMDs when queueing folios Patch series "mm: handle device-private PMDs in walk callbacks", v3. Since commit 368076f52ebe "mm/hugememory: add device-private THP support to PMD operations" a PMD may...