Linux kernel Heap Buffer Overflow DoS

The vulnerability in the hcireadcodeccapabilities function within the net/bluetooth/hcicodec.c component of the Linux kernel operating system stems from inadequate resource management during its existence. Exploitation of this vulnerability enables a remote attacker to compromise the...

Linux kernel vxlan_gro_prepare_receive Heap Buffer Overflow DoS

The vulnerability of the vxlangropreparereceive function in the drivers/net/vxlan/vxlancore.c component of the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protect...

ROS-20261016-73-0003

The vulnerability of the ipv4senddestunreach function in the net/ipv4/route.c module of the Linux kernel is related to the assignment of zero pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux SCTP Verify Function Data Compromise

The vulnerabilities of the functions sctpverifyasconf and sctpverifyparam in the net/sctp/smmakechunk.c component of the Linux kernel are related to insufficient resource control during their existence. Exploiting these vulnerabilities could allow a remote attacker to compromise the confidentiali...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the pfcplinksetup function in the drivers/net/pfcp.c component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux netlink Heap Buffer Overflow DoS

The vulnerability of the net/tipc/netlink.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Oracle Linux 9 : kernel (ELSA-2026-83156)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83156 advisory. - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry Jan Polensky RHEL-271472 CVE-2026-80985 - net/smc: bound the peer rkey counts in...

Oracle Linux 10 : kernel (ELSA-2026-83207)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83207 advisory. - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry Jan Polensky RHEL-271473 CVE-2026-80985 - net/smc: bound the peer rkey counts in...

PT-2026-124537

TuxCare rebuilt web3-net to address 1 CVE. Fixed in 1.10.4-tuxcare.1...

CVE-2026-96957

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease o...

CVE-2026-70194

Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.73 packages and security update

Red Hat OpenShift Container Platform release 4.16.73 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.59 packages and security update

Red Hat OpenShift Container Platform release 4.17.59 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame

A flaw was found in the HTTP/2 protocol implementation within the Go standard library golang.org/x/net and net/http/internal/http2. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGSMAXFRAMESIZE parameter set to zero. This...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.73 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.73 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.59 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.59 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

Portable SDK for UPnP Devices – Resource Management Error Vulnerability

Portable SDK for UPnP Devices. Versions prior to 22.0.4 of the Portable SDK for UPnP Devices contain a resource management vulnerability. This vulnerability stems from the simultaneous invocation of getaddrinfo when processing inbound HTTP request targets and GENA SUBSCRIBE CALLBACK headers in th...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ppp: Fixed race conditions in pppfillforwardpath. pppfillforwardpath has two race conditions: 1. The ppp-channels list can change between listempty and listfirstentry, as ppplock is not held. If the only channel is deleted in...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net/smc: fixed a deadlock that was triggered by canceldelayedworksyn The following LOCKDEP was detected: Workqueue: events smclgrfreework smc WARNING: possible circular locking dependency detected...