ROS-20261008-73-0110

The vulnerability of the bonddoioctl function in the drivers/net/bonding/bondmain.c file of the Linux kernel network device driver is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20261008-73-0084

The vulnerability in the net/bluetooth/mgmt.c module of the Linux operating system is related to insufficient input data validation. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-98278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: remove WARNONONCE from the devfillforwardpath loop check ipipfillforwardpath and ip6tnlfillforwardpath look up the route to the tunnel's remote endpoint an...

Linux Distros Unpatched Vulnerability : CVE-2026-98274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: psp: avoid conflicts with skb-decrypted and skvalidatexmitskb PSP conflicts with TLS ULP in its usage of both skb-decrypted and sk-skvalidatexmitskb. Make...

ROS-20261008-73-0086

The vulnerability in the drivers/net/ethernet/cadence/macbpci.c module of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261008-73-0001

The vulnerability of the net/core/filter.c component in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

openSUSE 16 Security Update : prometheus-blackbox_exporter (openSUSE-SU-2026:22026-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22026-1 advisory. Changes in prometheus-blackboxexporter: - CVE-2026-84304: Fix heap memory exhaustion OOM via HTTP/2 DATA frame fragmentation in gRPC-Go by bumpi...

SUSE CVE-2026-98285

In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion and error out in vlandel could cause multiple different issues - inconsistent state, memory leaks when flushing, NULL...

kernel: packet: use consistent hard_header_len in non-ring send paths

An out-of-bounds write problem was observed in packetsendmsgspkt in net/packet/afpacket.c in the Linux Kernel. In this flaw, AFPACKET hardheaderlen race may allow local privilege escalation...

CLSA-2026-1791199760 ruby: Fix of 3 CVEs

CVE-2026-42257: fix Net::IMAP command injection through CRLF in raw search, sort, thread and fetch arguments - CVE-2026-47241: reject RawData ending in a zero-length literal prefix - CVE-2026-47240: reject non-synchronizing literals in RawData...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.50 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.50 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: Release of components for Service Telemetry Framework 1.5.7

Release of components for the Service Telemetry Framework Service Telemetry Framework STF provides automated collection of measurements and data from remote clients, such as Red Hat OpenStack Platform or third-party nodes. STF then transmits the information to a centralized, receiving Red Hat...

CVE-2026-19186

An integer underflow vulnerability exists in the ieee802154_decipher_data_frame() function within subsys/net/l2/ieee802154/ieee802154_frame.c . The software fails to verify if a received frame is long enough before subtracting header and authentication tag lengths from the total length. Because t...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.50 security and extras update

Red Hat OpenShift Container Platform release 4.19.50 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...

ROS-20261007-73-0073

The vulnerability of the tlsdoencryption function in the net/tls/tlssw.c component of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20261007-73-0067

The vulnerability of the bonddebugrlbhashshow function in the drivers/net/bonding/bonddebugfs.c file of the Linux kernel network device driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261007-73-0045

The vulnerability of the espoutputdone function in the net/ipv4/esp4.c module of the IPv4 protocol implementation in the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261007-73-0410

The vulnerability of the rxrpcprocessevent function in the net/rxrpc/connevent.c module, which is related to RxRPC session support in Linux kernel, stems from incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20261007-73-0212

The vulnerability of the rxrpcserverkeyring function in the net/rxrpc/serverkey.c module, which supports RxRPC session sockets in Linux operating systems, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service...

ROS-20261007-73-0036

The vulnerability of the nciclosedevice function in the net/nfc/nci/core.c module, which is part of the NFC NCI support in Linux operating systems, is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause service failures...