EUVD-2026-93162

In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: cap hhflowslimit at change time hhfchange stores TCAHHFHHFLOWSLIMIT with no upper bound. A huge hhflowslimit lets each new heavy-hitter flow pass the hhflowscurrentcnt check in allocnewhh and forces a fixed-size...

CVE-2026-98234

The Linux kernel contains a vulnerability in the net/sched subsystem where the hhf_change() function stores the TCA_HHF_HH_FLOWS_LIMIT attribute without an upper bound. An attacker with CAP_NET_ADMIN privileges in a user namespace can set a massive hh_limit value, allowing spoofed traffic to bypa...

CVE-2026-98235

In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: release tail references on DELACTION failure A batched RTMDELACTION request takes a temporary reference on each action before attempting any deletion. tcfactiondelete clears each processed slot and drops its...

CVE-2026-98234

In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: cap hhflowslimit at change time hhfchange stores TCAHHFHHFLOWSLIMIT with no upper bound. A huge hhflowslimit lets each new heavy-hitter flow pass the hhflowscurrentcnt check in allocnewhh and forces a fixed-size...

CVE-2026-98234 net/sched: hhf: cap hh_flows_limit at change time

In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: cap hhflowslimit at change time hhfchange stores TCAHHFHHFLOWSLIMIT with no upper bound. A huge hhflowslimit lets each new heavy-hitter flow pass the hhflowscurrentcnt check in allocnewhh and forces a fixed-size...

CVE-2026-98233

The Linux kernel contains a vulnerability in net/packet where the tpacket_rcv() function fails to release a claimed V1 or V2 ring slot if the virtio-net header conversion fails. This error path leaves the ownership bit set, which can cause an issue where an unsupported UDP GSO packet renders the ...

CVE-2026-98233 net/packet: clear RX owner on VNET header error

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacketrcv: avoid a producer race condition" added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...

CVE-2026-98233 net/packet: clear RX owner on VNET header error

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacketrcv: avoid a producer race condition" added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...

EUVD-2026-93161

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacketrcv: avoid a producer race condition" added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...

CVE-2026-98233

In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 "net/packet: tpacketrcv: avoid a producer race condition" added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...

CVE-2026-19954

A flaw was found in perl-net-whois-raw. The pwhois command-line tool skips standard Internationalizing Domain Names in Applications IDNA mapping and normalization steps when processing internationalized domain names. By supplying domain names containing specific Unicode characters, an attacker ca...

SUSE-SU-2026:4537-1 Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: - CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283. - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.17 security and extras update

Red Hat OpenShift Container Platform release 4.22.17 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.36 security and extras update

Red Hat OpenShift Container Platform release 4.21.36 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

CLEANSTART-2026-FF24840 When returning errors, functions in the net/textproto package would include its input as part of the error

Security vulnerability affects the temporal-server package. When returning errors, functions in the net/textproto package would include its input as part of the error...

CLEANSTART-2026-DH14395 net/url package does not set a limit on the number of query parameters in a query

Security vulnerability affects the go1.27 package. The net/url package does not set a limit on the number of query parameters in a query...

ROS-20261006-73-0006

The vulnerability of the function ieee80211radiotapiteratornext in the net/wireless/radiotap.c module, which is part of Linux’s wireless communication support, is related to the dependence on unspecified behavior for each implementation type. Exploiting this vulnerability could allow an attacker ...

ROS-20261006-73-0357

The vulnerability of the rtscmin function in the net/sched/schhfsc.c module of the Linux operating system’s network/scheduling subsystem is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0354

The vulnerability of the flowchange function in the net/sched/clsflow.c module of the net/sched subsystem of the Linux operating system’s kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0342

The vulnerability of the ip6datagramsendctl function in the net/ipv6/datagram.c module of the IPv6 protocol implementation in the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...