EUVD-2026-86089

In the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rdsibconnpathshutdown New rds rdma self tests exposed a hang when tearing down the ib network configs. This is caused by the shutdown worker thread sleeping on the waitevent call, which blocks other wo...

CVE-2026-97491 net/rds: Don't sleep inside rds_ib_conn_path_shutdown

In the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rdsibconnpathshutdown New rds rdma self tests exposed a hang when tearing down the ib network configs. This is caused by the shutdown worker thread sleeping on the waitevent call, which blocks other wo...

CVE-2026-97491 net/rds: Don't sleep inside rds_ib_conn_path_shutdown

In the Linux kernel, the following vulnerability has been resolved: net/rds: Don't sleep inside rdsibconnpathshutdown New rds rdma self tests exposed a hang when tearing down the ib network configs. This is caused by the shutdown worker thread sleeping on the waitevent call, which blocks other wo...

EUVD-2026-86048

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsaportfromnetdev may return a valid port from a different switch chip. Programming another chip's port index into the local hardware causes redirection to the wrong port, or ...

CVE-2026-97435

The Linux kernel contains a vulnerability in the net: dsa: sja1105: flower driver where the dsa_port_from_netdev() function may return a valid port index from a different switch chip. This allows an attacker or process to program another chip's port index into the local hardware, leading to redir...

CVE-2026-97435 net: dsa: sja1105: flower: reject cross-chip redirect

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsaportfromnetdev may return a valid port from a different switch chip. Programming another chip's port index into the local hardware causes redirection to the wrong port, or ...

CVE-2026-97435 net: dsa: sja1105: flower: reject cross-chip redirect

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: flower: reject cross-chip redirect dsaportfromnetdev may return a valid port from a different switch chip. Programming another chip's port index into the local hardware causes redirection to the wrong port, or ...

CVE-2026-97411 net: ibm: emac: mal: fix potential system hang in mal_remove()

In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in malremove napidisable is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPISTATESCHED b...

CVE-2026-97411 net: ibm: emac: mal: fix potential system hang in mal_remove()

In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in malremove napidisable is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPISTATESCHED b...

CVE-2026-93830

The Linux kernel contains a vulnerability where enabling the RX Buffer Unavailable (RBUE) interrupt in the xgmac2 driver can trigger a MAC interrupt storm under heavy RX pressure. This occurs because the DMA fires RBUE continuously when it runs out of RX descriptors, while the standard RX complet...

CVE-2026-93830 net: stmmac: xgmac2: disable RBUE in default RX interrupt mask

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Enabling the RX Buffer Unavailable RBUE interrupt is counterproductive and can trigger a MAC interrupt storm under heavy RX pressure. When the DMA runs out of RX...

EUVD-2026-86165

In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointer dereference in aarpsendddp aarpsendddp calls atalkfinddevaddrdev in the LocalTalk fast path without checking for NULL. When the device has no AppleTalk interface configured dev-atalkptr == NULL,...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 2.6.38. It stems from multiple instances where direct pointer assignments are used to update the list of RCU-protected objects in net/ipv6/mcast.c without utilizing rcuassignpointer. This may lead to race conditions with unlocked readers,...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

Important: Red Hat Security Advisory: host-metering security update

An update for host-metering is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.34 fixes various security issues: The following security issues were fixed: CVE-2026-46150: fanotify: fix false positive on permission events bsc1267388. CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use...

RLSA-2026:70498 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: afalg - Disallow concurrent writes in afalgsendmsg CVE-2025-39964 kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry CVE-2026-45894 kernel: crypto: ccp - Fix a...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. CVE-2026-64561: KVM: x86: Check for invalid/obsolete...

CVE-2020-0688-Exchange2010

El principal problema con Exchange2010 es que está basado en .NET 2.0 y los gadgets de deserialización genéricos no funcionan. Todos los créditos van para zcgonvh y EazyLov3. El proyecto es simplemente una combinación de: https://github.com/zcgonvh/CVE-2020-0688/ https://www.buaq.net/go-41757.htm...