USN-8493-2: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - RISC-V architecture; - Cryptographic API; - InfiniBand drivers; - IOMMU subsystem; - Network drivers; -...

kernel: kernel: ipv6 frag escape

A flaw was found in the Linux kernel's ipv6 networking subsystem. An incorrect parameter length calculation allows an attacker with permissions to create UDP sockets to trigger overwrites of kernel memory, potentially leading to privilege escalation, data corruption, or a system crash...

networking-odl (14.0.1), networking-ovn (6.0.1) +2 more potentially affected by CVE-2017-7543 via neutron (14.4.2)

neutron PYPI version 14.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 14.0.1 - networking-ovn 6.0.1 - neutron-fwaas 14.0.1 - neutron-vpnaas 14.0.1 Source cves: CVE-2017-7543 Source advisory:...

networking-bagpipe (10.0.1), vmware-nsx (>=14.0.1, <=14.3.0) potentially affected by CVE-2017-7543 via neutron (15.0.0.0rc2)

neutron PYPI version 15.0.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bagpipe 10.0.1 - vmware-nsx =14.0.1, =14.3.0 Source cves: CVE-2017-7543 Source advisory: OSV:PYSEC-2026-686...

networking-odl (13.0.1), networking-ovn (5.1.0) +3 more potentially affected by CVE-2017-7543 via neutron (13.0.7)

neutron PYPI version 13.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-odl 13.0.1 - networking-ovn 5.1.0 - neutron-dynamic-routing 13.1.0 - neutron-fwaas =13.0.2, =13.0.3 - neutron-vpnaas 13.0.2 Source cve...

networking-bagpipe (8.0.1), networking-baremetal (1.0.1) +1 more potentially affected by CVE-2017-7543 via neutron (12.1.1)

neutron PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bagpipe 8.0.1 - networking-baremetal 1.0.1 - networking-mlnx 12.4.0 Source cves: CVE-2017-7543 Source advisory: OSV:PYSEC-2026-686...

networking-bigswitch (>=15.0.0, <=15.0.2) potentially affected by CVE-2017-7543 via neutron (15.3.4)

neutron PYPI version 15.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bigswitch =15.0.0, =15.0.2 Source cves: CVE-2017-7543 Source advisory: OSV:PYSEC-2026-686...

kernel: kernel: ipv6 frag escape

A flaw was found in the Linux kernel's ipv6 networking subsystem. An incorrect parameter length calculation allows an attacker with permissions to create UDP sockets to trigger overwrites of kernel memory, potentially leading to privilege escalation, data corruption, or a system crash...

TencentOS Server 3: firefox (TSSA-2026:0595)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0595 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

USN-8493-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - RISC-V architecture; - Cryptographic API; - InfiniBand drivers; - IOMMU subsystem; - Network drivers; -...

USN-8493-1 linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - RISC-V architecture; - Cryptographic API; - InfiniBand drivers; - IOMMU subsystem; - Network drivers; -...

USN-8491-1 linux-oem-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; -...

SUSE-SU-2026:2195-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 bsc1243603. - CVE-2025-54518: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache bsc1264013. -...

Oracle Linux 9 : kernel (ELSA-2026-18587)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18587 advisory. - net/sched: fix pedit partial COW leading to page cache corruption Ivan Vecera RHEL-177392 CVE-2026-46331 - scsi: qla2xxx: Completely fix fcport doub...

Oracle Linux 9 : kernel (ELSA-2026-19568)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19568 advisory. - net/sched: fix pedit partial COW leading to page cache corruption Ivan Vecera RHEL-177392 CVE-2026-46331 - scsi: qla2xxx: Completely fix fcport doub...

openSUSE 16: MozillaThunderbird / MozillaThunderbird-openpgp-librnp / etc (openSUSE-SU-2026:21168-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21168-1 advisory. Changes in MozillaThunderbird: - Mozilla Thunderbird 140.12.0 ESR MFSA 2026-61 bsc1268071 CVE-2026-12289 bmo2023443 Privilege escalation in the...

Exploit for Write-what-where Condition in Linux Linux_Kernel

CVE-KERNEL · Linux Kernel LPE Chain Multi-C...

kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers

A flaw was found in the Linux kernel's networking skbuff component. When skbtrycoalesce attaches paged fragments, it can lose the SKBFLSHAREDFRAG marker. This can lead to the Encapsulating Security Payload ESP input decrypting data in place over page-cache backed fragments, potentially resulting ...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Networking component...

firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Networking: Cookies component...