EulerOS 2.0 SP13 : patch (EulerOS-SA-2026-4080)

According to the versions of the patch packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive...

AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791800936)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791800936 advisory. - In the Linux kernel, the following vulnerability has been resolved: kunit: Fix potential null dereference in kunitdevicedrivertest...

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791800936)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791800936 advisory. - In the Linux kernel, the following vulnerability has been resolved: kunit: Fix potential null dereference in kunitdevicedriverte...

AlmaLinux 9.6 [TuxCare] Security Update: krb5-devel / krb5-libs / krb5-pkinit / krb5-server / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791811122)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791811122 advisory. - MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success...

Rocky Linux 9.6 [TuxCare] Security Update: krb5-devel / krb5-libs / krb5-pkinit / krb5-server / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791811122)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791811122 advisory. - MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success...

EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-4241)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : fanotify: fix false positive on permission eventsCVE-2026-46150 nfsd: never defer requests during idmap lookupCVE-2026-45983 fbdev: defio:...

EulerOS 2.0 SP13 : haproxy (EulerOS-SA-2026-4053)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

EulerOS 2.0 SP13 : haproxy (EulerOS-SA-2026-4144)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

EulerOS 2.0 SP11 : haproxy (EulerOS-SA-2026-4235)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

EulerOS 2.0 SP11 : haproxy (EulerOS-SA-2026-4326)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

Important: kernel6.12

Issue Overview: An issue in the Linux kernel's virtio-net/TAP networking path could allow an actor with privileged access inside a guest virtual machine to send specially crafted network packets that corrupt host kernel memory on KVM-based hypervisors running unpatched Linux kernel versions 4.4...

krb5: krb5: Denial of Service via malformed PAC in S4U2Proxy requests

A flaw was found in krb5. This vulnerability allows a compromised or malicious cross-realm trusted Key Distribution Center KDC to cause a Denial of Service DoS. By sending an S4U2Proxy delegation request containing a malformed client name within a Privilege Attribute Certificate PAC, an attacker...

krb5: krb5: Denial of Service via crafted forwarded credentials

A flaw was found in krb5. An authenticated remote attacker can cause a Denial of Service DoS by sending specially crafted forwarded credentials containing mismatched credential entries. This improper handling triggers a null pointer dereference, causing the service to crash and become unavailable...

CVE-2026-19737

i2sesp32triggercheck in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT sets bo...

CVE-2026-19737 NULL pointer dereference in the ESP32 I2S driver when triggering an unsupported direction

i2sesp32triggercheck in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT sets bo...

CVE-2026-19737 NULL pointer dereference in the ESP32 I2S driver when triggering an unsupported direction

i2sesp32triggercheck in drivers/i2s/i2sesp32.c validates the requested direction only for I2SDIRBOTH. The I2SDIRRX and I2SDIRTX branches read devcfg-rx.data-configured / devcfg-tx.data-configured without first checking the stream pointers. The device instantiation macro I2SESP32STREAMINIT sets bo...

CVE-2026-19737

The ESP32 I2S driver in Zephyr RTOS contains a NULL pointer dereference vulnerability in the i2s_esp32_trigger_check() function within drivers/i2s/i2s_esp32.c. The root cause is that the driver fails to validate stream pointers for I2S_DIR_RX and I2S_DIR_TX directions, leading to a load from addr...

slicer

Slicer Una herramienta para automatizar el proceso de reconocimiento en un archivo APK. Slicer acepta una ruta a un archivo APK extraído y luego devuelve todas las actividades, receptores y servicios que están exportados, tienen permisos null y pueden ser provocados externamente. Nota : El APK de...

CVE-2026-92871

A flaw was found in pgpool-II. A remote, unauthenticated attacker could cause a Denial of Service DoS due to a NULL pointer dereference in the watchdog component. Exploiting this vulnerability leads to abnormal termination of the watchdog process. Mitigation Restrict network access to the pgpool-...

CVE-2026-98308

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture High Definition Audio HDA subsystem. A local user can cause a denial of service DoS by attempting to open audio streams when hardware streams are exhausted. Because the controller driver invokes an event trace before...