AZL-98145 CVE-2026-80628 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Serialize readq reset state with q-lock sndseqossreadqclear resets qlen, head, and tail without q-lock even though the normal reader and producer paths serialize the same ring state under that spinlock. A reset ca...

CVE-2026-80628

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Serialize readq reset state with q-lock sndseqossreadqclear resets qlen, head, and tail without q-lock even though the normal reader and producer paths serialize the same ring state under that spinlock. A reset ca...

UBUNTU-CVE-2026-80628

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Serialize readq reset state with q-lock sndseqossreadqclear resets qlen, head, and tail without q-lock even though the normal reader and producer paths serialize the same ring state under that spinlock. A reset ca...

CVE-2026-80628 ALSA: seq: oss: Serialize readq reset state with q->lock

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Serialize readq reset state with q-lock sndseqossreadqclear resets qlen, head, and tail without q-lock even though the normal reader and producer paths serialize the same ring state under that spinlock. A reset ca...

CVE-2026-80628

CVE-2026-80628 is a data race in the Linux kernel's ALSA sequencer OSS subsystem. The function snd_seq_oss_readq_clear() resets ring queue state (qlen, head, tail) without holding the q->lock spinlock, while the normal reader and producer paths serialize the same state under that lock. This ra...

CVE-2026-80628 ALSA: seq: oss: Serialize readq reset state with q->lock

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Serialize readq reset state with q-lock sndseqossreadqclear resets qlen, head, and tail without q-lock even though the normal reader and producer paths serialize the same ring state under that spinlock. A reset ca...

OSV-2026-1210 Heap-buffer-overflow in decode_get_histogram_format_resp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=553267079 Crash type: Heap-buffer-overflow READ 1 Crash state: decodegethistogramformatresp decodegethistogramformatrespfuzzer.cc...

PT-2026-83327

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.11.1 Description An authenticated attacker can perform server-side request forgery SSRF, a flaw that allows the system to be coerced into making unauthorized requests. This can be used for network...

PT-2026-83330

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.11.1 Description A path traversal issue exists that could allow a remote attacker to read arbitrary files from the system. Path traversal is a flaw that allows an attacker to access files and directori...

PT-2026-83329

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.11.1 Description Improper authentication allows a remote attacker to execute arbitrary flows and access sensitive information. Recommendations Update IBM Langflow OSS to a version later than 1.11.1...

PT-2026-83332

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.11.1 Description Improper enforcement of security restrictions on the 'A2A' public endpoint allows a remote attacker to execute arbitrary code. Arbitrary code execution occurs when an attacker can run...

PT-2026-86720

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Serialize readq reset state with q-lock snd seq oss readq clear resets qlen, head, and tail without q-lock even though the normal reader and producer paths serialize the same ring state under that spinlock. A rese...

PT-2026-82928

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race exists in the ALSA sequencer OSS interface. The function snd seq oss readq clear resets the qlen, head, and tail variables without acquiring the q-lock spinlock, while reader...

CVE-2026-19295: Improper Neutralization of Directives in Dynamically Evaluated Code

IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving a flow with a crafted type field value and triggering a build of a wrapper flow that references it. This allowed privilege escalation from...

CVE-2026-19294: Authorization Bypass Through User-Controlled Key

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute and read any user's private flow due to improper authorization...

CVE-2026-19286: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper enforcement of security restrictions on the A2A public endpoint...

CVE-2026-18899: Improper Limitation of a Pathname to a Restricted Directory

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to read arbitrary files due to path traversal...

CVE-2026-18904: Authorization Bypass Through User-Controlled Key

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to obtain sensitive information and inject unauthorized messages due to a namespace collision between user identifiers...

CVE-2026-18729: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code...

Linux Distros Unpatched Vulnerability : CVE-2026-80628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: oss: Serialize readq reset state with q-lock sndseqossreadqclear resets qlen, head, and tail without q-lock even though the normal reader and produce...