CVE-2026-91142

A flaw was found in Cockpit. An integer overflow vulnerability in the dolastlog function, specifically in the offset calculation for lastlog entries on ILP32 Integer, Long, Pointer 32-bit builds, can be exploited. A low-privileged authenticated user with a specially provisioned large User ID UID...

SUSE CVE-2026-90314

In the Linux kernel, the following vulnerability has been resolved: remoteproc: fix OOB read via signed offset in rsctableforeachentry table-offseti is a u32 from firmware, but was stored into a signed int. A crafted offset like 0xFFFFFFF0 becomes -16, placing hdr 16 bytes before the table buffer...

SUSE CVE-2026-92516

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix offset warn check for bpfresspinlock Sashiko pointed out correctly that the case statement for BPFRESSPINLOCK incorrectly checks offset for BPFSPINLOCK. Fix it by checking resspinlockoff instead...

PT-2026-95614

Name of the Vulnerable Software and Affected Versions IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.40 Description An authenticated attacker can obtain sensitive information or cause a denial of service. This is possible due to improper validation of message header offset values...

PT-2026-95589

Name of the Vulnerable Software and Affected Versions source-map-js versions 1.2.1 and earlier Description The software fails to validate the per-section offset line value in indexed source maps. An attacker can provide arbitrary and extremely large numeric values for these offsets, which leads t...

CVE-2026-93749: Improper Validation of Specified Quantity in Input

source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values. Attackers can supply extremely large offset line values that cause synchronous event loop blocking for extended periods, preventing the...

CVE-2026-11726: Out-of-bounds Read

IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper validation of message header offset values...

Linux Distros Unpatched Vulnerability : CVE-2026-90314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - remoteproc: fix OOB read via signed offset in rsctableforeachentry table-offseti is a u32 from firmware, but was stored into a signed int. A crafted offset like...

Linux Distros Unpatched Vulnerability : CVE-2026-90203

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Squashfs: check block offset is not negative If a negative offset is read off disk for example the offset into the decompressed fragment block, this will cause...

Linux Distros Unpatched Vulnerability : CVE-2026-92516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix offset warn check for bpfresspinlock Sashiko pointed out correctly that the case statement for BPFRESSPINLOCK incorrectly checks offset for BPFSPINLOCK...

Security Bulletin: IBM MQ for HPE NonStop is vulnerable to a denial of service issue (CVE-2026-11726)

Summary IBM MQ for HPE NonStop is vulnerable to a denial of service caused by improper validation of message headers. Vulnerability Details CVEID:CVE-2026-11726 DESCRIPTION: IBM MQ could allow an authenticated attacker to obtain sensitive information or cause a denial of service due to improper...

DEBIAN-CVE-2026-92516

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix offset warn check for bpfresspinlock Sashiko pointed out correctly that the case statement for BPFRESSPINLOCK incorrectly checks offset for BPFSPINLOCK. Fix it by checking resspinlockoff instead...

CVE-2026-92516

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix offset warn check for bpfresspinlock Sashiko pointed out correctly that the case statement for BPFRESSPINLOCK incorrectly checks offset for BPFSPINLOCK. Fix it by checking resspinlockoff instead...

AZL-102374 CVE-2026-90203 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check block offset is not negative If a negative offset is read off disk for example the offset into the decompressed fragment block, this will cause squashfscopydata to perform an out of bounds access. Fix by checking ...

DEBIAN-CVE-2026-90203

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check block offset is not negative If a negative offset is read off disk for example the offset into the decompressed fragment block, this will cause squashfscopydata to perform an out of bounds access. Fix by checking ...

CVE-2026-93064 wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser iwlmvmfrobtxfkeyiter tracks the last matched byte position in loop variable 'i'. When a full key match is found match == keylen, 'i' points at the last byte of the matched...

CVE-2026-93045 bpf: Reject arena frees below the arena base

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject arena frees below the arena base bpfarenafreepages accepts scalar arena addresses. The runtime masks the address to the low 32 bits and reconstructs a full user address from the arena base before returning the range t...

CVE-2026-93045

CVE-2026-93045 affects the Linux kernel BPF arena subsystem. The vulnerability resides in bpf_arena_free_pages() , which accepts scalar arena addresses and masks them to the low 32 bits before reconstructing a full user address. When the scalar value is below the low 32 bits of the arena base, th...

CVE-2026-92516 bpf: Fix offset warn check for bpf_res_spin_lock

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix offset warn check for bpfresspinlock Sashiko pointed out correctly that the case statement for BPFRESSPINLOCK incorrectly checks offset for BPFSPINLOCK. Fix it by checking resspinlockoff instead...

EUVD-2026-82137

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix offset warn check for bpfresspinlock Sashiko pointed out correctly that the case statement for BPFRESSPINLOCK incorrectly checks offset for BPFSPINLOCK. Fix it by checking resspinlockoff instead...