CVE-2026-72117 can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler()

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix data race on rxstamp/rxifindex in bcmrxhandler For an rx op subscribed on all interfaces ifindex == 0, the same op is registered once in the shared per-netns wildcard filter list, so bcmrxhandler can run concurrentl...

EUVD-2026-59073

In the Linux kernel, the following vulnerability has been resolved: can: bcm: track a single source interface for ANYDEV timeout/throttle ops An ANYDEV rx op ifindex == 0 with an active RX timeout and/or throttle timer has no defined semantics when matching frames arrive from several interfaces:...

EUVD-2026-59072

In the Linux kernel, the following vulnerability has been resolved: can: bcm: validate frame length in bcmrxsetup for RTR replies bcmtxsetup validates cf-len against the CAN/CAN FD DLC limits before installing frames for TXSETUP, but bcmrxsetup never did the same for the RTR-reply frame configure...

PT-2026-72548

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/xe/pf component where the Physical Function PF incorrectly attempts to process FAST REQ or EVENT relays. Since VF/PF relay actions are designed to use only...

Linux Distros Unpatched Vulnerability : CVE-2026-72125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: isotp: fix use-after-free race with concurrent NETDEVUNREGISTER isotprelease looked up the bound network device via devgetbyindex using the stored ifindex...

PT-2026-72605

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter flowtable component where the nf flow ip4 tunnel proto function fails to validate the iph-ihl field. This lack of sanity checking when computing the head...

PT-2026-72308

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the CAN BCM driver where the bcm can tx and bcm tx timeout handler functions could observe partially updated or unvalidated frames. This occurs because data and timer...

OPENSUSE-SU-2026:11523-1 python313-h2-4.4.1-1.1 on GA media

These are all security issues fixed in the python313-h2-4.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-72570

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer underflow exists in the ksmbd component. The parse dacl function attempts to limit the attacker-controlled Access Control Entry ACE count by comparing it with the number of...

Linux Distros Unpatched Vulnerability : CVE-2026-74494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: reject repeated SMB2 NEGOTIATE requests Unauthenticated client can send multiple successful SMB2 NEGOTIATE requests on one connection before SESSIONSETUP...

Linux Distros Unpatched Vulnerability : CVE-2026-72398

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: add INIT verification after cookie unpacking In SCTP handshake, the INIT chunk is initially processed by the server and embedded into the cookie carried i...

PT-2026-89272

Name of the Vulnerable Software and Affected Versions Apache Artemis versions 2.50.0 through 2.56.0 Apache ActiveMQ Artemis versions 1.0.0 through 2.44.0 Description An unauthenticated remote attacker can craft a CORE protocol SESSION REATTACH packet to hijack a live authenticated session. This...

CVE-2026-74494: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject repeated SMB2 NEGOTIATE requests Unauthenticated client can send multiple successful SMB2 NEGOTIATE requests on one connection before SESSIONSETUP. While the connection is in KSMBDSESSNEEDSETUP, smb2handlenegotiate...

Linux Distros Unpatched Vulnerability : CVE-2026-72124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: isotp: serialize TX state transitions under so-rxlock The TX state machine so-tx.state is driven from three contexts: sendmsg claiming and progressing a...

Linux Distros Unpatched Vulnerability : CVE-2026-72123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: defer rxop deallocation to workqueue to fix thrtimer UAF Commit f1b4e32aca08 can: bcm: use callrcu instead of costly synchronizercu replaced...

PT-2026-72209

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ip vs conn new function where ip vs conn objects allocated via kmem cache alloc do not have their init seq and previous delta fields within the ip vs seq structure...

Linux Distros Unpatched Vulnerability : CVE-2026-72382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: reject undersized DACLs before parsing ACEs parsedacl limits the attacker-controlled ACE count by comparing it with the number of minimal ACEs that fit i...

SUSE-SU-2026:3622-1 Security update for java-1_8_0-openjdk

This update for java-180-openjdk fixes the following issues: - CVE-2026-41254: lcms2: Information disclosure or denial of service via integer overflow in CubeSize bsc1272459. - CVE-2026-46968: unauthorized creation, deletion or modification access to critical data bsc1272224. - CVE-2026-47010:...

CVE-2026-58224

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...

CVE-2026-58224

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...