PT-2026-116644

librtmp RTMPDump through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp Decode that reads an AMF0 strict-array element count before checking that four bytes remain. A malicious RTMP server or man in the middle can send an AMF0 body ending with a strict-array type byte and fewer...

CVE-2026-98612: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: usb: catc: bound the RX packet length in catcrxdone catcrxdone walks a multi-packet URB, reading a two-byte length from each packet header. Its bound, pktlen urb-actuallength, ignores the header offset and compares against t...

PT-2026-116673

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the smb2 parse contexts function validates the overall create-context area but fails to limit each record to its Next field before dispatching. Th...

CVE-2026-98711: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: cw1200: fix TX padding OOB read leaking heap data to device The TX path rounds the transfer size up to the bus alignment alignsize, up to 511 bytes for SDIO, 1 byte for SPI but sends the padded length straight from the fram...

Security update for squid (important)

openSUSE security update: security update for squid ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22080-1 Rating: important References: bsc1237027 bsc1260452 bsc1260453 bsc1260454 bsc1268272 bsc1268320 Cross-References: CVE-2026-32748 CVE-2026-335...

Security update for ntfs-3g_ntfsprogs (moderate)

openSUSE security update: security update for ntfs-3gntfsprogs ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22053-1 Rating: moderate References: bsc1281756 bsc1281757 bsc1281758 bsc1281759 bsc1281760 bsc1281761 bsc1281762 bsc1281763 Affected...

Security update for libheif (moderate)

openSUSE security update: security update for libheif ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22052-1 Rating: moderate References: bsc1281829 bsc1281948 bsc1281949 bsc1281950 bsc1281951 bsc1281952 bsc1281953 bsc1281954 Cross-References:...

Linux Distros Unpatched Vulnerability : CVE-2026-98486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ena: fix MMIO read buffer leak on probe failure enadeviceinit initializes the MMIO read mechanism with enacommmioregreadrequestinit, which allocates a...

PT-2026-128370

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/clk: fix list cursor use after loop in nvkm clk ustate update If list for each entry exits without hitting a break then "pstate" is not a valid pstate pointer. Introduce a "found" variable instead. The check is...

PT-2026-116930

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the TX path of the cw1200 wifi driver. The system rounds the transfer size up to the bus alignment using the align size callback, but sends the padded...

CVE-2026-98702: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel definition validator can receive a 320 MHz bandwidth indication from a received CSA frame on a non-6 GHz link. It warns for this unsupported width but...

PT-2026-116750

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.3.0-rc3 Description An issue exists in the IPv6 segment routing implementation where the SEG6 ATTR DST attribute in seg6 genl policy is defined using NLA BINARY. This configuration only enforces a maximum paylo...

Linux Distros Unpatched Vulnerability : CVE-2026-98732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btintel: fix buffer over-read in btintelhwerror The Exception info %s print uses skb-data + 1, but the 12-byte payload is not guaranteed to be...

Linux Distros Unpatched Vulnerability : CVE-2026-98454

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix create context out-of-bounds reads smb2parsecontexts validates the complete create- context area but does not limit each record to its Next fie...

Linux Distros Unpatched Vulnerability : CVE-2026-98687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Reject oversized XDomain properties responses tbxdppropertiesrequest allocates room for 45 data dwords in its 252-byte response buffer. The XDomain...

Linux Distros Unpatched Vulnerability : CVE-2026-98726

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-multipath: fix underflow in ANA log bounds checks The number of ANA groups advertised through Identify Controller sizes the ANA log buffer. The ANA log...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2024:1711026811)

"The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2024:1711026811 advisory. - In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Ensure rdmaaddrcancel happens before issuing more...

Linux Distros Unpatched Vulnerability : CVE-2026-112058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in setPTT that allows attackers to crash applications by supplying an invalid Jump...

PT-2026-117058

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.3.0-rc3 Description An unsigned underflow and slab-out-of-bounds read exist in the paste selection function. The issue occurs because the selection mutex vc sel.lock is dropped within a loop. If the line...

PT-2026-117047

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ath9k wifi driver where the ath9k wmi rsp callback function removes the validated WMI header and copies the number of bytes expected by the waiting command into it...