MAL-2026-10803 Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-sa-3-0-igo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ad0f72a8295e2a43e599a9b2afbc64201b6b7ca56c9b4f2161ddc07f3f25120 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10790 Malicious code in @gocortexio/npmgremlinbox-arphic-1999 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59cc9e27f4b008a76815433e388b21dadcb6477f6daee80a855b6eaeaf4a79f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10793 Malicious code in @gocortexio/npmgremlinbox-busl-1-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fde0f39d1aa2fb79d17f5582fc5044520af5bbbc864b910954b1476eeb62b6b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10792 Malicious code in @gocortexio/npmgremlinbox-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3905018e59676370cb9b0ce2f68f53df18b3ca774fafd9445bd3ce202ab0249 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-10786 Malicious code in @gocortexio/npmgremlinbox-agpl-3-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d09dea814f5a87e5e45c7bc9e94fe14fa4c70eda3037e2876ae0e92d10d0961 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Linux Distros Unpatched Vulnerability : CVE-2026-63861

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: spi: mtk-snfi: unregister ECC engine on probe failure and remove callback mtksnandprobe...

PT-2026-61547

In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%BizerbaBRAIN2. Starting with BRAIN2 3.09, the setup no longer executes this...

Linux Distros Unpatched Vulnerability : CVE-2026-64078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: xtables: add and use xtablesunregistertableexit Previous change added xtablesunregistertablepreexit to detach the table from the packetpath and to...

Linux Distros Unpatched Vulnerability : CVE-2026-64185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sysfs: don't remove existing directory on update failure When sysfsupdategroup is called for a named group and createfiles fails e.g. -ENOMEM, internalcreategro...

Linux Distros Unpatched Vulnerability : CVE-2026-64032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bridge: mcast: Fix a possible use-after-free when removing a bridge port When per-VLAN multicast snooping is enabled, the bridge iterates over all the bridge...

Linux Distros Unpatched Vulnerability : CVE-2026-64077

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ebtables: move to two-stage removal scheme Like previous patches for xtables, follow same pattern in ebtables. We can't reuse xt helpers: ebttable...

kernel security update

6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Linux Distros Unpatched Vulnerability : CVE-2026-64103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: isci: Fix use-after-free in device removal path The ISCI completion tasklet is initialized in iscihostalloc drivers/scsi/isci/init.c:496 and scheduled fro...

MAL-2026-10781 Malicious code in chart-animation-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a17f53a8a6915954e34aefd5d01ca4644d7185a1214fff4960c30d9a8c2f19ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2026-63798

In the Linux kernel, the following vulnerability has been resolved: irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove The driver allocates domain generic chips using irqallocdomaingenericchips during probe and sets up chained handlers using...

CVE-2026-64180

In the Linux kernel, the following vulnerability has been resolved: mm/memoryhotplug: fix memory block reference leak on remove Patch series "mm: Fix memory block leaks and locking", v2. This series fixes two memory block device reference leaks and one locking issue around the per-memoryblock...

CVE-2026-64115

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix UAF when peer resets connection during handshake vmcitransportrecvconnectingserver returned err = 0 for a peer RST in its default switch arm: err = pkt-type == VMCITRANSPORTPACKETTYPERST ? 0 : -EINVAL; That made...

CVE-2026-64103

In the Linux kernel, the following vulnerability has been resolved: scsi: isci: Fix use-after-free in device removal path The ISCI completion tasklet is initialized in iscihostalloc drivers/scsi/isci/init.c:496 and scheduled from both MSI-X and legacy interrupt handlers...

CVE-2026-64078

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: add and use xtablesunregistertableexit Previous change added xtablesunregistertablepreexit to detach the table from the packetpath and to unlink it from the active table list. In case of rmmod, userspace that ...

CVE-2026-64077

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage removal scheme Like previous patches for xtables, follow same pattern in ebtables. We can't reuse xt helpers: ebttable struct layout is incompatible. table-ops assignment is now done while...