EUVD-2026-86102

In the Linux kernel, the following vulnerability has been resolved: watchdog: lenovose10wdt: Fix use-after-free and resource leak risk Review by sashiko.dev highlighted potential use after free and resource leak instances. Set se10pdev to null to prevent use after free Remove DMI call back and...

CVE-2026-97504 watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk

In the Linux kernel, the following vulnerability has been resolved: watchdog: lenovose10wdt: Fix use-after-free and resource leak risk Review by sashiko.dev highlighted potential use after free and resource leak instances. Set se10pdev to null to prevent use after free Remove DMI call back and...

CVE-2026-97504

The Linux kernel contains a vulnerability in the lenovo_se10_wdt watchdog driver. The issue involves a use-after-free risk and a potential resource leak where the se10_pdev pointer was not properly handled. To address this, the driver was updated to set se10_pdev to null to prevent use-after-free...

CVE-2026-97436

In the Linux kernel , the dpaa2-switch component contains a logic flaw in how FDB management is handled on the bridge leave path. When a port leaves a bridge, the dpaa2_switch_port_set_fdb() function incorrectly allocates new FDBs without properly marking old ones as unused. This is particularly ...

CVE-2026-97436 dpaa2-switch: rework FDB management on the bridge leave path

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: rework FDB management on the bridge leave path On bridge leave, the dpaa2switchportsetfdb function always allocates a new FDB for the port which is becoming standalone. In case no FDB is found, then the port leaving...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.17 contains a security vulnerability. This vulnerability arises from the use of histregistertrigger, which adds triggers to the global namedtriggers list before setting the tracking clock. Additionally, no check is performed on the clock string, allowing the use of...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the manageoob function does not update the last skb flag. As a result, the blocking recvMSGPEEK operation may continuously occupy CPU resources due to the OOB skb waiting for processing...

CVE-2026-17511

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service...

EUVD-2026-85891

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service...

CVE-2026-17511

The IBM PowerVM Hypervisor is affected by a vulnerability in the partition resource dump interface (CWE-212), which allows an attacker with authenticated administrator-level access to the HMC or service processor to obtain a limited snapshot of partition processor state. This results in a confide...

CVE-2026-17511 This Power System update is being released to address

IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service...

CVE-2026-67220

A flaw was found in RabbitMQ, a messaging and streaming broker. An authenticated low-privilege AMQP Advanced Message Queuing Protocol user can exploit this vulnerability by creating bindings on an x-jms-topic exchange with specially crafted selector strings. This action causes an exhaustion of...

CVE-2026-66080

A flaw was found in RabbitMQ. A highly privileged remote attacker, with the rabbitmqstreammanagement plugin enabled and access to the target vhost, can exploit an unbounded allocation vulnerability in the super-stream partitions. This allows the attacker to allocate a large amount of memory,...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

CLSA-2026-1790244896 java-11-openjdk: Fix of 3 CVEs

Upgrade to openjdk-11.0.32.1+1 GA. The following CVEs were fixed: - CVE-2026-60589: improve resource resolving - CVE-2026-61308: enhance HTTP connections - CVE-2026-70907: enhance TLS server - Update bundled FreeType to 2.14.3 following JDK-8385390...

CLSA-2026-1790243357 java-11-openjdk: Fix of 3 CVEs

Upgrade to openjdk-11.0.32.1+1 GA. The following CVEs were fixed: - CVE-2026-60589: improve resource resolving - CVE-2026-61308: enhance HTTP connections - CVE-2026-70907: enhance TLS server - Update bundled FreeType to 2.14.3 following JDK-8385390...

Astra Linux – Vulnerability in Chromium

In ANGLE, an uninitialized resource in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In Skia, an uninitialized resource in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...