PT-2026-128179

In the Linux kernel, the following vulnerability has been resolved: x86/insn-eval: Fix shadowed segment index in get seg reg override idx Commit 45e1dccc0653 "x86/insn: Simplify for each insn prefix" made for each insn prefix declare its own loop counter named idx. get seg reg override idx keeps...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: seg6: Fixed the iif in the IPv6 socket control block. When an IPv4 packet is received, the iprcvcore... function sets the receiving interface index into the IPv4 socket control block v5.16-rc4, net/ipv4/ipinput.c, line 510: c...

Improving email security outcomes with real-world Microsoft Defender insights

Every benchmark tells a story. The most valuable ones tell us where to improve next. For five consecutive quarters Microsoft has published email security benchmarking reports to provide greater transparency into real-world protection outcomes. The results have shown strong Microsoft Defender...

SUSE CVE-2026-80955

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in ksetreplay In ksetreplay, when key-seggen is stale key-seggen cachepos.cacheseg-gen, cachekeyputkey is called but then key-cachepos.cacheseg is accessed as the argument ...

DEBIAN-CVE-2026-80955

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in ksetreplay In ksetreplay, when key-seggen is stale key-seggen cachepos.cacheseg-gen, cachekeyputkey is called but then key-cachepos.cacheseg is accessed as the argument ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107321 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix seg fault in rxecompqueuepkt In rxecompqueuepkt an incoming response packet skb is...

SUSE CVE-2026-63949

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix OOB read on zero-length messagestore linedispdisplay unconditionally reads msgcount - 1 before checking whether count is zero, so a write of zero bytes to the message sysfs attribute hits msg-1:...

CVE-2026-63949

A flaw was found in the Linux kernel's auxdisplay line-display subsystem. A local user can trigger an out-of-bounds read by writing a zero-length message to the message sysfs attribute. This occurs because the linedispdisplay function attempts to read a character from a zero-length buffer, leadin...

contextifier (>=0.1.0, <=0.2.2), endi (>=2025.1.0b3, <=2026.4.7) +4 more potentially affected by CVE-2026-28231 via pi-heif (>=1.1.1, <=1.2.0)

pi-heif PYPI version =1.1.1, =0.1.0, =2025.1.0b3, =2026.3.0b2, =2025.1.0b3, =0.2.5, =0.1.0, =0.3.0 Source cves: CVE-2026-28231 Source advisory: OSV:GHSA-5GJJ-6R7V-PH3X...

CVE-2026-63949

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix OOB read on zero-length messagestore linedispdisplay unconditionally reads msgcount - 1 before checking whether count is zero, so a write of zero bytes to the message sysfs attribute hits msg-1:...

CVE-2026-63949 auxdisplay: line-display: fix OOB read on zero-length message_store()

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix OOB read on zero-length messagestore linedispdisplay unconditionally reads msgcount - 1 before checking whether count is zero, so a write of zero bytes to the message sysfs attribute hits msg-1:...

EUVD-2026-45722

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix OOB read on zero-length messagestore linedispdisplay unconditionally reads msgcount - 1 before checking whether count is zero, so a write of zero bytes to the message sysfs attribute hits msg-1:...

CVE-2026-54902

Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to version 3.17.2, is vulnerable to Use-After-Free when in SAJ mode. The Oj::Parser does not protect cached object keys ≥ 35 bytes from garbage collection, and a Ruby callback that triggers GC inside hashend ca...

PT-2026-43967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel network subsystem. The functions seg6 input core and rpl input call ip6 route input, which assigns a NOREF destination dst to the socket...

CVE-2026-43302

A flaw was found in the Linux kernel's V3D graphics driver. When the Direct Memory Access DMA Application Programming Interface API debug option is enabled, the kernel may report a segment size mismatch. This occurs because the 'maxsegsize' parameter is not correctly configured, leading to warnin...

boxmot (>=10.0.49, <=10.0.51), gandlf (>=0.0.18.dev20240112, <=0.0.19.dev20240307) +1 more potentially affected by CVE-2026-40491 via gdown (4.6.3)

gdown PYPI version 4.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdown and may be impacted: - boxmot =10.0.49, =0.0.18.dev20240112, =0.1.3.dev2, =0.1.9 Source cves: CVE-2026-40491 Source advisory: OSV:PYSEC-2026-2158...

boxmot (>=10.0.49, <=10.0.51), gandlf (>=0.0.18.dev20240112, <=0.0.19.dev20240307) +1 more potentially affected by CVE-2026-40491 via gdown (4.6.3)

gdown PYPI version 4.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdown and may be impacted: - boxmot =10.0.49, =0.0.18.dev20240112, =0.1.3.dev2, =0.1.9 Source cves: CVE-2026-40491 Source advisory: OSV:GHSA-76HW-P97H-883F...

nginx:1.24 security update

1.24.0-5.2.0.1 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 1:1.24.0-5.2 - Resolves: RHEL-157886 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159445...

PT-2026-35020

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the seg6 lwtunnel, a single dst cache per encap route is shared between the seg6 input core and seg6 output core functions. Because these two paths can perform post-encap SID lookups ...

contextifier (>=0.1.0, <=0.2.2), endi (>=2025.1.0b3, <=2026.4.7) +4 more potentially affected by CVE-2026-28231 via pi-heif (>=1.1.1, <=1.2.0)

pi-heif PYPI version =1.1.1, =0.1.0, =2025.1.0b3, =2026.3.0b2, =2025.1.0b3, =0.2.5, =0.1.0, =0.3.0 Source cves: CVE-2026-28231 Source advisory: OSV:PYSEC-2026-2248...