CVE-2026-80997

A flaw was found in the Linux kernel's IP Accelerator IPA network driver. Specifically, the ipastartxmit function incorrectly manages the transmit TX queue during a device's runtime resume process. This can lead to the TX queue stopping permanently because the mechanism intended to restart it is...

RLSA-2026:66403 Moderate: coreutils security update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fixes: coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 For more details about the...

PT-2026-90319

In the Linux kernel, the following vulnerability has been resolved: entry: Fix seccomp bypass after ptrace with TSYNC Sashiko review pointed out the following issue. If a thread is stopped in syscall trace enter for ptrace, another thread can install a seccomp filter with SECCOMP FILTER FLAG TSYN...

PT-2026-90465

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash passing ERR PTR to kthread stop event test stuff calls kthread run and unconditionally passes the returned task struct pointer to kthread stop. kthread run returns an error pointer such as ERR PTR-ENOMEM when...

AlmaLinux 9 : coreutils (ALSA-2026:66403)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66403 advisory. coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 Tenable has extracted the preceding description block directly fro...

RockyLinux 9 : coreutils (RLSA-2026:66403)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:66403 advisory. coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 Tenable has extracted the preceding description block directly fr...

coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values

A flaw was found in GNU coreutils, specifically in the unexpand utility. This vulnerability, a heap-based buffer overflow, occurs due to an integer overflow when unexpand processes unusually large tab stop values provided by a local attacker. This can lead to an undersized memory buffer, allowing...

Moderate: coreutils security update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fixes: coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 For more details about the...

RHEL 9 : coreutils (RHSA-2026:66403)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:66403 advisory. The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils...

ALSA-2026:66403 Moderate: coreutils security update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fixes: coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 For more details about the...

CVE-2026-86713

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load_mon module's stop path. The root cause is that exit_and_cleanup() deletes the LoadMon object and frees the performance counter before perf_end() attempts to access it. An attacker can trigger this by issuing the load...

The vulnerability of the `iris_hfi_gen2_session_stop()` function in the driver/media/platform/qcom/iris/iris_hfi_gen2_command.c file of the multimedia device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the irishfigen2sessionstop function in the drivers/media/platform/qcom/iris/irishfigen2command.c driver for multimedia devices in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-19591

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token --% differently than PowerShell itself. If a user opens an attacker-prepared...

CVE-2026-19591

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token --% differently than PowerShell itself. If a user opens an attacker-prepared...

CVE-2026-19591: Improper Neutralization of Escape, Meta, or Control Sequences

OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token --% differently than PowerShell itself. If a user opens an attacker-prepared...

Unity Linux 20.1070a Security Update: coreutils (UTSA-2026-104994)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104994 advisory. GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t values. Th...

python: Python base64: Incomplete data decoding due to premature stop at padding

A flaw was found in the Python base64 module. When decoding base64 data using functions like base64.b64decode, the decoding process prematurely stops upon encountering the first padding character. This can result in incomplete data being processed, where any information following the initial...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098783)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098783 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during format-change stop loopbackcheckformat may stop the...

SUSE CVE-2026-74412

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix wrong pcigetdrvdata type in AER handlers rtw88 stores an ieee80211hw pointer via pcisetdrvdata at probe time, but ioerrordetected and ioresume retrieve it as a netdevice pointer. This causes...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Preventing memory corruption due to DMA mapping failures If msdcpreparedata fails to map the DMA region, the request is not prepared for data reception. However, msdcstartdata proceeds with the DMA operation using the...