SUSE CVE-2026-90005

In the Linux kernel, the following vulnerability has been resolved: samples/damon/wsse: handle damonstart failure Patch series "samples/damon: handle damonstart,stop failures". All DAMON sample modules are not correctly handling failures from damonstart. Among those, mtier also has an additional...

SUSE CVE-2026-90006

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: handle damonstop failure damonsamplemtierstop assumes its damonstop call will always successfully stops the two DAMON contexts. Hence it deallocates the two DAMON contexts after the damonstop call. However, i...

CVE-2026-90066 samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify

In the Linux kernel, the following vulnerability has been resolved: samples/ftrace: Fix kthreadstop on ERRPTR in ftrace-direct-multi-modify ftracedirectmultiinit assigns kthreadrun's return value to simpletsk without an ISERR check. When kthreadrun fails it returns ERRPTR-ENOMEM, but init still...

CVE-2026-90066: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: samples/ftrace: Fix kthreadstop on ERRPTR in ftrace-direct-multi-modify ftracedirectmultiinit assigns kthreadrun's return value to simpletsk without an ISERR check. When kthreadrun fails it returns ERRPTR-ENOMEM, but init still...

node-opcua (2.144.0), node-opcua-aggregates (2.144.0) +6 more potentially affected by CVE-2026-69200 via node-opcua-client (2.144.0)

node-opcua-client NPM version 2.144.0 is affected by a known vulnerability. The following packages have a transitive dependency on node-opcua-client and may be impacted: - node-opcua 2.144.0 - node-opcua-aggregates 2.144.0 - node-opcua-local-discovery-server 2.144.0 - node-opcua-samples 2.144.0 -...

DEBIAN-CVE-2026-90006

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: handle damonstop failure damonsamplemtierstop assumes its damonstop call will always successfully stops the two DAMON contexts. Hence it deallocates the two DAMON contexts after the damonstop call. However, i...

CVE-2026-90006 samples/damon/mtier: handle damon_stop() failure

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: handle damonstop failure damonsamplemtierstop assumes its damonstop call will always successfully stops the two DAMON contexts. Hence it deallocates the two DAMON contexts after the damonstop call. However, i...

CVE-2026-90005 samples/damon/wsse: handle damon_start() failure

In the Linux kernel, the following vulnerability has been resolved: samples/damon/wsse: handle damonstart failure Patch series "samples/damon: handle damonstart,stop failures". All DAMON sample modules are not correctly handling failures from damonstart. Among those, mtier also has an additional...

CVE-2026-90006: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: handle damonstop failure damonsamplemtierstop assumes its damonstop call will always successfully stops the two DAMON contexts. Hence it deallocates the two DAMON contexts after the damonstop call. However, i...

CVE-2026-90005: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: samples/damon/wsse: handle damonstart failure Patch series "samples/damon: handle damonstart,stop failures". All DAMON sample modules are not correctly handling failures from damonstart. Among those, mtier also has an additional...

PT-2026-93647

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the samples/damon/mtier component. The function damon sample mtier stop incorrectly assumes that a call to damon stop will always successfully stop both...

Linux Distros Unpatched Vulnerability : CVE-2026-90005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - samples/damon/wsse: handle damonstart failure Patch series samples/damon: handle damonstart,stop failures. All DAMON sample modules are not correctly handling...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ac.intave:samples (>=0.0.4, <=0.0.13) +13367 more potentially affected by CVE-2026-90852 via com.github.luben:zstd-jni (>=1.4.4-2, <=1.5.7-13)

com.github.luben:zstd-jni MAVEN version =1.4.4-2, =0.0.1, =0.0.4, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.3.5, =1.3.7 and more Source cves: CVE-2026-90852 Source advisory: MEND:CVE-2026-90852...

Astra Linux – Vulnerability in SOX

The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...

Astra Linux – Vulnerability in gst-plugins-good1.0

GStreamer is a library for constructing graphs of media-handling components. An out-of-bounds reading has been detected in the function qtdemuxparsesamples within qtdemux.c. This issue occurs when the function qtdemuxparsesamples reads data beyond the boundaries of the stream-stco buffer. The...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Comedi: Fixed the initialization of data for instructions that write to sub-devices. It is known that some Comedi sub-device instruction handlers access data elements beyond the first insn-n elements in some cases. The doinsnioct...

Astra Linux – Vulnerability in ffmpeg

There is a heap-based Buffer Overflow vulnerability in FFmpeg 4.2, located in the file libavfilter/afafade.c within crossfadesamplesfltp. This vulnerability may lead to memory corruption and other potential issues...

Astra Linux – Vulnerability in SOX

A floating-point exception division by zero issue was discovered in SoX within the readsamples function of the voc.c file. An attacker with a malicious file could cause the application to crash...

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ac.intave:samples (>=0.0.4, <=0.0.13) +13884 more potentially affected by CVE-2026-87877 via com.github.luben:zstd-jni (>=1.3.8-5, <=1.5.7-13)

com.github.luben:zstd-jni MAVEN version =1.3.8-5, =0.0.1, =0.0.4, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.3.5, =1.3.7 and more Source cves: CVE-2026-87877 Source advisory: SNYK:JAVA-COMGITHUBLUBEN-19659617...

UBUNTU-CVE-2026-87824

zstd-jni before 1.5.7-14 fails to validate the samples buffer capacity in Zstd.trainFromBufferDirect, allowing attackers to read past buffer boundaries by supplying oversized per-sample lengths. Attackers can trigger out-of-bounds memory access by providing crafted sample length arrays that cause...