14686 matches found
kernel: udp: fix potential use-after-free in tunnel segmentation
A flaw was found in the Linux kernel's UDP User Datagram Protocol tunnel segmentation. This vulnerability arises when the system attempts to process network packets, specifically in the skbudptunnelsegment function. An attacker could potentially exploit a use-after-free condition, where the syste...
kernel: udp: fix potential use-after-free in tunnel segmentation
A flaw was found in the Linux kernel's UDP User Datagram Protocol tunnel segmentation. This vulnerability arises when the system attempts to process network packets, specifically in the skbudptunnelsegment function. An attacker could potentially exploit a use-after-free condition, where the syste...
AlmaLinux 9.6 [TuxCare] Security Update: perl-DBI (ALMALINUX9.6:CLSA-2026:1791807966)
"The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791807966 advisory. - DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sqltypecastsvpv. When casting to SQLNUMERIC,...
AlmaLinux 9.2 [TuxCare] Security Update: perl-DBI (ALMALINUX9.2:CLSA-2026:1791814009)
"The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791814009 advisory. - DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sqltypecastsvpv. When casting to SQLNUMERIC,...
Rocky Linux 9.6 [TuxCare] Security Update: perl-DBI (ALMALINUX9.6:CLSA-2026:1791807966)
"The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791807966 advisory. - DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sqltypecastsvpv. When casting to SQLNUMERIC,...
kernel: udp: fix potential use-after-free in tunnel segmentation
A flaw was found in the Linux kernel's UDP User Datagram Protocol tunnel segmentation. This vulnerability arises when the system attempts to process network packets, specifically in the skbudptunnelsegment function. An attacker could potentially exploit a use-after-free condition, where the syste...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
kernel: udp: fix potential use-after-free in tunnel segmentation
A flaw was found in the Linux kernel's UDP User Datagram Protocol tunnel segmentation. This vulnerability arises when the system attempts to process network packets, specifically in the skbudptunnelsegment function. An attacker could potentially exploit a use-after-free condition, where the syste...
kernel: udp: fix potential use-after-free in tunnel segmentation
A flaw was found in the Linux kernel's UDP User Datagram Protocol tunnel segmentation. This vulnerability arises when the system attempts to process network packets, specifically in the skbudptunnelsegment function. An attacker could potentially exploit a use-after-free condition, where the syste...
kernel: udp: fix potential use-after-free in tunnel segmentation
A flaw was found in the Linux kernel's UDP User Datagram Protocol tunnel segmentation. This vulnerability arises when the system attempts to process network packets, specifically in the skbudptunnelsegment function. An attacker could potentially exploit a use-after-free condition, where the syste...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...
kernel: udp: fix potential use-after-free in tunnel segmentation
A flaw was found in the Linux kernel's UDP User Datagram Protocol tunnel segmentation. This vulnerability arises when the system attempts to process network packets, specifically in the skbudptunnelsegment function. An attacker could potentially exploit a use-after-free condition, where the syste...
kernel: udp: fix potential use-after-free in tunnel segmentation
A flaw was found in the Linux kernel's UDP User Datagram Protocol tunnel segmentation. This vulnerability arises when the system attempts to process network packets, specifically in the skbudptunnelsegment function. An attacker could potentially exploit a use-after-free condition, where the syste...
kernel security, bug fix, and enhancement update
6.12.0-211.64.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
[SECURITY] Fedora 45 Update: ocaml-uuseg-18.0.0-2.fc45
Uuseg is an OCaml library for segmenting Unicode text. It implements the locale-independent Unicode text segmentation algorithms http://www.unicode.org/reports/tr29/ to detect grapheme cluster, word and sentence boundaries and the Unicode line breaking algorithm http://www.unicode.org/reports/tr1...
sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array
Summary Using Databasecreateaggregate, createaggregatehandler, or Databasedefineaggregator to define an aggregate function that takes two or more arguments, and then evaluating it over TEXT or BLOB column values, can free the Ruby objects holding those arguments while a later argument is still...
edu-segmentation (>=0.0.88, <=0.0.115), qgis-deployment-toolbelt (>=0.17.0, <=0.23.0) +1 more potentially affected by CVE-2026-114094 via dulwich (0.21.3)
dulwich PYPI version 0.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - edu-segmentation =0.0.88, =0.17.0, =0.23.0 - vocode 0.1.104 Source cves: CVE-2026-114094 Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...
edu-segmentation (>=0.0.88, <=0.0.115), qgis-deployment-toolbelt (>=0.17.0, <=0.23.0) +1 more potentially affected by CVE-2026-114095 via dulwich (0.21.3)
dulwich PYPI version 0.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - edu-segmentation =0.0.88, =0.17.0, =0.23.0 - vocode 0.1.104 Source cves: CVE-2026-114095 Source advisory: OSV:GHSA-35MR-4567-66VG...
SUSE CVE-2026-98085
In the Linux kernel, the following vulnerability has been resolved: bpf: backtrackinsn: Handle ldabs,ind subprog exit edge Nicholas Carlini reported a bug in precision backtracking mechanism for BPFLD | BPFIND,ABS instructions. These instructions are modelled as two branches: - fallthrough; -...