CVE-2026-98853: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-IP segmentation IP-in-IP GSO can re-enter inetgsosegment or ipv6gsosegment for each nested IP header. encaplevel tracks header bytes, not callback depth, so a deep chain can exhaust the kernel stac...

PT-2026-116770

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the perf clear branch entry bitfields function fails to clear all bitfields of the perf branch entry structure, specifically omitting the new ty...

PT-2026-116685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 component where the fix host ownership function only processes the linear-map alias of each memblock region. Consequently, the per-CPU hyp stack, which i...

CVE-2026-112055: Out-of-bounds Read

wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPXFKP and wvGetCHPXFKP caused by an unvalidated FKP run count. Attackers can supply a crafted .doc file with a large crun value to read kilobytes past the 512-byte stack buffer, crashing applications like...

PT-2026-116616

libtta through 2.3 contains a stack out-of-bounds read and write vulnerability in tta decoder process stream and tta decoder process frame because header checks never reject a zero channel count. Attackers can supply a crafted .tta file declaring zero channels so decorrelation accesses cache-1 wi...

PT-2026-116747

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel stack leak occurs in the error path of the GPIO character device. When the system fails to acquire the GPIO chip guard within the gpio desc to lineinfo function, it returns...

PT-2026-116759

In the Linux kernel, the following vulnerability has been resolved: fprobe: Terminate the fgraph data list when the reservation is not filled fprobe fgraph entry reserves shadow stack space for every fprobe with an exit handler, but only fills it for those whose entry handler returns 0. fgraph...

PT-2026-128468

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 fix host ownership walks only the linear-map alias of each memblock region, and the per-CPU hyp stack, mapped in the private VA range for its guard page, has none...

CVE-2026-98540: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fprobe: Terminate the fgraphdata list when the reservation is not filled fprobefgraphentry reserves shadow stack space for every fprobe with an exit handler, but only fills it for those whose entry handler returns 0...

CVE-2026-112063: Stack-based Buffer Overflow

libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAMHi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an oversized SCRAM salt. Attackers can send a server-first-message whose s= attribute decodes to more than 124 bytes, abortin...

PT-2026-116646

libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an oversized SCRAM salt. Attackers can send a server-first-message whose s= attribute decodes to more than 124 bytes, aborti...

PT-2026-116638

wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPX FKP and wvGetCHPX FKP caused by an unvalidated FKP run count. Attackers can supply a crafted .doc file with a large crun value to read kilobytes past the 512-byte stack buffer, crashing applications like...

Linux Distros Unpatched Vulnerability : CVE-2026-98760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: tipd: fix uninitialized typecpartnerdesc in tps6598xconnect tps6598xconnect passes a stack-allocated typecpartnerdesc to typecregisterpartner after...

Security update for p11-kit (moderate)

openSUSE security update: security update for p11-kit ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22105-1 Rating: moderate References: bsc1269664 bsc1280702 Cross-References: CVE-2026-13757 CVE-2026-18938 CVSS scores: CVE-2026-13757 SUSE : 6.2...

Security update for stunnel (moderate)

openSUSE security update: security update for stunnel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22088-1 Rating: moderate References: bsc1274206 bsc1274207 Cross-References: CVE-2026-70367 CVE-2026-70368 CVSS scores: CVE-2026-70367 SUSE : 5.4...

Security update for virtiofsd (important)

openSUSE security update: security update for virtiofsd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22079-1 Rating: important References: bsc1257912 bsc1283239 Cross-References: CVE-2026-25727 CVSS scores: CVE-2026-25727 SUSE : 7.5...

Security update for fetchmail (important)

openSUSE security update: security update for fetchmail ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22077-1 Rating: important References: bsc1282055 Cross-References: CVE-2026-94184 CVSS scores: CVE-2026-94184 SUSE : 8.1...

CVE-2026-98528: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: fix kernel stack leak to user-space in error path If we fail to acquire the GPIO chip guard in gpiodesctolineinfo, we return immediately before zeroing the info struct we'll end up passing to the user-space later in...

Linux Distros Unpatched Vulnerability : CVE-2026-98853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: gso: limit recursive IP-in-IP segmentation IP-in-IP GSO can re-enter inetgsosegment or ipv6gsosegment for each nested IP header. encaplevel tracks header...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc (CENTOS8.5:CLSA-2022:1666277963)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2022:1666277963 advisory. - A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content...