JLSEC-2026-359

A flaw was found in gnuplot. The X11graphics function may lead to a segmentation fault and cause a system crash...

JLSEC-2026-356

A flaw was found in gnuplot. The GetAnnotateString function may lead to a segmentation fault and cause a system crash...

JLSEC-2026-358

A flaw was found in gnuplot. The CANVAStext function may lead to a segmentation fault and cause a system crash...

JLSEC-2026-357

A flaw was found in gnuplot. The xstrftime function may lead to a segmentation fault, causing a system crash...

The vulnerabilities of the functions trace_string() and trace_event_rawevent_synth() in the kernel/trace/trace_events_synth.c module, which support Linux’s kernel tracing mechanism, allow a hacker to cause a system failure.

The vulnerability of the tracestring and traceeventraweventsynth functions in the kernel/trace/traceeventssynth.c module, which support kernel tracing in Linux operating systems, is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a system...

CVE-2026-31680

A flaw was found in the Linux kernel. A local user can exploit a race condition in the IPv6 flow label handling, specifically during the teardown of exclusive flow label options. This can lead to a use-after-free vulnerability when a concurrent reader accesses freed option state, triggering a...

Oracle Solaris Critical Patch Update : apr2026_SRU11_4_92_214_1

The version of Solaris installed on the remote host is prior to 11.4.92.214.1. It is, therefore, affected by a vulnerability as referenced in the solaris11apr2026SRU114922141 advisory. - Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is...

CVE-2026-31663

A flaw was found in the Linux kernel's xfrm IP eXtensible FRamework subsystem. This vulnerability involves a race condition where a network device's reference is released too early during packet processing after asynchronous cryptography. This premature release can lead to the system attempting t...

CVE-2026-31603

A flaw was found in the Linux kernel's sm750fb framebuffer driver. A local user can exploit this vulnerability by providing a specially crafted input with a zero pixclock value via the FBIOPUTVSCREENINFO ioctl. This leads to a division-by-zero error in the pstohz function, which can result in a...

CVE-2026-35369

An argument parsing error in the kill utility of uutils coreutils incorrectly interprets kill -1 as a request to send the default signal SIGTERM to PID -1. Sending a signal to PID -1 causes the kernel to terminate all processes visible to the caller, potentially leading to a system crash or massi...

CVE-2026-31577

A flaw was found in the nilfs2 filesystem within the Linux kernel. A local user can trigger a null pointer dereference by calling the NILFSIOCTLCLEANSEGMENTS operation immediately after mounting the filesystem, but before any btree operations have occurred on the Data Allocation Table DAT inode...

CVE-2026-31569

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. When a specific internal data structure, known as EIOINTC's coremap, is empty, the system incorrectly processes a processor ID. This error can lead to an out-of-bounds memory access, meaning the system tries to rea...

CVE-2026-31561

A flaw was found in the Linux kernel's handling of the CR4 pinned bits mask for FRED Flexible Return and Event Delivery. An attacker could exploit this by modifying a specific bit in memory to disable CR4 pinning, potentially leading to a system crash. This vulnerability could result in a Denial ...

CVE-2026-31555

A flaw was found in the Linux kernel. A local user could exploit a race condition within the futexlockpi retry path. This vulnerability occurs because a stale pointer to an exiting process is not cleared, leading to a kernel warning. Successful exploitation of this flaw could result in a system...

CVE-2026-31544

A flaw was found in the Linux kernel's armscmi firmware component. The scmieventhandlergetops helper function can return a NULL pointer when an event handler is not found or created, instead of an expected error pointer. This improper handling of the error path leads to a NULL dereference...

CVE-2026-31560 spi: spi-dw-dma: fix print error log when wait finish transaction

In the Linux kernel, the following vulnerability has been resolved: spi: spi-dw-dma: fix print error log when wait finish transaction If an error occurs, the device may not have a current message. In this case, the system will crash. In this case, it's better to use dev from the struct ctlr struc...

CVE-2026-31560

CVE-2026-31560 affects the Linux kernel spi-dw-dma path. When completing an SPI transaction, an error in handling a missing device message can lead to a system crash; the recommended fix is to obtain the device from the struct spi_controller* (dev from the controller). The vulnerability has been ...

kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code execution

A flaw was found in the Linux kernel's bonding module. This use-after-free vulnerability occurs when a new slave device is added to the bonding array but fails during the enslave process. A local attacker can exploit this by triggering the enslave failure, which may lead to a system crash,...

CVE-2025-13763

Multiple uses of uninitialized variables were found in libopensc that may lead to information disclosure or application crash. An attack requires a crafted USB device or smart card that would present the system with specially crafted responses to the APDUs...

CVE-2026-31487

A flaw was found in the Linux kernel, specifically within its Serial Peripheral Interface SPI subsystem. This vulnerability arises from improper handling of memory when a driver is being attached, leading to a use-after-free UAF condition. A UAF vulnerability is a type of memory corruption that c...