CVE-2026-98568

The Linux kernel contains a Time-of-Check to Time-of-Use (TOCTOU) race condition within the vxlan component. Specifically, the vxlan_na_create() function samples LL_RESERVED_SPACE() twice: once to size the reply skb and again to reserve headroom. A concurrent call to vxlan_changelink() can update...

CVE-2026-98568 vxlan: use one headroom snapshot for neighbour replies

In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlannacreate samples LLRESERVEDSPACE to size the reply skb and then samples it again to reserve headroom. A concurrent vxlanchangelink can update neededheadroom between the...

CVE-2026-98568 vxlan: use one headroom snapshot for neighbour replies

In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlannacreate samples LLRESERVEDSPACE to size the reply skb and then samples it again to reserve headroom. A concurrent vxlanchangelink can update neededheadroom between the...

Linux Distros Unpatched Vulnerability : CVE-2026-98568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: use one headroom snapshot for neighbour replies vxlannacreate samples LLRESERVEDSPACE to size the reply skb and then samples it again to reserve headroom...

AlmaLinux 9.2 [TuxCare] Security Update: rsync / rsync-daemon Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792362285)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792362285 advisory. - rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious...

CVE-2026-98568: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlannacreate samples LLRESERVEDSPACE to size the reply skb and then samples it again to reserve headroom. A concurrent vxlanchangelink can update neededheadroom between the...

PT-2026-116787

In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlan na create samples LL RESERVED SPACE to size the reply skb and then samples it again to reserve headroom. A concurrent vxlan changelink can update needed headroom betwee...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 3.12.18 to 3.13, 3.13.10 to 3.14, and 3.14 itself. These vulnerabilities stem from the function vxlannacreate, which reads LLRESERVEDSPACE twice to obtain the header space. During this process, the concurrent vxlanchangelink function ma...

AlmaLinux 9.2 [TuxCare] Security Update: gvfs / gvfs-client / gvfs-devel / gvfs-fuse / gvfs-goa / etc (ALMALINUX9.2:CLSA-2026:1792212029)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792212029 advisory. - A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus socke...

LatePoint – Calendar Booking Plugin for Appointments and Events: Authorization Issues Vulnerability

LatePoint – Calendar Booking Plugin for Appointments and Events. Versions 5.7.4 and earlier have an authorization issue vulnerability. This vulnerability stems from the verifyOTP function’s non-atomic read-modify-write operation on the OTP verification attempt counter. Without proper conditional...

PrivEsc (Priviledge Escalation) org.apache.tomcat:tomcat-coyote Dependency in Confluence Data Center

This High severity PrivEsc Priviledge Escalation vulnerability was introduced in versions 7.13.0, 7.14.0, 7.15.0, 7.16.0, 7.17.0, 7.18.0, 7.19.0, 7.20.0, 8.0.0, 8.1.0, 8.2.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0, 8.7.1, 8.8.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of...

Rocky Linux 9.6 [TuxCare] Security Update: gvfs / gvfs-client / gvfs-devel / gvfs-fuse / gvfs-goa / etc (ALMALINUX9.6:CLSA-2026:1792166468)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792166468 advisory. - A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus...

AlmaLinux 9.6 [TuxCare] Security Update: gvfs / gvfs-client / gvfs-devel / gvfs-fuse / gvfs-goa / etc (ALMALINUX9.6:CLSA-2026:1792166468)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792166468 advisory. - A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created private D-Bus socke...

SUSE CVE-2026-86562

A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler...

CVE-2026-55480 CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copymodel in scheduler/ipp.c creates a predictable TempDir/.ppd path in an lp-group-writable directory and opens it as root without OEXCL or ONOFOLLOW. Exploitation requires an...

CVE-2026-55480 CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copymodel in scheduler/ipp.c creates a predictable TempDir/.ppd path in an lp-group-writable directory and opens it as root without OEXCL or ONOFOLLOW. Exploitation requires an...

CVE-2026-55480 CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root)

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copymodel in scheduler/ipp.c creates a predictable TempDir/.ppd path in an lp-group-writable directory and opens it as root without OEXCL or ONOFOLLOW. Exploitation requires an...

CVE-2026-55480

OpenPrinting CUPS versions prior to 2.4.20 are vulnerable to a symlink TOCTOU (Time-of-Check to Time-of-Use) attack due to the copy_model() function in scheduler/ipp.c . The root cause is the creation of a predictable PPD tempfile path in an lp-group-writable directory without using O_EXCL or O_N...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: The size of the bound DMA command body was incorrect when calculating the suffix pointer. The vmwcmddma function determines the DMA suffix as follows: unsigned long &cmd-body + header-size - sizeofsuffix Without...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/smc: Fixed the race condition between smclistenout and listener close. smclistenout reads lsmc-sk.skstate without acquiring a lock on locksocknested. It only acquires the lock after the check passes. This creates a window...