CentOS Linux 8 [TuxCare] Security Update: libssh / libssh-config / libssh-devel (CENTOS-STREAM8:CLSA-2025:1759330475)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2025:1759330475 advisory. - A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible for key...

Linux Distros Unpatched Vulnerability : CVE-2026-90300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Clear buf on error in bpfgettaskstack Both bpfgettaskstack and bpfgettaskstacksleepable helpers that use bpfgettaskstack have buf defined as...

Linux Distros Unpatched Vulnerability : CVE-2026-92520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper...

DEBIAN-CVE-2026-90300

In the Linux kernel, the following vulnerability has been resolved: bpf: Clear buf on error in bpfgettaskstack Both bpfgettaskstack and bpfgettaskstacksleepable helpers that use bpfgettaskstack have buf defined as ARGPTRTOUNINITMEM argument and we should initialize the buf on every return path...

AZL-102008 CVE-2026-90300 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Clear buf on error in bpfgettaskstack Both bpfgettaskstack and bpfgettaskstacksleepable helpers that use bpfgettaskstack have buf defined as ARGPTRTOUNINITMEM argument and we should initialize the buf on every return path...

CVE-2026-92520 bpf: Zero queue and stack outputs on lock failure

In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a...

CVE-2026-90300 bpf: Clear buf on error in __bpf_get_task_stack

In the Linux kernel, the following vulnerability has been resolved: bpf: Clear buf on error in bpfgettaskstack Both bpfgettaskstack and bpfgettaskstacksleepable helpers that use bpfgettaskstack have buf defined as ARGPTRTOUNINITMEM argument and we should initialize the buf on every return path...

CVE-2026-90300

CVE-2026-90300 affects the Linux kernel BPF subsystem, specifically the __bpf_get_task_stack helper used by both bpf_get_task_stack and bpf_get_task_stack_sleepable. The buffer argument is declared as ARG_PTR_TO_UNINIT_MEM, requiring initialization on every return path, but the error/fail paths w...

CVE-2026-90300 bpf: Clear buf on error in __bpf_get_task_stack

In the Linux kernel, the following vulnerability has been resolved: bpf: Clear buf on error in bpfgettaskstack Both bpfgettaskstack and bpfgettaskstacksleepable helpers that use bpfgettaskstack have buf defined as ARGPTRTOUNINITMEM argument and we should initialize the buf on every return path...

CVE-2026-92520: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper to initialize it. The empty-map error path clears the buffer, but a...

EUVD-2026-80459

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak qla2x00dodportdiagnostics allocates the qladportdiag response buffer with kmallocobj non-zeroing and, on success, copies the full sizeofdd back to user space via...

CVE-2026-89859

This Linux kernel vulnerability affects the scsi: qla2xxx (QLogic Fibre Channel HBA) driver. In qla2x00_do_dport_diagnostics(), the qla_dport_diag response buffer is allocated with kmalloc_obj() (non-zeroing), but only a subset of the buffer is populated by the user request. The options and unuse...

PT-2026-93484

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak exists in the qla2xxx SCSI driver where several bsg handlers use an uninitialized 256-byte buffer bsgDMA POOL SIZE. When a user-supplied request payload is shorter th...

Astra Linux – Vulnerability in libstb

stbimage is a single-file library licensed under MIT that is used for processing images. The stbigetn function reads a specified number of bytes from the context usually a file into the specified buffer. If the file stream points to the end of the file, it returns zero. There are two places where...

CVE-2026-15710

CVE-2026-15710 affects the Endpoint DLP kernel driver (epdlpdrv.sys) of Netskope Client for Windows prior to version R141 . Two root causes enable the information leak: (1) the internal communication channel between the user-space hook DLL, the kernel driver, and the daemon lacked token-based mes...

CVE-2026-15710 Netskope Client Endpoint DLP Kernel Driver Information Leakage

An information leakage vulnerability exists in the Endpoint DLP component epdlpdrv.sys of Netskope Client for Windows prior to version R141. An internal communication channel used by the user-space hook DLL to pass messages through the kernel driver to the daemon lacked proper token-based message...

CVE-2026-15710 Netskope Client Endpoint DLP Kernel Driver Information Leakage

An information leakage vulnerability exists in the Endpoint DLP component epdlpdrv.sys of Netskope Client for Windows prior to version R141. An internal communication channel used by the user-space hook DLL to pass messages through the kernel driver to the daemon lacked proper token-based message...

CVE-2026-67277 Kernel memory disclosure and denial of service in MikroTik RouterOS btest service

RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...

EUVD-2026-72025

RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...

SUSE CVE-2026-74399

In the Linux kernel, the following vulnerability has been resolved: evm: terminate and bound the evmxattrs read buffer evmreadxattrs allocates size + 1 bytes, fills them from the list of enabled xattrs, and then passes strlentemp to simplereadfrombuffer. When no configured xattrs are enabled, the...