CVE-2026-64582

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix a use-after-free problem in rxemmap rxemmap removes a rxemmapinfo struct from the pendingmmaps list and releases pendinglock while the struct's kref is still at 1: listdelinit&ip-pendingmmaps;...

freeipmi: buffer overflows on response messages via ipmi-oem

A flaw was found in FreeIPMI. The ipmi-oem program is used to send Intelligent Platform Management Interface IPMI OEM commands for specific hardware vendors to retrieve specific information from the hardware. A malicious server can reply with crafted response messages and cause buffer overflows...

GHSA-F7VP-7XGX-4W4R vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

CVE-2026-69245 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

GHSA-V5MV-P594-2X33 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

CVE-2026-69246 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

CVE-2026-69249 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1, apache-beam-python-3.11-sdk, openstack-glance-2025.1, openstack-nova-2025.1, openstack-nova-2025.2, openstack-nova-2026.1, openstack-glance-2025.2, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk...

GHSA-JWV3-5HGF-82WW vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1, apache-beam-python-3.11-sdk, openstack-glance-2025.1, openstack-nova-2025.1, openstack-nova-2025.2, openstack-nova-2026.1, openstack-glance-2025.2, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk...

CVE-2026-69248 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1, apache-beam-python-3.11-sdk, openstack-glance-2025.1, openstack-nova-2025.1, openstack-nova-2025.2, openstack-nova-2026.1, openstack-glance-2025.2, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk...

GHSA-M2H6-J472-RP4C vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1, apache-beam-python-3.11-sdk, openstack-glance-2025.1, openstack-nova-2025.1, openstack-nova-2025.2, openstack-nova-2026.1, openstack-glance-2025.2, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk...

CVE-2026-64581

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix skdstcache double-free in xfrmuserpolicy xfrmuserpolicy clears the socket dst cache with skdstreset, i.e. the non-atomic skdstsetsk, NULL: it reads skdstcache with rcudereferenceprotected, stores NULL and dstreleases th...

CVE-2026-64579

In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: preallocate inexact bins before xfrmhashrebuild reinsert xfrmhashrebuild's first loop preallocates the bins/chains the reinsert loop needs, so the reinsert after hlistdelrcu cannot allocate or fail. But its guard is...

CVE-2026-64580

In the Linux kernel, the following vulnerability has been resolved: xfrm6: clear dst.dev on error to avoid double netdevput in xfrm6filldst On the error path where in6devgetdev returns NULL, xfrm6filldst releases the device reference with netdevput but leaves xdst-u.dst.dev set. dstdestroy later...

CVE-2026-64577

In the Linux kernel, the following vulnerability has been resolved: gtp: check skbpulldata return in gtp1usendechoresp gtp1usendechoresp ignores skbpulldata's return value. Its caller gtp1uudpencaprecv only guarantees 16 bytes udphdr + gtp1header, but the pull requests 20 gtp1headerlong + udphdr...

CVE-2026-64578

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate compound request size before reading StructureSize2 When ksmbd validates a compound chained SMB2 request, ksmbdsmb2checkmessage reads pdu-StructureSize2 without first checking that the compound element is large...

CVE-2026-64576

In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...

CVE-2026-64575

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpfitertcpbatch releases the current batch via bpfitertcpputbatch, which drops the socket refs and rewrites each slot with the socket cookie, then grows the batch. cursk/endsk ar...

CVE-2026-64574

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: tear down new links on vif update error path When ieee80211vifupdatelinks adds new links it allocates a link container for each and calls ieee80211linkinit which registers the per-link debugfs files with...

CVE-2026-64573

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix NVM tag length underflow in TLV parser In the TLVTYPENVM branch of qcatlvcheckdata the tag loop bound is "while idx length - sizeofstruct tlvtypenvm". "length" is a signed int from the firmware TLV header and...

CVE-2026-64572

In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: free fibalias with kfreercu on insert error path fibtableinsert publishes newfa into the leaf's falist with fibinsertalias before calling the fib entry notifiers. When a notifier fails, the error path removes newfa wit...