CVE-2026-64582

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix a use-after-free problem in rxemmap rxemmap removes a rxemmapinfo struct from the pendingmmaps list and releases pendinglock while the struct's kref is still at 1: listdelinit&ip-pendingmmaps;...

freeipmi: buffer overflows on response messages via ipmi-oem

A flaw was found in FreeIPMI. The ipmi-oem program is used to send Intelligent Platform Management Interface IPMI OEM commands for specific hardware vendors to retrieve specific information from the hardware. A malicious server can reply with crafted response messages and cause buffer overflows...

CVE-2026-55737 affecting package erlang for versions less than 26.2.5.21-3

CVE-2026-55737 affecting package erlang for versions less than 26.2.5.21-3. A patched version of the package is available...

CVE-2026-55953 affecting package erlang for versions less than 26.2.5.21-3

CVE-2026-55953 affecting package erlang for versions less than 26.2.5.21-3. A patched version of the package is available...

CVE-2026-59251 affecting package erlang for versions less than 26.2.5.21-3

CVE-2026-59251 affecting package erlang for versions less than 26.2.5.21-3. A patched version of the package is available...

CVE-2026-42792 affecting package erlang for versions less than 26.2.5.21-3

CVE-2026-42792 affecting package erlang for versions less than 26.2.5.21-3. A patched version of the package is available...

CVE-2026-69245 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

GHSA-F7VP-7XGX-4W4R vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

GHSA-V5MV-P594-2X33 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

CVE-2026-69246 vulnerabilities

Vulnerabilities for packages: drupal, nextcloud-server, privatebin...

CVE-2026-69249 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.12-sdk, openstack-glance-2025.1, openstack-nova-2026.1, apache-beam-python-3.13-sdk, openstack-glance-2026.1, openstack-nova-2025.2, openstack-nova-2025.1, apache-beam-python-3.11-sdk, openstack-glance-2025.2...

CVE-2026-69248 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.12-sdk, openstack-glance-2025.1, openstack-nova-2026.1, apache-beam-python-3.13-sdk, openstack-glance-2026.1, openstack-nova-2025.2, openstack-nova-2025.1, apache-beam-python-3.11-sdk, openstack-glance-2025.2...

GHSA-JWV3-5HGF-82WW vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.12-sdk, openstack-glance-2025.1, openstack-nova-2026.1, apache-beam-python-3.13-sdk, openstack-glance-2026.1, openstack-nova-2025.2, openstack-nova-2025.1, apache-beam-python-3.11-sdk, openstack-glance-2025.2...

GHSA-M2H6-J472-RP4C vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.12-sdk, openstack-glance-2025.1, openstack-nova-2026.1, apache-beam-python-3.13-sdk, openstack-glance-2026.1, openstack-nova-2025.2, openstack-nova-2025.1, apache-beam-python-3.11-sdk, openstack-glance-2025.2...

CVE-2026-64581

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix skdstcache double-free in xfrmuserpolicy xfrmuserpolicy clears the socket dst cache with skdstreset, i.e. the non-atomic skdstsetsk, NULL: it reads skdstcache with rcudereferenceprotected, stores NULL and dstreleases th...

CVE-2026-64579

In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: preallocate inexact bins before xfrmhashrebuild reinsert xfrmhashrebuild's first loop preallocates the bins/chains the reinsert loop needs, so the reinsert after hlistdelrcu cannot allocate or fail. But its guard is...

CVE-2026-64580

In the Linux kernel, the following vulnerability has been resolved: xfrm6: clear dst.dev on error to avoid double netdevput in xfrm6filldst On the error path where in6devgetdev returns NULL, xfrm6filldst releases the device reference with netdevput but leaves xdst-u.dst.dev set. dstdestroy later...

CVE-2026-64577

In the Linux kernel, the following vulnerability has been resolved: gtp: check skbpulldata return in gtp1usendechoresp gtp1usendechoresp ignores skbpulldata's return value. Its caller gtp1uudpencaprecv only guarantees 16 bytes udphdr + gtp1header, but the pull requests 20 gtp1headerlong + udphdr...

CVE-2026-64578

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate compound request size before reading StructureSize2 When ksmbd validates a compound chained SMB2 request, ksmbdsmb2checkmessage reads pdu-StructureSize2 without first checking that the compound element is large...

CVE-2026-64576

In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...