198010 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-100780
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4,...
Important: kernel-livepatch-6.1.182-227.379
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: afunix: Unlink sccentry in unixdeledge. CVE-2026-80521 Affected Packages: kernel-livepatch-6.1.182-227.379 Issue Correction: Please ensure you have live patching enabled. Run dnf update...
ROS-20260930-73-0104
The vulnerability of the uacceregister function in the drivers/misc/uacce/uacce.c module of the Linux kernel is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
Important: pki-core security update
The Public Key Infrastructure PKI Core contains fundamental packages required by AlmaLinux Certificate System. Security Fixes: pki-core: Dogtag/PKI: certprofile-import allows code execution via unsanitized profile content ExternalProcessConstraint CVE-2026-76561 pki-core: Dogtag PKI v2 REST ACL...
ROS-20260930-73-0049
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260930-73-0089
The vulnerability in the kernel-lt is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20260930-73-0093
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260930-73-0053
The vulnerability in the kernel-lt is related to incorrect blocking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260930-73-0094
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
Moderate: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay...
SUSE CVE-2026-77860
In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double decrement on the 'wait-limit' counter per client IP essentially bypassing one of the counter measures that was introduced for DNSBomb CVE-2024-33655. A malicious actor can...
SUSE CVE-2026-77955
In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones zonemd-check: yes which are located below but not at a trust anchor allow for an attack window where tampered with zone contents are served or stored to disk prior to the ZONEMD integrity check. Th...
SUSE CVE-2026-78227
NLnet Labs Unbound 1.22.0 up to and including 1.26.1, has a use-after-free vulnerability when compiled for DNS-over-QUIC support with '--with-libngtcp2'. Each DoQ stream owns an output buffer that holds the DNS response. ngtcp2's retransmission buffer keeps a shallow pointer into the output buffe...
SUSE CVE-2026-80225
In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that can stream and sustain a rate of distinct uncached names over the TCP/DoT connection, monopolize...
SUSE CVE-2026-82720
NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. During failure code paths i.e., RPZ drop query, jostle due to heavy traffic, a dropped DoH stream brings down the whole DoH session and does n...
SUSE CVE-2026-85644
XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference. The wrapper function XS::Parse::Infix generates for a list-associative infix operator checks whether arguments are array references, but it tests using SvRV rather than SvROK. SvRV reads a union slot...
SUSE CVE-2026-93355
LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by exploiting an email-based fallback lookup in the JWT authentication flow without verifying the emailverified claim...
SUSE CVE-2026-95386
TTL file parser infinite loop in 4.6.0 to 4.6.8 allows denial of service...