ROS-20260923-73-0056

The vulnerability of the floattoint function in the drivers/hid/amd-sfh-hid/sfh11/amdsfhdesc.c file of the Linux kernel subsystem for user interface devices’ driver lies in the handling of buffer overflows. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260923-73-0048

The vulnerability of the ncmbind function in the drivers/usb/gadget/function/fncm.c file of the Linux device driver kernel module is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0075

The vulnerability of the qmiDecodeStringElem function in the drivers/soc/qcom/qmiEncDec.c module of the SOC kernel driver for the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

libX11-6-1.8.13-2.1 on GA media (moderate)

libX11-6-1.8.13-2.1 on GA media Announcement ID: openSUSE-SU-2026:11833-1 Rating: moderate Cross-References: CVE-2026-88806 CVSS scores: CVE-2026-88806 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2026-88806 SUSE : 8.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H...

ROS-20260923-73-0099

The vulnerability of the drivers/uio/uiohvgeneric.c module in Linux kernels is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260923-73-0087

The vulnerability of the platformgetresource function in the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0078

The vulnerability of the docsum function in the arch/arm64/lib/csum.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260923-73-0074

The vulnerability of the adjustinuseandcalccost function in the block/blk-iocost.c module, which is part of the Linux kernel’s block-level support, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to trigger a service failure...

containernetworking-plugins security update

1:1.9.0-4 - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-56862 CVE-2026-56860 CVE-2026-33818 - Resolves: RHEL-241203 - Resolves: RHEL-241309 - Resolves: RHEL-241445 - Resolves: RHEL-241826 - Resolves: RHEL-242374...

postgresql16 security update

16.15-1.0.1 - Replace upstream reference Orabug: 37044148 16.15-1 - Update to 16.15...

ROS-20260923-73-0039

The vulnerability of the ppsregistercdev function in the Linux operating system is related to the disclosure of information in error messages. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260923-73-0035

The vulnerability of the copytoiter function in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure...

ROS-20260923-73-0033

The vulnerability of the netdevallocskbipalign function in the Linux operating system is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260923-73-0086

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260923-73-0054

The vulnerability of the ipv6findtlv function in the net/ipv6/exthdrscore.c module of the Linux kernel involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20260923-73-0057

The vulnerability of the chachacryptarch function in the arch/s390/crypto/chacha-glue.c module, which is part of the S390 platform support in the Linux operating system, is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a...

CVE-2026-91018

lwIP Lightweight IP has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system...

CVE-2026-88341

A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration numbuffers=0 that triggers an assertion failure in yrarenagetptr, causing the application to terminate...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses

A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak p...