AlmaLinux 9 : tesseract (ALSA-2026:67831)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67831 advisory. tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata CVE-2026-73066 Tenable has extracted the preceding description block directly from the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2026-109814)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109814 advisory. bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, craft...

SUSE SLES12: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2026:4204-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4204-1 advisory. - CVE-2026-6368: wordexp WRDEAPPEND rollback restores stale wewordv, leading to invalid free in wordfree bsc1274726. - CVE-2026-679...

CVE-2026-24073: Out-of-bounds Write

Memory corruption when processing decode statistics due to insufficient validation of offset against structure size...

PT-2026-94559

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem on s390 architecture where a Read-Modify-Write RMW atomic operation on an arena pointer fails to clear the destination register during a fault over a...

PT-2026-94171

Name of the Vulnerable Software and Affected Versions wpShopGermany IT-RECHT KANZLEI versions prior to 2.4 Description The plugin fails to generate API authentication tokens securely. The token is derived from data controlled by the requester and is created as a side effect of the validation chec...

CVE-2026-88795: Improper Control of Generation of Code

The wpShopGermany IT-RECHT KANZLEI WordPress plugin before 2.4 does not generate its API authentication token securely, deriving it from data the requester controls and creating it as a side effect of the check that is supposed to validate it, allowing unauthenticated attackers to predict the tok...

CVE-2026-90124: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: irqchip/renesas-rzg2l: Fix loss of interrupt rzg2lclearirqint and rzg2lcleartintint perform a read-modify-write on the ISCR/TSCR status registers to clear the bit for the interrupt just handled. Since these registers are...

CVE-2026-54583: Improper Limitation of a Pathname to a Restricted Directory

mport is the MidnightBSD Package Manager. Prior to 2.7.8, libmport/fetch.c did not consistently reject empty, dot, dot-dot, or slash-containing bundle filenames before composing package download and write paths. Malicious package index data could place an unsafe value in indexEntry-bundlefile, an...

PT-2026-94940

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the check ptr to btf access function allows btf struct access callbacks to validate write operations before the default...

PT-2026-94763

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/cxgb4 driver where the write tpt entry function fails to release a STAG index when write adapter mem returns an error. The function allocates a new STAG index...

PT-2026-94785

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ufs saved err write function where user input is copied into a zero-initialized stack buffer and then passed to kstrtoint. If a write operation fills the entire...

PT-2026-94747

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stride mismatch exists in the ath12k wmi mac phy caps parse function. The kzalloc function sizes the mac phy caps buffer using a clamped length, but the subsequent memcpy operation...

PT-2026-94848

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Multiple issues occur in the ipoctal component when a device is removed while a tty session remains active. These include a Use-After-Free UAF of struct ipoctal because the remove callba...

PT-2026-94851

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write occurs in the help init function when building the letter offsets array. The function uses the first byte of each function name as an index via the calculation sta...

PT-2026-94765

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/cxgb4 component where the write tpt entry function fails to properly manage the preallocated skb socket buffer during fatal error states or allocation failure...

PT-2026-94803

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the RDMA bnxt re component, the bnxt re mmap function rejects VM WRITE flags for DBR PAGE and TOGGLE PAGE memory mappings. However, a read-only mapping may still retain the VM MAYWRIT...

RockyLinux 8 : tesseract (RLSA-2026:67832)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67832 advisory. tesseract: Tesseract: Heap out-of-bounds write via crafted .traineddata CVE-2026-73066 Tenable has extracted the preceding description block directly from the...

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: ipvlan: Make the addrslock be per port CVE-2026-23103 kernel: xfrm: hold dev ref until after transportfinish NFHOOK CVE-2026-31663...

CVE-2026-54634: Out-of-bounds Write

Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticated rigctld sendraw command on TCP port 4532 reaches rigctlsendraw in tests/rigctlparse.c, which writes a NUL byte at bufbuflen + 1 outside its 200-byte stack buffer, and rigsendraw in...