PT-2026-90268

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the param set charp function where character pointer parameters are stored in allocated memory. When a parameter is updated, the previous value is released before the...

PT-2026-96556

In the Linux kernel, the following vulnerability has been resolved: ipip: fix skb leak in collect md mode when metadata dst allocation fails In collect md mode ipip tunnel rcv returns 0 without freeing the skb when ip tun rx dst fails to allocate the metadata dst. ipip rcv and mplsip rcv are...

[slackware-security] xz

New xz packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/xz-5.8.4-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: liblzma: lzmaalonedecoder, lzmalzipdecoder, lzmaautodecoder,...

CVE-2026-88050: Out-of-bounds Write

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length but accepts negative code values from a crafted .traineddata recoder component. UnicharCompress::ComputeCodeRange in src/ccutil/unicharcompress.cpp can...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053216)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053216 advisory. In the Linux kernel, the following vulnerability has been resolved: vfio/pci: fix potential memory leak in vfiointxenable If vfioirqctxalloc failed will lead to 'nam...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053238)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053238 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: mmctest: Fix NULL dereference on allocation failure If the test-highmem = allocpages...

CVE-2026-80882

This vulnerability affects the Linux kernel 's Tegra crypto driver , specifically the CCM (Counter with CBC-MAC) implementation in the function tegra_ccm_do_one_req. The root cause is that when the input buffer allocation fails, the ENOMEM error value is not properly set and returned, leading to ...

SUSE CVE-2026-74359

In the Linux kernel, the following vulnerability has been resolved: configfslookup: don't leave -sdentry dangling on failure Normally -sdentry is cleared when dentry it's pointing to becomes negative on eviction, realistically. However, that only happens if dentry gets to be positive in the first...

SUSE CVE-2026-72401

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix insnauxdata leak on verifier errfreeenv path When bpfcheck allocates env-insnauxdata successfully but later fails to allocate env-succ, it jumps directly to errfreeenv. The existing vfreeenv-insnauxdata sits before the...

CVE-2026-80705

A flaw was found in the Linux kernel's drm/amd/display component. This vulnerability arises from an insufficient check during the allocation of a 'phantom plane' within the display driver. If the allocation fails and this failure is not properly handled, it can lead to a system crash, resulting i...

SUSE CVE-2026-72171

In the Linux kernel, the following vulnerability has been resolved: mtd: slram: remove failed entries from the device list registerdevice links a new slrammtdlist entry before allocating all of the state needed by the entry. If a later allocation, memremap, or mtddeviceregister fails, the partial...

SUSE CVE-2026-72252

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: don't leak bad clone into future transaction On memory allocation failure the cloned nftpipapomatch can enter a bad state: - some fields can have their lookup tables resized while others did not - bits...

AZL-98186 CVE-2026-80616 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARNON on -ENOMEM in cfg802154switchnetns It's pointless to call WARNON in case of an allocation failure in devchangenetnamespace and devicerename, since it only leads to useless splats caused by...

CVE-2026-80616

CVE-2026-80616 affects the Linux kernel ieee802154 subsystem. The issue occurs in cfg802154_switch_netns() , where calling WARN_ON() on -ENOMEM returned by dev_change_net_namespace() and device_rename() produces spurious kernel splats when deliberate fault injections are active. This is a low-imp...

SUSE CVE-2026-72316

In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadataopen metadataopen returns NULL when kzallocobj fails, but the caller eractr only checks ISERRmd. Since ISERRNULL returns false, the NULL pointer is treated as a valid result and lat...

CVE-2026-80616: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARNON on -ENOMEM in cfg802154switchnetns It's pointless to call WARNON in case of an allocation failure in devchangenetnamespace and devicerename, since it only leads to useless splats caused by...

PT-2026-86733

In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARN ON on -ENOMEM in cfg802154 switch netns It's pointless to call WARN ON in case of an allocation failure in dev change net namespace and device rename, since it only leads to useless splats caused by...

SUSE CVE-2026-72039

In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix potential memory leak in bnx2xallocmembp If the allocation of fpi.tpainfo fails, the error path will not free the struct bnx2xfastpath allocated earlier, as it is not linked to the bp structure yet. Fix that by linking...

SUSE CVE-2026-72485

In the Linux kernel, the following vulnerability has been resolved: coresight: platform: defer connection counter increment until alloc succeeds coresightaddoutconn increments nroutconns before calling devmkreallocarray and again before devmkmalloc. If either allocation fails, the counter is...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104545)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104545 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: slram: remove failed entries from the device list registerdevice links a new slrammtdlist...