claude_opus_cve_2023_0266

Demostración de que Claude 3 Opus no entiende CVE-2023-0266 y no lo encuentra Demo 1. Incluso si se le dice dónde está el error, Opus no lo encuentra y alucina la presencia de adquisiciones de bloqueo Demo 2. La "ingeniería de prompts" también conocido como decirle al LLM exactamente cómo encontr...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

Linux Distros Unpatched Vulnerability : CVE-2026-90220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: Don't leak the extension cell pointer in the bounce payload The bounceerrorevent embeds the failed event in the bounce payload by pointing data.ext.p...

Linux Distros Unpatched Vulnerability : CVE-2026-90198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: core: Fix use-after-free in sndcarddofree A use-after-free was detected in sndcarddofree when a sound card managed by devres is unbound while a user-space...

Linux Distros Unpatched Vulnerability : CVE-2026-90207

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: seq: midi: Serialize input teardown with eventinput sndmidiinputevent must not be running while a rawmidi substream is closing, since this can lead to the...

Linux Distros Unpatched Vulnerability : CVE-2026-90116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: mtpav: shut down output timer before card teardown sndmtpavoutputtimer rearms chip-timer while holding chip-spinlock and accesses the card-private mtpav...

Linux Distros Unpatched Vulnerability : CVE-2026-90060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: control: Don't add invalid kcontrols to LED layer The kcontrol LED state layer tries to track the all associated kcontrol elements with naive assumptions...

Linux Distros Unpatched Vulnerability : CVE-2026-90119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup sndice1712probe performs multiple initialization steps after sndcardnew, but directly...

DEBIAN-CVE-2026-90207

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: midi: Serialize input teardown with eventinput sndmidiinputevent must not be running while a rawmidi substream is closing, since this can lead to the trigger state becoming out-of-step through this sequence in...

AZL-102738 CVE-2026-90198 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix use-after-free in sndcarddofree A use-after-free was detected in sndcarddofree when a sound card managed by devres is unbound while a user-space application still holds an open file descriptor. For managed cards,...

AZL-102000 CVE-2026-90119 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup sndice1712probe performs multiple initialization steps after sndcardnew, but directly returns on failures from later steps without releasing the ALSA card,...

AZL-102968 CVE-2026-90116 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: mtpav: shut down output timer before card teardown sndmtpavoutputtimer rearms chip-timer while holding chip-spinlock and accesses the card-private mtpav state. sndmtpavfree currently takes the same lock and calls timerdelet...

AZL-102021 CVE-2026-90060 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Don't add invalid kcontrols to LED layer The kcontrol LED state layer tries to track the all associated kcontrol elements with naive assumptions that they are readable. But one can create a write-only element that...

CVE-2026-90220 ALSA: seq: Don't leak the extension cell pointer in the bounce payload

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Don't leak the extension cell pointer in the bounce payload The bounceerrorevent embeds the failed event in the bounce payload by pointing data.ext.ptr at it. When that event is a queued variable-length event, its own...

EUVD-2026-81813

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Don't leak the extension cell pointer in the bounce payload The bounceerrorevent embeds the failed event in the bounce payload by pointing data.ext.ptr at it. When that event is a queued variable-length event, its own...

CVE-2026-90220

CVE-2026-90220 is a kernel pointer leak in the Linux kernel's ALSA: seq subsystem. The function bounce_error_event() embeds a failed event into the bounce payload by pointing data.ext.ptr at it. For queued variable-length events, this pointer holds the kernel address of the first extension cell (...

CVE-2026-90198 ALSA: core: Fix use-after-free in snd_card_do_free()

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix use-after-free in sndcarddofree A use-after-free was detected in sndcarddofree when a sound card managed by devres is unbound while a user-space application still holds an open file descriptor. For managed cards,...

CVE-2026-90198

CVE-2026-90198 is a use-after-free in the Linux kernel's ALSA core subsystem, specifically in snd_card_do_free(). It occurs when a devres-managed sound card is unbound while a user-space application still holds an open file descriptor. Upon closing the descriptor, the user thread continues in snd...

EUVD-2026-81791

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix use-after-free in sndcarddofree A use-after-free was detected in sndcarddofree when a sound card managed by devres is unbound while a user-space application still holds an open file descriptor. For managed cards,...

CVE-2026-90119

CVE-2026-90119 affects the Linux kernel 's ALSA ice1712 driver. In snd_ice1712_probe(), multiple initialization steps run after snd_card_new(); if any later step fails, the function returns without releasing the ALSA card, causing a resource leak . The fix replaces snd_card_new() with snd_devm_ca...