SUSE CVE-2026-72311

In the Linux kernel, the following vulnerability has been resolved: drm/xe: free madvise VMA array on L2 flush failure xevmmadviseioctl allocates madviserange.vmas in getvmas. After getvmas succeeds with at least one VMA, error paths must go through freevmas so the array is released before the...

Important: Red Hat Security Advisory: libXfont2 security update

An update for libXfont2 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

CVE-2026-82740 Ash.Type ignores outer array constraints on nested {:array, {:array, type}} inputs

Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested :array, :array, type attribute, letting invalid input pass validation. Ash.Type.applyconstraints/3 lib/ash/type/type.ex handled the :array, :array, type case by mapping only...

CVE-2026-82740 Ash.Type ignores outer array constraints on nested {:array, {:array, type}} inputs

Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested :array, :array, type attribute, letting invalid input pass validation. Ash.Type.applyconstraints/3 lib/ash/type/type.ex handled the :array, :array, type case by mapping only...

CVE-2026-82740

ash-project ash (versions 2.16.1 through before 3.32.2 ) contains an improper input validation flaw in Ash.Type.apply_constraints/3 (lib/ash/type/type.ex). When handling a doubly-nested {:array, {:array, type}} attribute, only the inner array constraints were mapped over each element, so outer ar...

CVE-2026-82740 Ash.Type ignores outer array constraints on nested {:array, {:array, type}} inputs

Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested :array, :array, type attribute, letting invalid input pass validation. Ash.Type.applyconstraints/3 lib/ash/type/type.ex handled the :array, :array, type case by mapping only...

EEF-CVE-2026-82740 Ash.Type ignores outer array constraints on nested {:array, {:array, type}} inputs

Summary Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested :array, :array, type attribute, letting invalid input pass validation. Ash.Type.applyconstraints/3 lib/ash/type/type.ex handled the :array, :array, type case by mappi...

CVE-2026-82740: Improper Input Validation

Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested :array, :array, type attribute, letting invalid input pass validation. Ash.Type.applyconstraints/3 lib/ash/type/type.ex handled the :array, :array, type case by mapping only...

PT-2026-84089

Improper Input Validation vulnerability in ash-project ash fails to enforce the outer array constraints on a doubly-nested :array, :array, type attribute, letting invalid input pass validation. Ash.Type.apply constraints/3 lib/ash/type/type.ex handled the :array, :array, type case by mapping only...

CVE-2026-83596

CVE-2026-83596 is a memory corruption vulnerability in WebKitGTK caused by improper handling of the featurelist array in the OpenTypeVerticalData::findFeature function. Processing malicious web content can trigger the flaw, leading to memory corruption with high impact on confidentiality, integri...

CVE-2026-83596 Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...

CVE-2026-80640

A flaw was found in the Linux kernel's CXL subsystem firmware control cxl/fwctl. A buffer overflow vulnerability exists in the cxlctlgetsupportedfeatures function due to improper initialization of an array size. This could lead to a system crash, resulting in a denial of service DoS...

hdf5: HDF5: Out-of-bounds read due to corrupted file can lead to denial of service

A flaw was found in HDF5, a high-performance library and file format specification. A remote attacker can exploit this vulnerability by providing a maliciously altered HDF5 file. If the file's array datatype has inconsistent size, element count, or element size, it can trigger an out-of-bounds...

SUSE CVE-2026-72162

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2sumrightmostrec BUG On-disk corruption setting lnextfreerec to 0 in an inode's embedded extent list triggers a UBSAN panic on the next write to that file. CAUSE...

CVE-2026-80598

A flaw was found in the ntfs3 component of the Linux kernel. This vulnerability occurs because the decompresslznt function, responsible for decompressing data, does not correctly check the boundaries of an array index. An attacker could exploit this by providing a corrupted NTFS3 image containing...

CVE-2026-80689

A flaw was found in the Linux kernel's mmiotrace component. When the mmiotracearray is not initialized or is disabled, invoking mmiotracerw or mmiotracemapping can lead to a NULL pointer dereference. This can cause a system crash, resulting in a Denial of Service DoS...

CVE-2026-82618

A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the function setrangematrixonstringarray of the file src/Common/opcuatypes/sopcbuiltintypes.c of the component String Array Range Writing. This manipulation causes out-of-bounds read. The attack is possible to b...

CVE-2026-82618 Systerel S2OPC String Array Range Writing sopc_builtintypes.c set_range_matrix_on_string_array out-of-bounds

A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the function setrangematrixonstringarray of the file src/Common/opcuatypes/sopcbuiltintypes.c of the component String Array Range Writing. This manipulation causes out-of-bounds read. The attack is possible to b...

CVE-2026-82618 Systerel S2OPC String Array Range Writing sopc_builtintypes.c set_range_matrix_on_string_array out-of-bounds

A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the function setrangematrixonstringarray of the file src/Common/opcuatypes/sopcbuiltintypes.c of the component String Array Range Writing. This manipulation causes out-of-bounds read. The attack is possible to b...

EUVD-2026-68354

A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the function setrangematrixonstringarray of the file src/Common/opcuatypes/sopcbuiltintypes.c of the component String Array Range Writing. This manipulation causes out-of-bounds read. The attack is possible to b...