CVE-2026-3608 Stack overflow in Kea daemons

Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2...

CVE-2026-3608

CVE-2026-3608 affects Kea daemons (kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, kea-dhcp6). A maliciously crafted message over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow. Affected versions: 2.6.0–2.6.4 and 3.0.0–3.0.2. Exploitation details a...

OPENSUSE-SU-2026:10431-1 python311-oci-sdk-2.168.3-1.1 on GA media

These are all security issues fixed in the python311-oci-sdk-2.168.3-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-40510

Уязвимость функции hci cmd sync queue once ядра операционных систем Linux связана с неосвобождением ресурса после истечения действительного срока его эксплуатирования. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность и доступность защищаемой информации...

perl-Crypt-URandom-0.550.0-1.1 on GA media (moderate)

perl-Crypt-URandom-0.550.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10414-1 Rating: moderate Cross-References: CVE-2026-2474 CVSS scores: CVE-2026-2474 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-2474 SUSE : 8.2...

azure-storage-azcopy-10.32.2-1.1 on GA media (moderate)

azure-storage-azcopy-10.32.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10407-1 Rating: moderate Cross-References: CVE-2026-33186 CVSS scores: CVE-2026-33186 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-33186 SUSE : 8.6...

Linux Atheros Wireless Driver Heap Buffer Overflow DoS

The vulnerability of the ath9kwmicmd function in the drivers/net/wireless/ath/ath9k/wmi.c driver for the Atheros/Qualcomm wireless adapter in the Linux operating system is related to buffer overflow exploits. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

OPENSUSE-SU-2026:10426-1 python311-intake-2.0.9-1.1 on GA media

These are all security issues fixed in the python311-intake-2.0.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10421-1 kea-3.0.3-1.1 on GA media

These are all security issues fixed in the kea-3.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-3608

Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0 through 2.6.4 and 3.0.0 through 3.0.2...

OPENSUSE-SU-2026:10428-1 python311-jupyter-ydoc-3.4.0-2.1 on GA media

These are all security issues fixed in the python311-jupyter-ydoc-3.4.0-2.1 package on the GA media of openSUSE Tumbleweed...

Ext4 Heap Buffer Overflow DoS

The vulnerability of the ext4clumapped function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux net/ipv6/addrconf.c Heap Buffer Overflow DoS

The vulnerability of the addrconfinitnet function in the net/ipv6/addrconf.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux kernel User Interface Driver Heap Buffer Overflow DoS

The vulnerability of the floattoint function in the drivers/hid/amd-sfh-hid/sfh11/amdsfhdesc.c file of the Linux kernel subsystem for user interface devices’ driver lies in the handling of buffer overflows. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ftrace Heap Buffer Overflow DoS

The vulnerability of the lookuprec function in the kernel/trace/ftrace.c module, which supports kernel tracing in Linux operating systems, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux kernel Ethernet adapter buffer overflow DoS

The vulnerability of the becmdreadporttransceiverdata function in the drivers/net/ethernet/emulex/benet/becmds.c file, a driver for supporting Ethernet network adapters in the Linux operating system, stems from the copying of buffers without checking the size of the input data a classic buffer...

Linux kernel kprobes Heap Buffer Overflow DoS

The vulnerability of the unregisterkprobetop function in the kernel/kprobes.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Linux kernel dm-Data Compromise Buffer Overflow

The vulnerability of the dmintegrityctr function in the drivers/md/dm-integrity.c file of the support for multiple devices RAID and LVM in the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromis...

Linux kernel USB adapter Heap Buffer Overflow

The vulnerability of the aqc111rxfixup function in the drivers/net/usb/aqc111.c module of the Linux USB network adapter driver module is related to buffer out-of-bound reading. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Linux kernel block devices driver Loop Queue RCE

The vulnerability of the loopqueuerq function in the drivers/block/loop.c module of the Linux kernel’s block devices driver is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...