mm/damon/sysfs.c Memory Management Data Compromise

The vulnerability of the damonsysfscontextadddirs function in the mm/damon/sysfs.c module, a memory management subsystem of the Linux operating system, is related to improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

JFS File System Heap Buffer Overflow DoS

The vulnerability of the jfsiget function in the fs/jfs/inode.c file of the JFS file system in the Linux operating system is related to incorrect checking of the specified data type. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel sound subsystem Buffer Overflow

The vulnerability of the functions ac97adapterrelease, ac97addadapter, and sndac97controllerregister in the sound/ac97/bus.c module of the Linux kernel sound subsystem is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to...

Linux kernel uacce_put_queue uacce_fops_unl_ioctl Data Compromise

The vulnerabilities of the functions uacceputqueue and uaccefopsunlioctl in the drivers/misc/uacce/uacce.c module of the Linux kernel are related to state management errors. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the nrrouteframe function in the net/netrom/nrroute.c module, which is part of the networking functions in the Linux kernel, relates to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

Linux SPI Tegra210 Buffer Overflow

The vulnerability of the tegraqspicombinedseqxfer function in the drivers/spi/spi-tegra210-quad.c file of the Linux operating system’s SPI device driver relates to the pointer assignment. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260806-73-0032

The vulnerability of the tracepidwrite function in the kernel/trace/trace.c module, which supports Linux operating system tracing, is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux PCI Buffer Overflow

The vulnerability of the pcislottrylock function in the drivers/pci/pci.c file of the Linux system’s PCI device driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

OPENSUSE-SU-2026:11464-1 python313-Django-6.0.8-1.1 on GA media

These are all security issues fixed in the python313-Django-6.0.8-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11463-1 libXfont2-2-2.0.7-3.1 on GA media

These are all security issues fixed in the libXfont2-2-2.0.7-3.1 package on the GA media of openSUSE Tumbleweed...

azure-storage-azcopy-10.32.6-1.1 on GA media (moderate)

azure-storage-azcopy-10.32.6-1.1 on GA media Announcement ID: openSUSE-SU-2026:11444-1 Rating: moderate Cross-References: CVE-2026-56852 CVSS scores: CVE-2026-56852 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56852 SUSE : 6...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the /management/stop handler in the metrics management server on port 9091. An attacker can terminate the proxy, datanode, or querynode by sending a crafted HTTP GET request to...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the /management/stop handler in the metrics management server on port 9091. An attacker can terminate the proxy, datanode, or querynode by sending a crafted HTTP GET request to...

micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests

A flaw was found in Micrometer. A remote attacker can provide specially crafted gRPC gRPC Remote Procedure Call requests, which may lead to a denial-of-service DoS condition. This vulnerability allows an attacker to disrupt the availability of the affected system...

OPENSUSE-SU-2026:11454-1 libssh2-1-1.11.1-4.1 on GA media

These are all security issues fixed in the libssh2-1-1.11.1-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11457-1 perl-Date-Manip-6.990.0-2.1 on GA media

These are all security issues fixed in the perl-Date-Manip-6.990.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11458-1 jupyter-nbdime-7.0.4-24.1 on GA media

These are all security issues fixed in the jupyter-nbdime-7.0.4-24.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11455-1 libvirt-12.6.0-1.1 on GA media

These are all security issues fixed in the libvirt-12.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

OpenSSH SCP Data Compromise

The vulnerability of the SCP utility in the OpenSSH cryptographic security tool is related to improper storage of permissions. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20260805-73-0016

The vulnerability of the xskdiagfill function in the net/xdp/xskdiag.c module, which implements networking functions for the Linux operating system’s kernel, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...