PT-2026-29712

An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special elements in a SQL UPDATE command. This can result in a total loss of integrity and availability...

python311-Pygments-2.20.0-2.1 on GA media (moderate)

python311-Pygments-2.20.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:10476-1 Rating: moderate Cross-References: CVE-2026-4539 CVSS scores: CVE-2026-4539 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability ca...

conftest-0.67.1-2.1 on GA media (moderate)

conftest-0.67.1-2.1 on GA media Announcement ID: openSUSE-SU-2026:10472-1 Rating: moderate Cross-References: CVE-2026-33747 CVSS scores: CVE-2026-33747 SUSE : 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-33747 SUSE : 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2026:10478-1 python311-3.11.15-4.1 on GA media

These are all security issues fixed in the python311-3.11.15-4.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10480-1 python313-3.13.12-3.1 on GA media

These are all security issues fixed in the python313-3.13.12-3.1 package on the GA media of openSUSE Tumbleweed...

Linux kernel bonding function buffer overflow DoS

The vulnerability of the bondxmithash function in the drivers/net/bonding/bondmain.c file of the Linux kernel’s network device driver is related to a data processing error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux amdgpu SMU Internal Buffer Overflow

The vulnerability in the drivers/gpu/drm/amd/pm/swsmu/smuinternal.h file of the amdgpu driver in the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

graph_util_parse_dai() function in the Data Compromise

The vulnerability of the graphutilparsedai function in the sound/soc/generic/simple-card-utils.c module of the Linux operating system’s sound support module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel SPI Function Heap Buffer Overflow DoS

The vulnerability of the amdsetspifreq function in the drivers/spi/spi-amd.c module of the Linux device support driver for SPI devices is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Intel Ethernet Network Adapter Driver Heap Buffer Overflow

The vulnerability of the iavfallocqvectors function in the drivers/net/ethernet/intel/iavf/iavfmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...

Linux SoC audio Setting_Loaded buffer overflow DoS

The vulnerability of the sma1307settingloaded function in the sound/soc/codecs/sma1307.c module, which is part of the Linux operating system’s audio support for SoC cores, relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious...

Linux SMB Direct Buffer Overflow DoS

The vulnerability of the smbddestroy function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux kernel, stems from the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability allows a...

Linux IOMMU Heap Buffer Overflow DoS

The vulnerability of the zpcigetiommuctrs function in the drivers/iommu/s390-iommu.c module of the Linux operating system’s IOMMU driver is related to the execution of operations outside of memory buffers. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

Intel wireless network adapter driver Heap Buffer Overflow

The vulnerability of the iwlmvmmldsendkey function in the drivers/net/wireless/intel/iwlwifi/mvm/mld-key.c file of the Intel wireless driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an...

Mediatek wireless driver Heap Buffer Overflow

The vulnerability of the mt7921checkoffloadcapability function in the drivers/net/wireless/mediatek/mt76/mt7921/init.c file of the Mediatek wireless adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

Linux kernel Cryptographic Accelerator Heap Buffer Overflow DoS

The vulnerability of the sevfirmwareshutdown function in the drivers/crypto/ccp/sev-dev.c file of the Linux kernel cryptographic accelerator driver involves the assignment of a null pointer. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the...

Linux kernel Bluetooth hci_cs_disconnect() Buffer Overflow

The vulnerability of the hcicsdisconnect function in the net/bluetooth/hcievent.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

AMD GPU DRI Driver Heap Buffer Overflow DoS

The vulnerability of the sdmav40swfini function in the driver/gpu/drm/amd/amdgpu/sdmav40.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to reading memory beyond the allocated buffer. Exploiting this vulnerability could...

Linux kernel memory management Heap Buffer Overflow

The vulnerability of the damosnewfilter function in the mm/damon/core.c module of the Linux kernel’s memory management subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

Linux kernel trace Events Hist Buffer Overflow DoS

The vulnerability of the eventHistTriggerParse function in the kernel/trace/traceEventsHist.c module, which supports kernel tracing in Linux operating systems, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...