Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: nfconntrackh323: fix OOB read in decodechoice CVE-2026-43233 kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset CVE-2026-43206 kernel: drm/amdgpu: Refactor...

CVE-2026-17168: Out-of-bounds Write

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-17425: Out-of-bounds Write

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack buffer overflow...

PT-2026-79109

hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int arithmetic. In src-lib/convolutional layer.cpp, l.nweights is computed as c / groups n size size and l.outputs as l.out h l.out w l.out c...

CVE-2026-72852: Integer Overflow or Wraparound

hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int arithmetic. In src-lib/convolutionallayer.cpp, l.nweights is computed as c / groups n size size and l.outputs as l.outh l.outw l.outc, an...

PT-2026-79193

Name of the Vulnerable Software and Affected Versions Capstone versions prior to 6.0.0-Alpha10 Description SH floating-point decoders, including opFADD, opFMUL, and opFSUB, call set reg and set reg n using sh info.op.op count without verifying the fixed-size operands array. When processing repeat...

CVE-2026-17141: Out-of-bounds Write

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow...

UBUNTU-CVE-2026-69159

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior...

CVE-2026-16946: Out-of-bounds Write

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap buffer overflow...

CVE-2026-16944: Out-of-bounds Write

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-69242: Heap-based Buffer Overflow

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, a crafted many-band TIFF processed through VipsForeignLoadTiff can evade scanline validation in libvips/iofuncs/image.c and cause an integer overflow in vipsimagesanity. The resulting buffer-region...

PT-2026-78914

Name of the Vulnerable Software and Affected Versions libvirt affected versions not specified Description An unprivileged local user can exploit an integer overflow in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, resulting in an undersized memory buffe...

PT-2026-79234

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack-based buffer overflow allows a remote authenticated attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a...

PT-2026-79181

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A buffer overflow allows a remote attacker to cause a denial of service. A buffer overflow occurs when a program writes more data to a block of memory, or buffer,...

PT-2026-79224

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack-based buffer overflow allows a remote attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a buffer located on...

PT-2026-79153

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A heap-based buffer overflow allows a local attacker to gain elevated privileges. A heap-based buffer overflow occurs when a program writes more data to a heap...

PT-2026-79160

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A heap buffer overflow allows a local attacker to gain elevated privileges. A heap buffer overflow occurs when a program writes more data to a heap-allocated memo...

PT-2026-79238

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A buffer overflow allows a local attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is...

CVE-2026-18917: Integer Overflow or Wraparound

A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer...

CVE-2026-18832: Out-of-bounds Write

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap-based buffer overflow...