kernel security, bug fix, and enhancement update

6.12.0-211.68.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Linux Distros Unpatched Vulnerability : CVE-2026-93519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server before 21.1.25 and XWayland before 24.1.14 could be used by...

openSUSE 16: cyrus-sasl / cyrus-sasl-bdb / cyrus-sasl-bdb-crammd5 / etc (openSUSE-SU-2026:22146-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22146-1 advisory. Security issue fixed: - CVE-2026-107161: Heap buffer overflow in cyrus-sasl addtochallenge allows malicious server to crash or compromise DIGEST-MD5...

Linux Distros Unpatched Vulnerability : CVE-2025-60475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow in the gfac4parserbs function /mediatools/avparsers.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via...

RockyLinux 8 : flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac (RLSA-2026:88164)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:88164 advisory. libreoffice: heap buffer overflow in PDF import stream handling CVE-2026-63274 libreoffice: stack buffer overflow in CFF to Type 1 font conversion...

SUSE SLED15: WebKitGTK-4.0-lang / WebKitGTK-4.1-lang / WebKitGTK-6.0-lang / etc (SUSE-SU-2026:4858-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4858-1 advisory. Security issues fixed: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 bsc1284619: - CVE-2024-1283:...

Linux Distros Unpatched Vulnerability : CVE-2026-97631

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - EDK2 contains a vulnerability in BIOS where a user may cause Out-of-bounds Write, Classic Buffer Overflow, and Incorrect Calculation of Buffer Size by remote...

Linux efifbprobe Heap Buffer Overflow DoS

The vulnerability of the efifbprobe function in the drivers/video/fbdev/efifb.c component of the Linux kernel is related to insufficient resource management during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Cisco Expressway Buffer Overflow DoS

The vulnerability of Cisco Expressway’s microprogramming software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Kaspersky Lab Buffer Overflow

The vulnerability of “Labyrinth Kasper” antivirus protection is related to the operation going beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of the product...

Cisco Expressway Micro-programming Buffer Overflow

The vulnerability of Cisco Expressway microprogramming software is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow attackers to compromise the integrity and accessibility of protected information...

Linux sof_ipc4_bytes_put Heap Buffer Overflow

The vulnerability of the sofipc4bytesput function in the sound/soc/sof/ipc4-control.c component of the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the hecubafbprobe function within the drivers/video/fbdev/hecubafb.c component of the Linux kernel operating system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

SUSE SLED15 / SLES15 Security Update : xwayland (SUSE-SU-2026:4835-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4835-1 advisory. - CVE-2026-88812: XKB SetGeometry TextDoodad Double Free bsc1281213. - CVE-2026-93515: X.Org Server Present...

Linux Distros Unpatched Vulnerability : CVE-2026-111183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

GStreamer 1.28.4 GstVideoMeta Heap Buffer Overflow

GStreamer version 1.28.4 contains a heap buffer overflow in libgstvideo when untrusted GstVideoMeta data is deserialized through unixfd. The included proof of concept causes a stock receiver pipeline to read outside the backing frame buffer. https://packetstorm.news/download/237272...

PT-2026-135120

Security vulnerability affects the graphviz package. Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash by loading a crafted file into the "lib/common/shapes...

Zephyr buffer error vulnerability

Versions Zephyr 3.3.0 through 4.4.2 contain a buffer error vulnerability. This vulnerability arises because the bthcitxsyncin function fails to perform length checks when copying HCI packets from the controller to the host’s USB transfer buffer; as a result, a buffer overflow occurs, potentially...

Kakao buffer overflow vulnerability

Versions 0.1, 0.2, 0.3, and 0.4 of KAKAO contain a buffer error vulnerability. This vulnerability stems from improper handling of the hiddendim and classnum parameters in the khaiii::nn::Linear::open function within the JSON Config File Handler component, potentially leading to out-of-bounds read...

AlmaLinux 9.2 [TuxCare] Security Update: brotli / brotli-devel / libbrotli / python3-brotli (ALMALINUX9.2:CLSA-2026:1792754583)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792754583 advisory. - A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows ...