Azure Linux 3.0 Security Update: kernel (CVE-2025-23145)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-23145 advisory. - In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38185)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38185 advisory. - In the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Free invalid length skb in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-39496)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39496 advisory. - In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix use-after-free due to...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21790)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21790 advisory. - In the Linux kernel, the following vulnerability has been resolved: vxlan: check vxlanvnigroupinit return...

Azure Linux 3.0 Security Update: kernel (CVE-2024-58005)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-58005 advisory. - In the Linux kernel, the following vulnerability has been resolved: tpm: Change to kvalloc in eventlog/acpi....

PT-2026-3887

SumatraPDF is a multi-format reader for Windows. All versions contain an off-by-one error in the validation code that only triggers with exactly 2 records, causing an integer underflow in the size calculation. This bug exists in PalmDbReader::GetRecord when opening a crafted Mobi file, resulting ...

Azure Linux 3.0 Security Update: CBL-Mariner Releases (CVE-2025-58063)

The version of CBL-Mariner Releases installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-58063 advisory. - CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version...

Azure Linux 3.0 Security Update: valkey (CVE-2025-49112)

The version of valkey installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-49112 advisory. - setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev-size - prev-used...

Azure Linux 3.0 Security Update: kernel (CVE-2024-49989)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49989 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix double free issue...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22004)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22004 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lecsend...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35849)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35849 advisory. - In the Linux kernel, the following vulnerability has been resolved: btrfs: fix information leak in...

Azure Linux 3.0 Security Update: kernel (CVE-2024-26596)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-26596 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix netdevpriv dereference...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38194)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38194 advisory. - In the Linux kernel, the following vulnerability has been resolved: jffs2: check that raw node were...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38263)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38263 advisory. - In the Linux kernel, the following vulnerability has been resolved: bcache: fix NULL pointer in cachesetflu...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38415)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38415 advisory. - In the Linux kernel, the following vulnerability has been resolved: Squashfs: check return result of...

CVE-2025-69209

ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in versions prior to 1.8.7 allows an attacker to trigger a stack-based buffer overflow when converting floating-point values to strings with high precision. By passing very large...

EUVD-2025-206315

EVerest is an EV charging software stack. Prior to version 2025.10.0, during the deserialization of a DCChargeLoopRes message that includes Receipt as well as TaxCosts, the vector taxcosts in the target Receipt structure is accessed out of bounds. This occurs in the method template void...

CVE-2025-13878

Malformed BRID/HHIT records can cause named to terminate unexpectedly. This issue affects BIND 9 versions 9.18.40 through 9.18.43, 9.20.13 through 9.20.17, 9.21.12 through 9.21.16, 9.18.40-S1 through 9.18.43-S1, and 9.20.13-S1 through 9.20.17-S1...

libpng: LIBPNG buffer overflow

A buffer overflow flaw has been discovered in libpng. An out-of-bounds read vulnerability exists in pngimagereadcomposite when processing palette images with PNGFLAGOPTIMIZEALPHA enabled. The palette compositing code in pnginitreadtransformations incorrectly applies background compositing during...

SUSE-SU-2026:0200-1 Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise kernel 4.12.14-122.275 fixes various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1254451. - CVE-2022-50367: fs: fix UAF/GPF bug in nilfsmdtdestroy bsc1250280. -...