1038172 matches found
PT-2026-66614
Name of the Vulnerable Software and Affected Versions ansible-collection-redhat-leapp affected versions not specified Description A flaw exists when a remediation task is executed with elevated privileges and the leapp old postgresql data option is selected. This results in the creation of a...
The vulnerability of the i915_vma_pin_ww() function in the driver/gpu/drm/i915/i915_vma.c file of the Direct Rendering Infrastructure (DRI) kernel driver of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the i915vmapinww function in the drivers/gpu/drm/i915/i915vma.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-66605
Name of the Vulnerable Software and Affected Versions re2 versions prior to 1.25.2 Description The String.prototype.match implementation fails to advance its native matching cursor in lib/match.cc when using a global RE2 pattern that can match an empty string. This behavior results in an infinite...
kernel security, bug fix, and enhancement update
5.14.0-687.31.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
ALSA-2026:48650 Important: vim security update
Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Denial of Service via stack out-of-bounds write in spellsoundfoldsofo CVE-2026-57455 vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion CVE-2026-57456 vim: Vim:...
kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()
A flaw was found in the Linux kernel's Direct Rendering Manager DRM Graphics Execution Manager GEM component. This vulnerability arises from an inconsistent calculation of plane dimensions, which can lead to incorrect memory allocation checks. A local attacker could exploit this by creating a...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs22: nodejs22-22.23.2-2.3.hum1 aarch64, x8664 nodejs22-bin-22.23.2-2.3.hum1 noarch nodejs22-devel-22.23.2-2.3.hum1 aarch64, x8664 nodejs22-docs-22.23.2-2.3.hum1 noarch...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs26: nodejs26-26.5.1-1.5.hum1 aarch64, x8664 nodejs26-bin-26.5.1-1.5.hum1 noarch nodejs26-devel-26.5.1-1.5.hum1 aarch64, x8664 nodejs26-docs-26.5.1-1.5.hum1 noarch...
CVE-2026-65975 Pydantic AI AG-UI Adapter: A dangling client-submitted tool call can execute when a trailing message is dropped during `sanitize_messages`
Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but not including 1.107.1 and 2.0.0b1 up to but not including 2.5.0, the UI adapters AG-UI via Agent.toagui/AGUIAdapter, and Vercel AI via VercelAIAdapter use...
CVE-2025-14562 Incorrect Authorization in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to commit changes to a project after being removed as a...
CVE-2026-64497
A flaw was found in the Linux kernel's iio: chemical: scd30 driver, which manages a specific type of sensor. This vulnerability involves an error in how the driver processes numerical data, specifically a 'sign-extension bug' that can corrupt a part of a floating-point number called the exponent...
kernel security, bug fix, and enhancement update
An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...
RLSA-2026:47017 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: bridge: use a stable FDB dst snapshot in RCU readers CVE-2026-46086 kernel: ipv6: fix possible UAF in icmpv6rcv CVE-2026-53006 kernel: tipc: fix double-free in tipcbufappend...
Important: Red Hat Security Advisory: RHCS 10.8 bug fix and enhancement update
Updated RHCS 10.8 packages that fix several bugs are available. Red Hat Certificate System RHCS is a complete implementation of an enterprise software system designed to manage enterprise Public Key Infrastructure PKI deployments. Many of the subcomponents that comprise RHCS, such as the Tomcat...
Important: Red Hat Security Advisory: Red Hat Quay 3.18.0
Red Hat Quay 3.18.0 is now available with bug fixes and feature enhancements. Quay 3.18.0...
CVE-2026-52791
fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...
EUVD-2026-50403
fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...
CVE-2026-67191
Xlight FTP Server prior to 3.9.5 is affected by a pre-authentication heap buffer overflow in the SSH parser. A logic error in the recv loop termination (OR instead of AND) enables exploitation on any SSH or SFTP connection before authentication, allowing remote unauthenticated access with high im...