DEBIAN-CVE-2026-43108

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pd-mapper: Fix element length in servreglocpfrreqei It looks element length declared in servreglocpfrreqei for reason not matching servreglocpfrreq's reason field due which we could observe decoding error on PD crash...

DEBIAN-CVE-2026-43102

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix memory leak in airohaqdmarxprocess If an error occurs on the subsequents buffers belonging to the non-linear part of the skb e.g. due to an error in the payload length reported by the NIC or if we consumed all th...

DEBIAN-CVE-2026-43092

In the Linux kernel, the following vulnerability has been resolved: xsk: validate MTU against usable frame size on bind AFXDP bind currently accepts zero-copy pool configurations without verifying that the device MTU fits into the usable frame space provided by the UMEM chunk. This becomes a...

DEBIAN-CVE-2026-43080

In the Linux kernel, the following vulnerability has been resolved: l2tp: Drop large packets with UDP encap syzbot reported a WARN on my patch series 1. The actual issue is an overflow of 16-bit UDP length field, and it exists in the upstream code. My series added a debug WARN with an overflow...

RHSA-2026:13916 Red Hat Security Advisory: fence-agents security update

Bulletin has no description...

RHSA-2026:13896 Red Hat Security Advisory: sudo security update

Bulletin has no description...

RHSA-2026:13891 Red Hat Security Advisory: sudo security update

Bulletin has no description...

RHSA-2026:13680 Red Hat Security Advisory: nginx security update

Bulletin has no description...

RHSA-2026:13677 Red Hat Security Advisory: systemd security update

Bulletin has no description...

RHSA-2026:13671 Red Hat Security Advisory: image-builder security update

Bulletin has no description...

RHSA-2026:11704 Red Hat Security Advisory: grafana-pcp security update

Bulletin has no description...

BELL-CVE-2026-42798

Bulletin has no description...

BELL-CVE-2026-31763

Bulletin has no description...

BELL-CVE-2026-31721

Bulletin has no description...

BELL-CVE-2026-31718

Bulletin has no description...

BELL-CVE-2026-31723

Bulletin has no description...

BELL-CVE-2026-31702

Bulletin has no description...

DEBIAN-CVE-2026-39402

lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete path contains a logic flaw in the findline function that allows an unprivileged user to delete OVS-attached network interfaces belonging to other users. When lxc-user-nic delete scans its NIC database to authorize a...

DEBIAN-CVE-2026-43063

In the Linux kernel, the following vulnerability has been resolved: xfs: don't irele after failing to iget in xfsattrirecoverwork xlogrecoveryiget never set @ip to a valid pointer if they return an error, so this irele will walk off a dangling pointer. Fix that...

DEBIAN-CVE-2026-43065

In the Linux kernel, the following vulnerability has been resolved: ext4: always drain queued discard work in ext4mbrelease While reviewing recent ext4 patch1, Sashiko raised the following concern2: If the filesystem is initially mounted with the discard option, deleting files will populate...