CentOS Linux 8.5 [TuxCare] Security Update: platform-python / platform-python-debug / platform-python-devel / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1782139078)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1782139078 advisory. - When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch...

AlmaLinux 9.2 [TuxCare] Security Update: protobuf-c / protobuf-c-compiler / protobuf-c-devel (ALMALINUX9.2:CLSA-2025:1760548275)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1760548275 advisory. - protobuf-c before 1.4.1 has an unsigned integer overflow in parserequiredmember. CVE-2022-48468 Note that Nessus has not tested for this...

CVE-2026-103222: Integer Overflow or Wraparound

A vulnerability was determined in Blosc C-Blosc2 up to 3.3.2. This impacts the function blosclzdecompress of the file blosc/blosclz.c of the component blosclz Decompression. Executing a manipulation can lead to integer overflow. The attack may be launched remotely. A high complexity level is...

AlmaLinux 9.6 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779886202)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779886202 advisory. - When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch...

mcp23s08_probe_one Heap Buffer Overflow DoS

The vulnerability of the mcp23s08probeone function in the drivers/pinctrl/pinctrl-mcp23s08.c driver for Linux kernel’s PINCTRL output ports is related to improper disabling or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the mdc800deviceread function in the drivers/usb/image/mdc800.c file of the Linux device driver module is related to the race condition that occurs when a shared resource is used. Exploiting this vulnerability could allow an attacker to cause a service failure...

edt-ft5x06 driver Heap Buffer Overflow DoS

The vulnerability of the edtft5x06tspreparedebugfs function in the drivers/input/touchscreen/edt-ft5x06.c driver for the touchscreen sensor in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise...

Linux hardware monitoring driver Heap Buffer Overflow DoS

The vulnerability of the nct7363presentpwmfanin function in the drivers/hwmon/nct7363.c module of the Linux device monitoring driver causes a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

AMD GPU VCN V2 5 DoS

The vulnerability of the vcnv25hwfini function in the drivers/gpu/drm/amd/amdgpu/vcnv25.c driver for AMD GPU cores in Linux operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Linux kernel multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the vpum2mdevicerun function in the drivers/media/platform/amphion/vpuv4l2.c file of the Linux multimedia device driver module is related to the state of the race condition involving the signal handler. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20260930-73-0022

The vulnerability in the arch/x86/kvm/x86.c module and arch/x86/kernel/fpu/core.c modules of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CentOS Linux 7 [TuxCare] Security Update: squashfs-tools (CENTOS7:CLSA-2026:1777544697)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1777544697 advisory. - squashfsopendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the...

SUSE CVE-2026-97399

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...

EUVD-2026-89109

PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...

USN-8844-1: c-ares vulnerability

It was discovered that c-ares incorrectly handled certain query completion callbacks. An attacker could possibly use this issue to trigger a use- after-free or double-free, resulting in a denial of service or arbitrary code execution...

USN-8844-1 c-ares vulnerability

It was discovered that c-ares incorrectly handled certain query completion callbacks. An attacker could possibly use this issue to trigger a use- after-free or double-free, resulting in a denial of service or arbitrary code execution...

Security Bulletin: IBM Documentation Offline may be vulnerable to TLS authentication bypass and authority rebinding due to Node.js (CVE-2026-48618, CVE-2026-48930)

Summary IBM Documentation Offline uses Node.js as its runtime environment. Node.js is affected by two vulnerabilities related to TLS hostname handling. CVE-2026-48618 involves improper handling of Unicode dot separators during TLS certificate verification, which could allow an attacker performing...

CVE-2026-19547

Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...

CVE-2026-19547

Ghostscript for Windows is vulnerable to local privilege escalation via PostScript resource file hijacking. The application searches for files in predictable paths under **C:\gs*, which do not exist by default. Because Windows default ACLs allow authenticated users to create directories at the ro...

CVE-2026-19547 Local Privilege Escalation in Ghostscript for Windows

Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...