Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Use of Cache Containing Sensitive Information in Flask [CVE-2026-27205]

Summary IBM Watson Speech Services Cartridge is vulnerable to a Use of Cache Containing Sensitive Information in Flask, due to an issue which causes a failure in the logic that usually instructs caches not to cache the response CVE-2026-27205. Flask is used in our speech runtimes. This...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50630: mm: hugetlb: fix UAF in hugetlbhandleuserfault bsc1254785. CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit bsc1255594...

CVE-1999-0790

A remote attacker can read information from a Netscape user's cache via JavaScript...

RHEL 7 : firefox (RHSA-2025:17453)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:17453 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

CVE-2024-36357

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

CVE-2025-2632

Out of bounds write vulnerability due to improper bounds checking in NI LabVIEW reading CPU info from cache that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects ...

kernel: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array

In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions...

CVE-2025-21785 arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array

In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions...

kernel: arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level

An integer overflow exists in the linux kernel such that the value returned from acpifindlastcachelevel is then assigned to unsigned fwlevel, which will result in the number of cache leaves calculated incorrectly, resulting in damage to the confidentiality, integrity, and availability of the syst...

kernel: arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level

An integer overflow exists in the linux kernel such that the value returned from acpifindlastcachelevel is then assigned to unsigned fwlevel, which will result in the number of cache leaves calculated incorrectly, resulting in damage to the confidentiality, integrity, and availability of the syst...

SuSE 11.3 Security Update : glibc (SAT Patch Number 10259)

glibc has been updated to fix security issues and bugs : - Fix crashes on invalid input in IBM gconv modules. CVE-2014-6040 / CVE-2012-6656, bsc894553, bsc894556, GLIBC BZ 17325, GLIBC BZ 14134 - Avoid infinite loop in nssdns getnetbyname. CVE-2014-9402 - Don't touch user-controlled stdio locks i...