4334 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: Wifi: ath11k: Fixed the registration of a 6Ghz-only physical interface without the full channel range. Due to what appears to be a typographical error, the 6Ghz-only physical interface for which the BDF does not allow the...
Astra Linux – Vulnerability in xwayland, xorg-server
A flaw was discovered in the X.Org X server. This integer underflow vulnerability, specifically related to the handling of the XKB compatibility map, allows an attacker with local or remote X11 server access to trigger a buffer read overflow. This can lead to memory safety violations and...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: arm64: compat: Do not treat the syscall number as ESRELx for a bad syscall If a compat process attempts to execute an unknown system call that exceeds the ARMNRCOMPATEND number, the kernel sends a SIGILL signal to the offending...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: arm64: Restrict CPUBIGENDIAN to GNU as or LLVM IAS 15.x or newer Prior to LLVM 15.0.0, LLVM’s integrated assembler would incorrectly byte-swap NOPs when compiling for big-endian, and the resulting sequence of bytes happened to...
unleashed-firmware unlshd-093
Flipper Zero Unleashed Firmware This firmware is a fork of the original OFW version of flipperdevices/flipperzero-firmware and represents the most stable custom build, incorporating new features and improvements to the original components while remaining fully compatible with the API and...
PT-2026-91839
Summary The dashboard reads its authentication credentials from $ESPHOME USERNAME and $ESPHOME PASSWORD. Earlier versions, and the legacy esphome dashboard, read the bare $USERNAME and $PASSWORD instead. When the env vars were renamed the bare names were dropped with no fallback, so an operator w...
Linux Distros Unpatched Vulnerability : CVE-2026-89459
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/percpu: Fix MVIYPERCPU with older binutils Commit a737737cdb9c s390/percpu:...
CVE-2026-89459
In the Linux kernel, the following vulnerability has been resolved: s390/percpu: Fix MVIYPERCPU with older binutils Commit a737737cdb9c "s390/percpu: Infrastructure for more efficient thiscpu operations" introduced MVIYPERCPU, which stringifies arguments that are already C string literals. This...
UBUNTU-CVE-2026-89459
In the Linux kernel, the following vulnerability has been resolved: s390/percpu: Fix MVIYPERCPU with older binutils Commit a737737cdb9c "s390/percpu: Infrastructure for more efficient thiscpu operations" introduced MVIYPERCPU, which stringifies arguments that are already C string literals. This...
CVE-2026-89459
In the Linux kernel, the following vulnerability has been resolved: s390/percpu: Fix MVIYPERCPU with older binutils Commit a737737cdb9c "s390/percpu: Infrastructure for more efficient thiscpu operations" introduced MVIYPERCPU, which stringifies arguments that are already C string literals. This...
CVE-2026-89459 s390/percpu: Fix MVIY_PERCPU() with older binutils
In the Linux kernel, the following vulnerability has been resolved: s390/percpu: Fix MVIYPERCPU with older binutils Commit a737737cdb9c "s390/percpu: Infrastructure for more efficient thiscpu operations" introduced MVIYPERCPU, which stringifies arguments that are already C string literals. This...
EUVD-2026-76365
In the Linux kernel, the following vulnerability has been resolved: s390/percpu: Fix MVIYPERCPU with older binutils Commit a737737cdb9c "s390/percpu: Infrastructure for more efficient thiscpu operations" introduced MVIYPERCPU, which stringifies arguments that are already C string literals. This...
CVE-2026-89459
In the Linux kernel, the following vulnerability has been resolved: s390/percpu: Fix MVIYPERCPU with older binutils Commit a737737cdb9c "s390/percpu: Infrastructure for more efficient thiscpu operations" introduced MVIYPERCPU, which stringifies arguments that are already C string literals. This...
PT-2026-90175
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A build flaw exists in the s390 architecture per-CPU infrastructure. The MVIY PERCPU function stringifies arguments that are already C string literals, creating an assembler macro...
What Makes Adversarial Examples Transfer across Deepfake Detectors?
Deepfake detectors remain vulnerable to transfer-based black-box attacks, in which adversarial examples are generated on a source surrogate model and transferred to a target model, unknown to the attacker. Yet how source--target compatibility shapes attack success remains poorly understood. Prior...
ALSA-2026:65816 Important: qt6-qt5compat security update
Qt6 - Qt 5 Compatibility Libraries. Security Fixes: qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed i...
Microsoft Azure Entra ID Compatibility Package Privilege Bypass
The vulnerability of the compatibility package for Microsoft Azure Entra ID involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...
Compatibility package Microsoft Azure Entra ID Auth Bypass Privilege Escalation
The vulnerability of the compatibility package for Microsoft Azure Entra ID is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...