CVE-2026-47598: Use After Free

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a use-after-free through a race between asynchronous event delivery and file close. A successful exploit of this vulnerability might lead ...

Rocky Linux 9.6 [TuxCare] Security Update: rsync / rsync-daemon / rsync-rrsync Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1789554695)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789554695 advisory. - rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1765463110)

"The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765463110 advisory. - In the Linux kernel, the following vulnerability has been resolved: KVM: Reject attempts to consume or refresh inactive...

AlmaLinux 9.2 [TuxCare] Security Update: PackageKit / PackageKit-command-not-found / PackageKit-cron / etc (ALMALINUX9.2:CLSA-2026:1779711412)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779711412 advisory. - PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture...

AlmaLinux 9.2 [TuxCare] Security Update: pmix / pmix-devel / pmix-pmi / pmix-pmi-devel / pmix-tools (ALMALINUX9.2:CLSA-2025:1763123299)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1763123299 advisory. - OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during...

CentOS Linux 6 [TuxCare] Security Update: libsss_idmap / libsss_simpleifp / python-sss / python-sss-murmur / etc (CENTOS6:CLSA-2025:1748947069)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1748947069 advisory. - A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper...

AlmaLinux 9.2 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc (ALMALINUX9.2:CLSA-2025:1752922753)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1752922753 advisory. - An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2...

AlmaLinux 9.6 [TuxCare] Security Update: rsync / rsync-daemon / rsync-rrsync Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1789554695)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789554695 advisory. - rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker w...

The vulnerability of the mdc800_device_read() function in the drivers/usb/image/mdc800.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the mdc800deviceread function in the drivers/usb/image/mdc800.c file of the Linux device driver module is related to the race condition that occurs when a shared resource is used. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the smc_clc_wait_msg() function in the net/smc/smc_clc.c module of the SMC protocol family implementation in the Linux operating system’s kernel allows a attacker to cause a service failure.

The vulnerability of the smcclcwaitmsg function in the net/smc/smcclc.c module of the SMC protocol family implementation in the Linux operating system’s kernel is related to the race condition that occurs when a common resource is used. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the vpu_m2m_device_run() function in the drivers/media/platform/amphion/vpu_v4l2.c file of the Linux kernel’s multimedia device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vpum2mdevicerun function in the drivers/media/platform/amphion/vpuv4l2.c file of the Linux multimedia device driver module is related to the state of the race condition involving the signal handler. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the _aead_recvmsg() function in the crypto/algif_aead.c module of the Linux kernel’s cryptographic subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the aeadrecvmsg function in the crypto/algifaead.c module of the Linux kernel’s cryptographic subsystem is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the function batadv_bla_del_backbone_claims() in the net/batman-adv/bridge_loop_avoidance.c module, which is part of the networking functions of the Linux operating system’s kernel, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function batadvbladelbackboneclaims in the net/batman-adv/bridgeloopavoidance.c module, which is part of the networking functions of the Linux kernel, is related to the state of the race. Exploiting this vulnerability could allow a remote attacker to compromise the...

Linux Distros Unpatched Vulnerability : CVE-2026-47598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module event delivery path where an unprivileged local user could cause a...

Linux Distros Unpatched Vulnerability : CVE-2026-47565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a privileged user could trigger a race condition that leads to an...

CentOS Linux 7 [TuxCare] Security Update: libsss_idmap / libsss_simpleifp / libsss_simpleifp-devel / etc (CENTOS7:CLSA-2025:1748967240)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1748967240 advisory. - A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper...

AlmaLinux 9.2 [TuxCare] Security Update: python3-rpm / rpm / rpm-apidocs / rpm-build / rpm-build-libs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2024:1708417063)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1708417063 advisory. - A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1763734783)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1763734783 advisory. - In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix use-after-free warning Fix the following...

ALSA-2026:73998 Important: gvfs security update

GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol FTP, Secure Shell File Transfer Protocol SFTP, Web Distributed Authoring and Versioning WebDAV, Common Internet File System CIFS, Server Message Block SMB, and...

ROS-20260930-73-0131

The vulnerability of the ntfs3/attrib.c component in the Linux operating system is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure using corrupted NTFS images...