243343 matches found
CVE-2026-74738 regmap: sdw-mbq: don't call an unset readable_reg callback
In the Linux kernel, the following vulnerability has been resolved: regmap: sdw-mbq: don't call an unset readablereg callback regmapsdwmbqpollbusy decides whether to poll the Function Busy bit by calling ctx-readablereg, which is a straight copy of config-readablereg. That callback is optional:...
CVE-2026-74738
CVE-2026-74738 affects the Linux kernel regmap sdw-mbq (SoundWire Modem Bus Queued) subsystem. The function regmap_sdw_mbq_poll_busy() dereferences ctx->readable_reg() without checking for NULL , but this callback is optional—drivers such as es9356 and tac5xx2-sdw build an MBQ regmap without s...
CVE-2026-74738
In the Linux kernel, the following vulnerability has been resolved: regmap: sdw-mbq: don't call an unset readablereg callback regmapsdwmbqpollbusy decides whether to poll the Function Busy bit by calling ctx-readablereg, which is a straight copy of config-readablereg. That callback is optional:...
EUVD-2026-66568
In the Linux kernel, the following vulnerability has been resolved: regmap: sdw-mbq: don't call an unset readablereg callback regmapsdwmbqpollbusy decides whether to poll the Function Busy bit by calling ctx-readablereg, which is a straight copy of config-readablereg. That callback is optional:...
IzPack has Path Traversal in UnpackerBase that allows writing files outside the installation directory via malicious pack entries
Summary IzPack's UnpackerBase.unpack resolves pack-file target paths without any canonical-path or directory-containment check. An attacker who distributes a trojanized installer JAR the format is unsigned can include pack entries whose targetPath contains ../ sequences. When a victim runs the...
GHSA-F63G-88CJ-HJF9 IzPack has Path Traversal in UnpackerBase that allows writing files outside the installation directory via malicious pack entries
Summary IzPack's UnpackerBase.unpack resolves pack-file target paths without any canonical-path or directory-containment check. An attacker who distributes a trojanized installer JAR the format is unsigned can include pack entries whose targetPath contains ../ sequences. When a victim runs the...
Security update for go1.27
This update for go1.27 fixes the following issues: go1.27.0 released 2026-08-19 is a major release of Go. go1.27.x minor releases will be provided through August 2027. https://github.com/golang/go/wiki/Go-Release-Cycle go1.27 arrives six months after Go 1.26. Most of its changes are in the...
SUSE-SU-2026:3830-1 Security update for go1.27
This update for go1.27 fixes the following issues: - go1.27.0 released 2026-08-19 is a major release of Go. go1.27.x minor releases will be provided through August 2027. https://github.com/golang/go/wiki/Go-Release-Cycle go1.27 arrives six months after Go 1.26. Most of its changes are in the...
Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can lead to...
SUSE-SU-2026:3816-1 Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can lead t...
Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can...
SUSE-SU-2026:3815-1 Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures c...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort...
SUSE-SU-2026:3810-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. - CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in...
Choose your fighter: Balancing competing requirements to select models for your AI SOC
Selecting a model for your security operations center SOC and digital forensics and incident response DFIR tasks is important, but selecting the best one is more involved than you might think. SOC tasks rely on a combination of model efficacy, analysis time, cost, and consistency of results. Cisc...
Exploits and vulnerabilities in Q2 2026
The vulnerability landscape shifted significantly in Q2 2026. First, the number of registered CVEs reached an unprecedented level. This is driven primarily by the widespread adoption of AI, both for application development and search for security flaws. This resulted in entire new classes of...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities due to pyOpenSSL
Summary pyOpenSSL is used by IBM Integrated Analytics System as a Python wrapper around the OpenSSL library for SSL/TLS functionality. Multiple vulnerabilities affect pyOpenSSL versions prior to 26.0.0. CVE-2026-27448 involves a "fail open" behavior where an unhandled exception in a user-provided...
CVE-2026-80184
A flaw was found in OpenStack Keystone where an application credential token can escape its intended project scope through token-method reauthentication. Keystone rejects an explicit scope change for an application credential token, but an omitted scope falls through to the owner's default projec...
