USN-8074-1: Linux kernel (Azure) vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt...

OpenID Connect / OAuth client - Less critical - Access bypass - SA-CONTRIB-2026-027

This module enables you to use an external OpenID Connect login provider to authenticate and log in users on your site. If a user signs in with a login provider for the first time on the website, a new Drupal user will be created. The module doesn't sufficiently validate the uniqueness of certain...

PT-2026-23115

Name of the Vulnerable Software and Affected Versions Drupal OpenID Connect / OAuth client versions prior to 1.5.0 Description A flaw exists in the OpenID Connect / OAuth client module that allows for privilege escalation due to improper handling of case sensitivity. The module does not adequatel...

The vulnerability of the mem_dump_obj() function in the mm/util.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the memdumpobj function in the mm/util.c module of the Linux kernel’s memory management subsystem is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the mac_hid_toggle_emumouse() function in the drivers/macintosh/mac_hid.c file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the machidtoggleemumouse function in the drivers/macintosh/machid.c file of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility o...

The vulnerability of the qla2x00_create_host() function in the drivers/scsi/qla2xxx/qla_os.c driver module of the Linux SCSI device kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qla2x00createhost function in the drivers/scsi/qla2xxx/qlaos.c driver for Linux SCSI devices is related to the occurrence of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the recovery_request_write() function in the drivers/md/raid10.c module of the Linux operating system’s multi-device driver (RAID and LVM kernel), which allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the recoveryrequestwrite function in the drivers/md/raid10.c driver for multiple device-based systems RAID and LVM in the Linux kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker t...

Linux Distros Unpatched Vulnerability : CVE-2024-21953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss of guest data integrity. CVE-2024-21953...

The vulnerability of the ena_com_comp_status_to_errno() function in the drivers/net/ethernet/amazon/ena/ena_com.c file of the Ethernet network adapter driver for the Linux operating system. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the enacomcompstatustoerrno function in the drivers/net/ethernet/amazon/ena/enacom.c file of the Ethernet network adapter driver for the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacke...

Security update for python311

This update for python311 fixes the following issues: CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters bsc1257029. CVE-2025-12781: inadequate parameter check can cause data integrity issues bsc1257108. CVE-2025-15282:...

SUSE-SU-2026:0767-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters bsc1257029. - CVE-2025-12781: inadequate parameter check can cause data integrity issues bsc1257108. - CVE-2025-1528...

Security Bulletin: IBM Engineering Requirements Management DOORS Next could allow an authenticated user to access and modify data beyond authorized permissions (CVE-2025-13734)

Summary IBM Engineering Requirements Management DOORS Next could allow an authenticated user to view and edit data beyond their assigned access permissions. This issue occurs due to insufficient authorization enforcement. An attacker with valid credentials could exploit this vulnerability to gain...

The vulnerability of the Apache NiFi data processing platform, related to the lack of authentication, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Apache NiFi data processing platform lies in the lack of authentication. Exploiting this vulnerability allows a malicious actor to remotely compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the opt3001_irq() function in the drivers/iio/light/opt3001.c file of the Linux kernel’s photodetection sensor driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the opt3001irq function in the drivers/iio/light/opt3001.c file of the Linux kernel’s photodetection sensor driver is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the set_user_sq_size() function in the drivers/infiniband/hw/mlx4/qp.c module of the Linux operating system’s kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setusersqsize function in the drivers/infiniband/hw/mlx4/qp.c module of the Linux operating system’s kernel driver is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the rtl8187_rx_cb() function in the drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c file of the wireless adapter driver module developed by Realtek for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rtl8187rxcb function in the driver/net/wireless/realtek/rtl818x/rtl8187/dev.c file of the wireless communication adapter driver from Realtek’s Linux kernel lies in improper resource cleanup or release. Exploiting this vulnerability could allow an attacker to compromise th...

The vulnerability of the setup_callback_client() function in the fs/nfsd/nfs4callback.c module, which supports the Network File System in Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setupcallbackclient function in the fs/nfsd/nfs4callback.c module, which supports the Network File System in Linux kernels, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the `trace_pid_write()` function in the kernel/trace/trace.c module, which supports Linux operating system’s kernel tracing, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tracepidwrite function in the kernel/trace/trace.c module, which supports Linux operating system tracing, is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the i40e_vsi_request_irq_msix() function in the drivers/net/ethernet/intel/i40e/i40e_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the i40evsirequestirqmsix function in the drivers/net/ethernet/intel/i40e/i40emain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of an incorrect index. Exploiting this vulnerability could allow an attacker to compromi...

The vulnerability of the mptcp_worker() function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mptcpworker function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...