Security Bulletin: Multiple vulnerabilities in IBM Db2 may affect IBM Storage Protect Server.

Summary IBM Storage Protect Server, which uses IBM Db2, may be affected by multiple vulnerabilities that could result in denial of service or the loss of confidentiality, integrity. These vulnerabilities include CVE-2025-36122, CVE-2025-14688, CVE-2025-67735, CVE-2025-68161, CVE-2025-12183,...

CVE-2026-56390

A flaw was found in GNU Bison. When processing attacker-supplied grammar, the software improperly handles grammar-defined output paths. This allows an attacker to use directives such as %output and %header to specify arbitrary file paths. Consequently, generated files can be directed to any...

The vulnerability of the zynqmp_efuse_access() function in the drivers/nvmem/zynqmp_nvmem.c file of the NVMEM device driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the zynqmpefuseaccess function in the drivers/nvmem/zynqmpnvmem.c file of the NVMEM device driver in the Linux operating system is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the drm_compat_ioctl() function in the drivers/gpu/drm/drm_ioc32.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the drmcompatioctl function in the drivers/gpu/drm/drmioc32.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel relates to the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the XmlLayout() function in the Apache Log4j Core library allows attackers to compromise the integrity of the protected information.

The vulnerability of the XmlLayout function in the Apache Log4j Core logging library is related to improper encoding or escaping of output data. Exploiting this vulnerability allows an attacker to influence the integrity of the protected information from a remote location...

The vulnerability of the Jakarta Mail and Eclipse Angus Mail email creation and sending libraries, related to improper processing of input data endings, will affect the integrity of the protected information.

The vulnerability of the Jakarta Mail and Eclipse Angus Mail email creation and sending libraries is related to improper processing of input data’s endings. Exploiting this vulnerability allows an attacker to compromise the integrity of the protected information...

The vulnerability of the ulpi_register_interface() function in the drivers/usb/common/ulpi.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ulpiregisterinterface function in the drivers/usb/common/ulpi.c module of the Linux device driver framework is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the th1520_aon_power_update() function in the drivers/firmware/thead module, located in the Linux kernel-based firmware, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the th1520aonpowerupdate function in the drivers/firmware/thead module, within the th1520-aon.c driver for Linux kernel patches, is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...

The vulnerability of the cpsw_ndo_set_rx_mode_work() function in the drivers/net/ethernet/ti/cpsw.c module of the Ethernet network adapter driver from Texas Instruments’ Linux kernel, which allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cpswndosetrxmodework function in the drivers/net/ethernet/ti/cpsw.c module of the Ethernet network adapter driver for Texas Instruments’ Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the vxlan_na_create() function in the drivers/net/vxlan/vxlan_core.c file of the networking device driver module in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vxlannacreate function in the drivers/net/vxlan/vxlancore.c file of the Linux kernel’s network device driver is related to a buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of th...

The vulnerability of the apply_patch() function in the cJSON_Utils.c component of the library for working with JSON objects in C language allows a attacker to compromise data integrity.

The vulnerability of the applypatch function in the cJSONUtils.c component of the C language JSON object handling library is related to an incorrect implementation of the sequence of actions to be performed. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

openjdk: Enhance Jar handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...

io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header

A flaw was found in Netty, a network application framework. A remote attacker can bypass security controls in the CorsHandler component by sending a specially crafted request with a null origin header. This bypasses the intended access restrictions, allowing unauthorized requests to reach the...

openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy

A flaw was found in OpenSSH, a widely used tool for secure remote access. When a user attempts to copy files between two different remote systems using the scp command, the file might be incorrectly placed in a directory above the intended destination. This unintended file placement could lead to...

CVE-2026-64392

A flaw was found in the ksmbd component of the Linux kernel. This vulnerability allows an attacker to bypass filesystem permission checks during 'delete-on-close' operations. Specifically, when a file handle is torn down, the base-file unlink and extended attribute xattr removal operations...

The vulnerability of the nvme_poll() function in the driver/nvme/host/pci.c file of the NVME driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nvmepoll function in the nvmem/host/pci.c driver of the Linux operating system’s NVME kernel is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the smb2_get_ea() function in the fs/smb/server/smb2pdu.c file of the Smb file system in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smb2getea function in the fs/smb/server/smb2pdu.c file of the Smb kernel of the Linux operating system is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...

The vulnerability of the tcf_csum_act() function in the net/sched/act_csum.c module of the network/sched subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcfcsumact function in the net/sched/actcsum.c module of the network/sched subsystem of the Linux operating system is related to the improper checking of the specified index, position, or offset in the input data. Exploiting this vulnerability may allow a remote attacker ...

The vulnerability of the packet_do_bind() function in the net/packet/af_packet.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the packetdobind function in the net/packet/afpacket.c module of the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the `init_amd_zen1()` function in the `arch/x86/kernel/cpu/amd.c` module, which is part of the Linux operating system’s kernel support for x86 platforms, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the initamdzen1 function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s kernel support for x86 platforms, is related to incorrect inter-process boundary removal of critical data. Exploiting this vulnerability could allow an attacker to...