The vulnerability of the nfsaclsvc_encode_getaclres() function in the fs/nfsd/nfs2acl.c module, which is part of the Linux kernel’s Network File System support, allows a attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the nfsaclsvcencodegetaclres function in the fs/nfsd/nfs2acl.c module, which is part of the Linux kernel’s Network File System support, involves the exposure of confidential information. Exploiting this vulnerability could allow an attacker to compromise the confidentiality a...

The vulnerability of the io_init() function in the drivers/mtd/ubi/build.c file of the MTD memory driver for the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ioinit function in the drivers/mtd/ubi/build.c file of the MTD memory driver for the Linux operating system relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the rtl8187_rx_cb() function in the driver/net/wireless/realtek/rtl818x/rtl8187/dev.c file of the wireless communication adapter driver from Realtek’s Linux kernel, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the rtl8187rxcb function in the driver/net/wireless/realtek/rtl818x/rtl8187/dev.c file of the wireless communication adapter driver from Realtek’s Linux kernel lies in improper resource cleanup or release. Exploiting this vulnerability could allow an attacker to compromise th...

The vulnerability of the `trace_pid_write()` function in the kernel/trace/trace.c module, which supports Linux operating system’s kernel tracing, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tracepidwrite function in the kernel/trace/trace.c module, which supports Linux operating system tracing, is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the rndis_query() function in the drivers/net/usb/rndis_host.c module of the Linux kernel’s USB network adapter driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rndisquery function in the drivers/net/usb/rndishost.c module of the Linux kernel’s USB network adapter driver is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

The vulnerability of the mptcp_worker() function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mptcpworker function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the set_user_sq_size() function in the drivers/infiniband/hw/mlx4/qp.c module of the Linux operating system’s kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setusersqsize function in the drivers/infiniband/hw/mlx4/qp.c module of the Linux operating system’s kernel driver is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the `nvmeTraceBioComplete()` function in the Linux kernel module allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nvmeTraceBioComplete function in the Linux kernel module is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the opt3001_irq() function in the drivers/iio/light/opt3001.c file of the Linux kernel’s photodetection sensor driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the opt3001irq function in the drivers/iio/light/opt3001.c file of the Linux kernel’s photodetection sensor driver is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Security update for python311

This update for python311 fixes the following issues: CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters bsc1257029. CVE-2025-12781: inadequate parameter check can cause data integrity issues bsc1257108. CVE-2025-15282:...

SUSE-SU-2026:0693-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters bsc1257029. - CVE-2025-12781: inadequate parameter check can cause data integrity issues bsc1257108. - CVE-2025-1528...

CVE-2026-1627

An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, allowing manipulation of transmitted data if the attacker can interact with the network traffic...

EUVD-2026-8963

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

Valkey: Valkey: Data tampering and denial of service via improper null character handling in Lua scripts

A flaw was found in Valkey, a distributed key-value database. A malicious user can exploit this vulnerability by using scripting commands to inject arbitrary information into the response stream. This is caused by improper handling of null characters in the error handling code for Lua scripts...

PT-2026-22231

Name of the Vulnerable Software and Affected Versions Systems utilizing WebSocket endpoints for Open Charge Point Protocol OCPP communication affected versions not specified Description WebSocket endpoints are missing appropriate authentication, allowing attackers to impersonate charging stations...

The vulnerability of the iomap_writepage_map() function in the fs/iomap/buffered-io.c file of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iomapwritepagemap function in the fs/iomap/buffered-io.c file of the Linux kernel file system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the ath11k_reg_notifier() function in the drivers/net/wireless/ath/ath11k/reg.c file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ath11kregnotifier function in the drivers/net/wireless/ath/ath11k/reg.c file of the Atheros/Qualcomm wireless communication driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability coul...

PT-2026-51781

Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.4.0 Description Authenticated users with workflow creation permissions can inject arbitrary SQL through unescaped identifier values in node configuration parameters. This occurs because the MySQL, PostgreSQL, and...

The vulnerability of the destroy() function in the drivers/md/dm-cache-target.c file of the Linux operating system’s device driver framework for multiple devices (such as RAID and LVM) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the destroy function in the drivers/md/dm-cache-target.c file of the Linux kernel driver for multiple device drivers such as RAID and LVM is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the l2cap_disconnect_rsp() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the l2capdisconnectrsp function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...