AZL-109104 CVE-2026-98479 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsitcp: Check the data direction of a Data-In PDU The Data-In branch of iscsitcphdrdissect resolves the ITT to a task and copies the PDU's data segment into that command's scatterlist without asking whether the command...

DEBIAN-CVE-2026-98479

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsitcp: Check the data direction of a Data-In PDU The Data-In branch of iscsitcphdrdissect resolves the ITT to a task and copies the PDU's data segment into that command's scatterlist without asking whether the command...

CVE-2026-98479

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsitcp: Check the data direction of a Data-In PDU The Data-In branch of iscsitcphdrdissect resolves the ITT to a task and copies the PDU's data segment into that command's scatterlist without asking whether the command...

UBUNTU-CVE-2026-98479

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsitcp: Check the data direction of a Data-In PDU The Data-In branch of iscsitcphdrdissect resolves the ITT to a task and copies the PDU's data segment into that command's scatterlist without asking whether the command...

CVE-2026-98479

In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsitcp: Check the data direction of a Data-In PDU The Data-In branch of iscsitcphdrdissect resolves the ITT to a task and copies the PDU's data segment into that command's scatterlist without asking whether the command...

Krayin Laravel-CRM authorization issue vulnerability

The Krayin Laravel-CRM version 2.2.7 and earlier have a security vulnerability. This vulnerability stems from improper object-level authorization in the EmailController’s write operations. It allows authorized users with limited permissions to manipulate other users’ emails by providing digital...

Apache Camel code injection vulnerability

Apache Camel versions from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain security vulnerabilities. These vulnerabilities stem from the Camel HTTP producer, which allows inbound messages to override endpoint URIs through the CamelHttpUri and CamelRestHttpUri headers. It also parses property...

Apache Camel session mechanism vulnerabilities

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to the session mechanism. This vulnerability arises because the Thrift component deserializes incoming data into the shared defaultInstance rather than into a new copy, resulting in data leakag...

Apache Camel log information leakage vulnerability

Apache Camel MLLP components versions 4.0.0 to 4.18.5 and 4.19.0 to 4.22.1 contain a vulnerability related to log information leakage. This vulnerability arises due to the default activation of the logPhi option, with some paths not following this setting. As a result, patient data contained in H...

Rank Math SEO PRO processing logic error vulnerability

Rank Math SEO PRO version 3.0.123 has a processing logic vulnerability. This vulnerability stems from an attack on the supply chain. Some plugin packages downloaded or updated between 20:02 UTC on October 15, 2026, and 07:12 UTC on October 16, 2026, were infected with malware. This malware may...

MISP Project: misp-modules input validation error vulnerability

The MISP Project’s misp-modules 3.0.12 and earlier versions have security vulnerabilities. These vulnerabilities stem from an incomplete BLOCKEDRANGES list in the issafeurl URL validation function of the htmltomarkdown extension. This oversight resulted in key IP address ranges being omitted,...

Netskope Client session mechanism vulnerability

Versions of the Netskope Client prior to R142 contained a vulnerability related to the session mechanism. This vulnerability arises when the NSClient agent switches to a network with internet connectivity after connecting to a Captive Portal access point, without closing the Captive Portal. This...

Integratec SQL injection vulnerability

Integratec has a SQL injection vulnerability. This vulnerability stems from an UNION-type SQL injection in the sInfo parameter sent via POST to the /login/apLogin.aspx/start endpoint. It may allow attackers to steal credentials and user information from the database, causing errors and...

MISP Resource Management Error Vulnerability

MISP 2.5.48 and earlier versions have a resource management vulnerability. This vulnerability stems from a data integrity flaw in the event deletion logic. When events are deleted, related records such as event report labels, event graph entries, proposal associations, ssdeep-associated blocks, a...

openGauss-server Authorization Issue Vulnerability

Versions 3.0.0 to 3.0.5, 3.1.0 to 3.1.1, 5.0.0-RC1, 5.0.0 to 5.0.3, 5.1.0, 6.0.0-RC1, 6.0.0 to 6.0.6, 7.0.0-RC1, 7.0.0-RC2, and 7.0.0-RC3 of openGauss-server contain authorization vulnerabilities. These vulnerabilities stem from an access control bypass in the connection authentication process in...

MISP information leakage vulnerability

Versions of MISP 2.5.48 and earlier contain security vulnerabilities. These vulnerabilities stem from the setting search function in the server’s setup mechanism, which returns the entire configuration subtree when providing branch names instead of specific leaf settings. This bypasses masking...

CCC Attestation Hardware-Backed Attestation in TLS: Input Verification Error Vulnerability

CCC Attestation Hardware-Backed Attestation in TLS versions committed from 731ca82 and earlier has a vulnerability in input validation. This vulnerability arises from the failure to bind early authentication evidence to TLS connections. Attackers who possess the extracted private key for...

Pillow buffer error vulnerability

Pillow versions from 8.2.0 to 13.0.0 contain a buffer error vulnerability. This vulnerability stems from the tiled-TIFF decoder, which reads beyond the bounds of the tile buffer when copying four-byte pixels. In decodeTile, the tile allocation returned by libtiff is less than the required row...

IBM MQ Operator buffer error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 have a buffer error vulnerability. This...

CVE-2026-98860 HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssizet when checking hidbpfhwrequest As reported by Sashiko: If a transport driver encounters a hardware error and returns a negative error code such as -EPIPE, ret is implicitly promoted to sizet when...