openGauss-server Authorization Issue Vulnerability

Versions 3.0.0 to 3.0.5, 3.1.0 to 3.1.1, 5.0.0-RC1, 5.0.0 to 5.0.3, 5.1.0, 6.0.0-RC1, 6.0.0 to 6.0.6, 7.0.0-RC1, 7.0.0-RC2, and 7.0.0-RC3 of openGauss-server contain authorization vulnerabilities. These vulnerabilities stem from an access control bypass in the connection authentication process in...

Apache Camel session mechanism vulnerabilities

Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a vulnerability related to the session mechanism. This vulnerability arises because the Thrift component deserializes incoming data into the shared defaultInstance rather than into a new copy, resulting in data leakag...

IBM MQ Operator buffer error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0, 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 have a buffer error vulnerability. This...

CCC Attestation Hardware-Backed Attestation in TLS: Input Verification Error Vulnerability

CCC Attestation Hardware-Backed Attestation in TLS versions committed from 731ca82 and earlier has a vulnerability in input validation. This vulnerability arises from the failure to bind early authentication evidence to TLS connections. Attackers who possess the extracted private key for...

CVE-2026-98860 HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssizet when checking hidbpfhwrequest As reported by Sashiko: If a transport driver encounters a hardware error and returns a negative error code such as -EPIPE, ret is implicitly promoted to sizet when...

CVE-2026-98860

The Linux kernel contains a vulnerability in the HID BPF subsystem related to how hid_bpf_hw_request handles hardware errors. When a transport driver returns a negative error code (e.g., -EPIPE ), the return value is implicitly promoted to size_t, causing a comparison against size to evaluate as ...

EUVD-2026-103800

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssizet when checking hidbpfhwrequest As reported by Sashiko: If a transport driver encounters a hardware error and returns a negative error code such as -EPIPE, ret is implicitly promoted to sizet when...

CVE-2026-98860 HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssizet when checking hidbpfhwrequest As reported by Sashiko: If a transport driver encounters a hardware error and returns a negative error code such as -EPIPE, ret is implicitly promoted to sizet when...

CVE-2026-98844

The Linux kernel contains a vulnerability in the netfs component where the pagecache is not properly cleared when a file is extended via a write operation. Specifically, dirty data left by writes through an mmapped region in a hole created after the End-of-File (EOF) could persist. The fix involv...

CVE-2026-98844 netfs: clear post-EOF pagecache when extending a file via write

In the Linux kernel, the following vulnerability has been resolved: netfs: clear post-EOF pagecache when extending a file via write Fix netfs to erase the contents of a hole created after the EOF by an ordinary write if dirty data has been previously left there by writes through an mmapped region...

CVE-2026-98844 netfs: clear post-EOF pagecache when extending a file via write

In the Linux kernel, the following vulnerability has been resolved: netfs: clear post-EOF pagecache when extending a file via write Fix netfs to erase the contents of a hole created after the EOF by an ordinary write if dirty data has been previously left there by writes through an mmapped region...

CVE-2026-98843 netfs: zero gaps in read-gaps folio to avoid writing back stale data

In the Linux kernel, the following vulnerability has been resolved: netfs: zero gaps in read-gaps folio to avoid writing back stale data netfsreadgaps leaves gaps around a streaming write's dirty region unread on the server side, so a short/EOF response there left stale folio content that later g...

CVE-2026-98843

The Linux kernel contains a vulnerability in the netfs component where the netfs_read_gaps() function left gaps around a streaming write's dirty region unread on the server side. This issue could cause stale folio content to be written back if a short or EOF response occurred. The fix involves ze...

CVE-2026-98843 netfs: zero gaps in read-gaps folio to avoid writing back stale data

In the Linux kernel, the following vulnerability has been resolved: netfs: zero gaps in read-gaps folio to avoid writing back stale data netfsreadgaps leaves gaps around a streaming write's dirty region unread on the server side, so a short/EOF response there left stale folio content that later g...

EUVD-2026-103783

In the Linux kernel, the following vulnerability has been resolved: netfs: zero gaps in read-gaps folio to avoid writing back stale data netfsreadgaps leaves gaps around a streaming write's dirty region unread on the server side, so a short/EOF response there left stale folio content that later g...

CVE-2026-98843

In the Linux kernel, the following vulnerability has been resolved: netfs: zero gaps in read-gaps folio to avoid writing back stale data netfsreadgaps leaves gaps around a streaming write's dirty region unread on the server side, so a short/EOF response there left stale folio content that later g...

EUVD-2026-103887

In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advancenextseg modifies the SRH Segments Left field and the IPv6 destination address without ensuring the packet data is writable. seg6nextcsidadvancearg has t...

CVE-2026-98802 seg6: ensure packet data is writable before modifying SRH and IPv6 DA

In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advancenextseg modifies the SRH Segments Left field and the IPv6 destination address without ensuring the packet data is writable. seg6nextcsidadvancearg has t...

CVE-2026-98802 seg6: ensure packet data is writable before modifying SRH and IPv6 DA

In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advancenextseg modifies the SRH Segments Left field and the IPv6 destination address without ensuring the packet data is writable. seg6nextcsidadvancearg has t...

CVE-2026-98802

A vulnerability exists in the Linux kernel where the functions advance_nextseg() and seg6_next_csid_advance_arg() modify the SRH Segments Left field and the IPv6 destination address without first verifying if the packet data is writable. This issue occurs because the socket buffer (skb) may be sh...