CVE-2026-97519

A flaw was found in the Linux kernel's Intel Xe graphics driver. When device core dump cleanup routines are triggered without a completed capture, the driver attempts to access uninitialized snapshot data. A local user could exploit this issue to cause a null pointer dereference, resulting in a...

CVE-2026-97516

A flaw was found in the Linux kernel's rtw88 wireless driver. The driver fails to verify whether certain hardware configuration settings exist before accessing them during firmware adaptivity processing. On systems equipped with specific wireless chipsets, this flaw triggers a null pointer...

MGASA-2026-0459 Updated libxml2 packages fix security vulnerabilities

The updated packages fix several security issues: Stack-Based Buffer Overflow in libxml2. CVE-2026-11979 In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp. CVE-2026-86137 In libxml2 before 2.15.4, xmlDictAddQString ...

Updated libxml2 packages fix security vulnerabilities

The updated packages fix several security issues: Stack-Based Buffer Overflow in libxml2. CVE-2026-11979 In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp. CVE-2026-86137 In libxml2 before 2.15.4, xmlDictAddQString ...

CVE-2026-85644

A flaw was found in perl-XS-Parse-Keyword. This vulnerability allows an attacker to cause a Denial of Service DoS or potentially execute arbitrary code by supplying crafted input to an affected application. The issue occurs because the module improperly validates arguments for list-associative...

CVE-2026-93825

A flaw was found in the Linux kernel's Serial Peripheral Interface SPI subsystem. This vulnerability allows a local user to cause a Denial of Service DoS through a system crash. The issue occurs because the spigetdevicematchdata function does not verify whether a device identifier exists before...

CVE-2026-97506

A flaw was found in the Linux kernel's Intel IXP4xx crypto driver. When memory allocation fails while constructing buffer descriptor chains for cryptographic operations, the driver attempts to access an invalid null pointer. A local user could exploit this flaw under low-memory conditions to...

Security update for 389-ds

This update for 389-ds fixes the following issues: CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remote co...

SUSE-SU-2026:4380-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. - CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remot...

CVE-2026-98134

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF verifier. During pointer register comparisons, the verifier can incorrectly deduce that a pointer cannot be null when it can actually be null at runtime. A local user with permissions to load BPF programs could exploit this flaw by...

CVE-2026-98129

A flaw was found in the Linux kernel's mpi3mr SCSI driver. The driver fails to validate the return value of a memory allocation when adding a Serial Attached SCSI SAS port, leading to a NULL pointer dereference if the allocation fails. A local user could exploit this flaw under low-memory...

Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in p11-kit

Summary IBM DataPower Gateway has addressed multiple vulnerabilities in p11-kit in version 11.0.0.3 Vulnerability Details CVEID:CVE-2026-2100 DESCRIPTION: A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the CDeriveKey function on a remote token with...

Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in OS kernel

Summary IBM DataPower Gateway has addressed multiple vulnerabilities in OS kernel in versions 10.6.0.11 and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-46086 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU reade...

kernel: drm/amdgpu: Fix context pstate override handling

A flaw was found in the Linux kernel's amdgpu graphics driver. Improper handling of context pstate overrides can lead to use-after-free and NULL pointer dereferences during context initialization and finalization. A local attacker could exploit this vulnerability to cause system instability or a...

CVE-2026-98121

A flaw was found in the Linux kernel's Mstar MSC313e watchdog driver. The driver fails to properly set platform device data during device initialization. Consequently, when system power management routines attempt to access this data during suspend or resume operations, a NULL pointer dereference...

CVE-2026-93274

A flaw was found in the Linux kernel's Broadcom BCM2835 pin control driver. During device initialization, if pin controller registration fails, the driver attempts to remove an unregistered General Purpose Input/Output GPIO chip. This improper error handling leads to a null pointer dereference,...

CVE-2026-93273

A flaw was found in the Linux kernel's TPS6594 regulator driver. When configuring multi-phase regulators during device initialization, the driver fails to verify whether a device node exists before accessing it and fails to properly release acquired node references. A local attacker could exploit...

CVE-2026-42801

A flaw was found in ASR Crane and Falcon. This vulnerability, located in the asrrc module on Linux, is a NULL pointer dereference. An attacker could potentially exploit this to manipulate pointers, which may lead to unpredictable system behavior or a denial of service. Mitigation Mitigation for...

kernel: drm/amdgpu: Fix context pstate override handling

A flaw was found in the Linux kernel's amdgpu graphics driver. Improper handling of context pstate overrides can lead to use-after-free and NULL pointer dereferences during context initialization and finalization. A local attacker could exploit this vulnerability to cause system instability or a...

CVE-2026-93263

A flaw was found in the Linux kernel's ESWIN clock driver. Due to uninitialized stack memory during clock registration, leftover data can cause the clock framework to dereference an invalid pointer. This issue can trigger a kernel crash during device initialization, resulting in a Denial of Servi...