OPENSUSE-SU-2026:20060-1 Security update for cargo-c

This update for cargo-c fixes the following issues: - CVE-2025-4574: crossbeam-channel: Fixed double-free on drop in Channel::discardallmessages bsc1243179 - CVE-2025-58160: tracing-subscriber: Fixed log pollution bsc1249012 - CVE-2024-12224: idna: Fixed improper validation of Punycode labels...

kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies

A flaw was found in the kernel subsystem handling of the DRM scheduler. Under certain error conditions, the function drmschedjobadddependency consumes a fence reference and then later erroneously attempts to free it again double free. This may lead to memory corruption and, in some configurations...

kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies

A flaw was found in the kernel subsystem handling of the DRM scheduler. Under certain error conditions, the function drmschedjobadddependency consumes a fence reference and then later erroneously attempts to free it again double free. This may lead to memory corruption and, in some configurations...

MiracleLinux 7 : firefox-91.2.0-5.0.1.el7.AXS7 (AXBA:2021-2506:30)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXBA:2021-2506:30 advisory. - crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in Rust. In versions prior to 0.7.4 and 0.8.0,...

MiracleLinux 8 : opensc-0.20.0-2.el8 (AXSA:2021-1113:01)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-1113:01 advisory. opensc: Out-of-bounds access of an ASN.1 Bitstring in decodebitstring in libopensc/asn1.c CVE-2019-15945 opensc: Out-of-bounds access of an ASN.1...

ALSA-2026:0759 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: smb: client: Fix use-after-free in cifsfilldirent CVE-2025-38051 kernel: smb: client: let recvdone verify dataoffset, datalength and remainingdatalength CVE-2025-39933 kernel: drm/i915:...

RHEL 8 : kernel (RHSA-2026:0759)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:0759 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: smb: client: Fix use-after-fre...

MiracleLinux 8 : libvpx-1.7.0-8.el8 (AXSA:2021-1123:01)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-1123:01 advisory. libvpx: Double free in ParseContentEncodingEntry in mkvparser.cc CVE-2019-2126 libvpx: Out of bounds read in vp8norm table CVE-2019-9232 libvpx:...

MiracleLinux 8 : gd-2.2.5-7.el8 (AXSA:2020-1002:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-1002:01 advisory. gd: Heap-based buffer overflow in gdImageColorMatch in gdcolormatch.c CVE-2019-6977 gd: NULL pointer dereference in gdImageClone CVE-2018-14553 gd:...

CVE-2026-21918

A Double Free vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on SRX and MX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. On all SRX and MX Series platforms, when during TCP session establishment a specific sequence of...

CVE-2025-13844

CWE-415: Double Free vulnerability exists that could cause heap memory corruption when the end user imports a malicious project file SSD file shared by the attacker into Rapsody...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003806)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003806 advisory. drivers/net/wireless/rsi/rsi91xusb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic which may be remote via usbip or usbredir...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003690)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003690 advisory. An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver. Tenable ha...

MiracleLinux 7 : patch-2.7.1-11.el7 (AXSA:2019-3967:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3967:01 advisory. patch: Out-of-bounds access in pchwriteline function in pch.c CVE-2016-10713 patch: Double free of memory in pch.c:anotherhunk causes a crash...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003718)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003718 advisory. drivers/net/wireless/rsi/rsi91xusb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic which may be remote via usbip or usbredir...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003839)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003839 advisory. In binderallocfreepage of binderalloc.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege in the kernel with...

MiracleLinux 7 : opensc-0.19.0-3.el7 (AXSA:2019-3977:02)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3977:02 advisory. opensc: Buffer overflows handling responses from Muscle Cards in card-muscle.c:musclelistfiles CVE-2018-16391 opensc: Buffer overflows handling...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001262)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001262 advisory. In the Linux kernel before 4.16.4, a double free vulnerability in the fmidisetalt function of drivers/usb/gadget/function/fmidi.c in the fmidi driver may allow...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000936)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000936 advisory. Double free vulnerability in the ioctxalloc function in fs/aio.c in the Linux kernel before 3.12.4 allows local users to cause a denial of service system crash or...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003759)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003759 advisory. In driveroverridestore and driveroverrideshow of bus.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege wit...