Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in snappy-java

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in snappy-java. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-116590 DESCRIPTION: snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. Prior to...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: set newstream to NULL after release In dmupdatecrtcstate, the skipmodeset path releases newstream via dcstreamrelease, but does not set the pointer to NULL. If a subsequent error e.g., a color management failure...

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add a rassuspend callback and use it for cpeccerrorirq cpeccerrorirq is acquired in amdgpugfxraslateinit but released in gfxv90hwfini; therefore, the put site must query amdgpuirqenabled since the get operation is...

Artifex MuPDF buffer error vulnerability

Artifex MuPDF versions 1.28.5 and earlier have a security vulnerability. This vulnerability stems from the freecharlist function in the Signature Locking component, where there is a double release of resources, which may lead to remote attacks...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.11 contains a security vulnerability. This vulnerability arises from the fact that after the nouveaucliinit function fails, nouveauclifini is called to clean up the client. Subsequently, the cleanup path for nouveaudrmopen calls nouveauclifini again. However, after...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.4 contains a security vulnerability. This vulnerability stems from the use of beacon IE in hidden group detection response entries. When merging scan entries after channel switching, the cfg80211updateassocbssentry function passes such entries to cfg80211updateknownbss...

Linux Kernel Security Vulnerabilities

There are security vulnerabilities in Linux kernels versions 6.6.15 to 6.7, 6.7.3 to 6.8, and 6.8 itself. These vulnerabilities stem from issues where, when the queue is removed from the host AP configuration and assigned to an intermediary device, the functions vfioapmdevResetQueue and...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 6.18.55, 7.2.9, and 7.3-rc5 have security vulnerabilities. These vulnerabilities stem from KVM SEV failing to clear the pointer when releasing the haveruncpus mask. This can lead to double release of the mask during the error path of sevguestinit...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fixed double-release of the compute pasid. If kfdprocessdeviceinitvm returns an error after the vm is converted to a compute vm and vm-pasid is set to compute pasid, KFD will not take the pdd-drmfile reference. As a...

Linux Distros Unpatched Vulnerability : CVE-2026-108104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when...

DEBIAN-CVE-2026-108104

Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared chunk length to trigger OutOfMemoryError, causing shared...

CVE-2026-108104

Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared chunk length to trigger OutOfMemoryError, causing shared...

CVE-2026-108104

Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared chunk length to trigger OutOfMemoryError, causing shared...

UBUNTU-CVE-2026-108104

Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared chunk length to trigger OutOfMemoryError, causing shared...

CVE-2026-108104 Xerial snappy-java 1.1.7.4 before 1.1.10.10 Double Release of Pooled Buffers in SnappyFramedInputStream

Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared chunk length to trigger OutOfMemoryError, causing shared...

CVE-2026-108104

The Xerial snappy-java library, specifically versions 1.1.7.4 before 1.1.10.10 , is vulnerable to a double release (CWE-415) vulnerability in the SnappyFramedInputStream component. The flaw occurs when replacement allocation fails, causing the system to return pooled buffers twice. An attacker ca...

CVE-2026-108104

Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared chunk length to trigger OutOfMemoryError, causing shared...

EUVD-2026-95806

Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared chunk length to trigger OutOfMemoryError, causing shared...

CVE-2026-108104 Xerial snappy-java 1.1.7.4 before 1.1.10.10 Double Release of Pooled Buffers in SnappyFramedInputStream

Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared chunk length to trigger OutOfMemoryError, causing shared...

CVE-2026-108104 Xerial snappy-java 1.1.7.4 before 1.1.10.10 Double Release of Pooled Buffers in SnappyFramedInputStream

Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared chunk length to trigger OutOfMemoryError, causing shared...