Wireshark ESS DoS

The vulnerability of the ESS protocol analyzer used by Wireshark for analyzing computer network traffic is related to errors during initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux NCI Core Heap Buffer Overflow DoS

The vulnerability in the nciclosedevice function within net/nfc/nci/core.c, which supports the implementation of the NFC NCI core in the Linux operating system, is related to synchronization errors occurring when a shared resource is utilized. Exploitation of this vulnerability may enable an...

Linux kernel smbdirect_socket Heap Buffer Overflow DoS

The vulnerability of the smbdirectsocketinit function in the fs/smb/common/smbdirect/smbdirectsocket.h module of the Linux kernel is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Kernel DoS

The vulnerability in the sevessyncvmsa function within the arch/x86/kvm/svm/sev.c subsystem of the virtualization sub-system on x86-based Linux kernel systems is related to synchronization errors. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux Kernel DoS

The vulnerability in the bcm2835asbcontrol function within the drivers/pmdomain/bcm/bcm2835-power.c file of the Linux kernel operating system is related to synchronization errors. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux Block Buffer Overflow DoS

The vulnerability of the blkallocextminor function in the block/genhd.c module, which supports the block-level kernel in the Linux operating system, is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

UBUNTU-CVE-2026-76098

Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering creates deeply nested emphasis tokens from consecutive asterisk characters, and recursive rendering in HTMLRenderer.rendertoken can excee...

CVE-2026-72703

CVE-2026-72703 is a soundness flaw in the guard checker of Rocq Prover (introduced in Coq 8.20). The function find_uniform_parameters in kernel/inductive.ml inspects only self-recursive calls when determining parameter uniformity for nested mutual fixpoints. When no body calls itself, it incorrec...

SUSE-SU-2026:23311-1 Security update for xmlrpc-c

This update for xmlrpc-c fixes the following issue - CVE-2026-15928: Xreflected cross-site scripting XSS vulnerability in the error page component bsc1272769...

OPENSUSE-SU-2026:21633-1 Security update for xmlrpc-c

This update for xmlrpc-c fixes the following issue - CVE-2026-15928: Xreflected cross-site scripting XSS vulnerability in the error page component bsc1272769...

SUSE-SU-2026:23308-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issue: - CVE-2026-52718: byte count instead of a bit count in gstav1parserparsetilelistobu can cause parser desynchronization and an application crash bsc1268394...

CVE-2026-74604

A flaw was found in the Linux kernel's thermal/drivers/hwmon component. A use-after-free vulnerability was introduced in the thermaladdhwmonsysfs function due to the removal of a valid check in an error handling path. This flaw could allow a local attacker to cause a denial of service or...

CVE-2026-74598

A flaw was found in the Linux kernel's IPv6 networking stack. An off-by-one error in the validation of the Route Information option length RFC 4191 allows a remote attacker to craft a Router Advertisement RA packet. This crafted packet can cause the kernel to read up to 8 bytes beyond the intende...

CVE-2026-74597

A flaw was found in the Linux kernel's IPv6 Internet Protocol version 6 tunnel error handling. A remote attacker could send a specially crafted IPv6 ICMP Internet Control Message Protocol error packet with a malformed inner destination-options header. This could lead to memory corruption within t...

CVE-2026-74657

A flaw was found in the Linux kernel. The fibnlmsgsize function, which estimates the size for network message buffers, incorrectly calculates the required space for nexthops when IPv4 routes contain an IPv6 gateway. This error can lead to the allocation of an undersized buffer for route...

CVE-2026-74669

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When processing Internet Control Message Protocol ICMP errors for tunneled packets, the system can incorrectly use a stale IPv4 option offset. A remote attacker could exploit this by sending a specially crafted ICMP packet,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: netfs: Fix for writeback error handling The error handling in the writebackiter loop has been corrected. If an error occurs, writebackiter must be called again, with the error set to the actual error, so that the iteration sta...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fixed RB-tree corruption in the error handling path during probes. The info-node RB-tree member is initialized to zero using kzalloc. If a device does not support ATS, the devicerbtreeinsert call is skipped. If a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: nvme-core: fixed a memory leak in dhchapctrlsecret. Free dhchapsecret from nvmectrldhchapctrlsecretstore before returning, when nvmeauthGenerateKey returns an error...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: btrfs: removed BUGON functions in addnewfreespace In addnewfreespace, there were BUGON functions designed to handle any failures in adding free space to the in-memory free space cache. Such failures are mostly due to ENOMEM,...