net/netfilter/ipset DoS

The vulnerability of the net/netfilter/ipset component in the Linux operating system is related to uncontrolled resource consumption due to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Direct Rendering Infrastructure Heap Buffer Overflow DoS

The vulnerability of the ccsmodestore function in the drivers/gpu/drm/xe/xegtccsmode.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service...

Linux TCM Driver Core Function Data Compromise

The vulnerabilities of the functions coretmrdraintmrlist and coretmrlun in the driver/target/targetcoretmr.c file of the Linux kernel’s TCM driver are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to compromise the...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: asix: Proper error handling for USB read errors has been added. The Syzbot issue with the asix driver remains the same. The problem is still present—the asixreadcmd function reads fewer bytes than requested by the caller...

SUSE CVE-2026-72319

In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in headroom Sashiko points out that after stripping the outer headers with pskbpull we should ensure the inner IP headers in ICMP errors from tunnels are present in the skb headroom f...

Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to IBM SDK, Java Technology Edition Quarterly CPU - Oct 2024 (CVE-2024-21235,CVE-2024-21217,CVE-2024-21210,CVE-2024-21208,CVE-2024-10917)

Summary IBM SDK, Java Technology Edition Quarterly CPU - Oct 2024 is vulnerable to a Side-Channel / Data Tampering Logic Errors , Deserialization of Untrusted Data , Observable Discrepancy , Integer Overflow or Wraparound attacks. This vulnerability affects IBM Spectrum Control. Vulnerability...

Malicious Package

Overview pfa-errors is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malware in pfa-errors

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

cups-filters security update

1.20.0-36.0.1.el810.1 - header/footer not being printed in banner page. Orabug: 28265099 [email protected] - Fixes Orabug: 29163824 source indentation not following convention [email protected] 1.20.0-36.1 - CVE-2026-64612 cups-filters: Handle libpng errors via longjmp/setjmp...

MAL-2026-14272 Malicious code in price-scripping-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b5a1792ab4822af305a8d853e858a8063d9e82e5d91d3dbd3a748300aaf7f9 [email protected] runs node dist/postinstall.js as its npm postinstall script. That entry point resolves the installing project's root via...

CVE-2026-75956: Allocation of Resources Without Limits or Throttling

Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory 6.2.3 - Pagination values were not strictly typed. Array/non-numeric values for example limitstart could trigger PHP type errors in arithmetic, and limit was not validated before use in list...

PT-2026-80371

songquanpeng one-api has an issue that results in business logic errors. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please...

CVE-2026-72319

In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in headroom Sashiko points out that after stripping the outer headers with pskbpull we should ensure the inner IP headers in ICMP errors from tunnels are present in the skb headroom f...

CVE-2026-72096

In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v-corruptederrs" was not atomic, thus it could be subject to race conditions. The call to dmauditlogtarget"max-corrupted-errors" may be skipped due to the races...

UBUNTU-CVE-2026-72096

In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v-corruptederrs" was not atomic, thus it could be subject to race conditions. The call to dmauditlogtarget"max-corrupted-errors" may be skipped due to the races...

CVE-2026-72096

CVE-2026-72096 affects the Linux kernel’s dm-verity component, where the error counter v->corrupted_errs was not atomic, potentially causing race conditions. This could allow the call to dm_audit_log_target("max-corrupted-errors") to be skipped due to races. The issue has been resolved in the ...

CVE-2026-72096 dm-verity: make error counter atomic

In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v-corruptederrs" was not atomic, thus it could be subject to race conditions. The call to dmauditlogtarget"max-corrupted-errors" may be skipped due to the races...

EUVD-2026-59054

In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v-corruptederrs" was not atomic, thus it could be subject to race conditions. The call to dmauditlogtarget"max-corrupted-errors" may be skipped due to the races...

CVE-2026-68455: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all session types. PRESERVEFD is only applicable to outgoing sessions. RETRIEVEFD and FINISH are only valid for incoming...

Linux Distros Unpatched Vulnerability : CVE-2026-72096

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-verity: make error counter atomic The error counter v-corruptederrs was not atomic, thus it could be subject to race conditions. The call to...