ROS-20260701-73-0045

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260701-73-0015

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260701-73-0013

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260701-73-0055

The vulnerability of the smcclcsendconfirmaccept function in the net/smc/smcclc.c module of the CLC-handshaking TCP socket subsystem of the Linux operating system’s SMC kernel is related to the assignment of pointers due to an incorrect update of a reused resource. Exploiting this vulnerability c...

PT-2026-54802

In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: handle ctx allocation failure Patch series "mm/damon/reclaim,lru sort: handle ctx allocation failures". DAMON RECLAIM and DAMON LRU SORT could dereference NULL pointers if their damon ctx object allocations fail...

ROS-20260701-73-0041

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260701-73-0038

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260701-73-0027

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260701-73-0001

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260701-73-0040

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260701-73-0042

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260701-73-0037

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-54803

In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru sort: handle ctx allocation failure DAMON LRU SORT allocates the damon ctx object for its kdamond in its init function. damon lru sort enabled store wrongly assumes the allocation will always succeed once tried. If t...

The vulnerability of the cros_ec_ishtp_remove() function in the drivers/platform/chrome/cros_ec_ishtp.c module of the Chrome OS device driver support module for Linux kernel devices allows a attacker to cause a service failure.

The vulnerability of the crosecishtpremove function in the drivers/platform/chrome/crosecishtp.c module of the Chrome OS device driver support module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the wil_write_file_wmi() function in the drivers/net/wireless/ath/wil6210/debugfs.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a attacker to access protected information or cause a service failure.

The vulnerability of the wilwritefilewmi function in the drivers/net/wireless/ath/wil6210/debugfs.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system involves the exposure of confidential information. Exploiting this vulnerability could allow an attacker to gain...

CVE-2026-56334

Capgo before 12.128.2 lacks an UPDATE row-level security policy for the buildrequests table, preventing API-key and anonymous access from persisting builder status updates. Attackers can exploit this missing policy to cause build status and error details to remain unpersisted, leaving buildreques...

CVE-2026-14075

Technical details are not publicly available in the provided documents; the reports describe the vulnerability at a high level (no specifics on affected products/versions, exploitability, or fixes). Monitor for updates.

CVE-2025-71350 picklescan - Undetected Remote Code Execution via torch.utils.collect_env.run

picklescan before 0.0.28 fails to detect malicious pickle files using torch.utils.collectenv.run function in reduce methods. Attackers can embed undetected code in pickle files that executes remote commands when loaded by victims...

CVE-2026-44947

CVE-2026-44947 describes a missing clean-up in the legacy Project Role Template Binding (PRTB) reconciler in Rancher, affecting versions 2.13.0–2.13.7 and 2.14.0–2.14.3. The issue allows users to retain unauthorized Pod Security Admission (PSA) permissions after an administrator removes those per...

SUSE-SU-2026:22458-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs bsc1266290. - CVE-2025-38549: efivarfs: Fix memory leak of efivarfsfsinfo in...