PT-2026-35911

Name of the Vulnerable Software and Affected Versions Ollama for Windows versions 0.12.10 through 0.17.5 Description Ollama for Windows fails to verify the integrity or authenticity of downloaded update executables. The update verification routine on Windows unconditionally returns success,...

The vulnerability of the am65_cpsw_nuss_ndo_slave_open() function in the drivers/net/ethernet/ti/am65-cpsw-nuss.c file of the Ethernet network adapter driver for Texas Instruments’ Linux kernel allows a hacker to cause a service failure.

The vulnerability of the am65cpswnussndoslaveopen function in the drivers/net/ethernet/ti/am65-cpsw-nuss.c file of the Ethernet network adapter driver for Texas Instruments’ Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability could all...

The vulnerability of the iscsi_sw_tcp_conn_set_param() function in the drivers/scsi/iscsi_tcp.c file of the Linux operating system’s SCSI device driver allows a attacker to cause a service failure.

The vulnerability of the iscsiswtcpconnsetparam function in the drivers/scsi/iscsitcp.c file of the Linux SCSI device driver is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `ionic_devlink_alloc()` function in the `drivers/net/ethernet/pensando/ionic/ionic_devlink.c` file of the Pensando Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ionicdevlinkalloc function in the drivers/net/ethernet/pensando/ionic/ionicdevlink.c file of the Pensando Ethernet network adapter driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an...

The vulnerability of the rt6_nlmsg_size() function in the net/ipv6/route.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to cause a service failure.

The vulnerability of the rt6nlmsgsize function in the net/ipv6/route.c module of the Linux operating system’s IPv6 kernel implementation is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hinic_init_cmdqs() function in the drivers/net/ethernet/huawei/hinic/hinic_hw_cmdq.c file of the Linux kernel’s Ethernet network adapter driver allows a attacker to cause a service failure.

The vulnerability of the hinicinitcmdqs function in the drivers/net/ethernet/huawei/hinic/hinichwcmdq.c file of the Linux Ethernet network adapter driver involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause...

The vulnerability of the ti_sci_intr_irq_domain_probe() function in the drivers/irqchip/irq-ti-sci-intr.c file of the Linux operating system’s IRQ chip driver module allows a attacker to cause a service failure.

The vulnerability of the tisciintrirqdomainprobe function in the drivers/irqchip/irq-ti-sci-intr.c file of the Linux kernel’s IRQ chip driver is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the amdgpuirqput() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the amdgpuirqput function in the Linux operating system’s kernel is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the xas_retry() function in Linux operating systems allows a hacker to induce a service failure.

The vulnerability of the xasretry function in Linux operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the am65-cpsw_nuss_phylink_cleanup() function in the Linux operating system driver allows a hacker to cause a service failure.

The vulnerability of the am65-cpsw-nuss-phylinkcleanup function in the am65-cpsw kernel driver of Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `sc7180_lpass_init()` function in the sound module/soc/qcom/lpass-sc7180.c, which is part of the Linux operating system’s SoC kernel support for audio, allows a hacker to cause a service failure.

The vulnerability of the sc7180lpassinit function in the sound/soc/qcom/lpass-sc7180.c sound support module of the Linux operating system’s SoC kernel is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the rtsx_usb_sdmmc_drv_probe() function in the mmc/host/rtsx_usb_sdmmc.c driver for MMC/SD/SDIO cards in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtsxusbsdmmcdrvprobe function in the mmc/host/rtsxusbsdmmc.c driver for MMC/SD/SDIO cards in the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the devm_cxl_add_region() function in Linux operating systems, which allows a hacker to trigger a service failure

The vulnerability of the devmcxladdregion function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hws_pool_buddy_init() function in the drivers/net/ethernet/mellanox/mlx5/core/steering/hws/pool.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hwspoolbuddyinit function in the drivers/net/ethernet/mellanox/mlx5/core/steering/hws/pool.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting...

The vulnerability of the cake_dequeue() function in the net/sched/sch_cake.c module of the network scheduling subsystem in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the cakedequeue function in the net/sched/schcake.c module of the network scheduling subsystem of the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the raw_get_next() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the rawgetnext function in the Linux operating system’s kernel is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to trigger a service failure...

The vulnerability of the `of_get_dr_timings()` function in the `drivers/memory/of_memory.c` module of the Linux kernel’s memory driver, which allows a hacker to cause a system failure.

The vulnerability of the ofgetdrtimings function in the drivers/memory/ofmemory.c module of the Linux kernel’s memory driver library is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the cxl_calc_capp_routing() function in the drivers/misc/cxl/pci.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the cxlcalccapprouting function in the drivers/misc/cxl/pci.c module of the Linux kernel is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the integrity_init_keyring() function in the security/integrity/digsig.c module of the Linux kernel’s security subsystem allows a attacker to trigger a service failure.

The vulnerability of the integrityinitkeyring function in the security/integrity/digsig.c module of the Linux kernel’s security subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: Sudo: Privilege escalation due to failu...