AlmaLinux 9.6 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (ALMALINUX9.6:CLSA-2026:1783697985)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783697985 advisory. - The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the...

CentOS Linux 8.4 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc (CENTOS8.4:CLSA-2026:1780135072)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1780135072 advisory. - The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the...

The vulnerability of the nct7363_present_pwm_fanin() function in the drivers/hwmon/nct7363.c module of the Linux operating system’s hardware monitoring driver allows a malicious actor to cause a service failure.

The vulnerability of the nct7363presentpwmfanin function in the drivers/hwmon/nct7363.c module of the Linux device monitoring driver causes a memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the set_link_state() function in the drivers/usb/gadget/udc/dummy_hcd.c file of the Linux kernel’s USB gadget driver allows a hacker to induce a service failure.

The vulnerability of the setlinkstate function in the drivers/usb/gadget/udc/dummyhcd.c file of the Linux USB gadget driver module is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service failure...

The vulnerability of the vc4_save_hang_state() function in the drivers/gpu/drm/vc4/vc4_gem.c file of the DRI driver infrastructure of the Linux kernel allows a hacker to cause a system failure.

The vulnerability of the vc4savehangstate function in the drivers/gpu/drm/vc4/vc4gem.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

AlmaLinux 9.2 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-dnssec-doc / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1739386415)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1739386415 advisory. - A flaw in query-handling code can cause named to exit prematurely with an assertion failure when: - nxdomain-redirect ; is...

ROS-20260930-73-0123

The vulnerability of the net/netfilter/nftablesapi.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0052

The vulnerability in the kernel-lt is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the unshare_fs() function in the kernel/fork.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the unsharefs function in the kernel/fork.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260930-73-0007

The vulnerability of the ocelotsetaggrpgids function in the drivers/net/ethernet/mscc/ocelot.c file of the Microsemi network adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260930-73-0040

The vulnerability in the kernel-lt is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0092

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0097

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0133

The vulnerability of the ntfs3/attrlist.c component in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure using corrupted NTFS images...

SUSE CVE-2026-97605

In the Linux kernel, the following vulnerability has been resolved: erofs: preserve LZMA decoders on resize failure The pool-resize path frees each stream's old decoder before allocating its replacement. If an allocation fails after some streams have already been replaced, the failed stream is pu...

SUSE CVE-2026-97920

In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the entry count when the histogram stats allocation fails printentries uses nentries both as the number of sort entries and as its own return value, so the -ENOMEM it stores when the stats allocation fails overwrite...

SUSE CVE-2026-97944

In the Linux kernel, the following vulnerability has been resolved: x86/cfi: Fix FineIBT hash offset in cfigetfunchash The switch of the FineIBT preamble from "subl $hash, %r10d" to the shorter "subl $hash, %eax" moved the hash immediate from offset 7 to offset 5 of the preamble...

CVE-2026-103042

LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel when started with --pdtransmode nccl, allowing unauthenticated attackers to exhaust KV-transfer worker memory. Attackers can call the exposedsetvalue method to store unbounded key-value pairs without siz...

CVE-2026-103042

LightLLM through version 1.2.0 is susceptible to a memory exhaustion vulnerability within the NCCL control channel. When the system is started with the --pd_trans_mode nccl flag, unauthenticated attackers can exploit the exposed exposed_set_value method. Because this method lacks size limits, it ...

CVE-2026-103042 LightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_value

LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel when started with --pdtransmode nccl, allowing unauthenticated attackers to exhaust KV-transfer worker memory. Attackers can call the exposedsetvalue method to store unbounded key-value pairs without siz...