PT-2026-98829

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ACPI platform implementation where the use of the acpi get first physical node function within acpi platform fill resource and acpi create platform device is unsaf...

PT-2026-98482

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xagb bitmap set call within the xrep agfl fill function can fail. Because the result of xagb bitmap walk is not checked, the system...

PT-2026-98546

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the autofs component. Within the autofs fill super function, a new inode is created using autofs new ino. If the system fails to create the root inode, the proces...

CVE-2026-67223: Improper Neutralization of Special Elements used in an LDAP Query

RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3 maintenance lines but contains conflicting first-fixed versions for the 3.13, 4.0, and 4.1 lines. fill/2 substitutes $username into userdnpattern without RFC 4514 DN escaping, allowing a...

PT-2026-98905

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 3.13.18 RabbitMQ versions prior to 4.0.23 RabbitMQ versions prior to 4.1.14 RabbitMQ versions prior to 4.2.9 RabbitMQ versions prior to 4.3.3 Description An issue exists where the fill/2 function substitutes the...

Linux Distros Unpatched Vulnerability : CVE-2026-67223

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3 maintenance lines but contains conflicting...

PT-2026-96648

Name of the Vulnerable Software and Affected Versions Booking Calendar versions prior to 11.8.4 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting. This occurs when an attacker tricks a user into clicking a lin...

CVE-2026-93653: Unchecked Input for Loop Condition

A denial of service flaw was found in Poppler's Splash backend. A crafted PDF with tiling-pattern geometry approaching the int32 boundary can cause SplashOutputDev::tilingPatternFill to compute an attacker-controlled repeat count that drives an excessively long loop in the pattern-fill scanline...

GHSA-8H9X-89F2-M7X3 Grav: Decompression-bomb size cap bypassed by forged ZIP size in ZipArchiver/Installer

Summary The decompression-bomb bound added in 2.0.1 commit 1c1003c sums ZipArchive::statIndex$i'size' and rejects an archive whose declared uncompressed total exceeds system.gpm.archive.maxuncompressedsize default 1 GiB before extracting ZipArchiver.php:77-86; same logic in GPM\Installer::unZip a...

PT-2026-94487

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference occurs in the FUSE filesystem when the root inode allocation fails, typically under memory pressure. The function fuse fill super submount fails to check if th...

PT-2026-95068

Summary The decompression-bomb bound added in 2.0.1 commit 1c1003c sums ZipArchive::statIndex$i'size' and rejects an archive whose declared uncompressed total exceeds system.gpm.archive.max uncompressed size default 1 GiB before extracting ZipArchiver.php:77-86; same logic in GPMInstaller::unZip ...

PT-2026-94631

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hugetlbfs component where the hugetlbfs fill super function allocates a hugepage subpool when size or min size mount options are used. If the root dentry creation...

PT-2026-94782

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the zisofs fill pages function where the compressed block pointer table is read. While error paths and loop advancements correctly release the buffer head, the success...

PT-2026-94545

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the HID haptic subsystem where the fill effect buf function initializes values only for four specific haptic usages. However, it writes these values to field-value for...

Astra Linux – Vulnerability in ffmpeg5

A vulnerability, classified as critical, was discovered in FFmpeg up to version 5.1.5. This vulnerability affects the fillaudiodata function in the file /libswresample/swresample.c. The vulnerability leads to a heap-based buffer overflow. The attack can be initiated remotely. This issue was fixed...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - net: hsr: Avoid potential out-of-bound access in fillframeinfo. syzbot can inject a packet with 14 bytes, pretending it is a VLAN packet. Since fillframeinfo already relies on skb-maclen, extend the check to cover this case....

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ext4: Fix for accessing an uninitialized lock in the fc replay path. The following kernel trace can be triggered with fstest generic/629 when executed against a filesystem with the fast-commit feature enabled: INFO: Trying to...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerabilities have been resolved: ext4: Fixed a memory leak in ext4fillsuper. The buffer head references must be released before calling killbdev;. Otherwise, the buffer head and the page referenced by bdata will not be freed by killbdev, and subsequently, tha...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: inetdiag: fixed a kernel-infoleak issue for UDP sockets KMSAN reported a kernel-infoleak issue 1 that could be exploited by unprivileged users. After analysis, it turned out that UDP was not initializing r-idiagexpires. Other...

Astra Linux – Vulnerability in Poppler

A issue was discovered in Poppler through version 0.78.0. There is a divide-by-zero error in the function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc...