CLSA-2026-1792247642 kernel: Fix of 50 CVEs

ALSA: usx2y: bound the hwdep mmap fault offset CVE-2026-74641 - ALSA: usx2y: Fix potential leaks of uninitialized memory CVE-2026-74641 - net/packet: reset the MAC header on the packet-socket transmit path CVE-2026-74667 - drm/amd/display: Bound VBIOS record-chain walk loops CVE-2026-53138 -...

CLSA-2026-1792244181 Fix of 78 CVEs

CVE-2026-99999 - ipv4: validate checksumstart before completing checksum CVE-2026-99999 CVE-2026-64015 - security/keys: fix missed RCU read section on lookup CVE-2026-64015 CVE-2023-53282 - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write CVE-2023-53282 CVE-2026-43250 -...

CLSA-2026-1792243434 kernel: Fix of 123 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - slip: remove sliphangup to fix use-after-free in slipreceivebuf CVE-2026-90057 - mm/hugetlb: fix list corruption in allocatefileregionentries CVE-2026-74518 - mm/pagereporting: use systemfreezablewq to fix UAF during suspend...

CLSA-2026-1792242681 Fix of 79 CVEs

CVE-2026-99999 - ipv4: validate checksumstart before completing checksum CVE-2026-99999 CVE-2026-43250 - usb: chipidea: udc: fix DMA and SG cleanup in epnuke CVE-2026-43250 CVE-2026-43281 - mailbox: Prevent out-of-bounds access in fwmboxindexxlate CVE-2026-43281 CVE-2025-38595 - xen: fix UAF in...

kernel: Fix of 69 CVEs

sctp: fix errchunk memory leaks in INIT handling CVE-2026-72413 - ACPICA: Fix use-after-free in acpidsterminatecontrolmethod CVE-2026-97455 - ACPICA: Enhance buffer validation in acpiutwalkamlresources CVE-2026-97445 - Bluetooth: L2CAP: validate connectionless PSM length CVE-2026-97408 - wifi:...

CLSA-2026-1791949745 kernel: Fix of 69 CVEs

sctp: fix errchunk memory leaks in INIT handling CVE-2026-72413 - ACPICA: Fix use-after-free in acpidsterminatecontrolmethod CVE-2026-97455 - ACPICA: Enhance buffer validation in acpiutwalkamlresources CVE-2026-97445 - Bluetooth: L2CAP: validate connectionless PSM length CVE-2026-97408 - wifi:...

Exploit for CVE-2026-64560

CVE-2026-64560 — realme RMX6699 Android 17 / COOS17 !andr...

CLSA-2026-1792240507 Fix of 81 CVEs

CVE-2026-99999 - ipv4: validate checksumstart before completing checksum CVE-2026-99999 CVE-2025-39945 - cnic: Fix use-after-free bugs in cnicdeletetask CVE-2025-39945 CVE-2022-50315 - ata: ahci: Match EMMAXSLOTS with SATAPMPMAXPORTS CVE-2022-50315 CVE-2025-38459 - atm: clip: Fix infinite recursi...

CLSA-2026-1792234299 kernel: Fix of 76 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - smb: client: fix UAF and buffer leak in cifschecktrans2 for malformed secondary T2 CVE-2026-89637 - smb: client: fix OOB read/write from unvalidated DataOffset in coalescet2 CVE-2026-89633 - xen/netfront: drop RX packets...

Exploit for CVE-2026-64560

Prague-KSU On the REDMI K90 Max codename prague, OS4.0.0...

CLSA-2026-1792236273 kernel: Fix of 76 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - smb: client: fix UAF and buffer leak in cifschecktrans2 for malformed secondary T2 CVE-2026-89637 - smb: client: fix OOB read/write from unvalidated DataOffset in coalescet2 CVE-2026-89633 - xen/netfront: drop RX packets...

SUSE CVE-2025-38596

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF in panthorgemcreatewithhandle debugfs code The object is potentially already gone after the drmgemobjectput. In general the object should be fully constructed before calling drmgemhandlecreate, except the...

Exploit for CVE-2026-64560

OPPO Find X10 Pro Max PMX110 / OP659FL1 · CVE-2026-64560 Res...

MGASA-2026-0515 Updated curl package fixes security vulnerabilities

curl 8.23.0 has been released. It fixes 24 CVEs since 8.22.0, listed at https://curl.se/docs/security.html Not all of theses CVEs affect Mageia. Of the ones fixed in 8.23.0, these are the ones that do: CVE-2026-86410: redirect to SFTP or SCP bypasses host verification CVE-2026-86412: server-set...

Updated curl package fixes security vulnerabilities

curl 8.23.0 has been released. It fixes 24 CVEs since 8.22.0, listed at https://curl.se/docs/security.html Not all of theses CVEs affect Mageia. Of the ones fixed in 8.23.0, these are the ones that do: CVE-2026-86410: redirect to SFTP or SCP bypasses host verification CVE-2026-86412: server-set...

CLSA-2026-1790583885 xorg-x11-server: Fix of 5 CVEs

CVE-2026-50262: fix reversed request length check in GLX ChangeDrawableAttributes leading to out-of-bounds read/write - CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver CreateSaverWindow after CheckScreenPrivate - CVE-2026-55999: fix heap buffer overflow in glamorfontget on...

CLSA-2026-1790585169 xorg-x11-server: Fix of 6 CVEs

CVE-2026-50262: fix reversed request length check in GLX ChangeDrawableAttributes leading to out-of-bounds read/write - CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver CreateSaverWindow after CheckScreenPrivate - CVE-2026-55999: fix heap buffer overflow in glamorfontget on...

EUVD-2026-103193

Text::CSVXS versions from 1.46 before 1.65 for Perl have a use-after-free of bindcolumns variables when skipemptyrows skips an empty line in getline. With bindcolumns, the parser writes each field into the caller's own scalar without taking a reference to it. When skipemptyrows skips an empty las...

EUVD-2026-103190

A flaw was found in libarchive. An attacker can cause a Denial of Service DoS or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archiveentrycopymacmetadata function...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnatsip: rewind offset when NAT shrinks the packet CVE-2026-100070 In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix srptallocrwctxs unwind counters CVE-2026-100075 In...