PT-2026-38988

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the dcn401 init hw function. The issue occurs because the function assumes the update bw bounding box callback is valid when entering the update path...

OESA-2026-1663 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: When using the low-level OCB API directly with AES-NI orbrother hardware-accelerated code paths, inputs whose length is not a multiplebrof 16 bytes...

An Agentic Multi-Agent Architecture for Cybersecurity Risk Management

Getting a real cybersecurity risk assessment for a small organization is expensive -- a NIST CSF-aligned engagement runs $15,000 on the low end, takes weeks, and depends on practitioners who are genuinely scarce. Most small companies skip it entirely. We built a six-agent AI system where each age...

SUSE-SU-2026:20758-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260210 release bsc1258046: - CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor STM in some IntelR Processor may allow a...

SUSE CVE-2026-23254

In the Linux kernel, the following vulnerability has been resolved: net: gro: fix outer network offset The udp GRO complete stage assumes that all the packets inserted the RX have the encapsulation flag zeroed. Such assumption is not true, as a few H/W NICs can set such flag when H/W offloading t...

CVE-2025-67114

The Sercomm SCE4255W (FreedomFi Englewood) broadband gateway is vulnerable to an authentication bypass due to a deterministic credential generation algorithm located in /ftl/bin/calc_f2 . Remote attackers can derive valid administrative or root credentials using the device's MAC address , grantin...

CVE-2026-30704

The WiFi Extender WDR201A HW V2.1, FW LFMZX28040922V1.02 exposes an unprotected UART interface through accessible hardware pads on the PCB...

UBUNTU-CVE-2026-23254

In the Linux kernel, the following vulnerability has been resolved: net: gro: fix outer network offset The udp GRO complete stage assumes that all the packets inserted the RX have the encapsulation flag zeroed. Such assumption is not true, as a few H/W NICs can set such flag when H/W offloading t...

CVE-2026-23254

In the Linux kernel, the following vulnerability has been resolved: net: gro: fix outer network offset The udp GRO complete stage assumes that all the packets inserted the RX have the encapsulation flag zeroed. Such assumption is not true, as a few H/W NICs can set such flag when H/W offloading t...

CVE-2026-30703

A command injection vulnerability exists in the web management interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02). The vulnerability is caused by the adm.cgi endpoint failing to properly sanitize user-supplied input passed to a command-related parameter within the sysCMD func...

CVE-2026-30704: Hidden Functionality

The WiFi Extender WDR201A HW V2.1, FW LFMZX28040922V1.02 exposes an unprotected UART interface through accessible hardware pads on the PCB...

CVE-2026-30704

The WiFi Extender WDR201A HW V2.1, FW LFMZX28040922V1.02 exposes an unprotected UART interface through accessible hardware pads on the PCB...

CVE-2026-30704

The Yuner Yipu WiFi Extender WDR201A (specifically HW V2.1 with FW LFMZX28040922V1.02 ) contains a hardware security vulnerability. The device exposes an unprotected UART interface through accessible pads on the PCB . This exposure can allow an attacker with physical access to the hardware to int...

USN-8096-3 linux-aws-5.15, linux-gcp-5.15, linux-gke, linux-hwe-5.15, linux-intel-iotg-5.15, linux-lowlatency-hwe-5.15, linux-oracle-5.15 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

Fedora 44 : systemd (2026-67f57405ee)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-67f57405ee advisory. More bugfixes. ---- - A bunch of bugfixes - More sanitization for invalid values received from hardware and firmware Tenable has extracted the preceding...

The vulnerabilities of the functions __msc_buffer_win_free() and msc_buffer_get_page() in the driver/hwtracing/intel_th/msu.c module of the Linux kernel’s hardware tracing driver allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions mscbufferwinfree and mscbuffergetpage in the drivers/hwtracing/intelth/msu.c module of the Linux kernel’s hardware tracing driver is related to insufficient data validation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability in the driver module drivers/isdn/hardware/mISDN/hfcpci.c, which supports mISDN hardware, allows a hacker to cause a service failure.

The vulnerability in the drivers/isdn/hardware/mISDN/hfcpci.c module, related to mISDN hardware support in the Linux operating system, is associated with incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

USN-8096-2 linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

USN-8096-1 linux, linux-aws, linux-gcp, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-xilinx-zynqmp vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...

USN-8095-1 linux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...