kernel: ipc: limit next_id allocation to the valid ID range

A flaw was found in the Linux kernel. The ipcidralloc function, used in the checkpoint/restore path for SysV Inter-Process Communication IPC ID allocation, does not properly limit ID allocation to the valid range. This can result in the system attempting to dereference freed memory, leading to a...

CVE-2026-69243

creationtimestamp| type| source ---|---|--- 2026-08-04 03:31:26+00:00| seen| https://gist.github.com/alon710/b3523524be79c42fa548f91ed3953ea3 2026-08-04 21:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/96645 2026-08-05 00:00:21+00:00| published-proof-of-concept|...

CVE-2026-69247

creationtimestamp| type| source ---|---|--- 2026-08-04 00:32:44+00:00| seen| https://gist.github.com/alon710/aae79fe7bcf7e7234c2912679ec8c451...

Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 Bug Fixes and Enhancements: AlmaLinux8.10 - KVM: s390: Limit adapter indicator access to mapped page JIRA:AlmaLinux-18388...

Moderate: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 Bug Fixes and Enhancements: AlmaLinux8.10 - KVM: s390: Limit...

Important: ldns security update

The ldns packages contain a library with the aim to simplify DNS programming in C. All low-level DNS/DNSSEC operations are supported. We also define a higher level API which allows a programmer to for instance create or sign packets. Security Fixes: ldns: ldns: Off-path poisoning attacks due to...

ALSA-2026:49857 Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 Bug Fixes and Enhancements: AlmaLinux8.10 - KVM: s390: Limit adapter indicator access to mapped page JIRA:AlmaLinux-18388...

PT-2026-67641

A flaw was found in the backchannel logout endpoint of the keycloak-services component, which is part of the Red Hat Build of Keycloak. This component handles authentication and session management for applications. The issue occurs when an OIDC identity provider is configured to skip signature...

RHEL 10 : kernel (RHSA-2026:49871)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49871 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Denial of...

GHSA-JWV3-5HGF-82WW

creationtimestamp| type| source ---|---|--- 2026-08-03 23:31:38+00:00| seen| https://gist.github.com/alon710/5ac467a3d50f6bfb29b3f3cc3d2c5925 2026-08-04 00:00:43+00:00| seen| https://gist.github.com/alon710/5ac467a3d50f6bfb29b3f3cc3d2c5925...

CVE-2026-59913

creationtimestamp| type| source ---|---|--- 2026-08-03 20:00:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms7bzetwiy2a 2026-08-03 20:39:49+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3ms7e72z4ng2c...

GHSA-JJ27-H5HQ-8X99

creationtimestamp| type| source ---|---|--- 2026-08-03 19:31:37+00:00| seen| https://gist.github.com/alon710/bdd530b55ab23396bc2ee2dc380962dc...

CVE-2026-69149

creationtimestamp| type| source ---|---|--- 2026-08-03 16:52:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms6xhtypny2p 2026-08-03 18:14:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5nwaq22vg5q3w 2026-08-05 02:26:04+00:00| seen|...

EUVD-2026-52339

Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator account by sending a crafted HTTP POST request with the X-Requested-With: XMLHttpRequest header to bypass the CanInstall...

MINI-WJXX-5625-PVGH

Bulletin has no description...

CVE-2026-67608

creationtimestamp| type| source ---|---|--- 2026-08-03 14:22:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jmbxd5vat537y...

CVE-2026-9487

XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID. getsignedxml in lib/XML/Sig.pm, called from verify, resolves the SignedInfo Reference/@URI to a node with the XPath expression "//@ID='$id'" and returns the first node of the resulting node set. A document in which...

MINI-X6H8-8PPQ-4CV2

Bulletin has no description...

MINI-XF57-F8J8-24G9

Bulletin has no description...

CVE-2026-9487

CVE-2026-9487 affects XML::Sig for Perl up to version 0.70. The vulnerability arises because _get_signed_xml() resolves IDs with the XPath //*[@ID='$id'] and accepts two elements sharing the same ID, causing signature wrapping: the digest and signature are validated against the first element in d...