Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Input: mms114 – fixed the touch indexing for MMS134S and MMS136. The MMS134S and MMS136 touch controllers have an event size of 6 bytes, rather than 8 bytes. When mms114readreg reads the touch data packet from the device into the...

ROS-20261012-73-0189

The vulnerability of the uverbscmd.c component in the Linux operating system is related to incorrect checking of the amount of data at the input stage. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0265

The vulnerability of the xen-netback component in the Linux operating system’s kernel is related to incorrect checking of the amount of data at the input. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-79625

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit...

EUVD-2026-89729

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit...

CVE-2026-79625

The CODESYS Control Runtime is vulnerable to an improper synchronization flaw within its monitoring functionality. When multiple clients submit concurrent requests, the system fails to properly synchronize access, potentially resulting in incorrect reads or writes or the corruption of internal me...

CVE-2026-79625 Improper Synchronization in Monitoring in CODESYS Control Runtime

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit...

ROS-20260930-73-0067

The vulnerability of the authenc component in the Linux operating system’s kernel is related to incorrect checking of the amount of data at input. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2026-79625: Concurrent Execution using Shared Resource with Improper Synchronization

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit...

ROS-20260928-73-0095

The vulnerability of the jfsiget function in the fs/jfs/inode.c file of the JFS file system in the Linux operating system is related to incorrect checking of the type of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

PT-2026-94943

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/bpf component where the ly instruction is used to load the 32-bit cpu nr value into the 64-bit BPF REG 0 register. This process fails to zero the upper bits o...

CVE-2026-43062: Access of Resource Using Incompatible Type

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix type confusion in l2capecredreconfrsp l2capecredreconfrsp casts the incoming data to struct l2capecredconnrsp the ECRED connection response, 8 bytes with result at offset 6 instead of struct...

EUVD-2021-13120

Malware in sbrugna...

EUVD-2014-7791

Malware in sbrugna...

EUVD-2023-1241

Malicious code in bioql PyPI...

Update of tzdata

Fix incorrect tzdb.dat by harding links...

PT-2025-32233

Name of the Vulnerable Software and Affected Versions affected versions not specified Description Cancelling a query during a call to the Scan method of the returned Rows can lead to unexpected results when other queries are executed concurrently. This can create a race condition where the result...

CVE-2025-6714 Incorrect Handling of incomplete data may prevent mongoS from Accepting New Connections

MongoDB Server's mongos component can become unresponsive to new connections due to incorrect handling of incomplete data. This affects MongoDB when configured with load balancer support. This issue affects MongoDB Server v6.0 prior to 6.0.23, MongoDB Server v7.0 prior to 7.0.20 and MongoDB Serve...

CVE-2023-30543

@web3-react is a framework for building Ethereum Apps . In affected versions the chainId may be outdated if the user changes chains as part of the connection flow. This means that the value of chainId returned by useWeb3React may be incorrect. In an application, this means that any data derived...

CVE-2023-47150

IBM Common Cryptographic Architecture CCA 7.0.0 through 7.5.36 could allow a remote user to cause a denial of service due to incorrect data handling for certain types of AES operations. IBM X-Force ID: 270602...