SUSE SLES15 Security Update : libpcap (SUSE-SU-2026:4195-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4195-1 advisory. - CVE-2026-0799: the BPF interpreter does not validate values in BPF instructions that load/store a value from/to a scratch memory...

PT-2026-93509

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An infinite loop may occur when the stop streaming function is called. This issue is addressed by implementing a bounded poll of the queue status that continues until the queues drain or...

PT-2026-93917

Name of the Vulnerable Software and Affected Versions HAPI FHIR versions prior to 6.9.12 Description A denial-of-service issue exists when processing Smart Health Card SHC JWT content. If the JWT header contains zip: "DEF" and the raw-DEFLATE payload is empty or truncated, the SHCParser.inflate a...

CVE-2026-89991: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix infinite loop in pcpufreelist push with one possible CPU pcpufreelistpush can loop forever when only one CPU is possible and an NMI re-enters pcpufreelistpush while the interrupted context holds that CPU's freelist lock...

CVE-2026-89964: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: parisc: eisa: Fix infinite loop when parsing invalid IRQ value When an invalid value is passed via the "eisairqedge=" kernel command line parameter e.g. "eisairqedge=16,5", eisairqsetup prints an error message and continues witho...

CVE-2026-89868: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add timeout while stopstreaming When stopstreaming is called, an infinite loop may occur in some cases. Add a bounded poll of the queue status: loop until the queues drain, sleeping briefly between poll...

PT-2026-93998

Name of the Vulnerable Software and Affected Versions AsyncSSH versions prior to 2.24.0 Description AsyncSSH is a Python package providing an asynchronous client and server implementation of the SSHv2 protocol. The software fails to validate the send pktsize value provided by a peer, allowing it ...

Linux Distros Unpatched Vulnerability : CVE-2026-89964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - parisc: eisa: Fix infinite loop when parsing invalid IRQ value When an invalid value is passed via the eisairqedge= kernel command line parameter e.g...

CVE-2026-81876: Improper Input Validation

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser in org.hl7.fhir.r5/src/main/java/org/hl7/fhir/r5/elementmodel/SHCParser.java can enter an infinite loop while processing attacker-controlled Smart Health Car...

PT-2026-93632

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An infinite loop can occur in the pcpu freelist push function when the system is configured with only one possible CPU such as when CONFIG SMP=n or nr cpus=1. This happens if a...

CVE-2026-84997: Loop with Unreachable Exit Condition

react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. From 0.6.0 until 1.11.1, React\Http\Io\ChunkedDecoder could enter an infinite loop while processing a malformed Transfer-Encoding: chunked body because handleData required its buffer to shrink on every...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in immutable

Summary IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in immutable Vulnerability Details CVEID:CVE-2026-59879 DESCRIPTION: Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, Listset, ListsetSize, ListsetIn, ListupdateIn, and the...

CVE-2026-69210

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, WebSocket FrameTranscoder.bodyLength rejects extended payload lengths above Integer.MAXVALUE but permits negative 64-bit lengths. A remote client that completes a WebSocket handshake through an Ember server can send su...

EUVD-2026-79192

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, WebSocket FrameTranscoder.bodyLength rejects extended payload lengths above Integer.MAXVALUE but permits negative 64-bit lengths. A remote client that completes a WebSocket handshake through an Ember server can send su...

CVE-2026-91952

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can send specially crafted AVC444 graphics updates. This can cause the pooldecoderect function to enter an infinite loop when decoding AVC444 metablocks with an excessive number of region rectangles. The vulnerability lea...

DEBIAN-CVE-2026-91952

FreeRDP versions before 3.31.0 contain an infinite-loop denial of service in the pooldecoderect function when decoding AVC444 metablocks with more region rectangles than preallocated worker array size. A malicious RDP server can send crafted AVC444 graphics updates causing the threaded decode pat...

CVE-2026-91952

FreeRDP versions before 3.31.0 contain an infinite-loop denial of service in the pooldecoderect function when decoding AVC444 metablocks with more region rectangles than preallocated worker array size. A malicious RDP server can send crafted AVC444 graphics updates causing the threaded decode pat...

CVE-2026-91952

FreeRDP versions before 3.31.0 contain an infinite-loop denial of service in the pooldecoderect function when decoding AVC444 metablocks with more region rectangles than preallocated worker array size. A malicious RDP server can send crafted AVC444 graphics updates causing the threaded decode pat...

UBUNTU-CVE-2026-91952

FreeRDP versions before 3.31.0 contain an infinite-loop denial of service in the pooldecoderect function when decoding AVC444 metablocks with more region rectangles than preallocated worker array size. A malicious RDP server can send crafted AVC444 graphics updates causing the threaded decode pat...

Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem

Summary Multiple vulnerabilities were addressed in IBM watsonx Code Assistant On Prem V5.3.1 Patch 11 Vulnerability Details CVEID:CVE-2026-16221 DESCRIPTION: Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal...