kernel: ipv6: sit: reload inner IPv6 header after GSO offloads

A flaw was found in the Linux kernel's Simple Internet Transition SIT tunnel driver for IPv6. When processing network traffic with Generic Segmentation Offload GSO enabled, the driver may use a stale pointer to the inner IPv6 header after the socket buffer skb head has been reallocated. This can...

kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface VTI module. When a VTI tunnel device is moved to a different network environment, an unprivileged user in a separate user space can manipulate tunnel parameters. This manipulation could allow the user to intercept or redirect...

CVE-2026-90982

creationtimestamp| type| source ---|---|--- 2026-09-17 07:02:54+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mvp3jopv5s2t 2026-09-17 09:08:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5dccxdrbg6xcd...

EUVD-2026-81338

The LearnPress WordPress plugin before 4.4.7 does not restrict the correctness flags it returns when a quiz answer is checked, allowing unauthenticated attackers to obtain the correct answer to every option of a question, along with the instructor's explanation, on courses configured to be taken...

CVE-2026-85386

creationtimestamp| type| source ---|---|--- 2026-09-17 04:40:10+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvotkjyauh2j...

CVE-2026-89462

creationtimestamp| type| source ---|---|--- 2026-09-17 03:30:16+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvopnjcdmk2l 2026-09-17 03:30:21+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117284262084378796...

CVE-2026-63128

creationtimestamp| type| source ---|---|--- 2026-09-17 00:35:06+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-9pj6-vhgr-3mwh 2026-09-17 02:31:48+00:00| seen| https://gist.github.com/alon710/db9fb10afa43797b42605078feda688f...

CVE-2026-84397

creationtimestamp| type| source ---|---|--- 2026-09-17 00:09:02+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mvoefolhib2u...

Unity Linux 20.1070-8ae / 20.1070e Security Update: sssd (UTSA-2026-109833)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109833 advisory. A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet...

RHEL 8 : .NET 10.0 (RHSA-2026:68676)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68676 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...

ROS-20260917-73-0018

The vulnerability of the relayfs file system implementation in the Linux operating system is related to incorrect calculation of the starting position for reading in the function relayfilereadstartpos in the kernel/relay.c module. Exploiting this vulnerability can allow an attacker to cause servi...

libcjose-devel-0.6.2.8-2.1 on GA media (moderate)

libcjose-devel-0.6.2.8-2.1 on GA media Announcement ID: openSUSE-SU-2026:11784-1 Rating: moderate Cross-References: CVE-2026-53938 CVE-2026-53939 CVSS scores: CVE-2026-53938 SUSE : 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2026-53938 SUSE : 8.8...

Debian dla-4781 : firefox-esr - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4781 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4781-1 [email protected]...

CVE-2026-93159: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - fix heap info leak on I2C transfer failure The nonblocking RNG path allocates a workdata structure to track the state of an in-flight asynchronous I2C request. This pointer is stored in rng-priv and later...

AlmaLinux 10 : coreutils (ALSA-2026:67886)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67886 advisory. coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input CVE-2026-56391 coreutils: GNU...

CVE-2026-61709

creationtimestamp| type| source ---|---|--- 2026-09-16 23:32:20+00:00| seen| https://gist.github.com/alon710/578422b703a61d9f7998d7bc971d97e1 2026-09-17 00:00:36+00:00| seen| https://gist.github.com/alon710/578422b703a61d9f7998d7bc971d97e1...

CVE-2026-85789

creationtimestamp| type| source ---|---|--- 2026-09-16 23:24:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4lfunwf5fhfsh...

CVE-2026-80274

creationtimestamp| type| source ---|---|--- 2026-09-16 23:04:36+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mvoasfpe4c22 2026-09-17 13:05:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvpprlqyto23 2026-09-18 04:45:49+00:00| seen|...

CVE-2026-19666

creationtimestamp| type| source ---|---|--- 2026-09-16 23:04:36+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mvoasfpe4c22 2026-09-17 21:29:51+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3mvqlxtlcbp2w 2026-09-18 04:45:33+00:00| seen|...

CVE-2026-76163

creationtimestamp| type| source ---|---|--- 2026-09-16 23:04:36+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mvoasfpe4c22 2026-09-17 13:05:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvpprlqyto23 2026-09-18 04:45:42+00:00| seen|...