The vulnerability of the `virtio_gpu_get_caps_ioctl()` function in the `drivers/gpu/drm/virtio/virtgpu_ioctl.c` driver of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the virtiogpugetcapsioctl function in the drivers/gpu/drm/virtio/virtgpuioctl.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the assignment of pointers L. Exploiting this vulnerability can allow an attacker to cause a...

Ubuntu 18.04 LTS : Linux kernel (AWS) vulnerabilities (USN-8530-1)

"The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8530-1 advisory. It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag....

MAL-2026-10168 Malicious code in paysafe-fraud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a596646a3604e01bef558573fc7199a2b9e9cc07ab7edae1b7e445d2e2b860b6 Package advertises itself as the 'Paysafe Fraud Prevention SDK' name paysafe-fraud, repo github.com/paysafe/paysafe-fraud but the exported...

USN-8530-1 linux-aws, linux-aws-fips vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...

USN-8529-1 linux, linux-azure-4.15, linux-azure-fips, linux-fips, linux-gcp-4.15, linux-gcp-fips, linux-kvm, linux-oracle vulnerabilities

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...

USN-8527-1 linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - RISC-V architecture; - Cryptographic API; - InfiniBand drivers; - IOMMU subsystem; - Network drivers; -...

USN-8492-5: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; -...

Virtuozzo Infrastructure 7.3 Update 1 Hotfix 2 (7.3.1-62)

This update provides a security fix. Vulnerability id: VSTOR-137528 A security fix for CVE-2026-53359...

CVE-2026-2399

creationtimestamp| type| source ---|---|--- 2026-07-09 16:15:07+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-02...

USN-8492-4 linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; -...

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat

An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger an out-of-bounds heap write. This may be used to crash the server, or for...

China-Linked UAT-7810 Expands ORB Network With New LONGLEASH Malware

A Chinese threat actor tracked as UAT-7810 is actively refining its bespoke malware to expand its Operational Relay Box ORB network by breaking into internet-facing networking devices. According to findings from Cisco Talos, UAT-7810 is an advanced persistent threat APT actor that's responsible f...

The vulnerability of the xe_oa_set_no_preempt() function in the drivers/gpu/drm/xe/xe_oa.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the xeoasetnopreempt function in the drivers/gpu/drm/xe/xeoa.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a...

xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: out-of-bounds heap write in DRI2 DRIGetBuffers/DRIGetBuffersWithFormat

An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger an out-of-bounds heap write. This may be used to crash the server, or for...

ClickFix Scams Abuse Google, Cloudflare Checks to Deliver 7 Malware Families

Malwarebytes links fake Google and Cloudflare verification pages to shared ClickFix infrastructure delivering StealC, NetSupport and other malware...

USN-8508-1: Linux kernel (NVIDIA) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - GP...

USN-8508-1 linux-nvidia-6.17 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - Block layer subsystem; - Cryptographic API; - DMA engine subsystem; - GP...

Linux Distros Unpatched Vulnerability : CVE-2011-3571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the Virtual Desktop Infrastructure VDI component in Oracle Virtualization 3.2 allows remote authenticated users to affect...

Ubuntu 24.04 LTS / 25.10 : Linux kernel vulnerabilities (USN-8490-1)

"The remote Ubuntu 24.04 LTS / 25.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8490-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects...

The vulnerability of the amdgpu_device_suspend() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_device.c driver code allows a hacker to cause a service failure in AMD GPU cores supporting Direct Rendering Infrastructure (DRI) in Linux operating systems.

The vulnerability of the amdgpudevicesuspend function in the drivers/gpu/drm/amd/amdgpu/amdgpudevice.c driver, which is part of the DRI support module for AMD GPU cores in Linux operating systems, leads to a mutual locking condition. Exploiting this vulnerability can allow an attacker to cause a...