The vulnerability of the vmbus_bus_init() function in the drivers/hv/vmbus_drv.c module of the support driver for Microsoft HyperV Linux kernel allows a attacker to cause a service failure.

The vulnerability of the vmbusbusinit function in the drivers/hv/vmbusdrv.c module of the Microsoft HyperV Linux kernel operating system involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the init() and fini() functions in the drivers/char/virtio_console.c module of the Linux kernel driver support for alphanumeric devices allows a attacker to cause a service failure.

The vulnerability of the init and fini functions in the drivers/char/virtioconsole.c driver module, which supports alphanumeric devices in Linux kernels, relates to the exposure of information through event log files. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2026-23101

In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only Add LED to ledslist when it is fully ready Before this change the LED was added to ledslist before ledinitcore gets called adding it the list before ledclassdev.setbrightnesswork gets initialized. This leave...

CVE-2026-23101 leds: led-class: Only Add LED to leds_list when it is fully ready

In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only Add LED to ledslist when it is fully ready Before this change the LED was added to ledslist before ledinitcore gets called adding it the list before ledclassdev.setbrightnesswork gets initialized. This leave...

CVE-2026-23101 leds: led-class: Only Add LED to leds_list when it is fully ready

In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only Add LED to ledslist when it is fully ready Before this change the LED was added to ledslist before ledinitcore gets called adding it the list before ledclassdev.setbrightnesswork gets initialized. This leave...

CVE-2026-23101 leds: led-class: Only Add LED to leds_list when it is fully ready

In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only Add LED to ledslist when it is fully ready Before this change the LED was added to ledslist before ledinitcore gets called adding it the list before ledclassdev.setbrightnesswork gets initialized. This leave...

GHSA-434X-W66G-QW3R vulnerabilities

Vulnerabilities for packages: mountpoint-s3, topgrade, netavark, tealdeer, cargo-c, pixi, zola, wadm, helix, oranda, qdrant, sdp-k8s-injector, sqlx, linkerd-network-validator, xh, rustup, nushell, py3-xet-core, wizer, linkerd2-proxy, mdbook, parseable, atuin, zellij, lychee, linkerd2, buck2,...

CVE-2026-25541 vulnerabilities

Vulnerabilities for packages: mountpoint-s3, topgrade, netavark, tealdeer, cargo-c, pixi, zola, wadm, helix, oranda, qdrant, sdp-k8s-injector, sqlx, linkerd-network-validator, xh, rustup, nushell, py3-xet-core, wizer, linkerd2-proxy, mdbook, parseable, atuin, zellij, lychee, linkerd2, buck2,...

openSUSE 16 : Recommended update for cloud-init (SUSE-SU-openSUSE-RU-2026:20129-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-openSUSE-RU-2026:20129-1 advisory. Changes in cloud-init: - Fix dependency replace -serial with -pyserial - Drop unneeded test dependency on httpretty, fixed long ago...

The vulnerability of the refscale_init() function in the kernel/rcu/refscale.c module of the synchronization subsystem in Linux multi-threaded kernel systems allows a attacker to cause a service failure.

The vulnerability of the refscaleinit function in the kernel/rcu/refscale.c module of the synchronization subsystem in Linux multi-threaded kernel systems is related to the execution of operations outside the memory buffer boundaries. Exploiting this vulnerability could allow an attacker to cause...

SUSE SLES16 : Recommended update for cloud-init (SUSE-SU-SUSE-RU-2026:20192-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-SUSE-RU-2026:20192-1 advisory. Changes in cloud-init: - Fix dependency replace -serial with -pyserial - Drop unneeded test dependency on httpretty, fixed...

Linux Distros Unpatched Vulnerability : CVE-2026-23101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - leds: led-class: Only Add LED to ledslist when it is fully ready Before this change the LED was added to ledslist before ledinitcore gets called adding it the...

CVE-2025-61655: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation VisualEditor. This vulnerability is associated with program files includes/ApiVisualEditorEdit.Php, modules/ve-mw/init/targets/ve.Init.Mw.DesktopArticleTarget.Js,...

ROS-20260203-73-0018

A vulnerability in the init.c component of the Linux operating system kernel is related to integer loss of significance. Exploitation of the vulnerability could allow an attacker to affect data integrity...

GO-2026-4352 OpenTofu has High CPU usage in "tofu init" with maliciously-crafted module packages in .zip format in github.com/opentofu/opentofu

OpenTofu has High CPU usage in "tofu init" with maliciously-crafted module packages in .zip format in github.com/opentofu/opentofu...

SUSE-SU-2026:20564-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-nocbcbkthread pointer bsc1254408. - CVE-2025-39880: ceph: fix race condition validating rparent before applying state...

kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the rxe component. This use-after-free vulnerability occurs in the rxecreatecq function. When the rxecqfrominit function fails, the subsequent call to rxecleanup attempts to free memory resource...

CentOS 9 : kernel-5.14.0-669.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-669.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: Clear the vmci transport packet properly when...

SUSE CVE-2026-23017

In the Linux kernel, the following vulnerability has been resolved: idpf: fix error handling in the inittask on load If the inittask fails during a driver load, we end up without vports and netdevs, effectively failing the entire process. In that state a subsequent reset will result in a crash as...

CVE-2026-23017

In the Linux kernel, the following vulnerability has been resolved: idpf: fix error handling in the inittask on load If the inittask fails during a driver load, we end up without vports and netdevs, effectively failing the entire process. In that state a subsequent reset will result in a crash as...