CVE-2026-74287: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length sctpverifyasconf and sctpverifyparam only validate ADDIP, DELIP, and SETPRIMARY parameters against a fixed minimum size of sizeofstruct sctpaddipparam + sizeofstruct sctpparamhdr...

PT-2026-72298

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sparx5 register notifier blocks function where the switchdev blocking notifier is registered before the allocation of the ordered workqueue. If the workqueue...

PT-2026-72212

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1.2 Description A memory leak occurs in the octeontx2-pf driver during initialization failure. The otx2 init hw resources function initializes SQ aura and pool resources, but if a subsequent setup step fails, t...

PT-2026-72412

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs during the initialization of the Block Translation Table BTT in the nvdimm module. Specifically, arenas allocated by the discover arenas or create arenas functions a...

PT-2026-72723

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SCTP implementation where the functions sctp verify asconf and sctp verify param fail to verify if the declared length of an embedded address parameter fits within...

PT-2026-72586

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Stream Control Transmission Protocol SCTP handshake process. During this process, a server embeds an INIT chunk into a cookie sent via INIT-ACK, which the client...

GO-2025-3678 vulnerabilities

Vulnerabilities for packages: uv, zola, zed, shadowsocks-rust, lychee, sccache, linkerd-extension-init, atuin, sdp-k8s-injector, wasmtime, wadm, pixi, deno, parseable, zizmor, rustup, sqlx, rustls-ffi, wasm-pack, wasmcloud, ntpd-rs, xh, wash, rye, oranda, cargo-audit, qdrant, linkerd2-proxy,...

SUSE CVE-2026-68403

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: initialize SDIO data work before cleanup brcmfsdioprobe stores the newly allocated bus in sdiodev-bus before allocating the ordered workqueue. If that allocation fails, the function jumps to fail and calls...

OESA-2026-3402 podman security update

Podman manages the entire container ecosystem which includes pods, containers, container images, and container volumes using the libpod library. Security Fixes: A flaw was found in Podman. The podman machine init command fails to verify the TLS certificate when downloading the VM images from an O...

SUSE CVE-2026-68105

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic during driver load failure Avoid kernel panic if MES init fails during driver load. The KIQ ring is falsely marked as ready as ASICs that use MES, KIQ is owned by MES. BUG: kernel NULL pointer...

CVE-2026-49819: Improper Neutralization of Special Elements used in an OS Command

UpSnap is a wake on lan web app. Versions 4.4.1 through 5.3.5 are vulnerable to a missing-authentication / privilege-escalation chain in pb.HandlerInitSuperuser backend/pb/handlers.go:249, reachable as POST /api/upsnap/init-superuser. The vulnerable code lacks any authentication, setup token, IP...

PT-2026-80534

cfg init in confuse.c in libConfuse 3.2.2 has a memory leak...

SUSE-SU-2026:23234-1 Security update for amazon-ecs-init

This update for amazon-ecs-init fixes the following issue: Update to version 1.106.0. Security issues fixed: - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF input is parsed bsc1267794. Other...

OPENSUSE-SU-2026:21574-1 Security update for amazon-ecs-init

This update for amazon-ecs-init fixes the following issue: Update to version 1.106.0. Security issues fixed: - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary check can lead to crash when malformed ELF/BTF input is parsed bsc1267794. Other...

CVE-2026-18710

CVE-2026-18710 affects a MongoDB driver component. It could write sensitive configuration data, including an outbound-connection credential, to application logs in cleartext during normal client initialization. This requires log access to recover the credential. The impact is limited to confident...

CVE-2026-68403

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. During the driver's initialization and cleanup process, an uninitialized work item could be accessed and cancelled. This issue occurs if a specific memory allocation fails, leading to an invalid work drain. A local attacker could...

wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one()

...

CVE-2026-73067: Out-of-bounds Read

Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata model loaded through TessBaseAPI::Init can cause SquishedDawg::readsquisheddawg in src/dict/dawg.cpp to accept an unterminated forward-edge run, after which SquishedDawg::Load calls numforwardedges0 and lastedge in...

CVE-2026-68375

In the Linux kernel, the following vulnerability has been resolved: bnxten: Handle partially initialized auxiliary devices bnxtauxdevicesinit calls auxiliarydeviceinit before all fields used by bnxtauxdevrelease are initialized. After auxiliarydeviceinit succeeds, later errors must unwind with...

CVE-2026-68185

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jumplabelinit before parseearlyparam When enabling both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y, then diabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=...