UBUNTU-CVE-2026-23740

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when astcoredumper writes its gdb init and output files to a directory that is world-writable for example /tmp, an attacker with write permissionwhich is a...

CVE-2026-23740 Asterisk vulnerable to potential privilege escalation

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when astcoredumper writes its gdb init and output files to a directory that is world-writable for example /tmp, an attacker with write permissionwhich is a...

CVE-2026-23740

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when astcoredumper writes its gdb init and output files to a directory that is world-writable for example /tmp, an attacker with write permissionwhich is a...

EUVD-2026-5617

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when astcoredumper writes its gdb init and output files to a directory that is world-writable for example /tmp, an attacker with write permissionwhich is a...

The vulnerability of the init_amd_zen4() function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s kernel support for x86 platforms, allows a hacker to trigger a system failure.

The vulnerability of the initamdzen4 function in the arch/x86/kernel/cpu/amd.c module, which supports Linux’s x86 kernel, is related to errors in the code for generating pseudo-random numbers. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux Distros Unpatched Vulnerability : CVE-2026-23740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when astcoredumper...

kernel: libceph: fix potential use-after-free in have_mon_and_osd_map()

A use-after-free vulnerability was found in the Ceph client session initialization in the Linux kernel. The havemonandosdmap function checks map epochs without holding the appropriate locks, racing with concurrent map updates that free the old map. This can result in dereferencing freed memory...

SUSE CVE-2026-23101

In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only Add LED to ledslist when it is fully ready Before this change the LED was added to ledslist before ledinitcore gets called adding it the list before ledclassdev.setbrightnesswork gets initialized. This leave...

PT-2026-46013

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description On MIPS architecture, the current thread info is defined as a global register variable located in $gp and is assigned a new address during kernel relocation. A bug in LLVM causes it to...

The vulnerability of the vmbus_bus_init() function in the drivers/hv/vmbus_drv.c module of the support driver for Microsoft HyperV Linux kernel allows a attacker to cause a service failure.

The vulnerability of the vmbusbusinit function in the drivers/hv/vmbusdrv.c module of the Microsoft HyperV Linux kernel operating system involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the init() and fini() functions in the drivers/char/virtio_console.c module of the Linux kernel driver support for alphanumeric devices allows a attacker to cause a service failure.

The vulnerability of the init and fini functions in the drivers/char/virtioconsole.c driver module, which supports alphanumeric devices in Linux kernels, relates to the exposure of information through event log files. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2026-23101

In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only Add LED to ledslist when it is fully ready Before this change the LED was added to ledslist before ledinitcore gets called adding it the list before ledclassdev.setbrightnesswork gets initialized. This leave...

CVE-2026-23101 leds: led-class: Only Add LED to leds_list when it is fully ready

In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only Add LED to ledslist when it is fully ready Before this change the LED was added to ledslist before ledinitcore gets called adding it the list before ledclassdev.setbrightnesswork gets initialized. This leave...

CVE-2026-23101 leds: led-class: Only Add LED to leds_list when it is fully ready

In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only Add LED to ledslist when it is fully ready Before this change the LED was added to ledslist before ledinitcore gets called adding it the list before ledclassdev.setbrightnesswork gets initialized. This leave...

CVE-2026-23101 leds: led-class: Only Add LED to leds_list when it is fully ready

In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only Add LED to ledslist when it is fully ready Before this change the LED was added to ledslist before ledinitcore gets called adding it the list before ledclassdev.setbrightnesswork gets initialized. This leave...

CVE-2026-25541 vulnerabilities

Vulnerabilities for packages: parseable, cargo-c, linkerd2, linkerd-await, netavark, uv, linkerd-network-validator, wasmtime, deno, pgcat, sdp-k8s-injector, zed, sccache, zizmor, ntpd-rs, oranda, berg, zola, efs-utils, helix, geckodriver, rustup, yazi, mountpoint-s3, kdash, xh, sqlx, samply, pixi...

GHSA-434X-W66G-QW3R vulnerabilities

Vulnerabilities for packages: parseable, cargo-c, linkerd2, linkerd-await, netavark, uv, linkerd-network-validator, wasmtime, deno, pgcat, sdp-k8s-injector, zed, sccache, zizmor, ntpd-rs, oranda, berg, zola, efs-utils, helix, geckodriver, rustup, yazi, mountpoint-s3, kdash, xh, sqlx, samply, pixi...

The vulnerability of the refscale_init() function in the kernel/rcu/refscale.c module of the synchronization subsystem in Linux multi-threaded kernel systems allows a attacker to cause a service failure.

The vulnerability of the refscaleinit function in the kernel/rcu/refscale.c module of the synchronization subsystem in Linux multi-threaded kernel systems is related to the execution of operations outside the memory buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a...

Linux Distros Unpatched Vulnerability : CVE-2026-23101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - leds: led-class: Only Add LED to ledslist when it is fully ready Before this change the LED was added to ledslist before ledinitcore gets called adding it the...

SUSE SLES16 : Recommended update for cloud-init (SUSE-SU-SUSE-RU-2026:20192-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-SUSE-RU-2026:20192-1 advisory. Changes in cloud-init: - Fix dependency replace -serial with -pyserial - Drop unneeded test dependency on httpretty, fixed...