ROS-20260317-73-0018

A vulnerability in the doinsnioctl function of the comedi component of the Linux kernel is related to incorrect resource initialization. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

EulerOS Virtualization 2.12.1 : gnutls (EulerOS-SA-2026-1428)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization...

The vulnerability of the vc_uniscr_alloc() function in the drivers/tty/vt/vt.c file of the virtual terminal driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the vcuniscralloc function in the drivers/tty/vt/vt.c file of the Linux kernel’s virtual terminal driver module is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of software for storing images with a wide dynamic range of brightness, related to errors during initialization of variables, allows a hacker to cause a service failure.

The vulnerability of software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability in the driver drivers/clk/spacemit/ccu_mix.h of the Samsung Exynos CPU driver for Linux operating systems allows a hacker to cause a system failure.

The vulnerability in the drivers/clk/spacemit/ccumix.h module of the Samsung Exynos CPU driver for Linux operating systems is related to improper initialization of resources. Exploiting this vulnerability can allow an attacker to cause system failures...

The vulnerability in the capabilities_show() function of the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dmdebugfs.c driver of the Direct Rendering Infrastructure (DRI) graphics card for the Linux operating system allows a attacker to cause a service failure.

The vulnerability in the capabilitiesshow function of the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c driver of the Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems is related to incorrect resource initialization. Exploiting this vulnerability can...

The vulnerability of the ice component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ice component in the Linux operating system’s kernel is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

EulerOS Virtualization 2.12.0 : gnutls (EulerOS-SA-2026-1485)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization...

PT-2026-34951

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the vidtv channel pmt match sections function. This occurs because vidtv psi pmt stream init can return NULL during a memory allocation failure, whic...

EulerOS 2.0 SP12 : gnutls (EulerOS-SA-2026-1393)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization. When a token...

The vulnerability of the `__sev_platform_init_locked()` function in the drivers/crypto/ccp/sev-dev.c file of the Linux kernel cryptographic accelerator driver allows a attacker to cause a service failure.

The vulnerability of the sevplatforminitlocked function in the drivers/crypto/ccp/sev-dev.c file of the Linux kernel cryptographic accelerator driver module involves access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260313-73-0011

A vulnerability in the vmcitransportpacket function of the Linux operating system kernel is related to errors in variable initialization. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerability of the extension for Microsoft Entra ID (formerly Azure Active Directory). The Microsoft Azure AD SSH login extension, which is associated with initialization errors, allows a perpetrator to escalate their privileges.

The vulnerability of the Microsoft Entra ID formerly Azure Active Directory Microsoft Azure AD SSH login extension is related to initialization errors. Exploiting this vulnerability can allow attackers to increase their privileges...

UBUNTU-CVE-2026-27940

llama.cpp is an inference of several LLM models in C/C++. Prior to b8146, the ggufinitfromfileimpl in gguf.cpp is vulnerable to an Integer overflow, leading to an undersized heap allocation. Using the subsequent fread writes 528+ bytes of attacker-controlled data past the buffer boundary. This is...

CVE-2026-27940

llama.cpp is an inference of several LLM models in C/C++. Prior to b8146, the ggufinitfromfileimpl in gguf.cpp is vulnerable to an Integer overflow, leading to an undersized heap allocation. Using the subsequent fread writes 528+ bytes of attacker-controlled data past the buffer boundary. This is...

EUVD-2026-7413

ImageMagick: Heap overflow in pcd decoder leads to out of bounds read...

SUSE CVE-2023-43637

Due to the implementation of "deriveVaultKey", prior to version 7.10, the generated vault key would always have the last 16 bytes predetermined to be "arfoobarfoobarfo". This issue happens because "deriveVaultKey" calls "retrieveCloudKey" which will always return "foobarfoobarfoobarfoobarfoobarfo...

UBUNTU-CVE-2026-3994

A vulnerability was detected in rui314 mold up to 2.40.4. This issue affects the function mold::ObjectFilemold::X8664::initializesections of the file src/input-files.cc of the component Object File Handler. Performing a manipulation results in heap-based buffer overflow. Attacking locally is a...

Oracle Linux 9 : gnutls (ELSA-2026-4188)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-4188 advisory. - Fix PKCS11 token initialization label overflow CVE-2025-9820 Tenable has extracted the preceding description block directly from the Oracle Linux...

gnutls security update

3.8.3-10fips - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35925409 - Update FIPS module name for Oracle Linux Orabug: 35925409 3.8.3-10 - Fix PKCS11 token initialization label overflow CVE-2025-9820 - Fix name constraint processing performance issue...