Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005465)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005465 advisory. In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when devlink reload during pf initialization The devlink reload proce...

Exploit for Improper Initialization in Linux Linux_Kernel

megaquagga-pentest-re...

PT-2026-39012

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the KVM arm64 component, a failure in the vgic allocate private irqs locked function during vgic creation can lead to dist-rd regions remaining uninitialized. Consequently, when kvm...

Security update for gimp

This update for gimp fixes the following issues: CVE-2026-2044: lack of proper initialization of memory can allow remote attackers to execute arbitrary code bsc1258532. CVE-2026-2045: check offset in the colormap is valid before using it bsc1258533. CVE-2026-2048: lack of proper validation of...

SUSE-SU-2026:0684-1 Security update for gimp

This update for gimp fixes the following issues: - CVE-2026-2044: lack of proper initialization of memory can allow remote attackers to execute arbitrary code bsc1258532. - CVE-2026-2045: check offset in the colormap is valid before using it bsc1258533. - CVE-2026-2048: lack of proper validation ...

PT-2026-36466

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the logitech-hidpp module during the probing of the Logitech G920 Driving Force Racing Wheel for Xbox One. If force feedback initialisation fails, an...

BIT-PYTORCH-2025-2149 PyTorch Quantized Sigmoid Module nnq_Sigmoid initialization

A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnqSigmoid of the component Quantized Sigmoid Module. The manipulation of the argument scale/zeropoint leads to improper initialization. The attack needs to be approached...

The vulnerability of the k3_r5_cluster_of_init() function in the drivers/remoteproc/ti_k3_r5_remoteproc.c file of the Linux kernel subsystem for remote processors allows a attacker to cause a service failure.

The vulnerability of the k3r5clusterofinit function in the drivers/remoteproc/tik3r5remoteproc.c file of the Linux kernel subsystem for remote processors is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gpio_keys_quiesce_key() function in the drivers/input/keyboard/gpio_keys.c file of the Linux kernel’s keyboard support driver allows a hacker to induce a system halt.

The vulnerability of the gpiokeysquiescekey function in the drivers/input/keyboard/gpiokeys.c file of the Linux kernel’s keyboard support driver is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a system failure...

openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

A flaw was found in OpenSSL. A remote attacker can exploit a stack buffer overflow vulnerability by supplying a crafted Cryptographic Message Syntax CMS message with an oversized Initialization Vector IV when parsing AuthEnvelopedData structures that use Authenticated Encryption with Associated...

PT-2026-39017

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the adis init function. The function attempts to dereference adis-ops to verify if specific function pointers write, read, reset are NULL without fir...

CVE-2026-2044

GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...

CVE-2026-25998

strongMan is a management interface for strongSwan, an OpenSource IPsec-based VPN. When storing credentials in the database private keys, EAP secrets, strongMan encrypts the corresponding database fields. So far it used AES in CTR mode with a global database key. Together with an initialization...

CVE-2026-26958

A flaw was found in filippo.io/edwards25519, a Go library used for cryptographic operations. This vulnerability occurs in the MultiScalarMult function when it processes points that are not properly initialized or are not the identity point. Such conditions can lead to incorrect cryptographic...

GIMP 安全漏洞

GIMP is an open-source bitmap image editor developed by the GIMP team. GIMP has a security vulnerability that stems from improper memory initialization during the parsing of PGM files, which may lead to remote code execution...

The vulnerability of the `udmabuf_dev_init()` function in the Linux kernel’s `drivers/dma-buf/udmabuf.c` file allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the udmabufdevinit function in the Linux kernel’s drivers/dma-buf/udmabuf.c file is related to improper initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerabilities of the functions ucsi_init() and ucsi_unregister() in the driver drivers/usb/typec/ucsi/ucsi.c file of the UCSI driver for the Linux operating system allow a malicious actor to cause service failure remotely.

The vulnerability of the functions ucsiinit and ucsiunregister in the UCSI driver’s drivers/usb/typec/ucsi/ucsi.c file is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause service failure...

CVE-2026-25998

strongMan (the management interface for strongSwan) is vulnerable in versions prior to 0.2.0 due to improper encryption of stored credentials in the database. The software used AES-CTR with a global database key and a single IV for all fields, enabling an attacker with database access to recover ...

PT-2026-39056

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel when the xe sync entry parse function fails during parsing. The function may allocate references for syncobj, fence, chain fence, or user fence...

CVE-2026-26958: Improper Initialization

filippo.io/edwards25519 is a Go library implementing the edwards25519 elliptic curve with APIs for building cryptographic primitives. In versions 1.1.0 and earlier, MultiScalarMult produces invalid results or undefined behavior if the receiver is not the identity point. If Point.MultiScalarMult i...