Fedora 45 : chromium (2026-53c8aca50a)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-53c8aca50a advisory. Update to 154.0.8037.97, includes 11 security fixes CVE-2026-103621: Integer overflow in Compositing CVE-2026-103622: Use after free in SVG...

Linux Distros Unpatched Vulnerability : CVE-2026-98171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix nextbuffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and pointer lifecycle issues in...

CVE-2026-98317: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPAINTERVALPROBETIMEMS. NDTPAINTERVALPROBETIMEMS sets .type and .min but misses .validationtype, so no validation is applied: ynl --family rt-neigh --do setneightbl \ --json '"name": "arpcache",...

PT-2026-106500

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description Issues exist in the receive encrypted standard function regarding the handling of compound encrypted frames. A stale next buffer pointer can cause a use-after-free condition during error...

Linux Distros Unpatched Vulnerability : CVE-2026-98317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - neighbour: Enforce min/max to NDTPAINTERVALPROBETIMEMS. NDTPAINTERVALPROBETIMEMS sets .type and .min but misses .validationtype, so no validation is applied: yn...

glibc Vulnerable to Memory Corruption via Heap-Based Buffer Overflow in 'malloc.ca' File (CVE-2026-0861)

Passing too large an alignment to the memalign suite of functions memalign, posixmemalign, alignedalloc in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size a...

PT-2026-106722

Name of the Vulnerable Software and Affected Versions libmikmod versions prior to 3.3.14 Description An integer overflow exists in the DSM Load function within load dsm.c. This occurs when a DSM module is supplied where the product of numchn and numpat wraps a 16-bit value, leading to a heap buff...

PT-2026-106694

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the mr check range function within the RDMA/rxe component. The function uses wraparound-prone arithmetic to validate that the range iova, iova+length falls...

PT-2026-115749

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix next buffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and pointer lifecycle issues in receive encrypted standard's handling of compound encrypted frames: - Clear next buffer...

CVE-2026-98171: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix nextbuffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and pointer lifecycle issues in receiveencryptedstandard's handling of compound encrypted frames: - Clear nextbuffer afte...

CVE-2026-98365: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow in mrcheckrange leading to OOB access mrcheckrange validates that iova, iova+length falls within the registered MR range using wraparound-prone arithmetic: if iova ibmr.iova || iova + length...

PT-2026-115835

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow in mr check range leading to OOB access mr check range validates that iova, iova+length falls within the registered MR range using wraparound-prone arithmetic: if iova ibmr.iova || iova + length...

PT-2026-107238

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap-based buffer overflow exists in the DirectDraw Surface DDS loader. When processing a specially crafted DDS image, the system uses 32-bit arithmetic to calculate buffer sizes based on widt...

CVE-2026-106332: Integer Overflow or Wraparound

Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-105837: Integer Overflow or Wraparound

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSMLoad in loaddsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crash...

PT-2026-115788

In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPA INTERVAL PROBE TIME MS. NDTPA INTERVAL PROBE TIME MS sets .type and .min but misses .validation type, so no validation is applied: ynl --family rt-neigh --do setneightbl --json '"name": "arp...

PT-2026-107180

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap-based buffer overflow exists in the DICOM export plug-in. This occurs when exporting an image with extremely large width and height dimensions. The export process calculates the required...

CVE-2026-106239: Integer Overflow or Wraparound

Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-98242: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dma-buf: Fix silent overflow for phys vec to sgt In case MMIO size is bigger than 4G and peer2peer DMA goes through host bridge, we trigger a code path that assigns the total linked IOVA which is greater than 4G to mappedlen...

PT-2026-115840

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM Load in load dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause...