kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound

A flaw was found in the drm/vmwgfx component of the Linux kernel. An integer overflow vulnerability exists in the vmwshaderdefine function due to improper validation of user-supplied shader window size and offset. When the offset value is close to its maximum, an unsigned addition can wrap around...

kernel: drm/amdgpu/vce: fix integer overflow in image size

A flaw was found in the drm/amdgpu/vce component of the Linux kernel. Malicious VCE Video Codec Engine command streams with oversized dimensions can cause a 32-bit integer overflow. This overflow bypasses validation, allowing the GPU firmware to perform out-of-bound memory access. This could lead...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound

A flaw was found in the drm/vmwgfx component of the Linux kernel. An integer overflow vulnerability exists in the vmwshaderdefine function due to improper validation of user-supplied shader window size and offset. When the offset value is close to its maximum, an unsigned addition can wrap around...

OPENSUSE-SU-2026:22117-1 Security update for cadvisor

This update for cadvisor fixes the following issues: Changes in cadvisor: - update to 0.60.6: workflows: mirror release tags to lib/ module tags fs/zfs: fall back to VFS when zfs stats are unavailable storage/stdout: nil-check Cpu, Network, and Memory stats Treat memory-only NUMA nodes as valid...

DEBIAN-CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

UBUNTU-CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

EUVD-2026-100802

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

CVE-2026-110449

The software Nix (versions before 2.35.3 ) and Lix (versions before 2.95.4 ) are vulnerable to an integer overflow leading to an out-of-bounds write . This issue occurs during the evaluation of untrusted expressions due to mishandled list allocation . The vulnerability has a base severity score o...

CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

CVE-2026-110449

Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled...

SUSE CVE-2026-109723

Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

SUSE CVE-2026-109730

Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CLEANSTART-2026-ZL40658 Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files

Security vulnerability affects the gst-plugins-good package. Integer overflow in avidemux element in gstavidemuxinvert function which allows a heap overwrite while parsing avi files...

CLEANSTART-2026-GT68103 GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability

Security vulnerability affects the gst-plugins-good package. GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability...

CLEANSTART-2026-YZ53862 Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files

Security vulnerability affects the gst-plugins-good package. Integer overflow in matroskademux element in gstmatroskademuxaddwvpkheader function which allows a heap overwrite while parsing matroska files...