CVE-2026-64191

In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2CSMBUSI2CBLOCKDATA case in stubxfer uses data-block0 as the transfer length. The existing check only clamps it to avoid overrunning the chip-words256 register array,...

golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input

A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 Unicode Transformation Format - 8-bit bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of...

CVE-2026-53396

A flaw was found in the Linux kernel's Network File System NFS daemon nfsd within the nfsd4createfile function. This vulnerability allows a remote attacker to cause a denial of service DoS by repeatedly triggering a memory leak of posixacl allocations. The leak occurs when a client attempts to...

CVE-2026-15813

A vulnerability was found in the network packet de-fragmentation engine of kronosnet Version affected = 1.34. The internal reassembly code does not properly validate sequence numbers of incoming payload fragments. An attacker can exploit this lack of verification by transmitting malformed packets...

EUVD-2026-45899

A vulnerability was found in the network packet de-fragmentation engine of kronosnet Version affected = 1.34. The internal reassembly code does not properly validate sequence numbers of incoming payload fragments. An attacker can exploit this lack of verification by transmitting malformed packets...

SUSE-SU-2026:22763-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtoolstats bsc1263094. - CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of...

SUSE-SU-2026:3122-1 Security update for systemd, systemd-mini

This update for systemd, systemd-mini fixes the following issues Changes for systemd: - Import commit 435c5779a785b4263b4dcacb70f50ef1cc3f9a7b bsc1267647. - Import commit 7aa089f75b77b2db22941081c37b8917ea8d0dda bsc1261982. - udev/scsi-id: check for invalid chars in various fields received from t...

Linux Distros Unpatched Vulnerability : CVE-2026-63913

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check An unintended behavior in the TCP conntrack state machine allows a...

Linux Distros Unpatched Vulnerability : CVE-2026-64036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cgroup/rstat: validate cpu before cssrstatcpu access cssrstatupdated is exposed as a BPF kfunc and accepts a caller-provided cpu argument. The function uses cpu...

PT-2026-61644

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the i2c-stub driver, a development and test tool. The stub xfer function fails to validate the transfer length against I2C SMBUS BLOCK MAX when handling the I2C SMBUS...

CVE-2026-26081

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEWTOKEN format. HAProxy Enterprise and ALOHA are also affected...

Linux Distros Unpatched Vulnerability : CVE-2026-64191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: stub: Reject I2C block transfers with invalid length The I2CSMBUSI2CBLOCKDATA case in stubxfer uses data-block0 as the transfer length. The existing check...

SUSE CVE-2026-53386

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pgasettings index ads1298pgasettings has 7 elements but ADS1298MASKCHPGA can yield values 0-7. If it yields a value = 7, this causes an out-of-bounds array access. Add a bounds check and...

SUSE CVE-2026-53387

In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml6075itms index veml6075itms has 5 elements but VEML6075CONFIT can yield values 0-7. If it returns a value = 5, this causes an out-of-bounds array access. Add a bounds check and return...

CVE-2026-63913

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check An unintended behavior in the TCP conntrack state machine allows a connection to be forced into the CLOSE state using an RST packet with an...

CVE-2026-63878

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check numentries in GEMOP GETMAPPINGINFO kvcallocargs-numentries, sizeofvmentries, GFPKERNEL at amdgpugem.c:1050 uses the user-supplied numentries directly without any upper bounds check. Since numentries is a u32 and...

CVE-2026-63879

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix amdgpuhmmrangegetpages The notifier sequence must only be read once or otherwise we could work with invalid pages. While at it also fix the coding style, e.g. drop the pre-initialized return value and use the comm...

EUVD-2026-45809

In the Linux kernel, the following vulnerability has been resolved: net: devmem: reject dma-buf bind with non-page-aligned size or SG length netdevmembinddmabuf trusts dmabuf-size and sgdmalen to be PAGESIZE multiples without checking: - txvec is sized dmabuf-size / PAGESIZE, and netdevmemgetniov...

CVE-2026-64124

CVE-2026-64124 concerns the Linux kernel net: devmem: bind via dma-buf with non-page-aligned size or SG length. The issue arises because net_devmem_bind_dmabuf() trusts dmabuf->size and sg_dma_len() to be multiples of PAGE_SIZE without checking, causing an out-of-bounds access: tx_vec is sized...

CVE-2026-64114 ipv4: raw: reject IP_HDRINCL packets with ihl < 5

In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IPHDRINCL packets with ihl ihl 4; err = -EINVAL; if iphlen length goto errorfree; if iphlen = sizeofiph / fix up saddr, totlen, id, csum, transportheader / It does not, however, reject ihl = sizeofiph" branch is...