SUSE CVE-2026-74308

In the Linux kernel, the following vulnerability has been resolved: ext4: fix kernel BUG in ext4writeinlinedataend When the data=journal mount option is used, the ext4journalledwriteend function incorrectly calls ext4writeinlinedataend without checking if the EXT4STATEMAYINLINEDATA flag is still...

CVE-2026-80570

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...

CVE-2026-74742

In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is only initialized by xdprxqinforeg in vethenablexdprange, which runs only...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098960)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098960 advisory. In the Linux kernel, the following vulnerability has been resolved: bonding: fix type confusion in bondsetupbyslave kernel BUG at net/core/skbuff.c:2306! Oops: inval...

PT-2026-81204

My two cents is that this democratises AI-availability and Privacy. Doom on hardware Y is an existence proof and dies there! For fulfilling your curiosity running a glm-5.1 UD-IQ1 M on one Mac studio M3 ultra plus a iogpu sysctl made us at byteray CVE-2026-55706 a 27-year old bug on OpenBSD just ...

PT-2026-81205

U-Boot before 2026.10-rc3 with CONFIG IP DEFRAG enabled contains an out-of-bounds write vulnerability in the net defragment function in net/net.c. Remote attackers can send a crafted IP fragment with non-zero offset and More-Fragments flag set during netboot to corrupt adjacent memory and crash t...

PT-2026-81199

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211 michael mic failure function within sys/net80211/ieee80211 crypto tkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated b...

PT-2026-81210

U-Boot before 2026.10-rc5 contains a buffer overflow in nfs readlink reply function in net/nfs-common.c when processing NFS server responses. A malicious NFS server can send crafted READLINK replies with negative or oversized symlink length values to corrupt memory and crash the bootloader...

PT-2026-81209

U-Boot before 2026.10-rc5 contains a buffer overflow in nfs read reply function in net/nfs-common.c that allows attackers to corrupt memory by supplying crafted NFS READ reply lengths. A malicious NFS server can exploit signed integer handling to bypass length validation and write far past the...

PT-2026-81211

U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc recv cb function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERR BUF instead of ERR ABRT, causing the TCP input path to access released memory an...

PT-2026-81206

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.10-rc5 Description An out-of-bounds write exists in the RLE8 bitmap decoder within the video subsystem. The video display rle8 bitmap function in drivers/video/video bmp.c decodes run-length encoded streams direct...

PT-2026-81200

My two cents is that this democratises AI-availability and Privacy. Doom on hardware Y is an existence proof and dies there! For fulfilling your curiosity running a glm-5.1 UD-IQ1 M on one Mac studio M3 ultra plus a iogpu sysctl made us at byteray CVE-2026-55706 a 27-year old bug on OpenBSD just ...

PT-2026-81207

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs read directory table function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablks count value that causes heap buffer under-allocation...

PT-2026-81214

U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6 parse options that fails to validate SERVERID and CLIENTID option lengths from DHCPv6 packets. Attackers on the local network can send crafted DHCPv6 ADVERTISE or REPLY packets during netboot to corrupt memory and crash the...

PT-2026-81213

My two cents is that this democratises AI-availability and Privacy. Doom on hardware Y is an existence proof and dies there! For fulfilling your curiosity running a glm-5.1 UD-IQ1 M on one Mac studio M3 ultra plus a iogpu sysctl made us at byteray CVE-2026-55706 a 27-year old bug on OpenBSD just ...

PT-2026-81201

My two cents is that this democratises AI-availability and Privacy. Doom on hardware Y is an existence proof and dies there! For fulfilling your curiosity running a glm-5.1 UD-IQ1 M on one Mac studio M3 ultra plus a iogpu sysctl made us at byteray CVE-2026-55706 a 27-year old bug on OpenBSD just ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: cifs: Fixed an issue where credits were not updated upon failure in cifsissueread. Fixed an issue where the credits value was not updated during a failed execution of cifsissueread, so that retrying the subreq would not...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: virtio/vsock: Fixed an uninit-value issue in virtiotransportrecvpkt KMSAN reported the following uninit-value access issues: ===================================================== BUG: KMSAN: uninit-value in...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: BPF: Reject sleepable BPFLSMCGROUP programs at load time The cgroup shim runs under rcureadlockdontmigrate, so we should not attach any sleepable BPF programs there. Add support to the verifier to explicitly reject attempts to lo...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Bail out from dwc3gadgetexit if dwc-gadget is NULL. There exists a possible scenario in which dwc3gadgetinit may fail: during the switch between peripheral and host modes in dwc3setmode, and if a pending gadget...