Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53254)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in MCC handlers The RFCOMM MCC handlers cast skb-data to protocol-specific structs without validating skb-len first. A malicious remote device can send truncated MCC frames and trigger...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46321)

In the Linux kernel, the following vulnerability has been resolved: tun: free page on short-frame rejection in tunxdpone tunxdpone returns -EINVAL on a frame shorter than ETHHLEN without freeing the page that vhostnetbuildxdp allocated for it. tunsendmsg discards that -EINVAL and still returns...

PT-2026-117979

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory...

PT-2026-120153

🔴 Six CVEs in HMS Networks PEAK CAN drivers affect critical infrastructure PEAK-System Device Driver Setup versions =5.1.2.1151 and PCAN Windows CAN device drivers =5.1.2 contain six vulnerabilities CVE-2026-109576, CVE-2026-101103, CVE-2026-94188, CVE-2026-103672, CVE-2026-110322, CVE-2026-10596...

PT-2026-118438

The Module Manager's object lookup validated one byte of a memory-protected module's search name and then walked as much of it as the module declared, in privileged mode, with the kernel's preemption count raised. Both lookup dispatchers are affected: the recommended txm module object pointer get...

PT-2026-119786

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can...

PT-2026-119785

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the ocfs2readblocks function in the fs/ocfs2/bufferheadio.c file of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux ipset Hash Generation Data Compromise

The vulnerability of the net/netfilter/ipset/ipsethashgen.h component of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibilit...

Microsoft Windows Kernel-Mode Driver 10.0.22631 Privilege Escalation

Microsoft Windows Kernel-Mode Driver version 10.0.22631 contains an untrusted pointer dereference vulnerability that allows local privilege escalation. A proof of concept is available. https://packetstorm.news/download/236495...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the iceresetallvfs function in the drivers/net/ethernet/intel/ice/ice VFlib.c file of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vivo X100 Ultra Kernel 6.1.145 Privilege Escalation

Vivo X100 Ultra version PD236616.2.19.0.W10 with kernel 6.1.145-android14-11 contains a PI-futex race condition that can be used to obtain root privileges. Proof of concept code is included. https://packetstorm.news/download/236490...

Linux kernel enetc_xdp_xmit() Data Compromise

The vulnerability of the enetcxdpxmit function in the drivers/net/ethernet/freescale/enetc/enetc.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

kernel security, bug fix, and enhancement update

5.14.0-687.59.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

ALSA-2026:85774 Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935 kernel: USB: serial: ioti: fix heap overflow in getmanufin...

kernel security, bug fix, and enhancement update

4.18.0-553.176.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

ALSA-2026:86033 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-52935 kernel: USB: serial: mxuport: fix memory...

Linux kernel Control Flow DoS

The vulnerability of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the geminitone function in the drivers/net/ethernet/sun/sungem.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the sja1105peroutenable function within the drivers/net/dsa/sja1105/sja1105ptp.c file of the Linux kernel system is related to improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...