Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.34 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.34 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.29 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.29 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

CVE-2026-74905 SiYuan before v3.7.4 SSRF via IPv6 Transition Address Bypass

SiYuan before v3.7.4 contains a server-side request forgery SSRF vulnerability in the isPrivateIP function in kernel/util/net.go, used by SSRFSafeDialer to enforce SSRF protection in SafeMode. The function only checks for loopback, link-local unicast, private, and unspecified addresses and does n...

CVE-2026-74904

In SiYuan before v3.7.4, 17 block endpoints in kernel/api/block.go (getRefText, checkBlockExist, getBlockBreadcrumb) are gated only by model.CheckAuth without publish-access filtering, letting anonymous publish-mode readers disclose private block content, metadata, and existence info. Patch to v3...

EUVD-2026-60585

SiYuan before v3.7.4 is missing authorization checks in 17 block metadata/content endpoints in kernel/api/block.go including getRefText, checkBlockExist, and getBlockBreadcrumb. These handlers are gated only by basic authentication model.CheckAuth and lack publish-access filtering, allowing...

CVE-2026-72385

A flaw was found in the Linux kernel's tracing/fprobe component. A race condition can occur in the fprobefgraphentry function during shadow-stack reservation. If a fprobe is registered on an already-live IP between two processing walks, it can lead to a NULL pointer dereference. This can result i...

CVE-2026-72332

A flaw was found in the Linux kernel's AMD XDNA accelerator driver. A local attacker could trigger a deadlock condition during power management resume operations. This occurs when a hardware context synchronization function attempts to acquire a lock that is already held, leading to a system...

CVE-2026-72203

A flaw was found in the Linux kernel. This flaw involves a deadlock condition within the NTFS file system's writeback mechanism. Specifically, an ABBA deadlock can occur between the extentlock and mreclock during inode and MFT Master File Table folio writeback operations. This could lead to a...

CVE-2026-72211

A flaw was found in the Linux kernel's NTFS file system driver. When the driver attempts to reparent an index root, it can update metadata to reflect a larger size before the actual data structure is resized. If this resize operation fails, the file system can enter an inconsistent state. This...

CVE-2026-72167

A flaw was found in the mtd: rawnand: pl353 component of the Linux kernel. During the probe function, the devmioremap call incorrectly uses the parent device instead of the pl35x device for resource allocation. This oversight prevents the register area from being properly released when the module...

CVE-2026-72438

A flaw was found in the Linux kernel's multiple device MD driver, specifically in the RAID10 implementation. This vulnerability occurs due to reference leaks in the writespending and barrier mechanisms during discard failures. An attacker could potentially exploit this by triggering discard...

CVE-2026-72418

A flaw was found in the Linux kernel's netfilter connection tracking module. When a new network connection attempts to reuse a socket that is in a temporary waiting state after closing, the system incorrectly identifies it as an already confirmed connection. This misidentification causes the...

CVE-2026-72379

A flaw was found in the Linux kernel's filesystem fs component. The vfstmpfile function, used for creating temporary files with OTMPFILE, did not properly verify if a caller's user and group IDs fsuid and fsgid were mapped within an idmapped mount. This oversight could allow a local user to creat...

CVE-2026-72382

A flaw was found in ksmbd in the Linux kernel. A remote attacker, by sending a specially crafted security descriptor with an undersized Discretionary Access Control List DACL during an SMB2SETINFO operation, can trigger an integer underflow. This underflow leads to excessive memory allocations fo...

[SECURITY] [DLA 4745-1] linux-6.12 security update

Debian LTS Advisory DLA-4745-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings August 18, 2026 https://wiki.debian.org/LTS Package : linux-6.12 Version : 6.12.101-1deb12u1 CVE ID : CVE-2025-40098 CVE-2026-45897 CVE-2026-45901 CVE-2026-53078 CVE-2026-53090...

CVE-2026-72433

A flaw was found in the Linux kernel's netfilter component, specifically within the nftmetabridge module. This vulnerability, a stack leak, occurs due to improper handling of return values, which fails to test for nonzero results. An attacker could potentially exploit this issue to gain access to...

CVE-2026-72242

A flaw was found in the Linux kernel's SELinux module. When handling Stream Control Transmission Protocol SCTP connections, a specific function attempts to access a network socket that may not exist. This can lead to a system crash, resulting in a Denial of Service DoS for affected systems...

CVE-2026-72356

A flaw was found in the CIFS Common Internet File System component of the Linux kernel. A missing credit release on failure in the cifsissueread function can lead to a situation where retrying a sub-request overwrites existing credit values. This resource management issue could potentially lead t...

CVE-2026-72142

A flaw was found in the i2c-imx driver of the Linux kernel. When an I2C slave device performs an SMBus block-read operation with a byte count of zero, the atomic polling path in the driver fails to properly release the I2C bus. This can cause the bus to become stuck, requiring a power cycle of th...

CVE-2026-72402

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier logging mechanism. The printbpfinsn function, responsible for masking sensitive pointer values in verifier logs, did not correctly mask all pseudo-pointer types. This oversight could lead to kernel memory addresses being...