CVE-2026-93223

In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fix ofnodeput on VIP parse errors tegravipchannelofparse initializes np from dev-ofnode without taking a reference, but its error paths drop one through the errnodeput label. This underflows the...

CVE-2026-93806

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate assoc response length before status and IE access cfg80211rxassocresp initialises the status and response-IE fields of cfg80211connectrespparams from the management frame before proving that the frame is...

CVE-2026-57175

Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the SAML backend accepted SAML responses on the Assertion Consumer Service endpoint without verifying that they matched a previously issued AuthnRequest. Applications using SAML account association could...

CVE-2026-93251

In the Linux kernel, the following vulnerability has been resolved: ACPI: bus: Introduce acpibusgetprimarydevice The function used for obtaining the first "physical" device for which the given ACPI one is the ACPI companion, acpigetfirstphysicalnode, may return a stale device pointer mostly in...

abrt security update

2.1.11-60.0.7 - Fix symlink following in event handler scripts CVE-2026-54230Orabug: 40051150 2.1.11-60.0.5 - Fix TOCTOU in SetElement/DeleteElement CVE-2026-54228 Orabug: 39811882 - Fix race condition in ChownProblemDir CVE-2026-54229 Orabug: 39811882...

CVE-2026-97434

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for a DPSW device are attached to the first switch port's netdevice but shared by all ports. The NAPI instances get disabled only once the last port goe...

CVE-2026-97426

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error Return the parse error before acquiring PM access...

perl-DBI security update

1.643-9.6 - Force placeholder limit on : and :p too CVE-2026-73194 Related: RHEL-247327...

ROS-20260924-73-0092

The vulnerability of the vdecmsgqueueinit function in the drivers/media/platform/mediatek/vcodec/vdecmsgqueue.c file of the Linux kernel-based multimedia device driver leads to unlimited resource allocation. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

CVE-2026-88378

QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JSReadFunctionTag...

CVE-2026-88387

LibRaw 0.22.0 contains an incorrect numeric conversion vulnerability in LibRaw::parsetiffifd when processing TIFF tag 0x00fe NewSubfileType. A specially crafted RAW, TIFF, or DNG file can supply an attacker-controlled NewSubfileType value outside the range of a signed int. The parser converts thi...

CVE-2026-88359

libfyaml 0.9.6 contains a stack exhaustion vulnerability in fyatomiterformat. When processing a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer using alloca inside a loop. The allocated stack memory is not...

CVE-2026-88362

MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsRisindex in jsrun.c. A specially crafted JavaScript input containing an excessively large numeric array index can cause an out-of-range floating-point value to be converted to an integer without proper range validation. Th...

ROS-20260924-73-0073

The vulnerability of the etases58x component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures through th...

ROS-20260924-73-0086

The vulnerability of the binderupdatepagerange function in the drivers/android/binderalloc.c module of the Linux operating system’s kernel is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...

ROS-20260924-73-0020

The vulnerability of the af9005i2cxfer function in the drivers/media/usb/dvb-usb/af9005.c file of the multimedia device driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260924-73-0077

The vulnerability of the replacenexthopsingle function in the net/ipv4/nexthop.c module of the Linux operating system’s IPv4 kernel implementation is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

ROS-20260924-73-0090

The vulnerability of the getgpioi2cinfo function in the drivers/gpu/drm/amd/display/dc/bios/biosparser2.c driver, which is part of the Direct Rendering Infrastructure DRI graphics card driver for Linux operating systems, is related to unvalidated array indexing. Exploiting this vulnerability coul...

ROS-20260924-73-0028

The vulnerability of the brcmuartprobe function in the drivers/tty/serial/8250/8250bcm7271.c file of the console TTY driver in the Linux kernel’s serial port module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260924-73-0085

The vulnerability of the imamatchrules function in the security/integrity/ima/imapolicy.c module of the Linux kernel’s security subsystem is related to improper initialization of resources. Exploiting this vulnerability could allow an attacker to cause service failures...