CVE-2026-98496

A flaw was found in the Linux kernel's Airoha Neural Processing Unit NPU driver. During device unbinding or driver removal, an interrupt timing issue allows watchdog tasks to be scheduled after cleanup procedures have completed. A local user with administrative privileges could trigger this flaw ...

CVE-2026-98495

A flaw was found in the Linux kernel. A local user can trigger a Denial of Service DoS or potentially expose sensitive memory due to an out-of-bounds read flaw in the Address Resolution Protocol ARP networking interface. By supplying a network device request containing a device name that lacks...

CVE-2026-98491

A flaw was found in the Linux kernel's Open vSwitch subsystem. When cloned network packet buffers share an unconfirmed connection tracking entry, committing the entry with conflicting extensions can trigger a use-after-free memory issue during cleanup. An attacker could exploit this vulnerability...

Important: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Securit...

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity via ownerisstale in src/filelock/soft.py and src/filelock/identity.py, when a process owner identity comparison is performed between a lock holder whose start token was recorded without a...

Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues: The following security issues were fixed: CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

SUSE-SU-2026:4768-1 Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues: The following security issues were fixed: - CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. - CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for...

DEBIAN-CVE-2026-92162

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at least one OCI remote is configured most common on Fedora systems, a malicious local user in an active local session could use a crafted architecture na...

CVE-2026-92162

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at least one OCI remote is configured most common on Fedora systems, a malicious local user in an active local session could use a crafted architecture na...

CVE-2026-92162 Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at least one OCI remote is configured most common on Fedora systems, a malicious local user in an active local session could use a crafted architecture na...

CVE-2026-92162 Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at least one OCI remote is configured most common on Fedora systems, a malicious local user in an active local session could use a crafted architecture na...

CVE-2026-92162 Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at least one OCI remote is configured most common on Fedora systems, a malicious local user in an active local session could use a crafted architecture na...

CVE-2026-92162

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at least one OCI remote is configured most common on Fedora systems, a malicious local user in an active local session could use a crafted architecture na...

CVE-2026-92162

The Flatpak application deployment framework is vulnerable to a path traversal vulnerability in the DeployAppstream D-Bus method. The issue stems from the flatpak-system-helper process failing to validate the arch parameter, allowing a malicious local user to supply ../ components. This can trick...

EUVD-2026-105030

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at least one OCI remote is configured most common on Fedora systems, a malicious local user in an active local session could use a crafted architecture na...

CVE-2026-93133

A flaw was found in the Linux kernel. In the riscvacpiaddprtdep function, the acpigethandle call can fail, leading to the linkhandle variable being uninitialized. This oversight could potentially lead to system instability or unexpected behavior...

CVE-2026-93132

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI implementation for RISC-V architectures. Specifically, the riscvacpiaddprtdep function contains a loop that incorrectly handles error conditions. This can cause the loop to skip necessary entry pointer updates,...

CVE-2026-93181

A flaw was found in the Linux kernel's uncore performance monitoring unit. An incorrect ordering of internal function calls during CPU online and offline operations can prevent the uncore box from being properly initialized or de-initialized. This mismanagement of resources could lead to system...

CVE-2026-93173

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF and Linux Security Module LSM subsystems. This vulnerability occurs when a sleepable LSM program is incorrectly handled during the freeing of non-sleepable BPF programs. An attacker could potentially trigger a system crash, leading...

CVE-2026-93172

A flaw was found in the Linux kernel's memory management mm/mminit. A missing allocation check for pgdat-percpunodestats can lead to a NULL dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a Denial of Service DoS...