Rocky Linux 9 [CIQ] Security Update: skopeo / skopeo-debuginfo / skopeo-debugsource / skopeo-tests Multiple Vulnerabilities (crlsa-2026_90462)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202690462 advisory. podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HTTP Range headers...

Oracle Linux 9 : .NET / 8.0 (ELSA-2026-92492)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-92492 advisory. 8.0.133-1.0.1 - Add support for Oracle Linux 8.0.133-1 - Update to .NET SDK 8.0.133 and Runtime 8.0.33 - Resolves: RHEL-291717 Tenable has extracted t...

SUSE SLES16 Security Update : kernel (Live Patch 4 for SUSE Linux Enterprise 16) (SUSE-SU-2026:24443-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24443-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues we...

SUSE SLES16 Security Update : kernel (Live Patch 0 for SUSE Linux Enterprise 16) (SUSE-SU-2026:24453-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24453-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues we...

SUSE SLES16 Security Update : kernel (Live Patch 2 for SUSE Linux Enterprise 16) (SUSE-SU-2026:24452-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24452-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues we...

SUSE SLES16 Security Update : kernel (Live Patch 3 for SUSE Linux Enterprise 16) (SUSE-SU-2026:24444-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24444-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues we...

SUSE SLES16 Security Update : kernel (Live Patch 7 for SUSE Linux Enterprise 16) (SUSE-SU-2026:24450-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24450-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_90365)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202690365 advisory. kernel: udp: Deal with race between UDP socket address change and rehash CVE-2024-57974 kernel: fuse: re-lock request before replacing page cache folio...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_91565)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202691565 advisory. kernel: tcp: restrict SOATTACHFILTER to priv users CVE-2026-53236 kernel: fuse: re-lock request before replacing page cache folio CVE-2026-53388 kernel...

Important: Red Hat Security Advisory: .NET 11.0 security, bug fix, and enhancement update

An update for .NET 11.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2026-80789

A flaw was found in the Linux kernel's nvmet-tcp component. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted command with an oversized data length. This can lead to unbounded kernel memory allocation, causing a denial of service DoS due to resource exhaustion...

CVE-2026-80755

A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux subsystem. This vulnerability occurs because the system does not properly check the size of permission values when processing security policies. A specially crafted SELinux policy could cause the kernel to write data outside o...

CVE-2026-80825

A flaw was found in the mt7925 Wi-Fi driver in the Linux kernel. A remote attacker could exploit this by sending specially crafted network frames through a bridged interface to an mt7925u Access Point AP. This improper handling of network packet headroom can lead to a kernel panic, causing a deni...

CVE-2026-99141

A flaw was found in the Linux kernel's tracing subsystem. This vulnerability allows a local user with access to tracing controls to cause a Denial of Service DoS by triggering a kernel crash. When switching tracers, the kernel leaves trace flags unassigned if the new tracer lacks default flags. I...

CVE-2026-99143

A flaw was found in the Linux kernel's tracing subsystem. A local attacker could cause a Denial of Service DoS or memory corruption by exploiting an out-of-bounds memory access vulnerability during filter parsing. The predicate parsing mechanism improperly calculates boundary limits for event...

CVE-2026-99144

A flaw was found in the Linux kernel's schedext extensible scheduler component. A race condition during the destruction of a user dispatch queue allows a deferred task re-enqueue operation to access memory that has already been freed. A local user can exploit this use-after-free vulnerability to...

CVE-2026-99142

A flaw was found in the Linux kernel's tracing subsystem. In the event filter parser, insufficient boundary checks allow the operator stack to be written past its allocated limit. A local attacker could exploit this vulnerability by submitting a specially crafted trace filter expression, triggeri...

CVE-2026-99145

A flaw was found in the Linux kernel's Intel Xe graphics driver drm/xe. A local user could exploit this vulnerability by altering the memory state of a pinned graphics buffer object, causing the driver to unconditionally transfer pages between memory tracking pools. This issue triggers an integer...

CVE-2026-99146

A flaw was found in the Linux kernel's Intel i915 graphics driver. When parsing Display Microcontroller DMC firmware headers, the driver fails to validate the target load address against allowed memory ranges. An attacker capable of supplying a crafted firmware file could exploit this vulnerabili...

CVE-2026-99147

A flaw was found in the Linux kernel's Direct Rendering Manager DRM subsystem. A local user can exploit this vulnerability to cause a Denial of Service DoS or memory corruption. This issue arises during lock contention when the execution handler drmexec retains a pre-locked object that is about t...