Important: rpcbind

Issue Overview: A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a large number of unique requests. The rpcbind service records previously unseen RPC Remote Procedure Call statistics in unbounded in-memory lists,...

Rocky Linux 8.6 [CIQ] Security Update: chkrootkit (ciqsa-2026_1594)

The Rocky Linux 8.6 host has a package installed that is affected by a vulnerability as referenced in the CIQ ciqsa-20261594 advisory. This advisory aggregates security fixes for the chkrootkit SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2014-0476. Tenable has extracted the preceding description...

Rocky Linux 9.2 [CIQ] Security Update: open-vm-tools / open-vm-tools-desktop / open-vm-tools-devel / etc Multiple Vulnerabilities (ciqsa-2026_1618)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261618 advisory. This advisory aggregates security fixes for the open-vm-tools SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2023-20900, CVE-2023-20867, CVE-2015-5191...

CentOS Linux 8.5 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1791484612)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791484612 advisory. - The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for...

ROS-20261012-73-0058

The vulnerability of the pipapo Drop function in the net/netfilter/nftsetpipapo.c module of the netfilter component in the Linux operating system’s kernel is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261012-73-0014

The vulnerability of the tipcskfilterconnect function in the net/tipc/socket.c module of the TIPC protocol implementation in the Linux operating system is related to insufficient validation of input data when dividing by zero. Exploiting this vulnerability could allow an attacker to cause a servi...

ROS-20261012-73-0252

The vulnerability of the bq25980charger.c component in the Linux operating system is related to a situation where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0004

The vulnerability of the rtwgetieex function in the drivers/staging/rtl8723bs/core/rtwieee80211.c module, which supports additional devices in the Linux operating system, is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain...

ROS-20261012-73-0028

The vulnerability of the wdmincallback function in the drivers/usb/class/cdc-wdm.c file of the Linux operating system’s USB device driver framework is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux kernel max3421_hub_control() function Heap Buffer Overflow

The vulnerability of the max3421hubcontrol function in the drivers/usb/host/max3421-hcd.c file of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

Rocky Linux 8.6 [CIQ] Security Update: tigervnc / tigervnc-icons / tigervnc-license / tigervnc-selinux / etc Multiple Vulnerabilities (ciqsa-2026_1611)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261611 advisory. This advisory aggregates security fixes for the tigervnc SRPM in CIQ LTS 8.6. It addresses 21 CVEs: CVE-2017-7396, CVE-2025-49180, CVE-2025-26601,...

ROS-20261012-73-0170

The vulnerability of the kernel network module in the Linux operating system is related to incorrect checking of the amount of data at the input. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the compregistervideodev function in the drivers/staging/most/video/video.c file of the Linux kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kcm_attach() Heap Buffer Overflow

The vulnerability of the kcmattach function in the net/kcm/kcmsock.c component of the Linux operating system’s kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

Linux kernel IMA Buffer Overflow DoS

The vulnerability of the mma8452read function in the drivers/iio/accel/mma8452.c file of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux drivers/mailbox/mtk-adsp-mailbox.c Buffer Overflow

The vulnerability of the drivers/mailbox/mtk-adsp-mailbox.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

ROS-20261012-73-0242

The vulnerability of the st33zp24 component in the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow an attacker to cause service failures...

Rocky Linux 9.2 [CIQ] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc Multiple Vulnerabilities (ciqsa-2026_1612)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261612 advisory. This advisory aggregates security fixes for the glibc SRPM in CIQ LTS 9.2. It addresses 7 CVEs: CVE-2021-3999, CVE-2023-4911, CVE-2021-3998, CVE-2023-481...

Amazon Linux 2023 : perl-DBI, perl-DBI-tests (ALAS2023-2026-3191)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3191 advisory. A critical arbitrary code execution vulnerability CWE-94 found in the DBD::DBM database driver, which is a core component shipped within the Perl DBI Database Interface module. The flaw exists because...

Rocky Linux 9.6 [TuxCare] Security Update: poppler / poppler-cpp / poppler-cpp-devel / poppler-devel / etc (ALMALINUX9.6:CLSA-2026:1791810115)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791810115 advisory. - Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash that allows attackers controlling the...