PT-2026-110892

Name of the Vulnerable Software and Affected Versions IBM DB2 Recovery Expert for Linux, UNIX and Windows version 5.5 IF 2 Description The software uses a web link containing untrusted references to an external site. This allows a remote attacker to potentially expose sensitive information or...

ROS-20261012-73-0045

The vulnerability of the bondrcvvalidate function in the drivers/net/bonding/bondmain.c file of the Linux kernel’s network device driver module is related to the use of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Linux kernel IAMS Buffer Overflow DoS

The vulnerability of the amseventtochannel function in the drivers/iio/adc/xilinx-ams.c file of the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20261012-73-0236

The vulnerability of the caiferials.c component in the Linux operating system is related to a situation where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0093

The vulnerability of the mpireadrawfromsgl function in the lib/crypto/mpi/mpicoder.c module of the Linux kernel is related to a numerical overflow or cyclic shift. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261012-73-0166

The vulnerability of the drm/display/dpmst component in Linux kernel is related to an incorrect bit offset for a integer value. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux same_client_has_lease() Function Use-After-Free

The vulnerability of the sameclienthaslease function in the fs/smb/server/oplock.c component of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibili...

ROS-20261012-73-0140

The vulnerability of the fnnlosfaddcallback function in the net/netfilter/nfnetlinkosf.c module of the netfilter kernel of the Linux operating system is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Rocky Linux 9.6 [CIQ] Security Update: glib2 / glib2-devel / glib2-doc / glib2-static / glib2-tests Multiple Vulnerabilities (ciqsa-2026_1631)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261631 advisory. This advisory aggregates security fixes for the glib2 SRPM in CIQ LTS 9.6. It addresses 3 CVEs: CVE-2025-14087, CVE-2025-13601, CVE-2025-14512. Tenable h...

PT-2026-110891

Name of the Vulnerable Software and Affected Versions IBM Db2 Recovery Expert for Linux, UNIX and Windows version 5.5 IF 2 Description An unauthenticated attacker can embed arbitrary JavaScript code in the Web UI. This cross-site scripting issue allows the attacker to alter intended functionality...

ROS-20261012-73-0232

The vulnerability of the fs/ntfs3 components in the Linux operating system is related to incorrect data input used as a condition for loop execution. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux drivers iio magnetometer ak8975 Heap Buffer Overflow DoS

The vulnerability of the drivers/iio/magnetometer/ak8975.c component in the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux net/ipv6/route.c Heap Buffer Overflow DoS

The vulnerability of the ip6defaultadvmss function in the net/ipv6/route.c component of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20261012-73-0189

The vulnerability of the uverbscmd.c component in the Linux operating system is related to incorrect checking of the amount of data at the input stage. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0260

The vulnerability of the cpcap-battery.c component in the Linux operating system is related to situations where there is a race condition in the signal processing routine. Exploiting this vulnerability can allow an attacker to cause a service failure...

Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-3192)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3192 advisory. An issue in the Linux kernel's virtio-net/TAP networking path could allow an actor with privileged access inside a guest virtual machine to send specially crafted network packets that corrupt...

ROS-20261012-73-0255

The vulnerability of the mtk-svs.c component in the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow an attacker to cause service failures...

Amazon Linux 2 : perl-HTTP-Date (ALAS-2026-3996)

The version of perl-HTTP-Date installed on the remote host is prior to 6.02-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3996 advisory. parsedate -- and str2time, which delegates to it -- used regexes withambiguous adjacent greedy runs year/clock/timezone digit...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-3168)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3168 advisory. containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncIO goroutine in...

Rocky Linux 8.6 [CIQ] Security Update: perl-vici / python3-vici / strongswan / strongswan-charon-nm / etc Multiple Vulnerabilities (ciqsa-2026_1607)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261607 advisory. This advisory aggregates security fixes for the strongswan SRPM in CIQ LTS 8.6. It addresses 12 CVEs: CVE-2018-16152, CVE-2018-16151, CVE-2013-2944,...