ROS-20261012-73-0249

The vulnerability of the arizona-core.c component in the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2026-107565

A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup LUKS device. Due to incorrect boundary calculations and flawed overlap detection, new metadata entries can be written beyond available free spa...

PT-2026-110480

In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched cache group from mm to fix UAF Currently the sched cache grouping is by mm and the scheduling statistics sched cache stat lives in the mm structure. This ties the life cycle of scheduling stats with mm...

Important: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: sctp: fix errchunk memory leaks in INIT handling CVE-2026-72413 In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption CVE-2026-72463 In the Linux...

Medium: oci-add-hooks

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

ROS-20261012-73-0071

The vulnerability of the net/mlx5 component in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0060

The vulnerability of the mctpflowprepareoutput function in the net/mctp/route.c module of the Linux kernel is related to deficiencies in the deserialization mechanism, due to insufficient protection of sensitive data. Exploiting this vulnerability allows an attacker to compromise the...

ROS-20261012-73-0050

The vulnerability of the nvmeirqcheck function in the drivers/nvme/host/pci.c module of the Linux NVME driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0102

The vulnerability of the nfttunnelobjdestroy function in the net/netfilter/nfttunnel.c module of the netfilter component of the Linux operating system is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20261012-73-0106

The vulnerability of the tbpropertyentryvalid function in the drivers/thunderbolt/property.c module of the Linux kernel’s general support for USB4 and Thunderbolt drivers is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to compromise the...

ROS-20261012-73-0148

The vulnerability of the sctpsockdumpone function in the net/sctp/diag.c module of the Linux operating system’s SCTP Stream Control Transmission Protocol kernel is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to...

ROS-20261012-73-0163

The vulnerability of the smcsetsockopt function in the net/smc/afsmc.c module of the SMC protocol family implementation in Linux’s kernel is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0225

The vulnerability of the buildi2cfwhdr function in the drivers/usb/serial/ioti.c file of the Linux device driver for USB devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

ROS-20261012-73-0108

The vulnerability of the tbpropertyparsedir function in the drivers/thunderbolt/property.c module of the general support for USB4 and Thunderbolt driver in the Linux operating system is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow an...

ROS-20261012-73-0223

The vulnerability of the getmanufinfo function in the drivers/usb/serial/ioti.c file of the Linux device driver for USB devices is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Rocky Linux 9.6 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc Multiple Vulnerabilities (ciqsa-2026_1620)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261620 advisory. This advisory aggregates security fixes for the sudo SRPM in CIQ LTS 9.6. It addresses 17 CVEs: CVE-2016-7076, CVE-2012-0809, CVE-2013-1775, CVE-2015-560...

Rocky Linux 9.6 [CIQ] Security Update: ldb-tools / libldb / libldb-devel / libnetapi / libnetapi-devel / etc Multiple Vulnerabilities (ciqsa-2026_1637)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261637 advisory. This advisory aggregates security fixes for the samba SRPM in CIQ LTS 9.6. It addresses 97 CVEs: CVE-2018-1050, CVE-2020-10760, CVE-2013-4475,...

Rocky Linux 9.2 [CIQ] Security Update: ctdb / libnetapi / libnetapi-devel / libsmbclient / etc Multiple Vulnerabilities (ciqsa-2026_1613)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261613 advisory. This advisory aggregates security fixes for the samba SRPM in CIQ LTS 9.2. It addresses 88 CVEs: CVE-2018-1050, CVE-2020-10760, CVE-2013-4475,...

Rocky Linux 9.2 [CIQ] Security Update: httpd / httpd-core / httpd-devel / httpd-filesystem / httpd-manual / etc Multiple Vulnerabilities (ciqsa-2026_1625)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261625 advisory. This advisory aggregates security fixes for the httpd SRPM in CIQ LTS 9.2. It addresses 24 CVEs: CVE-2023-25690, CVE-2023-31122, CVE-2022-28615,...

Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2026-3204)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3204 advisory. Issue summary: A certificate with many nameRelativeToCRLIssuer CRLdistribution points causes disproportionate heap growth when OpenSSL cachesX.509 extensions. Impact summary: Receiving a craft...