EUVD-2026-77588

A flaw was found in sssd, specifically within the PAM Pluggable Authentication Modules responder's protocol v1 parser, pamparseindata. A local client with access to the PAM responder's UNIX socket can exploit this by negotiating protocol v1 and sending an empty or truncated PAM request body. This...

CVE-2026-90994 Sssd: sssd: denial of service via malformed pam v1 requests

A flaw was found in sssd, specifically within the PAM Pluggable Authentication Modules responder's protocol v1 parser, pamparseindata. A local client with access to the PAM responder's UNIX socket can exploit this by negotiating protocol v1 and sending an empty or truncated PAM request body. This...

EUVD-2026-77592

A flaw was found in the sssd NSS responder. This input validation vulnerability allows a local attacker, by sending specially crafted service lookup requests to the NSS responder's UNIX socket, to cause an out-of-bounds read. This out-of-bounds read may lead to a denial of service DoS by crashing...

CVE-2026-90994

A flaw was found in sssd, specifically within the PAM Pluggable Authentication Modules responder's protocol v1 parser, pamparseindata. A local client with access to the PAM responder's UNIX socket can exploit this by negotiating protocol v1 and sending an empty or truncated PAM request body. This...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: Gadget: ftcm: Fixed NULL pointer dereferencing in nexus handling The pointer tpg-tpgnexus in the USB Target driver is dynamically managed and tied to userspace configuration via ConfigFS. It can become NULL if the USB host...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ipv6: Avoid overflows in ip6datagramsendctl Yiming Qian reported: I believe I have found a locally triggerable kernel bug in the IPv6 sendmsg auxiliary-data path that can cause the kernel to panic via skbunderpanic local DoS...

CVE-2026-90891

ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to write to improperly restricted I/O ports, resulting in a forced operating system reboo...

CVE-2026-90891 ASRock｜ASRock Polychrome SYNC/RGB software utility - Improper Access Control

ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Improper Access Control vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to write to improperly restricted I/O ports, resulting in a forced operating system reboo...

EUVD-2026-77365

ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to dereference an unvalidated pointer, resulting in an operating system crash...

CVE-2026-90890

This vulnerability affects the driver component of ASRock Polychrome SYNC/RGB software utility , a utility developed by ASRock Inc. for managing RGB lighting. The root cause is an Untrusted Pointer Dereference : an authenticated local attacker with low privileges can send a specially crafted IOCT...

kernel: drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. An issue in the amdgpuamdkfdsubmitib function allows a local user to trigger a use-after-free vulnerability. This occurs because a fence reference is incorrectly released before waiting for job completion, potentially freeing the memor...

CVE-2026-90684 GPAC MP4Box base_scenegraph.c gf_node_get_field_count assertion

A flaw has been found in GPAC up to f1219cde. Affected by this vulnerability is the function gfnodegetfieldcount of the file scenegraph/basescenegraph.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. It is possible to launch the attack on the local host. The...

PT-2026-91261

A flaw was found in sssd, specifically within the PAM Pluggable Authentication Modules responder's protocol v1 parser, pam parse in data. A local client with access to the PAM responder's UNIX socket can exploit this by negotiating protocol v1 and sending an empty or truncated PAM request body...

PT-2026-91159

ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to dereference an unvalidated pointer, resulting in an operating system crash...

python312-3.12.14-1.1 on GA media (moderate)

python312-3.12.14-1.1 on GA media Announcement ID: openSUSE-SU-2026:11757-1 Rating: moderate Cross-References: CVE-2021-4189 CVE-2026-9669 CVSS scores: CVE-2021-4189 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2026-9669 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H...

Linux Distros Unpatched Vulnerability : CVE-2026-90994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sssd, specifically within the PAM Pluggable Authentication Modules responder's protocol v1 parser, pamparseindata. A local client with acces...

CVE-2026-89453

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit driver for AMD. This vulnerability occurs when the system handles certain memory access errors, specifically Page Request PPR faults, without properly releasing a reference to a PCI device. This oversight causes a...

CVE-2026-89732

A flaw was found in the Linux kernel's USB FunctionFS ffs module. A local attacker could exploit a deadlock vulnerability in the ffsep0read function. This occurs when a userspace daemon polls ep0 and the USB gadget is simultaneously torn down, causing the kernel to enter an unresponsive state. Th...

CVE-2026-89585

A flaw was found in the auxdisplay: charlcd component of the Linux kernel. This use-after-free vulnerability occurs when the charlcdregister function fails, leading to the charlcd object being freed while a delayed work item still retains its address. A local attacker could potentially exploit th...

CVE-2026-89645

A flaw was found in the btrfs file system in the Linux kernel. During relocation recovery, if an error occurs, such as a memory allocation failure, the system may not properly drop references to relocation roots. This oversight can lead to resource exhaustion, potentially allowing a local attacke...