CVE-2026-70348: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Management Services allows an authorized attacker to deny service locally...

CVE-2026-68163

In the Linux kernel, the following vulnerability has been resolved: mm/pagevmamapped: fix device-private PMD handling Commit 65edfda6f3f2 "mm/rmap: extend rmap and migration support device-private entries" introduced the concept of device-private PMD entries, but did not correctly update the rmap...

PT-2026-69392

Name of the Vulnerable Software and Affected Versions Weaver versions prior to SMR Aug-2026 Release 1 Description Improper access control allows local attackers to cause device inoperability. Recommendations Update to SMR Aug-2026 Release 1...

Photon OS 5.0: Linux PHSA-2026-5.0-91-0760

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0760. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2026-69138

Name of the Vulnerable Software and Affected Versions SonicWall Global VPN Client versions prior to 4.10.8.1109 Description An out-of-bounds kernel memory read exists in the SWIPsec.sys driver. This flaw allows a local attacker to trigger a system crash. Recommendations Update SonicWall Global VP...

AZL-94668 CVE-2026-18839 affecting package rsync 3.5.0-1

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of servi...

SUSE-SU-2026:23161-1 Security update for avahi

This update for avahi fixes the following issue - CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTSMAX bsc1255451...

SUSE-SU-2026:23039-1 Security update for avahi

This update for avahi fixes the following issue: - CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTSMAX bsc1255451...

binutils: GNU Binutils ld: Buffer overflow in cache_bwrite via nbytes manipulation

A flaw was found in GNU Binutils. A buffer overflow vulnerability exists in the cachebwrite function within the bfd/cache.c file of the ld component. This flaw can be triggered by manipulating the nbytes argument, allowing a local attacker to potentially cause information disclosure or denial of...

CVE-2026-17513

A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggmlftypetoggmltype of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through ...

CVE-2026-64324

In the Linux kernel, the following vulnerability has been resolved: udf: validate free block extents against the partition length udffreeblocks checks the logical block number and count against the partition length, but drops the extent offset from that final bound. A crafted extent can pass the...

openSUSE 16: avahi / avahi-autoipd / avahi-compat-howl-devel / etc (openSUSE-SU-2026:21417-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21417-1 advisory. - CVE-2025-59529: local DoS due to simple protocol server ignoring client limit CLIENTSMAX bsc1255451. Changes for avahi: - Make /var/lib/avahi-autoipd ...

CVE-2026-16730: Improper Handling of Exceptional Conditions

A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup notably SOPEERPIDFD are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and den...

AZL-93249 CVE-2026-59845 affecting package libssh for versions less than 0.10.6-9

A flaw was found in libssh. When ProxyCommand is used, an unchecked fork failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service...

PT-2026-61060

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10...

CVE-2026-64119: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: l2tp: use listdelrcu in l2tpsessionunhash An unprivileged local user can pin a host CPU indefinitely in l2tpsessiongetbyifname by issuing L2TPCMDSESSIONGET on L2TPATTRIFNAME concurrently with L2TPCMDSESSIONCREATE and...

AZL-90900 CVE-2026-53274 affecting package kernel for versions less than 6.6.143.1-1

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix sleep-inside-lock in smcsetsockopt causing local DoS A logic flaw in smcsetsockopt allows a local unprivileged user to cause a Denial of Service DoS by holding the socket lock indefinitely. The function smcsetsockopt...

CVE-2026-53274: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix sleep-inside-lock in smcsetsockopt causing local DoS A logic flaw in smcsetsockopt allows a local unprivileged user to cause a Denial of Service DoS by holding the socket lock indefinitely. The function smcsetsockopt...

AZL-90513 CVE-2026-52948 affecting package kernel for versions less than 6.6.143.1-1

In the Linux kernel, the following vulnerability has been resolved: i2c: dev: prevent integer overflow in I2CTIMEOUT ioctl While fuzzing with Syzkaller, a persistent scheduletimeout: wrong timeout value warning was observed, accompanied by SMBus controller state machine corruption. The I2CTIMEOUT...

AZL-90821 CVE-2026-52914 affecting package kernel for versions less than 6.6.143.1-1

In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix fragment reassembly length accounting batman-adv keeps a running payload length for queued fragments and uses it to validate a fragment chain before reassembly. That accounting currently allows the accumulated...