CVE-2026-64288

A flaw was found in the kernel's Kernel-based Virtual Machine KVM component for ARM64 architectures. A race condition can occur during the invalidation of the virtual Nested Translation Cache VNCR pseudo-TLB when a virtual CPU vcpu is being brought online or offline. This can lead to a null point...

CVE-2026-16308

A flaw was found in Quarkus REST. An unauthenticated remote attacker can exploit this vulnerability by sending a crafted multipart/form-data request with an excessively large header section. This unbounded accumulation of MIME part-header bytes can exhaust the Java Virtual Machine JVM heap memory...

CVE-2026-64283

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. An integer overflow vulnerability exists in the guestmemfd functionality when binding memory slots. A malicious guest operating system could exploit this by providing crafted offset and size values, leading to...

kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources

A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation TLBI operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local...

SUSE-SU-2026:3383-1 Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: - CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach bsc1271648. - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to unexpecte...

SUSE-SU-2026:22972-1 Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. - CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060. -...

correct buffer checks for DM_OP hypercalls

ISSUE DESCRIPTION Parts of the DMOP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a result, certain operations might access stack rubble as structures are possibly uninitialized. IMPACT A device model of a...

CVE-2026-65624 Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion

Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. The HTTP/1.1 handler in cowboyhttp enforces the maxheaders limit by counting the number of distinct header names in ...

SUSE-SU-2026:3351-1 Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.166 fixes various security issues: The following security issues were fixed: - CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach bsc1271648. - CVE-2026-46113: KVM: x86: Fix shadow paging use-after-free due to...

CVE-2026-9680

Improper exposure of the MCP server in alibabacloud-rds-openapi-mcp-server allows remote attackers to invoke exposed MCP tools via network access to an MCP endpoint listening on all network interfaces by default...

GHSA-PGH9-MPWC-8JJF vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-71261 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-PGH9-MPWC-8JJF vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-9M94-W2VQ-HCF9 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-71261 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-64436 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2025-64435 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-7XGM-5PRM-V5GC vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

CVE-2024-14041

In Bouncy Castle for Java from 1.73 to before 1.78, three ML-KEM CRYSTALS-Kyber routines divided secret-derived polynomial coefficients by the modulus q: Poly.toMsg, which decodes the decrypted message, and the ciphertext compression routines Poly.compressPoly and PolyVec.compressPolyVec. An...

Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.136 fixes various security issues: The following security issues were fixed: CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060...