ROS-20260930-73-0010

The vulnerability of the allocchooseargmap function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, relates to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

AlmaLinux 9.2 [TuxCare] Security Update: cpp / cross-gcc-aarch64 / cross-gcc-c++-aarch64 / gcc / gcc-c++ / etc (ALMALINUX9.2:CLSA-2025:1741290577)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1741290577 advisory. - In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after...

AlmaLinux 9.2 [TuxCare] Security Update: systemd / systemd-boot-unsigned / systemd-container / systemd-devel / etc (ALMALINUX9.2:CLSA-2024:1722535503)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2024:1722535503 advisory. - A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when...

The vulnerability of the cfsrvl PhyidMatch() function in the net/caif/cfsrvl.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cfsrvl PhyidMatch function in the net/caif/cfsrvl.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the `vfio_cdx_set_msi_trigger()` function in the driver/vfio/cdx/intr.c file of the VFIO device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vfiocdxsetmsitrigger function in the driver/vfio/cdx/intr.c driver for VFIO devices in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the panthor_fw_unplug() function in the drivers/gpu/drm/panthor/panthor_fw.c file of the Panthor driver (which provides DRM support for ARM Mali CSF-based graphics processors) in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the panthorfwunplug function in the drivers/gpu/drm/panthor/panthorfw.c file of the Panthor driver which provides DRM support for ARM Mali CSF-based graphics processors in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow...

The vulnerability of the ip_vs_add_service() function in the net/netfilter/ipvs/ip_vsctl.c module of the netfilter component of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ipvsaddservice function in the net/netfilter/ipvs/ipvsctl.c module of the netfilter component of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the stratix10_rsu_probe() function in the drivers/firmware/stratix10-rsu.c driver file of the Linux kernel operating system allows a hacker to cause a service failure.

The vulnerability of the stratix10rsuprobe function in the drivers/firmware/stratix10-rsu.c file of the Linux kernel firmware driver is related to the pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the adis_init() function in the drivers/iio/imu/adis.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the adisinit function in the drivers/iio/imu/adis.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the unshare_fs() function in the kernel/fork.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the unsharefs function in the kernel/fork.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260930-73-0091

The vulnerability of the sfbdequeue function in the net/sched/schsfb.c module of the Linux operating system’s network/scheduling subsystem is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

SUSE CVE-2026-101908

Axios is a promise-based HTTP client for the browser and Node.js. From 1.7.0 until 1.20.0, the fetch adapter constructs a Request with sanitized resolvedOptions but then calls fetch with the original fetchOptions. A separate same-process prototype-pollution flaw populates Object.prototype.headers...

CVE-2026-54160

A flaw was found in Network UPS Tools NUT. The project's automated workflow improperly runs untrusted code submitted in pull requests within an environment that holds elevated write privileges. A remote attacker can exploit this flaw by submitting a malicious pull request to achieve arbitrary cod...

Important: flatpak

Issue Overview: A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy functio...

ROS-20260929-73-0145

The vulnerability of the ipvsgetoutrt function in the net/netfilter/ipvs/ipvsxmit.c module of the netfilter component of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260929-73-0152

The vulnerability of the ext4xattr inodedecrefall function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-102824

Name of the Vulnerable Software and Affected Versions Anjvision YSSD-RTMP-H5 version 3.3.2.4 Description Several ONVIF service endpoints process management requests without enforcing required authentication. This issue stems from the initialization of a resource with an insecure default, which...

ROS-20260929-73-0109

The vulnerability of the iiodeviceregister function in the drivers/iio/industrialio-core.c file of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260929-73-0084

The vulnerability of the pcl818detach function in the drivers/comedi/drivers/pcl818.c module, which supports Linux kernel-based data collection devices, is related to the pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ROS-20260929-73-0199

The vulnerability of the seqivaeadencrypt function in the crypto/seqiv.c module of the Linux kernel’s cryptography subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...