Chromium: CVE-2026-9910 Out of bounds memory access in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues The following security issues were fixed: CVE-2021-47103: inet: fully convert sk-skrxdst to RCU rules bsc1221010. CVE-2023-20585: x86/CPU: Fix FPDSS on Zen1 bsc1243603. CVE-2025-54518: x86/CPU/AMD: Prevent...

RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()

...

RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path

...

RDMA/hns: Fix unlocked call to hns_roce_qp_remove()

...

RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads

...

RDMA/rxe: Reject unknown opcodes before ICRC processing

...

RDMA/mana: Validate rx_hash_key_len

...

RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()

...

media: rc: xbox_remote: heed DMA restrictions

...

CVE-2026-8070

Armoury Crate contains an incorrect permission assignment in a critical resource, allowing a local user to bypass the driver’s validation and gain unauthorized read/write access to physical memory. Impact is described as HIGH with local attack vector and LOW privileges required, no user interacti...

EUVD-2026-33244

Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s validation mechanism, resulting in unauthorized read and write access to physical memory.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security...

SUSE CVE-2026-46127

In the Linux kernel, the following vulnerability has been resolved: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdmacopypduresp Sashiko points out that pd-uctx isn't initialized until late in the function so all these error flow references are NULL and will crash. Use the uctx that isn't NU...

SUSE CVE-2026-46226

In the Linux kernel, the following vulnerability has been resolved: spi: fsl: fix controller deregistration Make sure to deregister the controller before releasing underlying resources like DMA during driver unbind...

EUVD-2026-33095

Out of bounds read in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

EUVD-2026-33208

Inappropriate implementation in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

EUVD-2026-33207

Inappropriate implementation in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-9910

An out of bounds memory access flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499176133...

Linux Distros Unpatched Vulnerability : CVE-2026-9913

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform out of bounds memory access via ...

PT-2026-44743

Name of the Vulnerable Software and Affected Versions Armoury Crate affected versions not specified Description Incorrect permission assignment for a critical resource allows a local user to bypass the driver validation mechanism. This leads to unauthorized read and write access to physical memor...