Advisory ROSA-SA-2026-3342

Software: Kernel 6.18.56 OS: ROSA-CHROME Affected versions: = kernel-6.18.56 Affected versions: kernel-6.18.56 CVE-ID: CVE-2026-98432 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A vulnerability in the implementation of the IPv4 TCP V4 SYN receive socket function exists in the Linux kernel. It involves...

Advisory ROSA-SA-2026-3341

Software: Kernel 6.12.113 OS: ROSA-CHROME Affected versions: = kernel-6.12.113 Affected versions: kernel-6.12.113 CVE-ID: CVE-2026-98432 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: The vulnerability in the implementation of the IPv4 TCP V4 SYN receive socket function is related to improper memory...

Advisory ROSA-SA-2026-3340

Software: Kernel 6.1.190 OS: ROSA-CHROME Affected versions: = kernel-6.1.190 Affected versions: kernel-6.1.190 CVE-ID: CVE-2026-98432 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: The vulnerability in the implementation of the IPv4 protocol within the Linux kernel’s tcpv4synrecvsock function is related ...

Advisory ROSA-SA-2026-3339

Software: Kernel 4.18.0 OS: ROSA Virtualization 3.0 Affected versions: = kernel-4.18.0-553.184.1.el810 Affected versions: kernel-4.18.0-553.184.1.el810 CVE-ID: CVE-2026-98432 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A vulnerability in the implementation of the IPv4 TCP V4 SYN receive socket functio...

Advisory ROSA-SA-2026-3338

Software: Kernel 4.18.0 OS: ROSA Virtualization 3.1 Affected versions: = kernel-4.18.0-553.184.1.el810 Affected versions: kernel-4.18.0-553.184.1.el810 CVE-ID: CVE-2026-98432 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A vulnerability in the implementation of the IPv4 TCP V4 SYN receive socket functio...

Advisory ROSA-SA-2026-3337

Software: Kernel 4.18.0 OS: ROSA Virtualization 3.0 Affected versions: = kernel-4.18.0-553.184.1.el810 Affected versions: kernel-4.18.0-553.184.1.el810 CVE-ID: CVE-2026-98432 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A vulnerability in the implementation of the IPv4 TCP V4 SYN receive socket functio...

Advisory ROSA-SA-2026-3336

Software: Kernel 4.18.0 OS: ROSA Virtualization 2.1 Affected versions: = kernel-4.18.0-553.184.1.el810 Affected versions: kernel-4.18.0-553.184.1.el810 CVE-ID: CVE-2026-98432 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: A vulnerability in the implementation of the IPv4 TCP V4 SYN receive socket functio...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mlxsw: corelinecards: Fix double memory deallocation in case of invalid INI file When an invalid INI file is encountered, mlxswlinecardtypesinit deallocates memory but does not reset the pointer to NULL and returns 0. Should any...

CVE-2026-98052

A flaw was found in the Linux kernel's Broadcom ASP2.0 Ethernet driver. This vulnerability can result in a Denial of Service DoS or system instability due to premature memory deallocation. When handling fragmented network packets, the driver fails to properly clear state flags before reusing...

Astra Linux – Vulnerability in Parsec

The vulnerability of the gobblefile function in the lsm utility of the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause service failures...

Astra Linux – Vulnerability in Parsec

The vulnerability of the macid utility in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in Parsec

The vulnerability of the PARSEC security subsystem’s psmac utility is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in Parsec

The vulnerability of the parsecmdlin function in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in Parsec

The vulnerability of the parseoptions function in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...

Astra Linux – Vulnerability in Parsec

The vulnerability of the pdpl-user utility in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...

CVE-2026-89500

A flaw was found in the Linux kernel's ring-buffer component. When a cached reader page is discarded after a concurrent ring buffer resize, the system may use an incorrect buffer size for memory deallocation. This mismatch can lead to a kernel crash, resulting in a Denial of Service DoS, or it...

zstd-jni DoS

The vulnerabilities of the functions setDict, setLongMax, and setLevel in the data compression library zstd-jni are related to the possibility of exploiting memory usage after deallocation. Exploiting these vulnerabilities could allow an attacker to cause a service failure...

Use After Free

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Use After Free

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Use After Free

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...