SUSE-SU-2026:5107-1 Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.138 fixes one security issue: The following security issue was fixed: - CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period bsc1285686...

Critical: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability...

UBUNTU-CVE-2026-99258

In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Avoid using per-cpu output page in hvapicidtovpindex hvapicidtovpindex currently uses the per-cpu hypercall input and output pages. This function is called when running in VTL2 and when running in an SEV-SNP CoCo VM...

Important: Red Hat Security Advisory: kernel security update

An update for the kernel is now available for NVIDIA on RHEL 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-159998.53.1 fixes one security issue: The following security issue was fixed: CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period bsc1285686. Patch Instructions: To install this SUSE update use the SUSE recommended...

Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-159998.54.1 fixes one security issue: The following security issue was fixed: CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period bsc1285686. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:24493-1 Security update for the Linux Kernel (Live Patch 31 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-159998.54.1 fixes one security issue: The following security issue was fixed: - CVE-2026-98432: ipv4: free inetopt and ireqopt after an RCU grace period bsc1285686...

Critical: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CLEANSTART-2024-TY41317 double free memory issue was found to occur in the libvirt API, in versions before 6

Security vulnerability affects the libvirt package. A double free memory issue was found to occur in the libvirt API, in versions before 6...

CVE-2023-4863

CVE-2023-4863 checkout webp git clone https://chromium.googlesource.com/webm/libwebp/ webptest cd webptest/ checkout vulnerable version git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0 enable AddressSanitizer sed -i 's/^EXTRAFLAGS=./& -fsanitize=address/' makefile.unix build webp make -f...

CVE-2026-116131

HTTP::Body versions before 1.2301 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and multipart parts. The urlencoded parser splits the whole body on its separators at once, creating one scalar per separator before any field is stored. This costs about 9...

Updated perl-ExtUtils-Typemaps-Default package fixes security vulnerabilities

ExtUtils::Typemaps::STL::String versions before 1.06 for Perl TSTDSTRING typemap may read the SV length before stringifying the argument. CVE-2026-107373 ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. CVE-2026-107794...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple memory and Out-of-bounds Read issues in Pillow-manylinux.

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Pillow. Pillow is used in our Speech runtimes. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-54058 DESCRIPTION: Pillow is a Python...

AZL-110268 CVE-2026-107928 affecting package rust 1.96.1-2

When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...

AZL-110298 CVE-2026-107928 affecting package tensorflow 2.16.1-11

When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: x86/efi: defer freeing of boot services memory efifreebootservices frees memory occupied by EFIBOOTSERVICESCODE and EFIBOOTSERVICESDATA using memblockfreelate. There are two issues with that: memblockfreelate should be used for...

Unbreakable Enterprise kernel security update

6.12.0-207.111.5.4 - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167669 CVE-2026-98432 - ipv4: validate checksumstart before completing checksum Michael S. Tsirkin Orabug: 40167684 CVE-2026-99999...

RHLW-2026-4051AB209E8865E6 Lightwell Security Advisory: avro-android 1.11.0.rhlw-00002

Red Hat Lightwell has released org.apache.avro:avro-android 1.11.0.rhlw-00002 with backported fixes for CVE-2023-39410 and CVE-2024-47561. CVE-2023-39410: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK CVE-2024-47561: Apache Avro Java SDK: Arbitrary Code Execution...

CVE-2026-98281

In the Linux kernel, the following vulnerability has been resolved: futex: Also allocate private hash on vfork As Jann demonstrated, it is entirely feasible to access the mm through vfork. Therefore we need to allocate a private hash on vfork as well as any other CLONEVM user. Specifically, it mu...

RHLW-2026-41BD2185E6D22E15 Lightwell Security Advisory: avro 1.11.0.rhlw-00002

Red Hat Lightwell has released org.apache.avro:avro 1.11.0.rhlw-00002 with backported fixes for CVE-2023-39410 and CVE-2024-47561. CVE-2023-39410: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK CVE-2024-47561: Apache Avro Java SDK: Arbitrary Code Execution when...