SUSE-SU-2026:22720-1 Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIGX86 is set bsc1256615. - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. -...

SUSE-SU-2026:22675-1 Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues The following security issues were fixed: - CVE-2025-71089: iommu: disable SVA when CONFIGX86 is set bsc1256615. - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. -...

MAL-2026-10564 Malicious code in micro-ui-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be44655a47177f3740201ddb9dc66db080b9f665354c78bcebeb9a2da3b11b7f On npm install, the package's postinstall script postinstall.js reads os.hostname and sends it as a query parameter in a plain-HTTP GET to a hardcode...

Malicious code in micro-ui-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be44655a47177f3740201ddb9dc66db080b9f665354c78bcebeb9a2da3b11b7f On npm install, the package's postinstall script postinstall.js reads os.hostname and sends it as a query parameter in a plain-HTTP GET to a hardcode...

CVE-2026-33800

CVE-2026-33800 affects Junos OS on MX Series (MX FPCs up to MPC9). The issue is caused by an unchecked input for a loop condition in PFEMAN, where high-rate Micro-BFD session flaps queue events and a VC with locality-bias amplifies processing time, causing PFEMAN to miss processing and the PFEMAN...

The vulnerability of the svm_migrate_to_ram() function in the drivers/gpu/drm/amd/amdkfd/kfd_migrate.c file of the DRI support driver for AMD GPU-based Linux operating system kernels allows a malicious actor to cause a service failure.

The vulnerability of the svmmigratetoram function in the drivers/gpu/drm/amd/amdkfd/kfdmigrate.c file, a driver for supporting Direct Rendering Infrastructure DRI in AMD graphics cards for Linux operating systems, is related to the assignment of the NULL pointer. Exploiting this vulnerability cou...

PYSEC-2026-1485 Kedro allows Remote Code Execution by Pulling Micro Packages

In kedro-org/kedro version 0.19.8, the pullpackage API function allows users to download and extract micro packages from the Internet. However, the function projectwheelmetadata within the code path can execute the setup.py file inside the tar file, leading to remote code execution RCE by running...

PT-2026-56155

Broken object-level access control on the Template API in MicroRealEstate allows attackers to retrieve document templates used by other organizations without authorization. This issue affects MicroRealEstate: through 1.0.0-alpha3...

Januscape

Januscape: Guest-to-Host Escape in KVM/x86 Abstract...

SUSE-SU-2026:22666-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40341: futex: Don't leak robustlist pointer on exec race bsc1255029. - CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs...

SUSE-SU-2026:22521-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40341: futex: Don't leak robustlist pointer on exec race bsc1255029. - CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs bsc126456...

SUSE-SU-2026:22665-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40341: futex: Don't leak robustlist pointer on exec race bsc1255029. - CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs bsc126456...

SUSE-SU-2026:22671-1 Security update for kernel-livepatch-MICRO-6-0_Update_26

This update for kernel-livepatch-MICRO-6-0Update26 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 26...

SUSE-SU-2026:22518-1 Security update for kernel-livepatch-MICRO-6-0_Update_26

This update for kernel-livepatch-MICRO-6-0Update26 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 26...

SUSE-SU-2026:22688-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_26

This update for kernel-livepatch-MICRO-6-0-RTUpdate26 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 26...

SUSE-SU-2026:22517-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_26

This update for kernel-livepatch-MICRO-6-0-RTUpdate26 fixes the following issues: - New livepatch SLE Micro 6.0/6.1 kernel update 26...

Ubuntu 26.04 LTS : Linux kernel vulnerabilities (USN-8488-1)

"The remote Ubuntu 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8488-1 advisory. It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker...

USN-8488-2: Linux kernel (Raspberry Pi) vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 Several security issues were discovered in the Linux kernel. An attacker could...

The vulnerability of the `dc_allow_idle_optimizations_internal()` function in the `drivers/gpu/drm/amd/display/dc/core/dc.c` file of the Linux kernel’s Direct Rendering Infrastructure driver architecture allows a attacker to cause a service failure.

The vulnerability of the dcallowidleoptimizationsinternal function in the drivers/gpu/drm/amd/display/dc/core/dc.c file of the Linux kernel’s Direct Rendering Infrastructure driver is related to the assignment of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a...

SUSE CVE-2026-53285

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wrap DCN32 phantom-plane allocation in DCRUNWITHPREEMPTIONENABLED Why dcn32validatebandwidth wraps dcn32internalvalidatebw with DCFPSTART/DCFPEND. In x86 non-RT, DCFPSTART takes fpregslock, which disables local...