SUSE CVE-2026-74693

In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length presterafwhdrparse reads the firmware header before checking that the firmware image contains that header. Reject images shorter than struct presterafwheader before decoding the magi...

PT-2026-82721

DeadLetterPublishingRecovererFactory reads the retry topic-original-timestamp header from an inbound ConsumerRecord and passes its raw bytes directly to new BigIntegerheader.value with no length or format validation. Spring for Apache Kafka 4.1.0 Spring for Apache Kafka 4.0.0 - 4.0.6 Spring for...

TencentOS Server 3: frr (TSSA-2026:0894)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0894 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

CVE-2026-80545

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB length and overflow checks The xcrbmsgtotype6ep11cprbmsgx function lacks proper input validation, creating security vulnerabilities: 1. Missing minimum size validation: The ep11cprb structure and...

CVE-2026-80545

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB length and overflow checks The xcrbmsgtotype6ep11cprbmsgx function lacks proper input validation, creating security vulnerabilities: 1. Missing minimum size validation: The ep11cprb structure and...

UBUNTU-CVE-2026-80526

In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2562: Validate values for volume writes tas2562volumecontrolput does not do any validation of the control value written by userspace, it uses it to look up a value in a fixed size array which can easily be overflowed and...

CVE-2026-80576

CVE-2026-80576 affects the Linux kernel's drm/amdgpu driver. In amdgpu_cs_p2_ib(), a user-supplied ib_bytes value was passed to ib->length_dw without a limit. Since ring_emit_ib() encodes this length into packet fields, oversized values can corrupt adjacent control bits , destabilizing command...

CVE-2026-80573 Input: iforce - validate input packet lengths

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - validate input packet lengths iforceprocesspacket reads fixed fields from joystick, wheel and status packets without first checking their lengths. In particular, the shared hats-and-buttons helper unconditionally...

CVE-2026-80546

CVE-2026-80546 affects the s390/zcrypt subsystem of the Linux kernel, specifically the xcrb_msg_to_type6cprb_msgx() function. Three related input-validation flaws allow a local attacker with low privileges to trigger: (1) integer overflow during CEIL4 alignment, leading to undersized buffer alloc...

CVE-2026-80545 s390/zcrypt: Improve EP11 CPRB length and overflow checks

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB length and overflow checks The xcrbmsgtotype6ep11cprbmsgx function lacks proper input validation, creating security vulnerabilities: 1. Missing minimum size validation: The ep11cprb structure and...

CVE-2026-80526

CVE-2026-80526 affects the Linux kernel's ASoC tas2562 driver . The function tas2562_volume_control_put() fails to validate the control value written by userspace before using it as an index into a fixed-size array , allowing an array overflow . The out-of-bounds value is then written directly to...

CVE-2026-74736 net/sched: cls_bpf: reject dev-bound programs bound to a different device

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsbpf: reject dev-bound programs bound to a different device clsbpfprogfromefd obtained a SCHEDCLS program via bpfproggettypedev but never verified that a device-bound offloaded program's bound netdev matches the TC...

SUSE-SU-2026:23336-1 Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues. The following security issues were fixed: - CVE-2026-23449: net/sched: teql: Fix double-free in teqlmasterxmit bsc1262213. - CVE-2026-31629: nfc: llcp: add missing return after LLCPCLOSED checks...

BIT-HAPROXY-2026-26081

HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEWTOKEN format. HAProxy Enterprise and ALOHA are also affected...

CVE-2026-19220

The Forminator Forms WordPress plugin before 1.57.1 does not verify that site registration is enabled on the network before creating a site signup, allowing unauthenticated visitors to create a new site on a WordPress multisite network and gain administrator privileges on it...

EUVD-2026-66275

The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not validate some widget settings before outputting them inside an HTML attribute, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2026-58096

The ppp(8) utility in the FreeBSD operating system kernel contains a memory safety vulnerability in the LcpDecodeConfig() function. The flaw exists because the function fails to validate the length of received endpoint discriminator options against the minimum requirements specified in RFC 1717 ,...

SUSE CVE-2026-74293

In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: fslaudmix: Validate written enum values fslaudmixputmixclksrc and fslaudmixputoutsrc convert the user-provided enum item with sndsocenumitemtoval before checking whether the item is within the enum's item count. The...

PT-2026-82322

Name of the Vulnerable Software and Affected Versions yx-image-recognition version 1.0 Description The software is subject to Path Traversal, a condition where an attacker can access files and directories outside the intended folder. This occurs because the parameters dir and filePath are passed...

PT-2026-82189

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iforce process packet function where input packet lengths for joystick, wheel, and status packets are not validated before reading fixed fields. Specifically, a...