AlmaLinux 9 : php:8.3 (ALSA-2026:57539)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:57539 advisory. php: ext-pgsql: PHP: SQL injection via improper backslash escaping CVE-2026-17543 php: PHP: Denial of Service via circular symbolic links in phar archive...

ROS-20260821-73-0031

The vulnerability of the Linux kernel Bluetooth HCI driver implementation relates to competitive access to resources during the execution of the sniffmin,maxintervalset function in the net/bluetooth/hcidebugfs.c module. Exploiting this vulnerability allows a remote attacker to compromise the...

ROS-20260821-73-0010

The vulnerability of the ioringexitwork function in the iouring/iouring.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260821-73-0018

The vulnerability of the cxlparsecfmws function in the drivers/cxl/acpi.c module of the CXL device driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

ROS-20260821-73-0019

The vulnerability of the lastcmdset function in the kernel/trace/traceeventssynth.c module, which supports kernel tracing in Linux operating systems, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260821-73-0012

The vulnerability of the functions rtw89coreregisterhw and rtw89pciprobe in the driver module net/wireless/realtek/rtw89/core.c of the Realtek wireless adapter driver in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can...

ROS-20260821-73-0015

The vulnerability in the arch/powerpc/kernel/rtasflash.c module of the Linux operating system is related to unlimited resource allocation. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260821-73-0072

The vulnerability of the cniccmstopbnx2xhw function in the drivers/net/ethernet/broadcom/cnic.c module of the Broadcom Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...

ROS-20260821-73-0021

The vulnerabilities of the functions preparethresholdblock, amdthresholdinterrupt, and mcethresholdcreatedevice in the arch/x86/kernel/cpu/mce/amd.c module are related to integer overflow or cyclic shift vulnerabilities in the Linux operating system’s x86 kernel support. Exploitation of these...

ROS-20260821-73-0022

The vulnerability of the dxprobe function in the fs/ext4/namei.c module of the Ext4 file system in the Linux operating system is related to the lack of code to verify the return value of this function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260821-73-0067

The vulnerability in the drivers/infiniband/core/cma.c module of the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260821-73-0074

The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor, operating remotely, ...

ROS-20260821-73-0039

The vulnerability in the drivers/infiniband/hw/hfi1/chip.c module of the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260821-73-0044

The vulnerability in the drivers/clk/tegra/clk-tegra124-emc.c module of the Linux operating system is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102044)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102044 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: module names must be null-terminated We need to explicitly check the length,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099437)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099437 advisory. Stack buffer overflow in PostgreSQL module refint allows an unprivileged database user to execute arbitrary code as the operating system user running the database. A...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102039)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102039 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free of the discoverer in tipcdiscrcv bearerdisable frees b-disc with...

RHEL 9 : mod_md (RHSA-2026:57844)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57844 advisory. This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate...

openSUSE 16: libpython3_13-1_0 / libpython3_13-1_0-x86-64-v3 / libpython3_13t1_0 / etc (openSUSE-SU-2026:21595-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21595-1 advisory. - CVE-2025-15366: user-controlled command can allow additional commands injected using newlines bsc1257044. - CVE-2025-15367: control characters...

kernel security, bug fix, and enhancement update

4.18.0-553.157.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...