SUSE CVE-2026-64223

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only present negotiated TTLM maps ieee80211tidtolinkmapsizeok validates negotiated TTLM elements against the number of link-map entries indicated by linkmappresence. ieee80211parsenegttlm must consume the...

PT-2026-64662

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtw get sec ie, rtw get wapi ie, and rtw get wps attr Three IE/attribute parsing functions have missing bounds checks. rtw get sec ie and rtw get wapi ie iterate over a raw IE buffer without...

PT-2026-64493

In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S and MMS136 The MMS134S and MMS136 touch controllers have an event size of 6 bytes rather than 8 bytes. When mms114 read reg reads the touch data packet from the device into the touch...

PT-2026-64663

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in IE loops in issue assocreq and join cmd hdl Two IE parsing loops are missing the header bounds checks before they dereference pIE-length: - issue assocreq walks pmlmeinfo-network.ies to build...

PT-2026-64580

In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject CLEAN SEGMENTS ioctl with out-of-range segment numbers Syzbot reported a hung task in nilfs transaction begin where multiple tasks performing chmod on a nilfs2 mount blocked for over 143 seconds waiting to acquire ...

Linux Distros Unpatched Vulnerability : CVE-2026-64377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cpufreq: qcom-cpufreq-hw: Fix possible double free qcomcpufreq.data is allocated with devmkzalloc in probe as an array of per-domain data. qcomcpufreqhwcpuinit...

Linux Distros Unpatched Vulnerability : CVE-2026-64440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: fix OOB write in HTcapshandler HTcapshandler iterates pIE-length bytes and writes into HTcaps.u.HTcap, which is a fixed 26-byte array sizeof...

Linux Distros Unpatched Vulnerability : CVE-2026-65904

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify through 3.3.3 fails to sanitize DOM elements passed via INPLACE mode when the element originates from a different window/realm e.g., an iframe's...

PT-2026-64661

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB write in HT caps handler HT caps handler iterates pIE-length bytes and writes into HT caps.u.HT cap, which is a fixed 26-byte array sizeof struct HT caps element. Because pIE-length is a raw u8 from an...

PT-2026-64598

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-cpufreq-hw: Fix possible double free qcom cpufreq.data is allocated with devm kzalloc in probe as an array of per-domain data. qcom cpufreq hw cpu init stores a pointer to one element of this array in policy-driver...

Linux Distros Unpatched Vulnerability : CVE-2026-64272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: mms114 - fix touch indexing for MMS134S and MMS136 The MMS134S and MMS136 touch controllers have an event size of 6 bytes rather than 8 bytes. When...

openSUSE 16 Security Update : apache-ivy (openSUSE-SU-2026:21424-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21424-1 advisory. This update for apache-ivy fixes the following issue: - CVE-2026-26032: directory traversal sequences in module coordinates can allow overwriting...

PT-2026-64664

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in update beacon info IE loop The IE parsing loop in update beacon info advances by pIE-length + 2 each iteration but only guards on i length from one byte past the allocated receive buffer...

PT-2026-64736

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mac80211 wifi component regarding Multi-Link Element MLE defragmentation. When a reconf or EPCS MLE is located in a non-transmitted profile, the defragmentation...

PT-2026-64665

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in OnAssocRsp IE loop The IE parsing loop in OnAssocRsp advances by pIE-length + 2 each iteration but only guards on i length from pframepkt len, which is one byte past the allocated receive buffe...

Linux Distros Unpatched Vulnerability : CVE-2026-65900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify versions =3.0.0 and before 3.4.8, when configured with SAFEFORTEMPLATES together with a DOM output mode RETURNDOM, RETURNDOMFRAGMENT, or INPLACE, fail...

Linux Distros Unpatched Vulnerability : CVE-2026-64359

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: reject CLEANSEGMENTS ioctl with out-of-range segment numbers Syzbot reported a hung task in nilfstransactionbegin where multiple tasks performing chmod ...

Linux Distros Unpatched Vulnerability : CVE-2026-26197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If a file is corrupted such that an array datatype's siz...

Linux Distros Unpatched Vulnerability : CVE-2026-65914

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify before 3.3.2 contains a mutation-XSS vulnerability when sanitized HTML is reinserted into special parsing contexts using innerHTML with wrappers like...

GHSA-6XJ8-QV9J-XCJQ Oh My Posh: Arbitrary command execution via template injection in the path segment

Summary Oh My Posh re-renders the resolved path string, which contains the raw folder names taken from the filesystem, through the Go text/template engine. That engine's function map exposes a cmd function that runs arbitrary OS commands. A directory whose name contains a Go template expression i...