CVE-2026-80580

A flaw was found in the fbdev component of the Linux kernel. This vulnerability arises because the modestring function, when generating output for the sysfs interface, can write more data than its allocated buffer can hold. An attacker could exploit this by providing a specially crafted input,...

CVE-2026-80571

A flaw was found in the Linux kernel's powerpc/pseries: papr-phy-attest component. This vulnerability arises from insufficient validation of a command length parameter, which can lead to a buffer overflow. Such an overflow could be exploited by a local attacker to potentially execute arbitrary co...

CVE-2026-80566

A flaw was found in the hynitroncstxxx driver in the Linux kernel. This vulnerability allows an attacker to provide specially crafted touch input that can bypass validation checks for touch count and finger identifiers IDs. This improper handling can lead to the corruption of the touch state or t...

CVE-2026-80559

A flaw was found in the Linux kernel's sur40 input device driver. Due to improper ordering of device registration, a local user could trigger a race condition by opening the input device immediately after its registration. This could lead to the system accessing uninitialized data, resulting in a...

CVE-2026-74742

A flaw was found in the Linux kernel's veth component. In a multi-queue setup without an eXpress Data Path XDP program attached, the vethpoll function incorrectly derives the index of the peer transmit TX queue to wake. This can cause a TX queue to stop indefinitely if it becomes full, as the...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition used by IBM Tivoli System Automation Application Manager. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check ...

libexpat: libexpat: Denial of Service via hash flooding attack with crafted XML

A flaw was found in libexpat. This vulnerability arises from the software misinterpreting a return code, leading to insufficient randomness entropy for hash functions. A remote attacker could exploit this by sending specially crafted XML content, triggering hash flooding attacks. This can result ...

libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service

A flaw was found in libexpat. The library's handling of custom encoding callbacks lacks proper tracking of handler call depth, which can lead to a use-after-free vulnerability. This memory corruption flaw could allow a local attacker to cause a denial of service or potentially execute arbitrary...

kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer

A use-after-free vulnerability was found in the Linux kernel's IPv6 FIB rule lookup path. In fib6rulesuppress, when a route is suppressed and released via ip6rtputflags, the res-rt6 pointer is not cleared. If no later rule supplies a replacement route, fib6rulelookup returns the stale freed rt6in...

CVE-2026-80558

A flaw was found in libceph within the Linux kernel. A remote attacker, by sending a specially crafted or corrupted OSD map osdmap from a Ceph monitor or OSD, could cause the system to attempt to access memory outside of allocated bounds. This out-of-bounds access occurs because invalid OSD indic...

CVE-2026-74736

A flaw was found in the Linux kernel's clsbpf component. A device-bound program could be incorrectly attached to a different network device than it was intended for. This misconfiguration could allow an attacker to trigger a system panic, leading to a denial of service, if the original device is...

[SECURITY] [DSA 6471-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6471-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 27, 2026 https://www.debian.org/security/faq -...

CVE-2026-74750

A flaw was found in the Linux kernel's ovpn module. This vulnerability arises from an incorrect handling of cryptographic resource freeing, where a function that requires the ability to pause sleep is executed in a context that does not allow it. This improper resource management could lead to...

CVE-2026-80527

A flaw was found in the Linux kernel's Ceph client. A reader can experience an indefinite hang when the client's local capability state mdswanted becomes stale after a Metadata Server MDS capability revocation. This occurs because the client believes it still wants a capability e.g., FILERD that...

CVE-2026-74738

A flaw was found in the regmap: sdw-mbq component of the Linux kernel. This vulnerability occurs when the regmapsdwmbqpollbusy function attempts to call an unset readablereg callback. If a device responds with COMMANDIGNORED, it can lead to a NULL function pointer dereference. This could...

CVE-2026-80523

A flaw was found in the Linux kernel. The HDMA Hardware Direct Memory Access clock, responsible for the internal TCM Tightly Coupled Memory access path of the X100 RISC-V core, was not set as critical. This oversight allows the clock to be shut off, which can lead to a system hang, for example,...

CVE-2026-80562

A flaw was found in the Linux kernel's gpio: ml-ioh component. An incorrect spinlock type spinlockt was used in interrupt handling routines where a non-sleeping lock rawspinlockt was required. This could lead to invalid lock acquisition, potentially causing system instability or a denial of...

CVE-2026-80553

A flaw was found in the s390/vfioccw component of the Linux kernel. This vulnerability arises from the improper management of workqueues, where existing tasks might not be canceled before associated resources are released. A local attacker could potentially leverage this issue to trigger a...

kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer

A use-after-free vulnerability was found in the Linux kernel's IPv6 FIB rule lookup path. In fib6rulesuppress, when a route is suppressed and released via ip6rtputflags, the res-rt6 pointer is not cleared. If no later rule supplies a replacement route, fib6rulelookup returns the stale freed rt6in...

EUVD-2026-66985

Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the scope of the program. This usually results in a denial of service, yet we cannot rule out the possibility of exploits that can cause Remo...