MGASA-2026-0467 Updated python-tornado packages fix security vulnerabilities

Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient Tornado has out-of-bounds memory access via C extension tornado AsyncHTTPClient accumulates decompressed chunks without size limit gzip bomb...

SUSE CVE-2026-97496

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in getwavestate The getwavestate function for v9 trusts cphqdcntlstacksize and cphqdcntlstackoffset values read directly from the MQD, which are written by GPU microcode and fully...

AZL-103965 CVE-2026-97496 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in getwavestate The getwavestate function for v9 trusts cphqdcntlstacksize and cphqdcntlstackoffset values read directly from the MQD, which are written by GPU microcode and fully...

DEBIAN-CVE-2026-97496

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in getwavestate The getwavestate function for v9 trusts cphqdcntlstacksize and cphqdcntlstackoffset values read directly from the MQD, which are written by GPU microcode and fully...

CVE-2026-97496

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in getwavestate The getwavestate function for v9 trusts cphqdcntlstacksize and cphqdcntlstackoffset values read directly from the MQD, which are written by GPU microcode and fully...

EUVD-2026-86094

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in getwavestate The getwavestate function for v9 trusts cphqdcntlstacksize and cphqdcntlstackoffset values read directly from the MQD, which are written by GPU microcode and fully...

CVE-2026-97496

The Linux kernel contains an out-of-bounds (OOB) memory exposure vulnerability in the drm/amdkfd component within the get_wave_state() function for v9. The root cause is that the function trusts cp_hqd_cntl_stack_size and cp_hqd_cntl_stack_offset values read from the MQD, which are fully attacker...

CVE-2026-97496 drm/amdkfd: Fix OOB memory exposure in get_wave_state()

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in getwavestate The getwavestate function for v9 trusts cphqdcntlstacksize and cphqdcntlstackoffset values read directly from the MQD, which are written by GPU microcode and fully...

CVE-2026-97496 drm/amdkfd: Fix OOB memory exposure in get_wave_state()

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in getwavestate The getwavestate function for v9 trusts cphqdcntlstacksize and cphqdcntlstackoffset values read directly from the MQD, which are written by GPU microcode and fully...

CVE-2026-97496

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in getwavestate The getwavestate function for v9 trusts cphqdcntlstacksize and cphqdcntlstackoffset values read directly from the MQD, which are written by GPU microcode and fully...

PT-2026-97974

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMBus block transfer handling where the length specified in data-block0 is not validated early enough. This allows user-controlled oversized block lengths to reach...

PT-2026-104983

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in get wave state The get wave state function for v9 trusts cp hqd cntl stack size and cp hqd cntl stack offset values read directly from the MQD, which are written by GPU microcode and fully...

CVE-2026-97496: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix OOB memory exposure in getwavestate The getwavestate function for v9 trusts cphqdcntlstacksize and cphqdcntlstackoffset values read directly from the MQD, which are written by GPU microcode and fully...

Security update for gvfs (important)

openSUSE security update: security update for gvfs ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21875-1 Rating: important References: bsc1278156 bsc1278157 bsc1278158 bsc1278159 Cross-References: CVE-2026-84267 CVE-2026-84268 CVE-2026-84269...

Linux Distros Unpatched Vulnerability : CVE-2026-97496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Fix OOB memory exposure in getwavestate The getwavestate function for v9 trusts cphqdcntlstacksize and cphqdcntlstackoffset values read directly fro...

OPENSUSE-SU-2026:21875-1 Security update for gvfs

This update for gvfs fixes the following issues: - CVE-2026-84267: readstring allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks bsc1278157. - CVE-2026-84268: readreply...

ExLlamaV3 contains Denial of Service vulnerability via insufficient bounds checking on kernel dispatch index

Overview An out-of-bounds OOB memory access vulnerability involving unchecked array indexing has been identified in the exllamav3ext compute unified device architecture CUDA extension. Successful exploitation can lead to an immediate denial of service or application instability. This vulnerabilit...

SUSE CVE-2026-80624

In the Linux kernel, the following vulnerability has been resolved: mfd: cs42l43: Sanity check firmware size Currently the code checks if a firmware was received, however it does not verify that the firmware size is larger than the firmware header. As the firmware pointer is dereferenced as a...

Linux Distros Unpatched Vulnerability : CVE-2026-74737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ethernet: ti: am65-cpsw-nuss: Fix portid extraction from SRC TAG On the packet reception path, the ID of the MAC Port on which the packet was received, is...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098669)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098669 advisory. An out-of-bounds OOB memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with a special...