CVE-2026-98493

A flaw was found in the Linux kernel. This vulnerability allows an attacker capable of specifying system boot or network parameters to cause a Denial of Service DoS or memory corruption. During Dynamic Host Configuration Protocol DHCP autoconfiguration, the kernel appends options into a fixed-siz...

CVE-2026-98588

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. When allocating a socket map with an excessively large entry count, a signed integer overflow occurs during cleanup when the map is released. A local user with permission to create BPF maps can trigger this issue to caus...

CVE-2026-98570

A flaw was found in the Linux kernel's IPv6 networking subsystem. An unauthenticated remote attacker can cause a Denial of Service DoS by sending network traffic through an affected IPv6 tunnel interface. Due to insufficient buffer allocation when reconstructing packet headers, an unchecked...

CVE-2026-98567

A flaw was found in the Linux kernel. A local privileged user could trigger a Denial of Service DoS or kernel memory corruption by causing an out-of-bounds memory write. This issue occurs in the Transmit Packet Steering XPS networking mechanism when traffic classes are decreased without clearing...

CVE-2026-98532

A flaw was found in the Linux kernel. A remote attacker could cause a Denial of Service DoS or memory corruption by sending specially crafted IPv6 network packets. The IPv6 extension header parsing mechanism fails to verify that the declared length of a header fits within the received packet data...

CVE-2026-10758

A flaw was found in LERC. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by submitting specially crafted image data to an application using the library. Processing the malicious input triggers an integer overflow that leads to an out-of-bounds memory...

xorg-x11-server: glamor: size tmp_bits buffer for source coordinate range in upload_boxes

A flaw was found in xorg-x11-server. In the Glamor 2D graphics acceleration module, a buffer allocation error occurs during color depth conversion when processing an image whose source dimensions exceed the destination dimensions. A local user can exploit this vulnerability to trigger an...

xorg-x11-server: glamor: size tmp_bits buffer for source coordinate range in upload_boxes

A flaw was found in xorg-x11-server. In the Glamor 2D graphics acceleration module, a buffer allocation error occurs during color depth conversion when processing an image whose source dimensions exceed the destination dimensions. A local user can exploit this vulnerability to trigger an...

CVE-2026-111881

A flaw was found in FreeRDP. An integer underflow vulnerability exists in its bitmap image processing component due to an incorrect calculation when handling sub-byte images. A remote attacker acting as a malicious peer in a Remote Desktop Protocol RDP session can exploit this by supplying a...

CVE-2026-112007

A flaw was found in Schism Tracker. An attacker could exploit this vulnerability by enticing a user to open a specially crafted UltraTracker .ult audio file. Due to missing boundary checks on sample counts during file parsing, the application performs an out-of-bounds memory write on the heap. Th...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2024:1722977984)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2024:1722977984 advisory. - In the Linux kernel, the following vulnerability has been resolved: i2c: Fix a potential use after free Free the adap structure on...

CVE-2026-63626

A flaw was found in Mongoose. An unauthenticated adjacent attacker can exploit this issue by sending a specially crafted Point-to-Point Protocol PPP packet containing an oversized length field during IPv6 Control Protocol IPv6CP negotiation. This lack of bounds validation causes out-of-bounds...

CVE-2026-79841 HPE NonStop RDMA SERVICES NSK - Out-of-bounds memory write vulnerability

A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory write, which may result in memory corruption...

CVE-2026-79841

A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may lead to an out-of-bounds memory write , potentially resulting in memory corruption . This vulnerability impacts the RDMA SERVICES NSK T0941 component, specifically versions T0941L03^ABS and earlier . The potential impacts includ...

EUVD-2026-101822

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations...

CVE-2026-76664 HPE NonStop EXPAND - Out-of-Bounds memory read/write

A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations...

CVE-2026-78628

The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate...

CVE-2026-90349

A flaw was found in the Linux kernel's mt76 wireless driver, specifically within the mt7996tx function. When the mac80211 subsystem leaves the link unspecified, the driver substitutes a primary link ID that is then used without proper bounds checking to access internal arrays. This unchecked acce...

CVE-2026-109251

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS on a connecting client by supplying invalid geometry coordinates when video redirection is enabled. Because FreeRDP does not properly validate server-provided video coordinates, an intege...

CVE-2026-98323

A flaw was found in the Linux kernel's Software iWARP siw Remote Direct Memory Access RDMA driver. When handling extended protocol headers split across multiple network packets, the driver incorrectly calculates the remaining length during the copy operation, leading to an out-of-bounds memory...