CVE-2026-64214: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preemptdisable|enable calls from archirqworkraise A kernel panic is observed when handling machine check exceptions from real mode. BUG: Unable to handle kernel data access on read at...

PT-2026-71922

Name of the Vulnerable Software and Affected Versions Russh versions prior to 0.62.4 Description An authenticated SSH client can trigger a denial of service by sending a pty-req channel request containing more than 130 terminal-mode records. The parser in russh/src/server/encrypted.rs utilizes a...

PT-2026-71712

Name of the Vulnerable Software and Affected Versions frp versions 0.53.0 through 0.70.0 Description The optional SSH Tunnel Gateway in pkg/ssh/server.go incorrectly parses SSH exec channel requests by adding 4 to a four-byte big-endian length controlled by the user. Providing a length of...

PT-2026-71342

Name of the Vulnerable Software and Affected Versions russh versions prior to 0.62.4 Description A malicious SSH server can crash a client session by sending a malformed KEX ECDH REPLY containing a server ephemeral value that is not 32 bytes long. The Curve25519Kex::compute shared secret function...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.15 contains security vulnerabilities. These vulnerabilities stem from resource leaks and uninstallation errors in the driver unloading path and error handling mechanisms. This includes leaks related to anti-skid clock references, kernel panic caused by unregistered...

CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin

...

Alibaba Cloud Linux 3 : 0221: podman (ALINUX3-SA-2026:0221)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0221 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-33811: When using LookupCNAME wit...

RHEL 10 : kernel (RHSA-2026:44694)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:44694 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: sched: actcsum: validat...

CVE-2026-64012

A flaw was found in the Linux kernel's Stochastic Fair Blue SFB queue discipline net/sched: schsfb. This vulnerability occurs when the sfb component, acting as a parent queue, attempts to retrieve a network packet from its child queue using an incorrect dequeue function. This can lead to a null...

RHEL 9 : kernel (RHSA-2026:43231)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:43231 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amd/display: Do not skip...

CVE-2026-65315

Ollama HEAD f0078ae contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the server by supplying a crafted GGUF file with attacker-controlled length and count fields in string lengths, tensor dimension counts, and metadata arra...

GHSA-HRXH-6V49-42GF gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

Multiple security vulnerabilities have been identified and addressed in grpc-go affecting the xDS RBAC authorization engine internal/xds/rbac and the HTTP/2 transport server implementation internal/transport. These vulnerabilities could result in: - Authorization Bypass Fail-Open when translating...

EUVD-2026-46383

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CVE-2026-65315

Technical details about CVE-2026-65315 are not publicly available in the provided documents. Monitor for updates.

AZL-93198 CVE-2026-46600 affecting package golang 1.25.14-1

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CVE-2026-46600

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

UBUNTU-CVE-2026-46600

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CVE-2026-46600

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CVE-2026-63878

A flaw was found in the drm/amdgpu component of the Linux kernel. A local attacker can exploit an integer overflow vulnerability by providing an excessively large value for the numentries parameter in the GEMOP GETMAPPINGINFO ioctl. This can lead to an attempt to allocate an extremely large amoun...

CVE-2026-46600 Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...