Rocky Linux 9.6 [TuxCare] Security Update: buildah / buildah-tests (ALMALINUX9.6:CLSA-2026:1777386823)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777386823 advisory. - Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web...

AlmaLinux 9.2 [TuxCare] Security Update: grafana-pcp (ALMALINUX9.2:CLSA-2025:1762868093)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762868093 advisory. - Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up ...

SUSE CVE-2026-97441

In the Linux kernel, the following vulnerability has been resolved: ata: ahci: fail probe if BAR too small for claimed ports When an AHCI controller is disabled in BIOS, its HOSTCAP register may contain a bogus value, e.g. 0xFFFFFFFF. Since CAP.NP Number of Ports is a zeroes based 5-bit register...

CVE-2026-102822

Russh is a Rust SSH client and server library. Prior to 0.63.1, a connection configured to permit mac=none can negotiate it with a MAC-requiring CTR or CBC block cipher because the selection logic validates needsmac only when MAC selection fails. A remote peer can then send a packet with a...

CVE-2026-102823

Russh is a Rust SSH client and server library. Prior to 0.63.1, clientreadauthenticated in russh/src/client/encrypted.rs forwards CHANNELDATA, CHANNELEXTENDEDDATA, CHANNELEOF, CHANNELCLOSE, CHANNELOPENFAILURE, CHANNELSUCCESS, CHANNELFAILURE, and CHANNELREQUEST subtypes exit-status, exit-signal, a...

CVE-2026-97474

A flaw was found in the Linux kernel's Intel Wi-Fi driver iwlwifi. This vulnerability can lead to a Denial of Service DoS when a wireless network interface encounters a firmware error during connection reconfiguration. Because the driver fails to immediately discard pending asynchronous...

CVE-2026-102823

The russh Rust SSH client and server library is vulnerable in versions prior to 0.63.1 due to a flaw in russh/src/client/encrypted.rs. The client_read_authenticated function forwards various channel lifecycle events (such as CHANNEL_DATA, CHANNEL_EOF, and CHANNEL_CLOSE) to public client::Handler ...

CVE-2026-102822 russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic

Russh is a Rust SSH client and server library. Prior to 0.63.1, a connection configured to permit mac=none can negotiate it with a MAC-requiring CTR or CBC block cipher because the selection logic validates needsmac only when MAC selection fails. A remote peer can then send a packet with a...

CVE-2026-102822 russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic

Russh is a Rust SSH client and server library. Prior to 0.63.1, a connection configured to permit mac=none can negotiate it with a MAC-requiring CTR or CBC block cipher because the selection logic validates needsmac only when MAC selection fails. A remote peer can then send a packet with a...

CVE-2026-102822 russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic

Russh is a Rust SSH client and server library. Prior to 0.63.1, a connection configured to permit mac=none can negotiate it with a MAC-requiring CTR or CBC block cipher because the selection logic validates needsmac only when MAC selection fails. A remote peer can then send a packet with a...

CVE-2026-97441

A flaw was found in the Linux kernel's Advanced Host Controller Interface AHCI driver. When a storage controller reports more ports than can fit within its allocated Base Address Register BAR memory space, the driver attempts to access registers beyond the mapped boundary. A local attacker or...

CVE-2024-27815

CVE-2024-27815 XNU 内核在 sbconcatmbufs（bsd/kern/uipcsocket2.c）中存在堆缓冲区溢出， 可由非特权本地用户通过 AFUNIX 数据报套接字层触发。 一个长度最多为 SOCKMAXADDRLEN（255）字节的套接字地址被复制到仅有 MLEN（224）字节长的 mbuf 数据区中，从而覆盖相邻 mbuf 头部（mhdr） 最多 31 字节。该头部的每个字段（除 mhflags 的高字节外）都变为攻击者可控， 从而导致内核崩溃。 受影响版本 引入于： xnu-10002.1.13（macOS 14.0 / iOS 17.0） 修复于：...

EUVD-2026-88743

Sliver C2 framework version 1.7.7 and earlier contains an unhandled panic vulnerability in the operator gRPC handler that allows an attacker controlling a compromised implant to crash the entire teamserver by returning a malformed or empty Download response. Attackers can send zero-length or 1-3...

Exploit for Missing Authentication for Critical Function in Qualcomm Ar9380_Firmware

Poco M7 Plus SM6375 — Temporary Root Research: Qualcomm G...

CVE-2017-2671

Linux kernel CVE-2017-2671 ローカルサービス拒否（DoS）の脆弱性 なにっ!! CVE-2017-2671 1 Linux kernel CVE-2017-2671 ローカルサービス拒否（DoS） その結果、切断関数の呼び出しが安全であることを保証できず、ソケットシステムコールでIPPROTOICMPのプロトコル値へのアクセスを利用することで、ローカルユーザーがサービス拒否（パニック）を引き起こす可能性があります 影響を受ける: Ubuntu Ubuntu Linux 16.04 LTS ✅ Redhat Enterprise Mrg 2 ✅ Redhat...

CVE-2025-29338

CVE-2025-29338 — セキュリティ勧告 NXP moal.ko Wi-Fiカーネルドライバのバッファオーバーフロー（woalsetupmoduleparam / parsecfggetline） フィールド| 値 ---|--- CVE ID| CVE-2025-29338 深刻度| High CVSS v3.1スコア| 7.8 CVSS v3.1ベクター| CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 脆弱性タイプ| スタックベースのバッファオーバーフロー CWE-121 攻撃ベクトル| ローカル ベンダー| NXP...

CVE-2026-102823: Improper Input Validation

Russh is a Rust SSH client and server library. Prior to 0.63.1, clientreadauthenticated in russh/src/client/encrypted.rs forwards CHANNELDATA, CHANNELEXTENDEDDATA, CHANNELEOF, CHANNELCLOSE, CHANNELOPENFAILURE, CHANNELSUCCESS, CHANNELFAILURE, and CHANNELREQUEST subtypes exit-status, exit-signal, a...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2026-116)

The version of kernel installed on the remote host is prior to 5.15.220-153.252. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-116 advisory. In the Linux kernel, the following vulnerability has been resolved: futex: Prevent lockup in requeue-PI...

FreeBSD -- Remote DoS via receive-side kernel TLS

Problem Description: TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the inner record type had an off-by-one bug which could be triggered by an invalid frame, leading to an underflow followe...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-132)

The version of kernel installed on the remote host is prior to 5.10.268-266.1092. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-132 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible res...