AZL-106730 CVE-2026-98373 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: preserve mremap address delta when skipping page tables movehugetlbpagetables optimizes mremap by advancing to the last entry in the page table when the source page table does not exist, either initially or after...

EUVD-2026-94322

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: preserve mremap address delta when skipping page tables movehugetlbpagetables optimizes mremap by advancing to the last entry in the page table when the source page table does not exist, either initially or after...

CVE-2026-98373

The Linux kernel contains a vulnerability in the mm/hugetlb component related to the move_hugetlb_page_tables() function. The root cause is an incorrect logic error where the function advances both source and destination addresses to the last entries of their respective page tables when a source ...

CVE-2026-98373 mm/hugetlb: preserve mremap address delta when skipping page tables

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: preserve mremap address delta when skipping page tables movehugetlbpagetables optimizes mremap by advancing to the last entry in the page table when the source page table does not exist, either initially or after...

CVE-2026-98373 mm/hugetlb: preserve mremap address delta when skipping page tables

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: preserve mremap address delta when skipping page tables movehugetlbpagetables optimizes mremap by advancing to the last entry in the page table when the source page table does not exist, either initially or after...

kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing

A flaw was found in the Linux kernel's Soft RoCE RDMA/rxe driver. An unauthenticated remote attacker can send a specially crafted UDP packet with an unknown opcode to trigger an out-of-bounds read. This vulnerability can lead to a kernel panic, effectively causing a Denial of Service DoS on the...

PT-2026-107664

Name of the Vulnerable Software and Affected Versions Excelize versions 2.8.0 through 2.11.0 Description An issue exists in the File.GetStyle function where the library fails to validate the lower bounds of style-table indices extracted from the styles.xml file of a workbook. Specifically, the...

CVE-2026-107224: Integer Overflow or Wraparound

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, a Zip64 uncompressed size with the high bit set is converted from uint64 to a negative int64 before signed size-limit checks and allocation. ReadZipReader obtains UncompressedSize64 throu...

CVE-2026-107211: Improper Validation of Array Index

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, separately parsed pivot-table field indices are used to index the pivot-cache field-name slice without bounds checks. extractPivotTableFields uses getPivotCacheFieldsName output while...

CVE-2026-107218: Improper Validation of Array Index

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.10.1 to 2.11.0, RIGHT validates the requested length with UTF-16 code-unit counts but slices a rune array using Unicode code-point counts. RIGHT reaches leftRight through CalcCellValue, where...

CVE-2026-107220: Out-of-bounds Read

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.1 to 2.11.0, mergeCellsParser leaves the cached rectangle empty for an empty mergeCell ref and then passes that empty slice to cellInRange without a length check. GetCellValue reaches mergeCellsParser...

CVE-2026-107221: Out-of-bounds Write

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in XML document order and then re-scatters every cell by its explicit column reference. GetCellValue reaches workSheetReader and...

CVE-2026-107217: Integer Overflow or Wraparound

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0 in github.com/xuri/excelize/v2 and from 1.1.0 to 1.4.1 in github.com/xuri/excelize, ColumnNameToNumber accumulates a bijective base-26 value in int64 without detecting overflow, allowing a...

PT-2026-107502

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the move hugetlb page tables function during the optimization of mremap. When the source page table does not exist, the code incorrectly advances both the source and...

PT-2026-107658

Name of the Vulnerable Software and Affected Versions Excelize versions 2.7.1 through 2.11.0 Description An issue exists where the mergeCellsParser function fails to perform a length check on a cached rectangle when encountering an empty ref attribute in a crafted worksheet. This empty slice is...

CVE-2026-98373: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: preserve mremap address delta when skipping page tables movehugetlbpagetables optimizes mremap by advancing to the last entry in the page table when the source page table does not exist, either initially or after...

CVE-2026-107215: Memory Allocation with Excessive Size Value

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker-controlled CFB directory-entry size before validating the sector chain or size domain. extractPart trusts the CFB directory...

PT-2026-107648

Name of the Vulnerable Software and Affected Versions Nickname profile affected versions not specified Description An issue exists where the Nickname profile can experience a panic due to an out-of-bounds slice error. This occurs when the system attempts to transform specially crafted input into ...

CVE-2026-107225: Improper Input Validation

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, GetStyle's fill, border, and font extraction predicates check only upper bounds for attacker-controlled style-table indices. File.GetStyle relies on extractStyleCondFuncs predicates that...

PT-2026-107642

Name of the Vulnerable Software and Affected Versions Excelize versions 2.8.1 through 2.11.0 Description This issue occurs when separately parsed pivot-table field indices are used to index the pivot-cache field-name slice without bounds checks. The extractPivotTableFields function uses the outpu...