RHEL 9 : kernel (RHSA-2026:43231)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:43231 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amd/display: Do not skip...

CVE-2026-65315

Ollama HEAD f0078ae contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the server by supplying a crafted GGUF file with attacker-controlled length and count fields in string lengths, tensor dimension counts, and metadata arra...

GHSA-HRXH-6V49-42GF gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

Multiple security vulnerabilities have been identified and addressed in grpc-go affecting the xDS RBAC authorization engine internal/xds/rbac and the HTTP/2 transport server implementation internal/transport. These vulnerabilities could result in: - Authorization Bypass Fail-Open when translating...

EUVD-2026-46383

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CVE-2026-65315

Technical details about CVE-2026-65315 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-46600

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

UBUNTU-CVE-2026-46600

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CVE-2026-63878

A flaw was found in the drm/amdgpu component of the Linux kernel. A local attacker can exploit an integer overflow vulnerability by providing an excessively large value for the numentries parameter in the GEMOP GETMAPPINGINFO ioctl. This can lead to an attempt to allocate an extremely large amoun...

CVE-2026-46600

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CVE-2026-46600 Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CVE-2026-46600 Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage

Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer...

CVE-2026-15792

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic...

CVE-2026-15792

CVE-2026-15792 affects BuildKit components (notably the LLB solver/llbsolver) where a malicious BuildKit frontend or LLB input can trigger NULL pointer dereference or slice-index panics, crashing the BuildKit daemon. Public detail across sources indicates vulnerable paths in the solver handling a...

EUVD-2026-46311

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic...

CVE-2026-15792 Possible panic when incorrect parameters sent from frontend

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic...

CVE-2026-15792 Possible panic when incorrect parameters sent from frontend

A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic...

CVE-2026-63933

A flaw was found in the Linux kernel's adis16260 gyroscope driver. A local user can trigger a division-by-zero error by writing a zero value to the samplingfrequency sysfs attribute. This can lead to a kernel panic, resulting in a system crash and a Denial of Service DoS...

SUSE CVE-2026-64012

In the Linux kernel, the following vulnerability has been resolved: net/sched: schsfb: Replace direct dequeue call with peek and qdiscdequeuepeeked When sfb has children eg qfq qdisc whose peek callback is qdiscpeekdequeued, we could get a kernel panic. When the parent of such qdiscs eg illustrat...

CVE-2026-63836

A flaw was found in the Linux kernel. Specifically, within the batman-adv throughput meter, an arithmetic overflow in the batadvtpupdatecwnd function can cause a division by zero. This issue can lead to a kernel panic, resulting in a Denial of Service DoS for the affected system...

CVE-2026-63819

A flaw was found in the Linux kernel's f2fs Flash-Friendly File System component. A local attacker could create a specially crafted or corrupted f2fs filesystem that, when mounted and operated upon, would trigger a sanity check failure during filesystem truncation. This issue leads to a kernel...