Linux net/caif/cfsrvl.c Heap Buffer Overflow DoS

The vulnerability of the cfsrvl PhyidMatch function in the net/caif/cfsrvl.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the irisreleaseinternalbuffers function in the drivers/media/platform/qcom/iris/irisbuffer.c driver for multimedia devices in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an...

netfilter ip_vs_add_service Buffer Overflow DoS

The vulnerability of the ipvsaddservice function in the net/netfilter/ipvs/ipvsctl.c module of the netfilter component of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the disarmkprobeftrace function in the kernel/kprobes.c module of the Linux operating system is related to pointer dereferencing. Exploiting this vulnerability could allow an attacker to trigger a service failure...

mtk_jpeg_release Heap Buffer Overflow DoS

The vulnerability of the mtkjpegrelease function in the drivers/media/platform/mediatek/jpeg/mtkjpegcore.c driver for multimedia devices in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacke...

Linux kernel Remote Processor DoS

The vulnerability of the zynqmpr5mbrxcb function in the drivers/remoteproc/xlnxr5remoteproc.c driver of the Linux kernel’s remote processor subsystem is related to pointer aliasing. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

VFIO device driver Heap Buffer Overflow DoS

The vulnerability of the vfiocdxsetmsitrigger function in the driver/vfio/cdx/intr.c driver for VFIO devices in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

AlmaLinux 9.2 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl (ALMALINUX9.2:CLSA-2026:1782983109)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782983109 advisory. - Issue summary: An attacker-controlled CMP Certificate Management Protocol server could trigger a NULL pointer dereference in a CMP client...

Rocky Linux 9.6 [TuxCare] Security Update: nautilus / nautilus-devel / nautilus-extensions (ALMALINUX9.6:CLSA-2026:1788694397)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788694397 advisory. - GNOME Nautilus 42.2 allows a NULL pointer dereference and getbasename application crash via a pasted ZIP archive. CVE-2022-37290 Note tha...

AlmaLinux 9.2 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778071148)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778071148 advisory. - Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon...

Rocky Linux 9.6 [TuxCare] Security Update: compat-openssl11 (ALMALINUX9.6:CLSA-2026:1780710220)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780710220 advisory. - Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can...

CentOS Linux 7 [TuxCare] Security Update: libxml2 / libxml2-devel / libxml2-python / libxml2-static (CENTOS7:CLSA-2025:1741291888)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1741291888 advisory. - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c. CVE-2025-27113 Note that Nessus has...

CentOS Linux 7 [TuxCare] Security Update: libsoup / libsoup-devel Multiple Vulnerabilities (CENTOS7:CLSA-2025:1752126372)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1752126372 advisory. - A flaw was found in libsoup, where the soupheadersparserequest function may be vulnerable to an out- of-bound read. This flaw allows a...

CentOS Linux 7 [TuxCare] Security Update: freerdp / freerdp-devel / freerdp-libs / libwinpr / libwinpr-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1771857838)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1771857838 advisory. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, a NULL pointer dereference vulnerability in...

CentOS Linux 8 [TuxCare] Security Update: php / php-bcmath / php-embedded / php-intl / php-mysqlnd / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2025:1753465703)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2025:1753465703 advisory. - In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 some functions like fsockopen la...

CentOS Linux 8.4 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1790327966)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1790327966 advisory. - ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the ImagesToBlob method, caused by a...

Rocky Linux 9.6 [TuxCare] Security Update: ghostscript / ghostscript-doc / ghostscript-gtk / etc (ALMALINUX9.6:CLSA-2026:1776333493)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776333493 advisory. - Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure observable in a constructed BaseFont name in the function...

CentOS Linux 7 [TuxCare] Security Update: bsdcpio / bsdtar / libarchive / libarchive-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1777544831)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1777544831 advisory. - An improper link resolution flaw while extracting an archive can lead to changing the access control list ACL of the target of the lin...

CentOS Linux 8.4 [TuxCare] Security Update: php / php-dba / php-devel / php-enchant / php-fpm / php-gd / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1753793859)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1753793859 advisory. - In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 some functions like fsockopen lack...

Linux Distros Unpatched Vulnerability : CVE-2026-47602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an...