PT-2026-104864

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate rx/tx MLME callback frame lengths before access cfg80211 rx mlme mgmt and cfg80211 tx mlme mgmt call tracepoints before rejecting frames shorter than the frame-control field. After that, they only require...

PT-2026-104887

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate IEs in cfg80211 wext siwgenie The KASAN allocation trace shows that a malformed IE buffer is stored via SIOCSIWGENIE cfg80211 wext siwgenie without any validation. The crash trace shows that a subsequent...

PT-2026-104848

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: validate TX CMD response layout TX CMD parsing uses frame count to walk status entries and then read the trailing SCD SSN. Make the minimum-length check follow that exact runtime layout calculation before...

PT-2026-97928

Name of the Vulnerable Software and Affected Versions libsndfile version 1.2.2 Description An integer overflow occurs in the mat4 read header function when the software parses specially crafted MAT4 MATLAB v4 files. Recommendations At the moment, there is no information about a newer version that...

PT-2026-98067

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvme component where FDP Flexible Data Placement configuration descriptor sizes are not properly validated. When walking the FDP configurations log, a dsze value o...

CVE-2026-93805

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate rx/tx MLME callback frame lengths before access cfg80211rxmlmemgmt and cfg80211txmlmemgmt call tracepoints before rejecting frames shorter than the frame-control field. After that, they only require len =...

EUVD-2026-86284

simdjson 4.6.1 contains a one-byte out-of-bounds read vulnerability in dom::parser::parseunpadded. A specially crafted truncated JSON document whose final structural token closes a nested array or object can cause jsoniterator::walkdocument to access buflen after the input buffer has been...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git-lfs (UTSA-2026-124488)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124488 advisory. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to...

PT-2026-97873

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the procfs interface where the proc bus pci read function incorrectly uses capableCAP SYS ADMIN to determine config space read access. This function checks the...

PT-2026-104975

In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use file ns capable when checking config space read access proc bus pci read decides how much of the config space is readable based on capableCAP SYS ADMIN, which checks the credentials of the task calling read, not the...

PT-2026-98016

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs filesystem where inline dentry conversion copies names from the inline dentry area before verifying if each recorded name length fits within the available...

Linux Distros Unpatched Vulnerability : CVE-2026-93816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: validate inline dentry name lengths before conversion Inline dentry conversion copies names out of the inline dentry area before checking that each record...

PT-2026-104996

In the Linux kernel, the following vulnerability has been resolved: f2fs: validate inline dentry name lengths before conversion Inline dentry conversion copies names out of the inline dentry area before checking that each recorded name length fits in the available filename slots. A corrupted imag...

PT-2026-97968

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rtw89 wifi driver where the function rtw89 mac check he obss narrow bw ru iter incorrectly validates the length of extended capability data. The function attempts ...

PT-2026-105471

!NOTE This finding was identified during an agentic unsafe Rust code review performed by Gemini AI, followed by human review and verification. The Issue The crate exports a public safe API Rules::deserialize accepting any generic byte sequence B: AsRef. It restores compiled rule structures direct...

CVE-2026-88358

simdjson 4.6.1 contains a one-byte out-of-bounds read vulnerability in dom::parser::parseunpadded. A specially crafted truncated JSON document whose final structural token closes a nested array or object can cause jsoniterator::walkdocument to access buflen after the input buffer has been...

AMD Compressonator SDK Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-40652| An out-of-bounds read condition in the AMD Compressonator SDK could allow a local attacker to supply a specially crafted Truevision Graphics Adapter TGA file to a user or an...

CVE-2026-97428

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: harden FRU PIA parsing with bounded helpers Replace the open-coded TLV walk with frupiaadvance and frupiacopyfield helpers that bound every read by the actual EEPROM data length, preventing out-of-bounds reads on...

Security update for exiv2 (important)

openSUSE security update: security update for exiv2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21904-1 Rating: important References: bsc1277579 bsc1277591 bsc1277791 Cross-References: CVE-2026-49275 CVE-2026-68546 CVE-2026-68547 CVSS scores:...

Security update for amazon-ssm-agent (important)

openSUSE security update: security update for amazon-ssm-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21884-1 Rating: important References: bsc1276981 bsc1276994 bsc1278681 Cross-References: CVE-2026-56854 CVE-2026-56855 CVE-2026-71556...