CVE-2026-106304: Out-of-bounds Read

Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-98247: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicodec: validate vendor codec count length The Read Local Supported Codecs parsers consume the variable-sized standard codec array before parsing the vendor codec count. Although the initial reply-size check includes...

PT-2026-106554

In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: fix bogus set shrinker bit with cgroup.memory=nokmem With cgroup.memory=nokmem, shrinker memcg alloc bails out early and never allocates an id, so shrinker-id keeps the 0 it got from the kzalloc in shrinker alloc. li...

Security Advisory 0189

Security Advisory 0189 . CSAF PDF Date: October 6, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 6, 2026 | Initial release Description All CVEs covered in this advisory affect platforms running CloudVision Portal On-Premises, where insufficient validations in the Software Management...

Security Advisory 0196

Security Advisory 0196 . CSAF PDF Date: October 6, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 6, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-102164 CVSSv3.1 Base Score: 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSSv4.0 Base Score: 2.3...

Linux Distros Unpatched Vulnerability : CVE-2026-98186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WP...

Linux Distros Unpatched Vulnerability : CVE-2026-98362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - clk: scpi: bound-check DVFS index in scpidvfsrecalcrate dvfsgetidx may return an out-of-range index if the SCP firmware is buggy or returns a stale value. Only...

RHEL 10 : perl-DBI (RHSA-2026:76762)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:76762 advisory. The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent...

CentOS 9 : pcre2-10.40-7.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the pcre2-10.40-7.el9 build changelog. - In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can...

SUSE SLES15 Security Update : valkey (SUSE-SU-2026:4491-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4491-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...

Linux Distros Unpatched Vulnerability : CVE-2026-98363

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firmware: armscpi: reject DVFS OPP count above MAXDVFSOPPS scpidvfsgetinfo already rejected a zero oppcount, but still trusted any larger value from the SCP...

ALSA-2026:76747 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command...

SUSE SLES15: libpcre2-16-0 / libpcre2-32-0 / libpcre2-8-0 / libpcre2-posix2 / etc (SUSE-SU-2026:4458-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4458-1 advisory. - CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. - CVE-2026-89156:...

Linux Distros Unpatched Vulnerability : CVE-2026-98180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm: RCU-free the scheduler-containing ring and VM objects Both struct msmringbuffer and struct msmgemvm embed a struct drmgpuscheduler. msmringbufferdestro...

Linux Distros Unpatched Vulnerability : CVE-2026-98170

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix OOB struct field reads in movesmb2eatocifs In movesmb2eatocifs, the while srcsize 0 loop condition is insufficient. It allows iteration to...

Linux Distros Unpatched Vulnerability : CVE-2026-98287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pppoatm: ensure a writable skb header and linear data In pppoatmsend, LLC encapsulation checks whether there is sufficient headroom for the 4-byte LLC header, b...

SUSE SLED15 / SLES15 Security Update : python-msgpack (SUSE-SU-2026:4443-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4443-1 advisory. This update for python-msgpack fixes the following issue - CVE-2026-57585: Unpacker reuse after a caught error can lead...

Linux Distros Unpatched Vulnerability : CVE-2026-98190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That...

ALSA-2026:76760 Important: perl-DBI security update

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fixes: perl-DBI: perl-DBI: Denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-98204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: rmismbus - fix out-of-bounds read in rmismbwriteblock When chunking writes into SMBus blocks in rmismbwriteblock, the loop calculates blocklen using the...