CVE-2026-63867 mptcp: close TOCTOU race while computing rcv_wnd

In the Linux kernel, the following vulnerability has been resolved: mptcp: close TOCTOU race while computing rcvwnd The MPTCP output path access locklessly the MPTCP-level ackseq in multiple times, using possibly different values for the dataack in the DSS option and to compute the announced rcv...

PT-2026-61147

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the mac802154 llsec module, the functions llsec do encrypt unauth, llsec do encrypt auth, llsec do decrypt unauth, and llsec do decrypt auth perform in-place cryptographic...

PT-2026-61184

In the Linux kernel, the following vulnerability has been resolved: mptcp: close TOCTOU race while computing rcv wnd The MPTCP output path access locklessly the MPTCP-level ack seq in multiple times, using possibly different values for the data ack in the DSS option and to compute the announced r...

PT-2026-61343

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rxrpc module where in-place decryption of a DATA packet transmitted locally via the splice function can lead to pagecache corruption. This occurs due to packet...

PT-2026-61426

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the af unix module. The unix stream data wait function calls skb peek tail on the sk-sk receive queue without holding a lock to prevent Socket Buffer...

PT-2026-61342

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bpf, skmsg component where a race condition occurs between the verdict sk data ready and ktls rx. When a socket is inserted into a sockmap using BPF SK SKB VERDICT...

PT-2026-61438

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc2 Description An issue exists in the Intermediate Functional Block IFB driver where ethtool statistics are reported incorrectly. The ifb dev init function allocates memory for dp-tx private based on dev-num...

PT-2026-61316

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the ethtool RSS Receive Side Scaling component. The rss prepare get function allocates the indirection table and hash key buffer through rss get data alloc, and...

MGASA-2026-0265 Updated rsync package fixes security vulnerabilities

The updated package fixes security vulnerabilities: Rsync 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write. CVE-2026-29518 Rsync 3.4.3 Authorization Bypass via Hostname Resolution. CVE-2026-43617 Rsync 3.4.3 Integer Overflow Information Disclosure. CVE-2026-43618 Rsync 3.4.3...

SUSE-SU-2026:3117-1 Security update for python-dulwich

This update for python-dulwich fixes the following issue - CVE-2026-47734: Unbounded memory allocation in receive-pack from crafted thin packs bsc1268138...

CVE-2026-42168

django-pyas2 through 1.2.3 is vulnerable to OS command injection via the cmdreceive and cmdsend fields on the Partner model. These fields are passed directly to os.system in pyas2/utils.py without sanitization, allowing an authenticated admin user to execute arbitrary commands on the server when ...

SUSE SLES12 Security Update : kernel (Live Patch 78 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:3066-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3066-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.296 fixes various security issues The following security issues were fixed: -...

CVE-2026-44433

CVE-2026-44433 concerns the Quicly QUIC implementation (used with H2O HTTP server). Before commit 8b178e6, an adversarial peer could send a STREAM frame with a single byte at the largest permitted offset to obtain additional flow control credit, potentially causing a denial of service. If the app...

CVE-2026-44433 Quicly is vulnerable to memory exhaustion

Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O HTTP server. Prior to commit 8b178e6, an adversarial peer could send a STREAM frame carrying just one byte at the largest offset being permitted to obtain additional flow control credit, which under certain...

SUSE-SU-2026:22679-1 Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues The following security issues were fixed: - CVE-2026-43501: ipv6: rpl: reserve maclen headroom when recompressed SRH grows bsc1266015. - CVE-2026-45970: bonding: alb: fix UAF in rlbarprecv during bond up/dow...

PT-2026-60592

Name of the Vulnerable Software and Affected Versions Quicly versions prior to commit 8b178e6 Description An adversarial peer can trigger a Denial of Service by sending a STREAM frame containing a single byte at the maximum permitted offset to obtain additional flow control credit. If the...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to improper timeout management during network read operations in the receive loop. An attacker can cause the application to become unresponsive or crash by sending specially crafted network packets. Details...

EulerOS 2.0 SP10 : rsync (EulerOS-SA-2026-2669)

According to the versions of the rsync packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In rsync 3.0.1 through 3.4.1, receivexattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victi...

CVE-2026-54707

OnionShare Receive mode writes uploaded files even when file uploads are disabled...

PYSEC-2026-2466 Dulwich has unbounded memory allocation in receive-pack from crafted thin packs

Impact An uncontrolled-resource-consumption memory exhaustion denial-of-service vulnerability CWE-400 / CWE-789. A client with push access could push a tiny crafted thin pack 174 bytes whose delta header declares a huge destsize. When dulwich ingested it via addthinpack / applydelta, it would...