CVE-2026-21023

Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application...

CVE-2026-6761 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-99HH-XP2Q-F3FC vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-6771 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2026-6746 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-5WVF-8JJJ-7W99 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

PackageKit security update

1.2.6-2.0.1 - remove RHEL vendor patch PackageKit-0.3.8-RHEL-Vendor.conf.patch 1.2.6-2 - Backport fix for CVE-2026-41651. - Resolves: RHEL-170502...

The vulnerability of the blkcg_css_online() function in the Linux kernel’s blk-cgroup component, which allows a hacker to gain unauthorized access to protected information.

The vulnerability of the blkcgcssonline function in the blk-cgroup component of Linux kernel operating systems is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the `init_mtd()` function in the `driver/mtd/mtdcore.c` file of the memory driver for the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the initmtd function in the driver/mtd/mtdcore.c file of the Linux memory driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the dwc3_qcom_probe() function in the drivers/usb/dwc3/dwc3-qcom.c driver code of the DesignWare-based USB3 controller driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dwc3qcomprobe function in the drivers/usb/dwc3/dwc3-qcom.c file of the DesignWare-based USB3 controller driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cifs_crypto_secmech_release() function in the fs/smb/client/cifsencrypt.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the cifscryptosecmechrelease function in the fs/smb/client/cifsencrypt.c module of the Linux kernel is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gic_configure_irq() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the gicconfigureirq function in the Linux operating system is related to the improper release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mt7915_put_hif2() function in the drivers/net/wireless/mediatek/mt76/mt7915/pci.c file of the wireless adapter driver for Mediatek’s Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mt7915puthif2 function in the driver/net/wireless/mediatek/mt76/mt7915/pci.c file of the Mediatek wireless adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could...

The vulnerability of the mpi3mrremove() function in Linux operating system kernels allows a attacker to compromise the accessibility of protected information.

The vulnerability of the mpi3mrremove function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the integrity_init_keyring() function in the security/integrity/digsig.c module of the Linux kernel’s security subsystem allows a attacker to trigger a service failure.

The vulnerability of the integrityinitkeyring function in the security/integrity/digsig.c module of the Linux kernel’s security subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

openexr -- multiple vulnerabilities

Cary Phillips reports: OpenEXR v3.4.11 is a patch release that addresses the following security vulnerabilities: CVE-2026-42217 Shift exponent overflow in readVariableLengthInteger ImfIDManifest.cpp CVE-2026-42216 Out-of-bounds read in IDManifest::init during prefix expansion CVE-2026-41142 Integ...

PrestaShop Version Hunter

psversionhunter.py fingerprints a PrestaShop installation by comparing the versions of its native modules against the module versions bundled with a known PrestaShop release tag. This is useful when a target does not expose the PrestaShop core version directly but still exposes native module...

The vulnerability of the `init_mqueue_fs()` function in the `ipc/mqueue.c` module of the Linux kernel’s interprocess communication subsystem allows a attacker to cause a service failure.

The vulnerability of the initmqueuefs function in the ipc/mqueue.c module of the Linux kernel’s interprocess communication subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tifm_7xx1_switch_media() function in the drivers/misc/tifm_7xx1.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tifm7xx1switchmedia function in the drivers/misc/tifm7xx1.c module of the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `wpcm450_aic_of_init()` function in the `drivers/irqchip/irq-wpcm450-aic.c` driver for Linux kernel IRQ chips allows a attacker to cause a service failure.

The vulnerability of the wpcm450aicofinit function in the drivers/irqchip/irq-wpcm450-aic.c driver for Linux’s IRQ chips is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause service failures...