39517 matches found
PT-2026-91330
In the Linux kernel, the following vulnerability has been resolved: usb: usbfs: fix use-after-free of usb device in usbdev release usbdev release drops its reference to the struct usb device before draining the list of completed async URBs, but that drain path reads back through the same object:...
PT-2026-85736
In the Linux kernel, the following vulnerability has been resolved: fuse: publish io-uring queues with release semantics fuse uring create queue initializes a fuse ring queue and then publishes the pointer into ring-queuesqid with WRITE ONCE under the fch-lock. There are several readers that may...
Fedora 43 : freeipa (2026-3a48220f1f)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3a48220f1f advisory. Upstream security release FreeIPA 4.13.3 Release notes: https://www.freeipa.org/release-notes/4-13-3.html Tenable has extracted the preceding...
The vulnerability of the hsr_addr_is_self() function in the net/hsr/hsr_framereg.c module, which allows a hacker to cause a service failure.
The vulnerability of the hsraddrisself function in the net/hsr/hsrframereg.c module, which is part of the Linux kernel’s networking functions, involves premature release of resources during their lifetime. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the ccu_mix_trigger_fc() function in the drivers/clk/spacemit/ccu_mix.c module of the Linux operating system’s Samsung Exynos processor controller driver allows a attacker to cause a service failure.
The vulnerability of the ccumixtriggerfc function in the drivers/clk/spacemit/ccumix.c module of the Samsung Exynos Linux operating system processor controller driver is related to improper resource release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the pci_epf_alloc_doorbell() function in the drivers/pci/endpoint/pci-ep-msi.c module of the Linux operating system’s PCI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the pciepfallocdoorbell function in the drivers/pci/endpoint/pci-ep-msi.c module of the Linux system’s PCI device driver lies in the fact that the same resource or descriptor is released multiple times. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the copy_context_work_handler() function in the drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in the Linux operating system allows a malicious actor to cause a service failure.
The vulnerability of the copycontextworkhandler function in the drivers/gpu/drm/amd/amdkfd/kfddevicequeuemanager.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to improper resource release. Exploiting this vulnerability could...
The vulnerability of the xhci_disableSlot() function in the driver module drivers/usb/host/xhci.c of the Linux operating system’s USB device drivers allows a malicious actor to cause a service failure.
The vulnerability of the xhcidisableSlot function in the drivers/usb/host/xhci.c module of the Linux device driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the free_hotplug_page_range() function in the arch/arm64/mm/mmu.c module of the ARM 64-bit kernel support for the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the freehotplugpagerange function in the arch/arm64/mm/mmu.c module of the ARM 64-bit kernel support for the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the dpu_runtime_suspend() function in the drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c file of the Direct Rendering Infrastructure (DRI) kernel driver of the Linux operating system allows a malicious actor to cause a service failure.
The vulnerability of the dpuruntimesuspend function in the drivers/gpu/drm/msm/disp/dpu1/dpukms.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow a remote attacker to cause...
The vulnerability of the `pn_socket_autobind()` function in the `net/phonet/socket.c` module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.
The vulnerability of the pnsocketautobind function in the net/phonet/socket.c module, which implements networking functions in the Linux kernel, is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ethosu_gem_cmdstream_copy_and_validate() function in the drivers/accel/ethosu/ethosu_gem.c driver for Linux kernel acceleration devices allows a hacker to cause a system failure.
The vulnerability of the ethosugemcmdstreamcopyandvalidate function in the drivers/accel/ethosu/ethosugem.c driver for Linux computing devices involves improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `pinconf_generic_parse_dt_pinmux()` function in the `drivers/pinctrl/pinconf-generic.c` file of the Linux kernel’s GPIO controller driver allows a hacker to cause a service failure.
The vulnerability of the pinconfgenericparsedtpinmux function in the drivers/pinctrl/pinconf-generic.c file of the Linux kernel’s GPIO controller driver is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
The vulnerability of the nft_tunnel_objdestroy() function in the net/netfilter/nft_tunnel.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nfttunnelobjdestroy function in the net/netfilter/nfttunnel.c module of the netfilter component of the Linux operating system is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...
SUSE-SU-2026:23539-1 Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20260812 release bsc1274785 - Removed MTL/06-aa-04/c0 due to functional issues observed when loading the MCU in some platforms. - Intel CPU Microcode was updated to the 20260811 release bsc1274785 -...
Security update for cosign
This update for cosign rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: SUSE Linux Enterprise...
SUSE-SU-2026:3954-1 Security update for cosign
This update for cosign rebuilds it against the current go security release...
PT-2026-90825
This update for cosign rebuilds it against the current go security release...
CVE-2026-84965: Integer Overflow or Wraparound
An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently larg...
Fedora 43 : proftpd (2026-0abbe10cdc)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0abbe10cdc advisory. Current upstream maintenance release, with a handful of potentially security-related bugfixes. Tenable has extracted the preceding description block directly...