Fedora 44 : dotnet10.0 (2026-956fc306c4)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-956fc306c4 advisory. This is the March 2026 release of .NET 10. Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/10.0/10.0.4/10.0.104.md - Runtime:...

The vulnerability of the __ima inode_hash() function in the security/integrity/ima/ima_main.c module of the Linux kernel’s security subsystem allows a attacker to cause a service failure.

The vulnerability of the ima inodehash function in the security/integrity/ima/imamain.c module of the Linux kernel’s security subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

libsoup 安全漏洞

Libsoup is a GNOME project’s HTTP client/server library. Libsoup has a security vulnerability that stems from the premature release of connection objects in the soupserverdisconnect function. This can lead to reuse of released objects, potentially causing server crashes and denial-of-service...

The vulnerability of the amdgpu_amdkfd_gpuvm_import_dmabuf() function in the drivers/gpu/drm/amd/amdgpu/amdkfd_gpuvm.c driver module of the Direct Rendering Infrastructure (DRI) for AMD GPU cores in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the amdgpuamdkfdgpuvmimportdmabuf function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to improper memory release. Exploiting this vulnerability can all...

The vulnerability of the snd_ac97_dev_register() function in the sound/pci/ac97/ac97_codec.c module of the Linux kernel’s audio subsystem allows a hacker to cause a system failure.

The vulnerability of the sndac97devregister function in the sound/pci/ac97/ac97codec.c module of the Linux kernel’s audio subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the watchdog_cdev_register() function in the drivers/watchdog/watchdog_dev.c module, which supports Linux kernel watchdog timers, allows a malicious actor to trigger a service failure.

The vulnerability of the watchdogcdevregister function in the drivers/watchdog/watchdogdev.c module, which supports the Linux kernel watchdog timer, is related to improper memory release. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the imx8mn_clocks_probe() function in the drivers/clk/imx/clk-imx8mn.c file of the Linux operating system’s Samsung Exynos processor controller driver allows a hacker to cause a service failure.

The vulnerability of the imx8mnclocksprobe function in the drivers/clk/imx/clk-imx8mn.c file of the Linux operating system’s Samsung Exynos processor controller driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the arc_serial_probe() function in the drivers/tty/serial/arc_uart.c file of the console TTY driver in the Linux kernel’s serial port module allows a malicious actor to cause a service failure.

The vulnerability of the arcserialprobe function in the drivers/tty/serial/arcuart.c file of the console TTY driver in the Linux kernel’s serial port module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `register_node()` function in the `drivers/base/node.c` module of the Linux kernel’s device driver support framework allows a malicious actor to cause a system crash.

The vulnerability of the registernode function in the drivers/base/node.c file of the Linux kernel’s device driver framework is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the mlx5_tc_ct_entry_replacerule() function in the drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mlx5tcctentryreplacerule function in the drivers/net/ethernet/mellanox/mlx5/core/en/tcct.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the ubi_resize_volume() function in the drivers/mtd/ubi/vmt.c file of the Linux operating system’s memory driver module allows a hacker to cause a service failure.

The vulnerability of the ubiresizevolume function in the drivers/mtd/ubi/vmt.c file of the Linux operating system’s memory driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the i2sbus_add_dev() function in the sound/aoa/soundbus/i2sbus/core.c module of the Linux kernel’s audio subsystem allows a hacker to cause a service failure.

The vulnerability of the i2sbusadddev function in the sound/aoa/soundbus/i2sbus/core.c module of the Linux kernel’s audio subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tpm_read_log_acpi() function in the drivers/char/tpm/eventlog/acpi.c file of the Linux operating system’s TPM-based character device driver allows a attacker to cause a service failure.

The vulnerability of the tpmreadlogacpi function in the drivers/char/tpm/eventlog/acpi.c file of the Linux operating system’s TPM-enabled character device driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `tcp_bpf_sendmsg_redir()` function in the `net/ipv4/tcp_bpf.c` module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcpbpfsendmsgredir function in the net/ipv4/tcpbpf.c module of the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the rtw89_cam_reset_key_iter() function in the driver/net/wireless/realtek/rtw89/cam.c file of the Realtek wireless adapter support driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtw89camresetkeyiter function in the drivers/net/wireless/realtek/rtw89/cam.c file of the Realtek wireless adapter support driver for Linux operating systems is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker t...

PT-2026-28328

Name of the Vulnerable Software and Affected Versions EVerest versions prior to 2026.02.0 Description EVerest is an EV charging software stack. Prior to version 2026.02.0, the HomeplugMessage::setup payload function trusts the len variable after an assert check. In release builds, this check is...

The vulnerability in the `fake_get_pages()` function of the `drivers/gpu/drm/i915/selftests/i915_gem_gtt.c` file, a driver for the Direct Rendering Infrastructure (DRI) of the Linux operating system, allows a hacker to induce a service failure.

The vulnerability of the fakegetpages function in the drivers/gpu/drm/i915/selftests/i915gemgtt.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system...

Fedora 44 : dotnet8.0 (2026-702a03ac4d)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-702a03ac4d advisory. This is the March 2026 release of .NET 8 Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/8.0/8.0.25/8.0.125.md - Runtime:...

The vulnerability of the chacha_crypt_arch() function in the arch/s390/crypto/chacha-glue.c module, which is part of the S390 platform support in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the chachacryptarch function in the arch/s390/crypto/chacha-glue.c module, which is part of the S390 platform support in the Linux operating system, is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a...

Important: Red Hat Security Advisory: DevWorkspace Operator 0.40.0 release.

DevWorkspace Operator 0.40.0 has been released. The DevWorkspace Operator extends OpenShift to provide DevWorkspace support...