The vulnerability of the xe_sync_entry_parse() function in the drivers/gpu/drm/xe/xe_sync.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the xesyncentryparse function in the drivers/gpu/drm/xe/xesync.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the ipc_idr_alloc() function in the Linux operating system allows a hacker to increase their privileges.

The vulnerability of the ipcidralloc function in the Linux operating system is related to improper memory release. Exploiting this vulnerability can allow an attacker to enhance their privileges...

EUVD-2026-66349

Any remote client can crash a debugging/non-release build type NSD serve child by sending it a special crafted message with a specially tuned number of DNS Cookie options 17 when UDP payload size is 512. By continuously crashing the serve childs, the remote client can severely hamper or, when...

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.30.0 Release.

Red Hat OpenShift Dev Spaces 3.30.0 has been released. Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. The 3.30 release is based on...

EUVD-2026-54577

Kirby: System path exposure from error messages in the REST API...

AZL-98466 CVE-2026-69664 affecting package erlang for versions less than 26.2.5.21-6

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a request with a chunked body whose chunk-size line is not a hexadecimal number. The worker serving the connection is never...

CVE-2026-69664

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending a request with a chunked body whose chunk-size line is not a hexadecimal number. The worker serving the connection is never...

UBUNTU-CVE-2026-71380

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with a large Content-Length and then stalling before the body is complete...

EUVD-2026-69226

Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of service by sending valid request headers with a large Content-Length and then stalling before the body is complete...

SUSE CVE-2026-72315

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix busy dentry warning on unmount after DIO Commit c68337442f03 "cifs: Fix busy dentry used after unmounting" fixed the issue in cifs where deferred close of a file led to a dentry reference count not being released...

SUSE CVE-2026-72370

In the Linux kernel, the following vulnerability has been resolved: iomap: release pages on atomic dio size mismatch If bioiovitergetpages or the bounce helper succeeds but builds a short bio, the REQATOMIC size check rejects it before submission. The old error path only dropped the bio reference...

SUSE CVE-2026-72377

In the Linux kernel, the following vulnerability has been resolved: afs: Remove setting of ASRELEASEALWAYS for symlinks and mountpoints Regular AFS files correctly use afsfileaops which have releasefolio set as netfsreleasefolio, so ASRELEASEALWAYS is valid for them when fscache is enabled set vi...

CVE-2026-84132 Information disclosure in the Networking: HTTP component

Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84145

Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was...

EUVD-2026-69064

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

CLEANSTART-2026-PA66071 Security fixes in activemq 6.2.8-r2

Package activemq version 6.2.8-r2 fixes 16 vulnerabilities: CVE-2026-2332, CVE-2026-10050, ghsa-r7wm-3cxj-wff9, ghsa-72hv-8253-57qq, CVE-2026-54512...

CLEANSTART-2026-GG64392 Security fixes in flink 2.0.2-r1

Package flink version 2.0.2-r1 fixes 5 vulnerabilities: CVE-2026-49844, CVE-2026-34479, CVE-2026-34477, CVE-2026-34478, CVE-2026-34480...

CLEANSTART-2026-AT45372 Security fixes in tkn 0.46.0-r1

Package tkn version 0.46.0-r1 fixes 6 vulnerabilities: CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56859, CVE-2026-56862...

CLEANSTART-2026-WX98527 Security fixes in git-lfs-fips 3.7.1-r1

Package git-lfs-fips version 3.7.1-r1 fixes 9 vulnerabilities: CVE-2026-39821, CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600...

CLEANSTART-2026-PL26831 Security fixes in temporal-server 1.30.6-r3

Package temporal-server version 1.30.6-r3 fixes 11 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...