ROS-20261006-73-0414

The vulnerability in the kernel-lt is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ROS-20261006-73-0389

The vulnerability of the checkremovingspaceinfo function in the fs/btrfs/block-group.c file of the Btrfs file system in the Linux operating system is related to improper memory release „memory leak“. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...

ROS-20261006-73-1003

The vulnerability of the setnewpassword function in the drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c file of the Linux operating system’s X86 device driver module is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an...

ROS-20261006-73-0372

The vulnerability of the buildpacketmessage function in the net/netfilter/nfnetlinklog.c module of the netfilter component of the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

ROS-20261006-73-0134

The vulnerability of the ndasyncdeviceregister function in the Linux operating system’s kernel is related to a violation of the count of references to pages displayed in memory. Exploiting this vulnerability can allow an attacker to trigger a service failure...

PT-2026-106827

Name of the Vulnerable Software and Affected Versions ImageSharp versions 2.0.0 through 4.1.1 Description The TIFF CCITT Group 3 encoder allocates an undersized compressed-data buffer for narrow 1-bit images. The TiffCcittCompressor.Initialize function fails to reserve sufficient space for row da...

PT-2026-106652

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the RDMA/siw component. The siw get hdr function may process an extended DDP/RDMAP header across multiple TCP callbacks. If the first callback receives...

PT-2026-106708

Name of the Vulnerable Software and Affected Versions Craft CMS version 5.10.13.2 Description An authenticated remote code execution issue exists in the Control Panel action 'app/render-components'. Users with basic Control Panel access can submit request-controlled component classes and property...

ROS-20261006-73-0407

The vulnerability of the ext4extcorrectindexes function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploitation of this vulnerability could allow an attacker to compromise the...

PT-2026-106758

A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file search class.php. Such manipulation of the argument school year leads to sql injection. The attack may be launched remotely. The...

ROS-20261006-73-0327

The vulnerability of the u32classify function in the net/sched/clsu32.c module of the network scheduling subsystem of the Linux operating system is related to the improper checking of specified indices, positions, or offsets in input data. Exploiting this vulnerability may allow an attacker to...

ROS-20261006-73-0200

The vulnerability of the dwcmshcrk3568setclock function in the drivers/mmc/host/sdhci-of-dwcmshc.c driver for MMC/SD/SDIO cards in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0253

The vulnerability of the rangeisholeinparent function in the fs/btrfs/send.c module of the Btrfs file system in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261006-73-0208

The vulnerability of the mmppdmaresidue function in the drivers/dma/mmppdma.c file of the Linux kernel’s DMA driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

PT-2026-106828

Name of the Vulnerable Software and Affected Versions ImageSharp versions 4.0.0 through 4.1.1 Description In the 2D graphics library, the ExrBaseDecompressor.UndoZipCompression function accepts a nonempty ZIP or ZIPS inflate result that is shorter than the required EXR block size. While...

PT-2026-106696

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/siw component where a race condition occurs if the siw qp modify function fails within siw accept. The state lock of the Queue Pair QP is released before the...

PT-2026-106619

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A socket lock inversion exists in the Bluetooth RFCOMM component during listener cleanup. The function rfcomm sock cleanup listen closes unaccepted child sockets via rfcomm sock close,...

ROS-20261006-73-0325

The vulnerability of the tegraqspicombinedseqxfer function in the drivers/spi/spi-tegra210-quad.c file of the Linux operating system’s SPI device driver relates to the pointer assignment. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Security Advisory 0190

Security Advisory 0190 . CSAF PDF Date: October 6, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 6, 2026 | Initial release Description All of the CVEs covered in this advisory affect only CloudVision-CUE on-premises. CV-CUE is Arista’s Wi-Fi management service and, in on-premises...

CVE-2026-106511: Missing Authentication for Critical Function

MultiversX's multisig-improved repository: mx-multisig-and-modules reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allows any account with the Proposer role to perform explicitly barred actions. Thi...