CVE-2026-98679: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013writeeventconfig already ignores repeated enable requests, but a repeated disable reques...

PT-2026-116748

In the Linux kernel, the following vulnerability has been resolved: gpio: arizona: Fix runtime PM leak in arizona gpio direction out Switching a persistent GPIO line from input to output acquires a runtime PM reference on the parent device, but if the subsequent regmap update bits fails the...

PT-2026-116746

In the Linux kernel, the following vulnerability has been resolved: gpio: zynq: fix runtime PM leak on request error path pm runtime get sync leaves the usage counter incremented even when it fails, and zynq gpio request returns the error without dropping it. gpiolib does not call -free when...

PT-2026-116898

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013 write event config already ignores repeated enable requests, but a repeated disable...

CVE-2026-98437: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pmruntimeresumeandget in irisenablepowerdomains to avoid leaking a runtime PM usage count on failure. Also ensure pmruntimeputsync is always called in irisdisablepowerdomains,...

PT-2026-116732

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix runtime PM leak in nouveau connector detect If nvif outp edid get fails, nouveau connector detect returns early without dropping the runtime PM reference taken at the start of the function, keeping the device...

PT-2026-116738

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix runtime PM leak in amdgpu debugfs test ib show amdgpu debugfs test ib show resumes the device with pm runtime get sync before taking the reset domain semaphore with down write killable. If the write lock acquisiti...

PT-2026-116656

In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pm runtime resume and get in iris enable power domains to avoid leaking a runtime PM usage count on failure. Also ensure pm runtime put sync is always called in iris disable...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.18 contains a security vulnerability. This vulnerability stems from the IIO core failing to filter repeated writes to the event enablement properties. Repeated disabling requests still invoke kxcjk1013setpowerstatedata, false, releasing unacquired runtime power manageme...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.8 contains a security vulnerability. This vulnerability stems from the bpfsock context code, which fails to ensure that the width of the read value is consistent with the assumptions of the verifier when reading the rxqueuemapping field. As a result, the values of runti...

CLSA-2026-1792194448 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792194450 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.11.5-tuxcare.1...

CLSA-2026-1792194447 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792194449 TuxCare security update for @babel/plugin-transform-runtime (2 CVEs)

TuxCare rebuilt @babel/plugin-transform-runtime to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792194433 TuxCare security update for @babel/plugin-transform-runtime (1 CVE)

TuxCare rebuilt @babel/plugin-transform-runtime to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CVE-2026-67415

A flaw was found in rabbitmq-server. An authenticated remote attacker with administrative privileges can cause a Denial of Service DoS by submitting crafted runtime parameters through the Shovel Management HTTP API. Because these parameters are converted into non-reclaimable memory identifiers...

CLSA-2026-1792161542 TuxCare security update for @remix-run/server-runtime (3 CVEs)

TuxCare rebuilt @remix-run/server-runtime to address 3 CVEs. Fixed in 1.19.3-tuxcare.4...

CLSA-2026-1792161539 TuxCare security update for @remix-run/server-runtime (4 CVEs)

TuxCare rebuilt @remix-run/server-runtime to address 4 CVEs. Fixed in 2.17.0-tuxcare.1...

CLSA-2026-1792160940 TuxCare security update for @remix-run/server-runtime (1 CVE)

TuxCare rebuilt @remix-run/server-runtime to address 1 CVE. Fixed in 2.17.0-tuxcare.2...

OESA-2026-4236 containerd security update

containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision...