Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: seg6: Fixed the iif in the IPv6 socket control block. When an IPv4 packet is received, the iprcvcore... function sets the receiving interface index into the IPv4 socket control block v5.16-rc4, net/ipv4/ipinput.c, line 510: c...

Improving email security outcomes with real-world Microsoft Defender insights

Every benchmark tells a story. The most valuable ones tell us where to improve next. For five consecutive quarters Microsoft has published email security benchmarking reports to provide greater transparency into real-world protection outcomes. The results have shown strong Microsoft Defender...

SUSE CVE-2026-80955

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in ksetreplay In ksetreplay, when key-seggen is stale key-seggen cachepos.cacheseg-gen, cachekeyputkey is called but then key-cachepos.cacheseg is accessed as the argument ...

DEBIAN-CVE-2026-80955

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in ksetreplay In ksetreplay, when key-seggen is stale key-seggen cachepos.cacheseg-gen, cachekeyputkey is called but then key-cachepos.cacheseg is accessed as the argument ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107321 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix seg fault in rxecompqueuepkt In rxecompqueuepkt an incoming response packet skb is...

SUSE CVE-2026-63949

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix OOB read on zero-length messagestore linedispdisplay unconditionally reads msgcount - 1 before checking whether count is zero, so a write of zero bytes to the message sysfs attribute hits msg-1:...

CVE-2026-63949

A flaw was found in the Linux kernel's auxdisplay line-display subsystem. A local user can trigger an out-of-bounds read by writing a zero-length message to the message sysfs attribute. This occurs because the linedispdisplay function attempts to read a character from a zero-length buffer, leadin...

contextifier (>=0.1.0, <=0.2.2), endi (>=2025.1.0b3, <=2026.4.7) +4 more potentially affected by CVE-2026-28231 via pi-heif (>=1.1.1, <=1.2.0)

pi-heif PYPI version =1.1.1, =0.1.0, =2025.1.0b3, =2026.3.0b2, =2025.1.0b3, =0.2.5, =0.1.0, =0.3.0 Source cves: CVE-2026-28231 Source advisory: OSV:GHSA-5GJJ-6R7V-PH3X...

CVE-2026-63949

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix OOB read on zero-length messagestore linedispdisplay unconditionally reads msgcount - 1 before checking whether count is zero, so a write of zero bytes to the message sysfs attribute hits msg-1:...

CVE-2026-63949 auxdisplay: line-display: fix OOB read on zero-length message_store()

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix OOB read on zero-length messagestore linedispdisplay unconditionally reads msgcount - 1 before checking whether count is zero, so a write of zero bytes to the message sysfs attribute hits msg-1:...

EUVD-2026-45722

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix OOB read on zero-length messagestore linedispdisplay unconditionally reads msgcount - 1 before checking whether count is zero, so a write of zero bytes to the message sysfs attribute hits msg-1:...

CVE-2026-54902

Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to version 3.17.2, is vulnerable to Use-After-Free when in SAJ mode. The Oj::Parser does not protect cached object keys ≥ 35 bytes from garbage collection, and a Ruby callback that triggers GC inside hashend ca...

PT-2026-43967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel network subsystem. The functions seg6 input core and rpl input call ip6 route input, which assigns a NOREF destination dst to the socket...

CVE-2026-43302

A flaw was found in the Linux kernel's V3D graphics driver. When the Direct Memory Access DMA Application Programming Interface API debug option is enabled, the kernel may report a segment size mismatch. This occurs because the 'maxsegsize' parameter is not correctly configured, leading to warnin...

boxmot (>=10.0.49, <=10.0.51), gandlf (>=0.0.18.dev20240112, <=0.0.19.dev20240307) +1 more potentially affected by CVE-2026-40491 via gdown (4.6.3)

gdown PYPI version 4.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdown and may be impacted: - boxmot =10.0.49, =0.0.18.dev20240112, =0.1.3.dev2, =0.1.9 Source cves: CVE-2026-40491 Source advisory: OSV:PYSEC-2026-2158...

boxmot (>=10.0.49, <=10.0.51), gandlf (>=0.0.18.dev20240112, <=0.0.19.dev20240307) +1 more potentially affected by CVE-2026-40491 via gdown (4.6.3)

gdown PYPI version 4.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on gdown and may be impacted: - boxmot =10.0.49, =0.0.18.dev20240112, =0.1.3.dev2, =0.1.9 Source cves: CVE-2026-40491 Source advisory: OSV:GHSA-76HW-P97H-883F...

nginx:1.24 security update

1.24.0-5.2.0.1 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 1:1.24.0-5.2 - Resolves: RHEL-157886 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159445...

PT-2026-35020

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the seg6 lwtunnel, a single dst cache per encap route is shared between the seg6 input core and seg6 output core functions. Because these two paths can perform post-encap SID lookups ...

contextifier (>=0.1.0, <=0.2.2), endi (>=2025.1.0b3, <=2026.4.7) +4 more potentially affected by CVE-2026-28231 via pi-heif (>=1.1.1, <=1.2.0)

pi-heif PYPI version =1.1.1, =0.1.0, =2025.1.0b3, =2026.3.0b2, =2025.1.0b3, =0.2.5, =0.1.0, =0.3.0 Source cves: CVE-2026-28231 Source advisory: OSV:PYSEC-2026-2248...

CVE-2023-25660

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when the parameter summarize of tf.rawops.Print is zero, the new method SummarizeArray will reference to a nullptr, leading to a seg fault. A fix is included in TensorFlow version 2.12 and version...