CVE-2026-72347 netfilter: xt_connmark: reject invalid shift parameters

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtconnmark: reject invalid shift parameters Revision 2 of the CONNMARK target accepts user-controlled shift parameters and applies them to 32-bit mark values in connmarktgshift. A shiftbits value of 32 or more triggers...

CVE-2026-72347

CVE-2026-72347 – Linux kernel netfilter xt_connmark vulnerability affecting the CONNMARK target (revision 2). The issue arises when user-controlled shift parameters are applied to 32-bit connmark values via the function in the connmark_tg_shift() path. A shift_bits value of 32 or more triggers an...

PT-2026-72671

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The max3421 hub control function, which handles USB hub class requests to the virtual root hub, contains a shift-out-of-bounds flaw. Within the ClearPortFeature and SetPortFeature switch...

CVE-2026-74544: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsu32: validate offshift to prevent shift-out-of-bounds u32change copies the user-provided tcu32sel.offshift unsigned char, 0-255 into the kernel knode object without bounds validation. When a packet later hits...

Linux Distros Unpatched Vulnerability : CVE-2026-74544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: clsu32: validate offshift to prevent shift-out-of-bounds u32change copies the user-provided tcu32sel.offshift unsigned char, 0-255 into the kernel...

PT-2026-72996

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cls u32 component where the u32 change function copies a user-provided tc u32 sel.offshift value into a kernel knode object without proper bounds validation. When ...

PT-2026-72638

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A shift-out-of-bounds issue exists in the xfrm selector match function. This occurs when an AF UNSPEC selector with a large prefixlen such as 128 is matched against an IPv4 flow while XF...

CVE-2026-72347: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtconnmark: reject invalid shift parameters Revision 2 of the CONNMARK target accepts user-controlled shift parameters and applies them to 32-bit mark values in connmarktgshift. A shiftbits value of 32 or more triggers...

PT-2026-72535

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Revision 2 of the CONNMARK target in netfilter accepts user-controlled shift parameters applied to 32-bit mark values within the connmark tg shift function. A shift bits value of 32 or...

CVE-2026-72483: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421: Fix shift-out-of-bounds in max3421hubcontrol The max3421hubcontrol function handles USB hub class requests to the virtual root hub. In the default branches of both the ClearPortFeature and SetPortFeature switc...

Linux Distros Unpatched Vulnerability : CVE-2026-72347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: xtconnmark: reject invalid shift parameters Revision 2 of the CONNMARK target accepts user- controlled shift parameters and applies them to 32-bit ma...

PT-2026-72538

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter xt u32 module where the u32 match it function executes shift operands provided by a rule on a 32-bit value. A malformed u32 rule can specify a shift coun...

PT-2026-72733

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/mlx5 component where the set rq size function computes the Receive Queue RQ Work Queue Element WQE size using a bitwise shift operation based on the...

CVE-2026-72350: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtu32: reject invalid shift counts u32matchit executes rule-supplied shift operands on a 32-bit value. A malformed u32 rule can provide a shift count of 32 or more, triggering an undefined shift out-of-bounds during...

CVE-2026-72450: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen during match syzbot reported a shift-out-of-bounds in xfrmselectormatch due to AFUNSPEC selector with large prefixlen e.g. 128 matched against IPv4 flow when XFRMSTATEAFUNSPEC is set...

GHSA-8RW6-P7M8-63JP SurrealDB: Array element-level (field.*) SELECT permissions leak denied elements to record users

A SELECT permission defined on an array element DEFINE FIELD field. … PERMISSIONS FOR select … is not enforced correctly for RECORD users. Instead of hiding the denied elements, the query leaks a subset of them: a deny-all returns the odd-indexed elements, and a per-element predicate keeps and...

Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.16

Logging for Red Hat OpenShift - 6.0.16 Red Hat OpenShift Logging 6.0.16 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...

Important: Red Hat Security Advisory: Kiali 2.22.8 for Red Hat OpenShift Service Mesh 3.3

Kiali 2.22.8 for Red Hat OpenShift Service Mesh 3.3 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.10.3 release.

Red Hat Developer Hub 1.10.3 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

CVE-2026-60074

Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit property \pNd and not...