kernel: Linux kernel: Information disclosure and denial of service in ntb_hw_switchtec module

A flaw was found in the Linux kernel. A local user could exploit a shift-out-of-bounds vulnerability within the ntbhwswitchtec module. This vulnerability arises when the ntbmwcleartrans application programming interface API processes zero values for address and size, leading to an invalid memory...

CVE-2026-1530 Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation

A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle MITM attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in...

Jailbreaking LLMs Via Calibration

Safety alignment in Large Language Models LLMs often creates a systematic discrepancy between a model's aligned output and the underlying pre-aligned data distribution. We propose a framework in which the effect of safety alignment on next-token prediction is modeled as a systematic distortion of...

SUSE-SU-2026:0350-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50282: chardev: fix error handling in cdevdeviceadd bsc1249739. - CVE-2022-50630: mm: hugetlb: fix UAF in hugetlbhandleuserfault bsc1254785. - CVE-2022-50700:...

CVE-2026-1531

A flaw was found in foremankubevirt. When configuring the connection to OpenShift, the system disables SSL verification if a Certificate Authority CA certificate is not explicitly set. This insecure default allows a remote attacker, capable of intercepting network traffic between Satellite and...

kernel: Linux kernel: Information disclosure and denial of service in ntb_hw_switchtec module

A flaw was found in the Linux kernel. A local user could exploit a shift-out-of-bounds vulnerability within the ntbhwswitchtec module. This vulnerability arises when the ntbmwcleartrans application programming interface API processes zero values for address and size, leading to an invalid memory...

kernel: Linux kernel: iommufd/iova_bitmap shift-out-of-bounds vulnerability

A flaw was found in the Linux kernel's iommufd/iovabitmap component. This vulnerability allows a local attacker with low privileges to cause a system crash or denial of service via a shift-out-of-bounds error...

kernel: Linux kernel: iommufd/iova_bitmap shift-out-of-bounds vulnerability

A flaw was found in the Linux kernel's iommufd/iovabitmap component. This vulnerability allows a local attacker with low privileges to cause a system crash or denial of service via a shift-out-of-bounds error...

Enhancements to Akamai API Security, Q4 2025

The Q4 2025 Akamai API Security updates help organizations shift security left, improve coverage, and reduce friction...

kernel: mm/compaction: fix UBSAN shift-out-of-bounds warning

A flaw was found in the memory management subsystem in the Linux kernel. An integer overflow in a shift operation can cause unexpected behavior in memory management, resulting in system instability and a denial of service...

RHEL 10 : kernel (RHSA-2026:1236)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1236 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: mm/compaction: fix UBSAN...

Moderate: Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.10.1

Assisted installer RHEL 9 components for the multicluster engine for Kubernetes 2.10.1 General Availability release, with updates to container images. Assisted Installer RHEL 9 integrates components for the general multicluster engine for Kubernetes 2.10.1 release that simplify the process of...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004894)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004894 advisory. In the Linux kernel, the following vulnerability has been resolved: capabilities: fix undefined behavior in bit shift for CAPTOMASK Shifting signed 32-bit value by 3...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.20.11 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.11 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Azure Linux 3.0 Security Update: kernel (CVE-2023-53034)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-53034 advisory. - In the Linux kernel, the following vulnerability has been resolved: ntbhwswitchtec: Fix shift-out-of- bounds...

kernel: Linux kernel: iommufd/iova_bitmap shift-out-of-bounds vulnerability

A flaw was found in the Linux kernel's iommufd/iovabitmap component. This vulnerability allows a local attacker with low privileges to cause a system crash or denial of service via a shift-out-of-bounds error...

CLSA-2026-1768895798 kernel: Fix of 7 CVEs

fs/proc: fix uaf in procreaddirde CVE-2025-40271 - fs: fix UAF/GPF bug in nilfsmdtdestroy CVE-2022-2978 - Bluetooth: L2CAP: fix "bad unlock balance" in l2capdisconnectrsp CVE-2023-53297 - net: sched: sfb: fix null pointer access issue when sfbinit fails CVE-2022-50356 - ALSA: usb-audio: Fix size...

CLSA-2026-1768110920 kernel: Fix of 16 CVEs

crypto: lzo - Fix compression buffer overrun CVE-2025-38068 - wifi: brcmfmac: fix use-after-free when rescheduling brcmfbtcoexinfo work CVE-2025-39863 - NFSD: Protect against send buffer overflow in NFSv2 READ CVE-2022-43945 - tcp: Clear tcpsksk-fastopenrsk in tcpdisconnect. CVE-2025-40186 - can:...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002689)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002689 advisory. kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact ...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-1091)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : net: drop UFO packets in udprcvsegmentCVE-2025-38622 A transient execution vulnerability in some AMD processors may allow an attacker to infer dat...