1276 matches found
RLSA-2026:64770 Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage...
kernel-rt security update
An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...
kernel: smb/client: fix out-of-bounds read in smb2_compound_op()
A flaw was found in the Linux kernel's Server Message Block SMB client. A remote attacker, acting as a malicious SMB server, could send a specially crafted, truncated response with an oversized buffer length. This could lead to an out-of-bounds read in the smb2compoundop function, allowing the...
Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel: netfilter: synproxy: refresh tcphdr after...
RHEL 8 : kernel (RHSA-2026:66000)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66000 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: pcrypt - Fix handling...
ALSA-2026:66000 Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage CVE-2026-53002 kernel: netfilter: synproxy: refresh tcphdr after...
CVE-2026-72936
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network...
CVE-2026-69618
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally...
CVE-2026-69572
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network...
CVE-2026-69544
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...
CVE-2026-72936
CVE-2026-72936 is a use-after-free vulnerability in the Windows SMB Client that allows an unauthorized, remote attacker to achieve remote code execution over the network. The CVSS 3.1 base score is 8.1 (HIGH) , reflecting a network attack vector with high complexity, no required privileges, and n...
EUVD-2026-73664
Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network...
EUVD-2026-73551
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally...
CVE-2026-69618
CVE-2026-69618 is an out-of-bounds read in the Windows SMB Client that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, and high confidentiality impact but no integrity or availabi...
EUVD-2026-73137
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...
CVE-2026-69544
CVE-2026-69544 is a heap-based buffer overflow in the Windows SMB Client that allows an authorized attacker with low local privileges to achieve local privilege escalation . The attack vector is local with low complexity and requires no user interaction , rated CVSS 3.1: 7.8 (HIGH) with high impa...
EUVD-2026-73020
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network...
CVE-2026-69572
CVE-2026-69572 is an out-of-bounds read vulnerability in the Windows SMB Client that allows an authorized attacker (low privileges) to disclose information over a network . The CVSS 3.1 score is 5.7 (Medium) with vector AV:N/AC:L/PR:L/UI:R, indicating a network attack with low complexity, low req...
