Rocky Linux 10.1 [CIQ] Security Update: python3-kdcproxy Multiple Vulnerabilities (crlsa-2025_21142)

The Rocky Linux 10.1 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202521142 advisory. python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV CVE-2025-59088 python-kdcproxy: Remote DoS via unbounded TCP upstream buffering...

Rocky Linux 9 [CIQ] Security Update: python3-kdcproxy Multiple Vulnerabilities (crlsa-2025_21139)

The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202521139 advisory. python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV CVE-2025-59088 python-kdcproxy: Remote DoS via unbounded TCP upstream buffering...

Rocky Linux 8 [CIQ] Security Update: bind-dyndb-ldap / bind-dyndb-ldap-debuginfo / etc Multiple Vulnerabilities (crlsa-2025_21140)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202521140 advisory. python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV CVE-2025-59088 python-kdcproxy: Remote DoS via unbounded TCP upstream buffering...

SUSE CVE-2026-97413

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...

DEBIAN-CVE-2026-97413

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...

AZL-103829 CVE-2026-97413 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...

CVE-2026-97413

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...

UBUNTU-CVE-2026-97413

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...

CVE-2026-97413 RDMA/rtrs-srv: Fix integer underflow in process_read and process_write

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...

CVE-2026-97413 RDMA/rtrs-srv: Fix integer underflow in process_read and process_write

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...

EUVD-2026-86026

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...

CVE-2026-97413

The Linux kernel is vulnerable to an integer underflow within the RDMA/rtrs-srv component, specifically in the process_read and process_write functions. The issue arises because usr_len is read from a network-supplied message field and used to compute data_len = off - usr_len without verifying th...

CVE-2026-97413

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...

Linux Distros Unpatched Vulnerability : CVE-2026-97413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network- supplied message field le16tocpu and used to compute datalen...

CVE-2026-97413: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in processread and processwrite usrlen is read from a network-supplied message field le16tocpu and used to compute datalen = off - usrlen without validating that usrlen off causing an integer...

CVE-2026-0187

In gsaswpkhashcompare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0187

CVE-2026-0187 is a privilege escalation vulnerability affecting the GSA component on Google Pixel devices. The root cause is a logic error within the gsa_sw_pk_hash_compare function in image-auth-srv.c. An attacker with System execution privileges can exploit this flaw to achieve a local escalati...

Astra Linux – Vulnerability in python-kdcproxy

If kdcproxy receives a request for a realm whose configuration does not define any server addresses, it will, by default, query DNS zone records that match the requested realm name. This creates a server-side request-forgery vulnerability, as an attacker could send a request for a realm that...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: etcd (UTSA-2022-001268)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001268 advisory. In ectd before versions 3.4.10 and 3.3.23, gateway TLS authentication is only applied to endpoints detected in DNS SRV records. When starting a gateway, TLS...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2024-002887)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-002887 advisory. In the Linux kernel, the following vulnerability has been resolved: block/rnbd-srv: Check for unlikely string overflow Since devsearchpath can technically be as lar...