Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 contains a security vulnerability. This vulnerability arises from IP-in-IP GSO, which allows each nested IP header to repeatedly enter inetgsosegment or ipv6gsosegment. However, encaplevel only tracks the header bytes and not the callback depth. Deeply nested chains...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc (CENTOS8.5:CLSA-2022:1666277963)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2022:1666277963 advisory. - A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content...

Security update for fetchmail (important)

openSUSE security update: security update for fetchmail ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22077-1 Rating: important References: bsc1282055 Cross-References: CVE-2026-94184 CVSS scores: CVE-2026-94184 SUSE : 8.1...

Security update for stunnel (moderate)

openSUSE security update: security update for stunnel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22088-1 Rating: moderate References: bsc1274206 bsc1274207 Cross-References: CVE-2026-70367 CVE-2026-70368 CVSS scores: CVE-2026-70367 SUSE : 5.4...

Security update for virtiofsd (important)

openSUSE security update: security update for virtiofsd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22079-1 Rating: important References: bsc1257912 bsc1283239 Cross-References: CVE-2026-25727 CVSS scores: CVE-2026-25727 SUSE : 7.5...

PT-2026-128583

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: fix uninitialized typec partner desc in tps6598x connect tps6598x connect passes a stack-allocated typec partner desc to typec register partner after initializing only usb pd, accessory and identity. typec...

CVE-2026-98584: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix potential stack infoleak in emtextdump emtextdump allocates struct tcfemtext on the stack without zeroing it. strscpy writes the algorithm name and a NUL terminator into conf.algo, leaving the remaining bytes...

PT-2026-116646

libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an oversized SCRAM salt. Attackers can send a server-first-message whose s= attribute decodes to more than 124 bytes, aborti...

PT-2026-116759

In the Linux kernel, the following vulnerability has been resolved: fprobe: Terminate the fgraph data list when the reservation is not filled fprobe fgraph entry reserves shadow stack space for every fprobe with an exit handler, but only fills it for those whose entry handler returns 0. fgraph...

CVE-2026-112055: Out-of-bounds Read

wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPXFKP and wvGetCHPXFKP caused by an unvalidated FKP run count. Attackers can supply a crafted .doc file with a large crun value to read kilobytes past the 512-byte stack buffer, crashing applications like...

Linux Distros Unpatched Vulnerability : CVE-2026-98853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: gso: limit recursive IP-in-IP segmentation IP-in-IP GSO can re-enter inetgsosegment or ipv6gsosegment for each nested IP header. encaplevel tracks header...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.15 contains a security vulnerability. This vulnerability stems from the fact that typecpartnerdesc is not initialized in tps6598xconnect. As a result, uninitialized function pointers may be called, and stack data may be leaked through the partner sysfs...

PT-2026-116685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 component where the fix host ownership function only processes the linear-map alias of each memblock region. Consequently, the per-CPU hyp stack, which i...

PT-2026-128468

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 fix host ownership walks only the linear-map alias of each memblock region, and the per-CPU hyp stack, mapped in the private VA range for its guard page, has none...

CVE-2026-98613: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Bound ownership depth through local kptrs and graph roots Program-allocated objects can own other local objects through referenced kptrs. bpfobjfreefields follows those pointers through bpfobjdropimpl synchronously, before t...

PT-2026-116803

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2-rc6 Description A stack information leak exists in the em text dump function. The function allocates a struct tcf em text on the stack without zeroing it. While strscpy writes the algorithm name and a NUL...

PT-2026-116747

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel stack leak occurs in the error path of the GPIO character device. When the system fails to acquire the GPIO chip guard within the gpio desc to lineinfo function, it returns...

Linux Distros Unpatched Vulnerability : CVE-2026-98755

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tty: vcc: zero-initialize control packet in vccsendctl The stack-allocated struct viovcc pkt was partially initialized, leaving the tag.stypeenv field...

Linux Distros Unpatched Vulnerability : CVE-2026-98466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Transfer the hyp stack pages out of the host stage-2 fixhostownership walks only the linear-map alias of each memblock region, and the per-CPU hyp...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 6.11.7 to 6.12 and version 6.12 contain security vulnerabilities. These vulnerabilities arise when the TPM empty key name does not match, resulting in the chip not being disabled and a success return being given. This allows uninitialized stack values to be used as...