netty-transport-sctp: Netty-transport-sctp: Denial of Service due to unbounded memory growth from SctpMessage fragments

A flaw was found in netty-transport-sctp. A remote attacker can exploit this vulnerability by sending specially crafted, non-complete Stream Control Transmission Protocol SCTP message fragments. This can lead to unbounded memory growth within the application, causing a Denial of Service DoS...

CVE-2026-64128

A flaw was found in the Linux kernel's Bluetooth Isochronous Stream ISO subsystem. A remote attacker, specifically any broadcaster on the air for Broadcast Isochronous Stream BIS, can send a malformed Bluetooth packet an ISOEND frame without a prior ISOSTART frame to a vulnerable system. This can...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-7342: RHODF 4.19.20 release DFBUGS-7332: Backport for 4.19 - GSSODFMCG noobaa-db-pg-cluster won't...

Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: CVE-2026-12892: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser bsc1268971. CVE-2026-14935: webrtcbin accepts remote SDP without a=fingerprint due to inverted presence check bsc1271051. CVE-2026-52720: invalid...

PT-2026-67327

Name of the Vulnerable Software and Affected Versions guzzlehttp/guzzle versions prior to 7.15.1 Description An information disclosure issue exists in the RedirectMiddleware when the optional allow redirects.referer setting is enabled. During a same-scheme redirect such as HTTPS to HTTPS, the...

CentOS 9 : vim-8.2.2637-33.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the vim-8.2.2637-33.el9 build changelog. - command injection in tar plugin CVE-2026-46483 - Code Injection in cucumber filetype plugin CVE-2026-47167 Note that Nessus has not teste...

Linux Distros Unpatched Vulnerability : CVE-2026-64021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix execqueue leak on width check in stream open In xeoastreamopenioctl, when...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: clear page-private in freepagesprepare CVE-2026-43303 In the Linux kernel, the following vulnerability has been resolved: ipvs: skip ipv6 extension headers for csum checks CVE-2026-45850 In the Linux...

CVE-2026-64109

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix UAF read of tail-len in unixstreamdatawait unixstreamdatawait does skbpeektail&sk-skreceivequeue without holding any lock that prevents SKBs on that queue from being dequeued and freed. This has been the case since...

CVE-2026-64068

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs Fix netfsretryreadsubrequests and netfsretrywritestream to take the appropriate lock when adding extra subrequests into stream-subrequests...

CVE-2026-64021

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix execqueue leak on width check in stream open In xeoastreamopenioctl, when param.execq-width 1 the function returns -EOPNOTSUPP directly, skipping the existing errexecq cleanup path. The execqueue reference obtained...

CVE-2026-63971

In the Linux kernel, the following vulnerability has been resolved: sctp: fix race between sctpwaitforconnect and peeloff sctpwaitforconnect drops and re-acquires the socket lock while waiting for the association to reach ESTABLISHED state. During this window, another thread can peeloff the...

EUVD-2026-45794

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix UAF read of tail-len in unixstreamdatawait unixstreamdatawait does skbpeektail&sk-skreceivequeue without holding any lock that prevents SKBs on that queue from being dequeued and freed. This has been the case since...

CVE-2026-64109 af_unix: Fix UAF read of tail->len in unix_stream_data_wait()

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix UAF read of tail-len in unixstreamdatawait unixstreamdatawait does skbpeektail&sk-skreceivequeue without holding any lock that prevents SKBs on that queue from being dequeued and freed. This has been the case since...

CVE-2026-64109 af_unix: Fix UAF read of tail->len in unix_stream_data_wait()

In the Linux kernel, the following vulnerability has been resolved: afunix: Fix UAF read of tail-len in unixstreamdatawait unixstreamdatawait does skbpeektail&sk-skreceivequeue without holding any lock that prevents SKBs on that queue from being dequeued and freed. This has been the case since...

EUVD-2026-45641

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs Fix netfsretryreadsubrequests and netfsretrywritestream to take the appropriate lock when adding extra subrequests into stream-subrequests...

CVE-2026-64068 netfs: Fix missing locking around retry adding new subreqs

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs Fix netfsretryreadsubrequests and netfsretrywritestream to take the appropriate lock when adding extra subrequests into stream-subrequests...

CVE-2026-64021

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix execqueue leak on width check in stream open In xeoastreamopenioctl, when param.execq-width 1 the function returns -EOPNOTSUPP directly, skipping the existing errexecq cleanup path. The execqueue reference obtained...

CVE-2026-64021

The CVE concerns the Linux kernel DRM subsystem (drm/xe/oa). The issue occurs in xe_oa_stream_open_ioctl() when param.exec_q->width > 1: it returns -EOPNOTSUPP directly, bypassing the err_exec_q cleanup path, causing a leaked reference from xe_exec_queue_lookup() and preventing the file’s p...

EUVD-2026-45594

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix execqueue leak on width check in stream open In xeoastreamopenioctl, when param.execq-width 1 the function returns -EOPNOTSUPP directly, skipping the existing errexecq cleanup path. The execqueue reference obtained...