CentOS Linux 6 [TuxCare] Security Update: libssh2 / libssh2-devel / libssh2-docs (CENTOS6:CLSA-2026:1784282780)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1784282780 advisory. - libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...

CentOS Linux 8 [TuxCare] Security Update: ctdb / libnetapi / libnetapi-devel / libsmbclient / etc (CENTOS-STREAM8:CLSA-2026:1780503645)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1780503645 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured...

Rocky Linux 8 [CIQ] Security Update: kernel-rt / kernel-rt-core / kernel-rt-debug / kernel-rt-debug-core / etc Multiple Vulnerabilities (crlsa-2026_6036)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20266036 advisory. kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem CVE-2025-38180 kernel: macvlan: fix error recovery in macvlancommonnewlink CVE-2026-232...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2026_6037)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20266037 advisory. kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem CVE-2025-38180 kernel: macvlan: fix error recovery in macvlancommonnewlink CVE-2026-232...

CentOS Linux 7 [TuxCare] Security Update: libssh2 / libssh2-devel / libssh2-docs (CENTOS7:CLSA-2026:1783634800)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1783634800 advisory. - libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...

CentOS Linux 8.5 [TuxCare] Security Update: ctdb / libsmbclient / libsmbclient-devel / libwbclient / etc (CENTOS8.5:CLSA-2026:1780943682)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1780943682 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with...

Wind River VxWorks 7 < 26.09 Multiple Vulnerabilities

According to its self-reported version, the remote device is running Wind River VxWorks 7 prior to release 26.09. It is, therefore, affected by multiple vulnerabilities: - In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory...

AlmaLinux 9.6 [TuxCare] Security Update: ctdb / ldb-tools / libldb / libldb-devel / libnetapi / etc (ALMALINUX9.6:CLSA-2026:1780510989)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780510989 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with...

Rocky Linux 9.6 [TuxCare] Security Update: ctdb / ldb-tools / libldb / libldb-devel / libnetapi / etc (ALMALINUX9.6:CLSA-2026:1780510989)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1780510989 advisory. - A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured wit...

CVE-2026-100072

A flaw was found in the Linux kernel's ACPI Advanced Configuration and Power Interface subsystem. This vulnerability can lead to a Denial of Service DoS or system instability due to unsafe reference handling during platform device creation. Because the kernel fails to acquire a reference to the...

USN-8816-3: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distributed Replicated Block Device drivers; -...

USN-8818-5: Linux kernel (NVIDIA Tegra) vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

CVE-2026-97997

A flaw was found in the Linux kernel's virtio subsystem. When an operation to add descriptors to a packed virtual queue fails under memory pressure, the driver fails to reset the status flags on partially written descriptors. A local user capable of generating large input/output I/O operations...

CVE-2026-97996

A flaw was found in the Linux kernel's virtio subsystem. A local user can trigger a use-after-free condition when unbinding or removing certain virtual I/O virtio devices. This issue occurs because the device memory is freed before its debug filesystem entries are removed, resulting in an invalid...

CVE-2026-97988

A flaw was found in the Linux kernel's vhost subsystem. When transitioning device address modes or updating feature settings, cached virtual ring pointers and translation metadata are not properly invalidated, leaving stale memory mappings in use. A local attacker with access to the vhost device...

USN-8818-4: Linux kernel vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

CVE-2026-97984

A flaw was found in the Linux kernel's IPv6 networking subsystem. A local user could cause a Denial of Service DoS by exploiting an integer overflow in the User Datagram Protocol UDP length calculation. When Path MTU Discovery is enabled on a network device configured with an unusually large...

CVE-2026-97975

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition occurs when child network devices are unregistered concurrently while Bluetooth connection cleanup routines reparent child devices. A local user can exploit this timing issue to trigger a NULL pointer dereference,...

CVE-2026-97961

A flaw was found in the Linux kernel's perf subsystem, which can lead to a Denial of Service DoS. A local user can trigger this issue by manipulating performance monitoring event limits through I/O control ioctl requests. When the event limit expires, the kernel improperly removes an entry from a...

CVE-2026-97960

A flaw was found in the Linux kernel. A concurrency issue in the Intel Performance Monitoring Unit PMU subsystem allows the Precise Event-Based Sampling PEBS buffer draining routine to be re-entered unexpectedly. A local user could exploit this flaw while configuring performance events to trigger...