Security update for acl, attr

This update for acl, attr fixes the following issue: CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl bsc1268867. Changes for acl: Update to 2.4.0 jscPED-16501: Major Issues Fixed: The libacl library function...

SUSE-SU-2026:4176-1 Security update for acl, attr

This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl bsc1268867. Changes for acl: - Update to 2.4.0 jscPED-16501: Major Issues Fixed: - The libacl library...

kernel: drm/xe: Open-code GGTT MMIO access protection

A flaw was found in the drm/xe component of the Linux kernel. This vulnerability involves insufficient protection of Graphics Translation Table GGTT Memory-Mapped I/O MMIO access. When the driver fails to load or during certain cleanup operations, the system's memory access protection is...

kernel: drm/i915: Fix potential overflow of shmem scatterlist length

A flaw was found in the Linux kernel's graphics memory management drm/i915 component. This vulnerability occurs when a large shared memory object's internal list of memory segments, called a scatterlist, is populated. If the total size of these segments exceeds 4 Gigabytes GB, a numerical overflo...

kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns

A flaw was found in the Linux kernel's rtnetlink component. An unprivileged local user, leveraging a user namespace, can exploit a missing CAPNETADMIN capability check in the rtnlnewlink function. This allows the user to create paired network devices in arbitrary network namespaces, including the...

kernel: mm/khugepaged: write all dirty file folios when collapsing

A flaw was found in the Linux kernel's memory management mm/khugepaged component. A local user could trigger an edge case where unsaved changes to file data dirty folios are improperly discarded. This occurs when a file with previous writes is subjected to a specific sequence of memory advice...

kernel: wifi: cfg80211: validate PMSR FTM preamble range

A flaw was found in the cfg80211 component of the Linux kernel's Wi-Fi subsystem. This vulnerability allows the PMSR FTM request parser to accept preamble values outside the defined nl80211 range. An attacker could exploit this by providing malformed input, potentially leading to unexpected syste...

kernel: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend

A flaw was found in the Bluetooth subsystem of the Linux kernel, specifically within the hcisync component. This vulnerability occurs when the hciadvbcastannoucement function attempts to prepend Broadcast Announcement service data to an existing advertising payload that is already at its maximum...

kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp

A flaw was found in the Bluetooth L2CAP Logical Link Control and Adaptation Protocol component of the Linux kernel. When a device receives a connection response with an already-assigned destination Channel Identifier CID, the system may crash. This occurs because the kernel's procedure for...

kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32

A flaw was found in the Linux kernel's Fibre Channel FC transport component. An adjacent Fibre Channel fabric actor, such as a compromised switch or fabric controller, can send a specially crafted FPIN ELS Fabric Performance Incentive Notification Extended Link Service frame. This malformed frame...

kernel: dm-verity: fix buffer overflow in FEC calculation

A flaw was found in the dm-verity component of the Linux kernel. A buffer overflow occurs during Forward Error Correction FEC calculation, allowing an attacker to write past the end of an allocated buffer. This out-of-bounds write can corrupt the syndrome buffer, potentially leading to system...

Exploit for Code Injection in Craftcms Craft_Cms

CVE-2025-32432 — Craft CMS getRequest-getBodyParam'handle'...

Security Bulletin: IBM MQ queue manager is vulnerable to privilege escalation (CVE-2026-11725)

Summary IBM MQ has addressed an integer overflow vulnerability in the queue manager's MQINQ request validation Vulnerability Details CVEID:CVE-2026-11725 DESCRIPTION: IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to an integer...

CVE-2026-90705 D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injection

A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Table. Executing a manipulation of the argument sysCmd can lead to os command injection. The attack can be executed remotely. The exploit has...

CVE-2026-90705

A OS command injection vulnerability was identified in D-Link DWR-M921 firmware version 1.1.52 . The flaw resides in the formsysCmd function of the file /boafrm/formsysCmd within the Boa Dispatch Table component. Manipulating the sysCmd argument allows a remote attacker with high privileges to in...

EUVD-2026-77356

A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Table. Executing a manipulation of the argument sysCmd can lead to os command injection. The attack can be executed remotely. The exploit has...

CVE-2026-90705 D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injection

A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Table. Executing a manipulation of the argument sysCmd can lead to os command injection. The attack can be executed remotely. The exploit has...

Security Bulletin: IBM MQ is vulnerable to remote code execution (CVE-2026-11381)

Summary IBM MQ has addressed a heap out-of-bounds memory corruption vulnerability in the queue manager's message descriptor conversion that could allow a remote authenticated attacker to execute arbitrary code. Vulnerability Details CVEID:CVE-2026-11381 DESCRIPTION: IBM MQ could allow an...

Security Bulletin: IBM MQ queue manager is vulnerable to remote code execution (CVE-2026-11378)

Summary IBM MQ has addressed an integer overflow vulnerability in the queue manager's object descriptor conversion that could allow a remote authenticated attacker to write zeros to arbitrary heap memory locations, leading to remote code execution. Vulnerability Details CVEID:CVE-2026-11378...

Security Bulletin: IBM MQ queue manager is vulnerable to information disclosure and denial of service (CVE-2026-11726)

Summary IBM MQ has addressed an out-of-bounds memory read and write vulnerability in the queue manager's message conversion handling that could allow a remote authenticated attacker to obtain sensitive information from heap memory or cause a denial of service Vulnerability Details...