354036 matches found
Security Bulletin: IBM MQ Java messaging is vulnerable to remote code execution (CVE-2026-11729)
Summary IBM MQ has addressed a Java deserialization vulnerability in the IBM MQ Java client's internal command manager Vulnerability Details CVEID:CVE-2026-11729 DESCRIPTION: IBM MQ Java client library could allow an authenticated attacker to execute arbitrary code in client applications due to...
Security Bulletin: IBM MQ Java messaging is vulnerable to remote code execution (CVE-2026-12728)
Summary IBM MQ has addressed a deserialization filter bypass vulnerability in the IBM MQ Java client's distributed messaging component that could allow a remote authenticated attacker to execute arbitrary code by delivering crafted serialized messages that bypass the configured deserialization...
EUVD-2026-77377
A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amfnnrftryoldamfdiscoveryfallback of the file src/amf/nnrf-handler.c of the component Old AMF Discovery Fallback. The manipulation of the argument discoveryoption results in use after free. The attack may be...
CVE-2026-90707 Open5GS Old AMF Discovery Fallback nnrf-handler.c amf_nnrf_try_old_amf_discovery_fallback use after free
A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amfnnrftryoldamfdiscoveryfallback of the file src/amf/nnrf-handler.c of the component Old AMF Discovery Fallback. The manipulation of the argument discoveryoption results in use after free. The attack may be...
CVE-2026-90707 Open5GS Old AMF Discovery Fallback nnrf-handler.c amf_nnrf_try_old_amf_discovery_fallback use after free
A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amfnnrftryoldamfdiscoveryfallback of the file src/amf/nnrf-handler.c of the component Old AMF Discovery Fallback. The manipulation of the argument discoveryoption results in use after free. The attack may be...
CVE-2026-90707
Open5GS up to 2.7.x is affected by a use after free vulnerability in the Old AMF Discovery Fallback component, specifically in the function amf_nnrf_try_old_amf_discovery_fallback (file src/amf/nnrf-handler.c). Manipulation of the discovery_option argument triggers the flaw. The attack is remote ...
CVE-2026-90707 Open5GS Old AMF Discovery Fallback nnrf-handler.c amf_nnrf_try_old_amf_discovery_fallback use after free
A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amfnnrftryoldamfdiscoveryfallback of the file src/amf/nnrf-handler.c of the component Old AMF Discovery Fallback. The manipulation of the argument discoveryoption results in use after free. The attack may be...
Security Bulletin: IBM MQ .NET client is vulnerable to remote code execution (CVE-2026-11728)
Summary IBM MQ has addressed a heap buffer overflow vulnerability in the IBM MQ .NET client's asynchronous message receive handler Vulnerability Details CVEID:CVE-2026-11728 DESCRIPTION: IBM MQ .NET Client could allow a remote attacker to cause a denial of service or potentially execute arbitrary...
Security update for acl, attr
This update for acl, attr fixes the following issue: CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl bsc1268867. Changes for acl: Update to 2.4.0 jscPED-16501: Major Issues Fixed: The libacl library function...
SUSE-SU-2026:4176-1 Security update for acl, attr
This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via getfattr/setfattr, getfacl/setfacl/chacl, libacl bsc1268867. Changes for acl: - Update to 2.4.0 jscPED-16501: Major Issues Fixed: - The libacl library...
kernel: drm/xe: Open-code GGTT MMIO access protection
A flaw was found in the drm/xe component of the Linux kernel. This vulnerability involves insufficient protection of Graphics Translation Table GGTT Memory-Mapped I/O MMIO access. When the driver fails to load or during certain cleanup operations, the system's memory access protection is...
kernel: drm/i915: Fix potential overflow of shmem scatterlist length
A flaw was found in the Linux kernel's graphics memory management drm/i915 component. This vulnerability occurs when a large shared memory object's internal list of memory segments, called a scatterlist, is populated. If the total size of these segments exceeds 4 Gigabytes GB, a numerical overflo...
kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns
A flaw was found in the Linux kernel's rtnetlink component. An unprivileged local user, leveraging a user namespace, can exploit a missing CAPNETADMIN capability check in the rtnlnewlink function. This allows the user to create paired network devices in arbitrary network namespaces, including the...
kernel: mm/khugepaged: write all dirty file folios when collapsing
A flaw was found in the Linux kernel's memory management mm/khugepaged component. A local user could trigger an edge case where unsaved changes to file data dirty folios are improperly discarded. This occurs when a file with previous writes is subjected to a specific sequence of memory advice...
kernel: wifi: cfg80211: validate PMSR FTM preamble range
A flaw was found in the cfg80211 component of the Linux kernel's Wi-Fi subsystem. This vulnerability allows the PMSR FTM request parser to accept preamble values outside the defined nl80211 range. An attacker could exploit this by providing malformed input, potentially leading to unexpected syste...
kernel: Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend
A flaw was found in the Bluetooth subsystem of the Linux kernel, specifically within the hcisync component. This vulnerability occurs when the hciadvbcastannoucement function attempts to prepend Broadcast Announcement service data to an existing advertising payload that is already at its maximum...
kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32
A flaw was found in the Linux kernel's Fibre Channel FC transport component. An adjacent Fibre Channel fabric actor, such as a compromised switch or fabric controller, can send a specially crafted FPIN ELS Fabric Performance Incentive Notification Extended Link Service frame. This malformed frame...
kernel: dm-verity: fix buffer overflow in FEC calculation
A flaw was found in the dm-verity component of the Linux kernel. A buffer overflow occurs during Forward Error Correction FEC calculation, allowing an attacker to write past the end of an allocated buffer. This out-of-bounds write can corrupt the syndrome buffer, potentially leading to system...
kernel: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp
A flaw was found in the Bluetooth L2CAP Logical Link Control and Adaptation Protocol component of the Linux kernel. When a device receives a connection response with an already-assigned destination Channel Identifier CID, the system may crash. This occurs because the kernel's procedure for...
