ROS-20260925-73-0149

The vulnerability of the drmclienttargetcloned function in the drivers/gpu/drm/drmclientmodeset.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system...

ROS-20260925-73-0004

The vulnerability of the slimproi2cblkwr function in the Linux kernel’s drivers/i2c/busses/i2c-xgene-slimpro.c file is related to the lack of control over the valid range of the value that can be passed to the “data-block0” variable. This value ranges from 0 to 255; without proper validation, thi...

ROS-20260925-73-0015

The vulnerability of the txBegin function in the JFS file system module fs/jfs/jfstxnmgr.c of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

openSUSE 16 Security Update : gnome-remote-desktop (openSUSE-SU-2026:21888-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21888-1 advisory. This update for gnome-remote-desktop fixes the following issue: - CVE-2026-18358: system-mode RDP server missing connection throttling can allow...

PT-2026-98477

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Issues exist in the qla2xxx SCSI driver within the qla25xx free req que and qla25xx free rsp que functions, which are triggered during the error path of qla25xx create req que and qla25x...

ROS-20260925-73-0147

The vulnerability of the snddg00xstreaminitduplex function in the sound/firewire/digi00x/digi00x-stream.c module of the Linux kernel’s sound subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-79153: Improper Privilege Management

Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems...

PT-2026-98463

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mptcp scheduler during subflow sockets state changes. This occurs when data transmission on a selected socket fails, potentially leading to a subsequent...

PT-2026-98468

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scsi qla2xxx driver where the qla nvme xmt ls rsp function fails to remove uctx from the fcport-unsol ctx head list before freeing it with kfree during an LS rejec...

PT-2026-98615

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iSCSI target of the SCSI subsystem where a LUN RESET a command used to reset a Logical Unit that aborts a WRITE command in the TRANSPORT WRITE PENDING state can...

PT-2026-98493

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xfs healthmon unmount function performs an unlocked insertion of the unmount event into the health monitor's event list. This lack of...

PT-2026-98526

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory management issue exists in the Linux kernel where the afs dir search bucket function fails to perform a kunmap operation—which unmaps a virtual address from a kernel mapping—whe...

PT-2026-98533

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the iova to phys function when using a 5-level translation table via ZPCI TABLE TYPE RFX. This happens because the get rto from iova function fails t...

PT-2026-98510

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write issue exists in the bnxt en driver. The bnxt alloc agg idx function is designed to map firmware TPA IDs to software IDs used to index the rxr-rx tpa array. When th...

PT-2026-98527

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RISC-V architecture implementation of the perf subsystem where the available-counter mask is stored as a single unsigned long. Because the iteration process uses...

Perl Heap Buffer Overflow DoS

The vulnerability of the Perl programming language is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

SUSE CVE-2026-93243

In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account locked pages secretmem accounts folios by treating memory as if it were mlock'd and thus limited by the RLIMITMEMLOCK limit. However the folios are unevictable and remain so until the inode is...

CVE-2026-85082 Maple Media Root Browser Classic 3.3.0 - OS command injection through crafted SQLite filenames

Root Browser Classic 3.3.0 passes the path of a selected SQLite database to an operating-system shell without safely separating the filename from the command...

SUSE CVE-2026-93814

In the Linux kernel, the following vulnerability has been resolved: spi: core: Abort active target transfer on controller suspend When an SPI controller operating in target mode has a transfer in progress at the time of system suspend, the suspend path proceeds without aborting the ongoing...

SUSE CVE-2026-93818

In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Protect root bus removal with rescan lock Hold the pcirescanremovelock lock while stopping and removing a root bus to avoid racing with concurrent rescan or hotplug operations triggered via sysfs. Such races may lead t...