SUSE-SU-2026:4192-1 Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes one security issue: The following security issue was fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458...

CVE-2026-90831

A flaw was found in GNU Binutils. This vulnerability allows a local attacker to cause memory corruption by manipulating the ELF String Table component, specifically through the bfdelfstrtabdelref function. This could lead to unexpected behavior or system instability...

SUSE CVE-2026-80960

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate on-media segnum against the cache device size segnum is read from the crc32c-only superblock, so whoever supplies the cache device on a table load CAPSYSADMIN controls it. It sizes cache-segments and is the...

EUVD-2026-78216

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfdelfstrtabdelref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used...

PT-2026-92866

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Oracle Identity Manager Connector version 12.2.1.4.0 Oracle Fusion Middleware Oracle Identity Manager Connector version 14.1.2.1.0 Description An issue exists in the Database Application Table component of the Oracle...

PT-2026-92683

Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this...

PT-2026-92402

Concrete CMS 9 before 9.5.3 did not escape SQL LIKE wildcard characters in the keyword search filters used by the file manager, file folders, and page list, allowing an authenticated user with editor-level or higher privileges to submit a crafted search containing many single-character wildcards...

CVE-2026-83344: Improper Privilege Management

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Database Application Table. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

Linux Distros Unpatched Vulnerability : CVE-2026-90831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfdelfstrtabdelref of the file bfd/elf-strtab.c of the component ELF...

DEBIAN-CVE-2026-90831

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfdelfstrtabdelref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used...

AZL-108063 CVE-2026-90831 affecting package crash 9.0.0-3

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfdelfstrtabdelref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used...

CVE-2026-90831

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfdelfstrtabdelref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used...

UBUNTU-CVE-2026-90831

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfdelfstrtabdelref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used...

CVE-2026-90831

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfdelfstrtabdelref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used...

CVE-2026-90831 GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfdelfstrtabdelref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used...

CVE-2026-90831

A memory corruption vulnerability was identified in GNU Binutils 2.47 , specifically in the function _bfd_elf_strtab_delref within the file bfd/elf-strtab.c of the ELF String Table component. The flaw is triggered through local manipulation and can lead to partial compromise of confidentiality, i...

CVE-2026-90831 GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfdelfstrtabdelref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the bfdelfstrtabdelref function. An attacker can cause memory corruption and potentially lead to system instability or unexpected behavior by manipulating the ELF String Table component. Remediation There is no...

CVE-2026-91198

GrowthBook through version 5.0.1 is affected by an information disclosure vulnerability in its unauthenticated public report and experiment endpoints. The root cause is that fact table definitions , including raw warehouse SQL , are returned unredacted in the response payloads. An attacker who kn...

CVE-2026-54628

Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes URL-capable SQLite virtual table modules such as jsonreader and logreader through its unauthenticated MySQL-compatible server port without restricting outbound destinations. A remote attacker can provi...