Linux Distros Unpatched Vulnerability : CVE-2026-98938

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rust: irq: pass RegistrationInner as cookie to requestirq With commit ba268514ea14 rust: devres: fix race condition due to nesting, Devres::new returns Result b...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146271)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146271 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: bound getversion reply decode to front len handlegetversionreply uses msg-frontalloclen ...

Updated libjxl package fixes security vulnerabilities

Uninitialized memory read in decoder due to incorrect optimization in patch handling. CVE-2025-12474 Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc. CVE-2025-70103 Out-of-bounds write in grayscal...

UBUNTU-CVE-2026-98938

In the Linux kernel, the following vulnerability has been resolved: rust: irq: pass RegistrationInner as cookie to requestirq With commit ba268514ea14 "rust: devres: fix race condition due to nesting", Devres::new returns Result by value instead of initializing in-place via PinInit. Because...

CVE-2026-98938

In the Linux kernel, the following vulnerability has been resolved: rust: irq: pass RegistrationInner as cookie to requestirq With commit ba268514ea14 "rust: devres: fix race condition due to nesting", Devres::new returns Result by value instead of initializing in-place via PinInit. Because...

CVE-2026-98938

The Linux kernel contains a vulnerability within the Rust implementation of IRQ handling. Specifically, because Devres::new() returns a Result by value (introduced in commit ba268514ea14), the registration.inner field remains uninitialized when request_irq() is called. This allows the IRQ callbac...

CVE-2026-98938 rust: irq: pass RegistrationInner as cookie to request_irq

In the Linux kernel, the following vulnerability has been resolved: rust: irq: pass RegistrationInner as cookie to requestirq With commit ba268514ea14 "rust: devres: fix race condition due to nesting", Devres::new returns Result by value instead of initializing in-place via PinInit. Because...

CLSA-2026-1792548288 ImageMagick: Fix of 3 CVEs

CVE-2026-109259: fix uninitialized memory read in the TGA decoder - CVE-2026-106578: fix invalid memory free in the MVG decoder on undersized primitive extent...

CLSA-2026-1792611726 Fix CVE(s): CVE-2026-109259

SECURITY UPDATE: uninitialized memory read in the TGA decoder, exposing process memory contents - debian/patches/CVE-2026-109259.patch: zero-initialize tgainfo in ReadTGAImage in coders/tga.c - CVE-2026-109259...

CLSA-2026-1792547230 ImageMagick: Fix of 3 CVEs

CVE-2026-109259: fix uninitialized memory read in the TGA decoder - CVE-2026-106578: fix invalid memory free in the MVG decoder on undersized primitive extent...

CLSA-2026-1792547456 ImageMagick: Fix of 3 CVEs

CVE-2026-109259: fix uninitialized memory read in the TGA decoder - CVE-2026-106578: fix invalid memory free in the MVG decoder on undersized primitive extent...

Linux Distros Unpatched Vulnerability : CVE-2026-109259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers c...

DEBIAN-CVE-2026-98482

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: drop truncated I/RR/RNR PDUs in nfcllcprecvhdlc nfcllcprecvhdlc reads the sequence byte skb-data2, via nfcllcpns/nfcllcpnr, before any length check. The receive path only guarantees the two-byte LLCP header --...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: libceph: The decoding of the “bound getversion reply” was incorrect. The handlegetversionreply function uses msg-frontalloclen as the boundary for decoding MONGETVERSIONREPLY. This represents the size of the reused reply buffer,...

SUSE CVE-2026-109259

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers can supply a crafted TGA image for processing to disclose contents of uninitialized memory from the ImageMagick process...

CVE-2026-109854

A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory from the stack. If the application exposes or returns the decoded output, this flaw can result in unexpected behavior and...

CVE-2026-109854

A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory from the stack. If the application exposes or returns the decoded output, this flaw can result in unexpected behavior and...

PT-2026-111376

Name of the Vulnerable Software and Affected Versions m17n-lib affected versions not specified Description A flaw exists where an attacker providing crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory from the stack. If the applicati...

CVE-2026-109259

A flaw was found in ImageMagick. An uninitialized memory read in the Truevision TGA TGA image decoder allows an attacker to cause information disclosure. By supplying a specially crafted TGA image for processing, an attacker can access uninitialized memory contents from the ImageMagick process...

CVE-2026-109259

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers can supply a crafted TGA image for processing to disclose contents of uninitialized memory from the ImageMagick process...