Linux Kernel Security Vulnerabilities

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper handling of VLAN encapsulation, potentially leading to uninitialized value errors...

[SECURITY] [DLA 4449-1] zvbi security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4449-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz January 24, 2026 https://wiki.debian.org/LTS -...

OSV-2026-122 Use-of-uninitialized-value in rtcm2_unpack

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=477971098 Crash type: Use-of-uninitialized-value Crash state: rtcm2unpack rtcm104v2analyze gpsdpoll...

OSV-2026-121 Use-of-uninitialized-value in trySubset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=477657796 Crash type: Use-of-uninitialized-value Crash state: trySubset hb-subset-fuzzer.cc...

Debian dla-4449 : libzvbi-common - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4449 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4449-1 [email protected]...

OSV-2026-112 Use-of-uninitialized-value in PrintSERPacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=477681214 Crash type: Use-of-uninitialized-value Crash state: PrintSERPacket garminserparse gpsdpoll...

The vulnerability of the `ocfs2_find_victim_chain()` function in the `fs/ocfs2/suballoc.c` component of the OCFS2 file system support in Linux’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the ocfs2findvictimchain function in the fs/ocfs2/suballoc.c component of the OCFS2 file system support in Linux’s kernel involves the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel Security Vulnerabilities

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the uninitialized RSS LUT, potentially leading to null pointer dereferencing...

OPENSUSE-SU-2026:20084-1 Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues: - CVE-2025-7345: heap buffer overflow in gdk-pixbuf within the gdkpixbufjpegimageloadincrement function io-jpeg.c and in glib gbase64encodestep bsc1246114. - CVE-2025-6199: uninitialized memory could lead to leak arbitrary memory contents...

SUSE-SU-2026:20156-1 Security update for gdk-pixbuf

This update for gdk-pixbuf fixes the following issues: - CVE-2025-7345: heap buffer overflow in gdk-pixbuf within the gdkpixbufjpegimageloadincrement function io-jpeg.c and in glib gbase64encodestep bsc1246114. - CVE-2025-6199: uninitialized memory could lead to leak arbitrary memory contents...

OSV-2026-105 Use-of-uninitialized-value in pcpp::SSLServerHelloMessage::ServerHelloTLSFingerprint::toString

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=476187680 Crash type: Use-of-uninitialized-value Crash state: pcpp::SSLServerHelloMessage::ServerHelloTLSFingerprint::toString pcpp::SSLServerHelloMessage::ServerHelloTLSFingerprint::toStringAndMD5...

Rekor code issue vulnerabilities

Rekor is an open-source software developed by sigstore. It provides an immutable, tamper-proof ledger for metadata generated within the software project supply chain. Versions of Rekor prior to 1.4.3 have code vulnerabilities. These vulnerabilities stem from the lack of initialization of sign1Msg...

VB-Audio Voicemeeter and VB-Audio Matrix buffer error vulnerabilities

VB-Audio Voicemeeter and VB-Audio Matrix are both products of the French company VB-Audio. VB-Audio Voicemeeter is a virtual audio mixer software. VB-Audio Matrix is a real-time audio routing software. Both VB-Audio Voicemeeter and VB-Audio Matrix have buffer error vulnerabilities. This...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21707)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21707 advisory. - In the Linux kernel, the following vulnerability has been resolved: mptcp: consolidate suboption status MPTC...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37805)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37805 advisory. - In the Linux kernel, the following vulnerability has been resolved: sound/virtio: Fix cancelsync warnings on...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21716)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21716 advisory. - In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix uninit-value in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-37961)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37961 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipvs: fix uninit-value for saddr in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38229)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38229 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: cxusb: no longer judge rbuf when...

wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

...

ROS-20260121-73-0013

A vulnerability in the function fmidibind component of the function/fmidi.c component of the Linux kernel is related to access to an uninitialized pointer. Exploitation of the vulnerability could allow an attacker to cause a denial of service...