AlmaLinux 9.2 [TuxCare] Security Update: opensc (ALMALINUX9.2:CLSA-2025:1765902200)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765902200 advisory. - A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart...

Rocky Linux 10.2 [CIQ] Security Update: golang-github-openprinting-ipp-usb-debugsource / ipp-usb / etc (crlsa-2026_27740)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202627740 advisory. crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation CVE-2026-32281 Tenable has extracted the preceding descripti...

Rocky Linux 10.2 [CIQ] Security Update: golang-github-openprinting-ipp-usb-debugsource / ipp-usb / etc Multiple Vulnerabilities (crlsa-2026_62631)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202662631 advisory. mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header CVE-2026-42504 encoding/asn1: golang: Go encoding/asn1: Denial of...

Rocky Linux 10.1 [CIQ] Security Update: golang-github-openprinting-ipp-usb-debugsource / ipp-usb / etc Multiple Vulnerabilities (crlsa-2026_3092)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20263092 advisory. golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61726 crypto/tls: Unexpected session resumption in crypto/tls...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2025_3893)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20253893 advisory. kernel: xen: Xen hypercall page unsafe against speculative attacks Xen Security Advisory 466 CVE-2024-53241 kernel: ALSA: usb-audio: Fix out of bounds read...

Rocky Linux 10.2 [CIQ] Security Update: golang-github-openprinting-ipp-usb-debugsource / ipp-usb / etc Multiple Vulnerabilities (crlsa-2026_19144)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619144 advisory. crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVE-2026-33810 golang:...

Rocky Linux 8 [CIQ] Security Update: libiscsi / libiscsi-debuginfo / libiscsi-debugsource / etc Multiple Vulnerabilities (crlsa-2020_4059)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204059 advisory. QEMU: usb: out-of-bounds r/w access issue while processing usb packets CVE-2020-14364 QEMU: slirp: networking out-of-bounds read information disclosure...

Rocky Linux 10.0 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2025_17776)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202517776 advisory. kernel: HID: core: Harden s32ton against conversion to 0 bits CVE-2025-38556 kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling...

Rocky Linux 10.0 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2025_16354)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202516354 advisory. kernel: usb: dwc3: gadget: check that event count does not exceed event buffer length CVE-2025-37810 kernel: sunrpc: fix handling of server side tls...

Rocky Linux 10.1 [CIQ] Security Update: golang-github-openprinting-ipp-usb-debugsource / ipp-usb / etc (crlsa-2026_1715)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20261715 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 Tenable has extracted the preceding descripti...

Rocky Linux 10.1 [CIQ] Security Update: golang-github-openprinting-ipp-usb-debugsource / ipp-usb / etc (crlsa-2026_7992)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20267992 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9.6 [TuxCare] Security Update: opensc (ALMALINUX9.6:CLSA-2026:1781267272)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1781267272 advisory. - OpenSC before 0.27.0-rc1, fixed in commit 3f24f0b, contains a stack buffer overflow vulnerability in pivprocesshistory in...

AlmaLinux 9.2 [TuxCare] Security Update: opensc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1766598218)

The AlmaLinux 9.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1766598218 advisory. - A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. The problem is missing initialization of...

Wireshark USB HID Traffic Analyzer DoS

The vulnerability of the parsereportdescriptor function in the Wireshark USB HID traffic analyzer relates to improper management of sequential memory allocation. Exploiting this vulnerability can allow attackers to cause service failures...

AlmaLinux 9.2 [TuxCare] Security Update: opensc (ALMALINUX9.2:CLSA-2025:1765382050)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765382050 advisory. - A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the syste...

SUSE CVE-2026-96421

USB HID protocol dissector infinite loop and memory leak in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-97977

A flaw was found in the Linux kernel's Bluetooth USB driver. A race condition during device closure or disconnection allows background receive tasks to continue running after the associated device data has been released, leading to a use-after-free UAF condition. A local attacker could exploit th...

ROS-20260930-73-0003

The vulnerability of the asyncsetregisters function in the drivers/net/usb/rtl8150.c file of the Linux kernel’s USB network adapter driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260930-73-0066

The vulnerability in the can/usb/emsusb.c component of the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260930-73-0034

The vulnerability of the updateeth regs async function in the drivers/net/usb/pegasus.c file of the Linux network adapter driver module is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...