PT-2026-121988

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth SCO implementation where the lifetime of sco conn is not properly serialized against sco recv scodata. The function sco recv scodata attempts to upgrade ...

PT-2026-121978

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel's DRM XE I2C implementation where the xe i2c remove function fails to drain i2c-work during the removal process. This can lead to a use-after-free...

PT-2026-122021

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the dynamic port cleanup process. The function ice dealloc dynamic port attempts to use the dyn port-vsi-idx variable to remove a dynamic port from pf-dy...

PT-2026-122030

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.3-rc5 Description A slab-use-after-free issue exists in the TIPC module. The function tipc node find by name returns a node after releasing its RCU read lock without acquiring a reference. This creates a race...

PT-2026-122009

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the smc getname function where it dereferences smc-clcsock without holding the clcsock release lock. This occurs because link-group termination can release the CLC...

PT-2026-122004

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the network teaming driver. A nonzero result from the dev queue xmit function does not return ownership of the socket buffer skb. Consequently, when...

SUSE SLED15: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:4834-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4834-1 advisory. Firefox Extended Support Release 153.5.0 ESR MFSA 2026-108, bsc1284493: - CVE-2026-109704: Privilege escalatio...

PT-2026-135252

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=576341612 Crash type: Use-of-uninitialized-value Crash state: processHandshakeTLSBlock ndpi search tls tcp internal ndpi detection process packet...

UBUNTU-CVE-2026-110753

Text::CSVXS versions from 1.46 before 1.65 for Perl have a use-after-...

openssl security update

1:1.1.1k-18 - Fix CVE-2026-63072: heap buffer overflow in CMS key unwrapping Resolves: RHEL-246295 - Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-264420 1:1.1.1k-17 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CM...

PT-2026-122155

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::poll tick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The ra...

PT-2026-122027

In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: fix race when arming the IRQ poll worker gpio mpsse irq enable arms the poll worker before publishing it: schedule work runs before the worker is added to priv-workers. If gpio mpsse disconnect walks the list in that...

PT-2026-122419

Summary On the multi-threaded runtime, there is a race condition between Interval::poll tick and the runtime's time driver. This affects Interval only. Sleep and Timeout are not affected. Details In Tokio v1.54.0, a race condition between tokio::time::Interval::poll tick including .tick.await and...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.6. It stems from a race condition wherein strprecv is not guaranteed to stop running prior to strpdone removing the parser. This may lead to use-after-free issues...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.16. It stems from the ice driver’s use of metadatadstfree to release metadatadst when removing a representer; no checks are performed on the dstentry reference count. This may lead to use-after-free conditions if packets remain queued on...

ROS-20261023-73-0002

The vulnerability of TLS and SSL OpenSSL tools is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.17. It stems from xei2cremove failing to cancel the i2c-work work item; after adapter deregistration, it still accesses the freed adapter and invokes callbacks, potentially leading to use-after-free conditions...

Linux kernel security vulnerabilities

A security vulnerability exists in the Linux kernel. It stems from the isinv2mode function in cgroup/cpuset, which may use an expired pointer when accessing cpusetcgrpsubsys.root, potentially leading to use-after-free conditions...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 6.6.28 up to and including 6.6.160, as well as in version 6.8.7 through 6.9. This vulnerability stems from improper handling of the lifecycle of command SKBs during Bluetooth HCI synchronization. In hcilesetextscanparamsync, the addres...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions 5.15.222 through 5.16. It arises because ksmbdsessionsderegister fails to remove stale channels from all sessions when a connection is dropped, resulting in post-release reuse of freed ksmbdconn objects and subsequent session leaks...