Zephyr resource management error vulnerability

Versions Zephyr 4.3.0 through 4.5.0 contain a resource management error vulnerability. This vulnerability arises because the datareadyworkhandler function, driven by the Broadcom AFBR-S50 flight time sensor, fails to return a value when ArgusEvaluateData returns a non-STATUSOK result. As a result...

Updated x11-server, x11-server-xwayland, tigervnc packages fixes security vulnerabilities and a regression that crashes the X server with AMD GPUs

XKB SetGeometry TextDoodad Double Free. CVE-2026-88812 Present Extension Cross-Window Notify Use-After-Free. CVE-2026-93515 XInput Passive Grab modifierDevice Use-After-Free. CVE-2026-93516 GLX RenderLarge Heap Buffer Overflow. CVE-2026-93517 XKB ResizeKeyType Numeric Truncation. CVE-2026-93518...

MGASA-2026-0529 Updated x11-server, x11-server-xwayland, tigervnc packages fixes security vulnerabilities and a regression that crashes the X server with AMD GPUs

XKB SetGeometry TextDoodad Double Free. CVE-2026-88812 Present Extension Cross-Window Notify Use-After-Free. CVE-2026-93515 XInput Passive Grab modifierDevice Use-After-Free. CVE-2026-93516 GLX RenderLarge Heap Buffer Overflow. CVE-2026-93517 XKB ResizeKeyType Numeric Truncation. CVE-2026-93518...

EUVD-2026-105144

A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask for that memory back by address with txmmoduleobjectdeallocate. The manager released it whatever was in it, including a control block the kernel was still using. Deallocation is...

CVE-2026-94192

The ThreadX kernel contains a vulnerability where a module can use txm_module_object_deallocate to return memory back to the Module Manager's object pool while the kernel is still using the associated control block. Because deallocation does not perform deletion, objects remain on active lists (s...

CVE-2026-94192

A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask for that memory back by address with "txmmoduleobjectdeallocate". The manager released it whatever was in it, including a control block the kernel was still using. Deallocation i...

CVE-2026-94192 Module object deallocation can free a live ThreadX kernel object

A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask for that memory back by address with txmmoduleobjectdeallocate. The manager released it whatever was in it, including a control block the kernel was still using. Deallocation is...

CVE-2026-94192 Module object deallocation can free a live ThreadX kernel object

A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask for that memory back by address with txmmoduleobjectdeallocate. The manager released it whatever was in it, including a control block the kernel was still using. Deallocation is...

USN-8708-2 rust-sudo-rs vulnerability

USN-8708-1 fixed a vulnerability in sudo-rs. This update provides the corresponding fix for Ubuntu 26.10. Original advisory details: It was discovered that sudo-rs incorrectly handled time-of-check vs time- of-use conditions in sudoedit. A local attacker with permission to edit specific files usi...

USN-8708-2: sudo-rs vulnerability

USN-8708-1 fixed a vulnerability in sudo-rs. This update provides the corresponding fix for Ubuntu 26.10. Original advisory details: It was discovered that sudo-rs incorrectly handled time-of-check vs time- of-use conditions in sudoedit. A local attacker with permission to edit specific files usi...

CVE-2026-101356

Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can trigger request and/or response mix-up between users. This issue affects Apache Tomcat: from 11.0.22 through 11.0.26, from 10.1.55 through 10.1.60, from 9.0.118 through...

UBUNTU-CVE-2026-101356

Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can trigger request and/or response mix-up between users. This issue affects Apache Tomcat: from 11.0.22 through 11.0.26, from 10.1.55 through 10.1.60, from 9.0.118 through...

Security update for openssl-1_0_0

This update for openssl-100 fixes the following issues: CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch bsc1274795. Changes for openssl-100: Security fixes in August 2026 release bsc1274774 Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:4762-1 Security update for openssl-1_0_0

This update for openssl-100 fixes the following issues: - CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch bsc1274795. Changes for openssl-100: - Security fixes in August 2026 release bsc1274774...

CVE-2026-101356

Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can trigger request and/or response mix-up between users. This issue affects Apache Tomcat: from 11.0.22 through 11.0.26, from 10.1.55 through 10.1.60, from 9.0.118 through...

CVE-2026-93039

A flaw was found in the Linux kernel's ASoC Audio System on Chip meson driver. This vulnerability occurs in the mesoncardreallocatelinks function when memory reallocation krealloc fails after successfully moving data for the DAI link array. This can result in a use-after-free and double free...

CVE-2026-93163

A flaw was found in the hwrng core component of the Linux kernel. When the hwrngregister function fails during the registration process, it does not properly remove the hardware random number generator RNG from the global list. This oversight creates a dangling reference, which can lead to a...

CVE-2026-93162

A flaw was found in the Linux kernel's QAT QuickAssist Technology driver. When re-enabling SR-IOV Single Root I/O Virtualization, the QAT reset worker queues a work item using data allocated on the stack. If a timeout occurs during this process, the reset worker can return while the work item,...

CVE-2026-93137

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. A use-after-free vulnerability exists in the bpffindvma function. This occurs when bpffindvma attempts to access memory management structures mmstruct of a different process. A race condition can arise where the target...

CVE-2026-93134

A flaw was found in the Linux kernel. When the printk function handles legacy console printing, a specific scenario involving context handover can lead to a use-after-free vulnerability. This occurs because the system fails to verify if a memory area has been freed after a handover, potentially...