ROS-20260821-73-0069

The vulnerability of the cgroup kernel component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

ROS-20260821-73-0016

The vulnerability of the rununpack function in the ntfs3 component of the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain access to protected information...

Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL

Summary Multiple vulnerabilities were addressed in IBM Operator for PostgreSQL version v28.4.3. Vulnerability Details CVEID:CVE-2026-71557 DESCRIPTION: go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized befor...

USN-8665-1: Linux kernel (Raspberry Pi) vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...

USN-8665-1 linux-raspi, linux-raspi-realtime vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...

CVE-2026-74438

A flaw was found in the Linux kernel's sun4i-ss cryptographic random number generator RNG. This component contains multiple vulnerabilities, including a buffer overflow in the sun4issprngseed function that could lead to a denial of service. Furthermore, the sun4issprnggenerate function may not...

CVE-2026-74436

A flaw was found in the Linux kernel. A synchronization issue in the rxrpc component, specifically between rxrpckernelchargeaccept and rxrpcdiscardprealloc, can lead to a use-after-free vulnerability. A local attacker could potentially exploit this flaw, causing a kernel preallocation worker to...

CVE-2026-74432

A flaw was found in the rxrpc component of the Linux kernel. When the recvmsg function is called with the MSGPEEK flag, it fails to properly release a reference to an already-released call. This oversight can lead to a memory leak, potentially allowing a local attacker to cause a Denial of Servic...

CVE-2026-74430

A flaw was found in the Linux kernel's rxrpc component. A remote attacker could send a specially crafted ACKALL packet that bypasses state validation. This improper handling of forged packets can lead to a null-pointer dereference, causing a Denial of Service DoS by crashing the system...

CVE-2026-74950

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Downloads API component...

CVE-2026-74985

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Enterprise Policies component...

CVE-2026-74978

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue in the Widget component...

CVE-2026-74977

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Graphics component...

CVE-2026-74429

A flaw was found in the Linux kernel's rxrpc component. This vulnerability occurs when the system receives a reply data packet before any request data packets have been sent on a client call. An attacker could potentially exploit this by sending a specially crafted reply packet, leading to a kern...

CVE-2026-74938

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the JavaScript: GC component...

CVE-2026-74937

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...

CVE-2026-74986

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the CSS Parsing and Computation component...

CVE-2026-74423

A flaw was found in the Linux kernel's accel/amdxdna component. This vulnerability occurs when the pinuserpagesfast function, responsible for pinning user buffer ubuf pages, returns fewer pages than requested. In such cases, the pages that were successfully pinned are not properly released, leadi...

CVE-2026-74984

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Race condition in the JavaScript Engine component...

CVE-2026-74424

A flaw was found in the Linux kernel. The fbcon component, responsible for framebuffer console operations, can encounter a NULL pointer dereference. This occurs when fbconnewmodelist attempts to access console data vcdata that has been freed, leading to a system crash. A local attacker could...