Linux Kernel Security Vulnerabilities

The Linux kernel version 6.12 contains security vulnerabilities. These vulnerabilities stem from the netfsreadgaps function, which does not clear the read gaps surrounding the streaming write to the dirty area. As a result, short reads on the server side or EOF responses may retain outdatedfolio...

kernel: Fix of 69 CVEs

sctp: fix errchunk memory leaks in INIT handling CVE-2026-72413 - ACPICA: Fix use-after-free in acpidsterminatecontrolmethod CVE-2026-97455 - ACPICA: Enhance buffer validation in acpiutwalkamlresources CVE-2026-97445 - Bluetooth: L2CAP: validate connectionless PSM length CVE-2026-97408 - wifi:...

CLSA-2026-1791949745 kernel: Fix of 69 CVEs

sctp: fix errchunk memory leaks in INIT handling CVE-2026-72413 - ACPICA: Fix use-after-free in acpidsterminatecontrolmethod CVE-2026-97455 - ACPICA: Enhance buffer validation in acpiutwalkamlresources CVE-2026-97445 - Bluetooth: L2CAP: validate connectionless PSM length CVE-2026-97408 - wifi:...

CLSA-2026-1792066324 openssl: Fix of CVE-2026-84782

CVE-2026-84782: reset initoff before a DTLS retransmission and skip retransmitting while a handshake write is still suspended...

openssl: Fix of CVE-2026-84782

CVE-2026-84782: reset initoff before a DTLS retransmission and skip retransmitting while a handshake write is still suspended...

CLSA-2026-1792165466 tigervnc: Fix of CVE-2026-50264

CVE-2026-50264: fix out-of-bounds heap write in DRI2 DRIGetBuffers; carried by xorg-x11-server-source = 1.20.4-99.el79.tuxcare.els14, no local patch...

portswigger-labs-writeups

PortSwigger Labs — Write-ups & Solutions Personal write-up re...

MGASA-2026-0514 Updated libreoffice package fixes security vulnerabilities

Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality. CVE-2026-63266 LFI and GET SSRF via calcext:data-mappings and csv provider. CVE-2026-63267 LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href. CVE-2026-63268 LFI and GET SSRF via...

Updated libreoffice package fixes security vulnerabilities

Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality. CVE-2026-63266 LFI and GET SSRF via calcext:data-mappings and csv provider. CVE-2026-63267 LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href. CVE-2026-63268 LFI and GET SSRF via...

Updated mutt package fixes a security vulnerability

When an email is processed as a template, an out-of-bounds write vulnerability in the convertfilefromto function can be triggered by a specially crafted Content-Type header CVE-2026-107570...

MGASA-2026-0517 Updated mutt package fixes a security vulnerability

When an email is processed as a template, an out-of-bounds write vulnerability in the convertfilefromto function can be triggered by a specially crafted Content-Type header CVE-2026-107570...

CLSA-2026-1790583885 xorg-x11-server: Fix of 5 CVEs

CVE-2026-50262: fix reversed request length check in GLX ChangeDrawableAttributes leading to out-of-bounds read/write - CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver CreateSaverWindow after CheckScreenPrivate - CVE-2026-55999: fix heap buffer overflow in glamorfontget on...

CLSA-2026-1790584501 xorg-x11-server: Fix of 6 CVEs

CVE-2026-50262: fix reversed request length check in GLX ChangeDrawableAttributes leading to out-of-bounds read/write - CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver CreateSaverWindow after CheckScreenPrivate - CVE-2026-55999: fix heap buffer overflow in glamorfontget on...

CLSA-2026-1790585169 xorg-x11-server: Fix of 6 CVEs

CVE-2026-50262: fix reversed request length check in GLX ChangeDrawableAttributes leading to out-of-bounds read/write - CVE-2026-50263: fix use-after-free of the screen private in ScreenSaver CreateSaverWindow after CheckScreenPrivate - CVE-2026-55999: fix heap buffer overflow in glamorfontget on...

Linux Distros Unpatched Vulnerability : CVE-2026-111880

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset...

Linux Distros Unpatched Vulnerability : CVE-2026-109827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gfm2tsdecodeait of the file src/mediatools/ait.c of the component...

Linux Distros Unpatched Vulnerability : CVE-2026-104004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server proce...

PT-2026-116452

FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATE MESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyo...

PT-2026-116453

FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE MAX - 3 to Stream Zero for sub-byte images. A malicious RDP clipboard peer can return a crafted 1-bpp BMP processed by clipboard synthesize image format to bm...

CVE-2026-111880: Out-of-bounds Write

FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers can send a crafted AUTHENTICATEMESSAGE with a backward session-key offset and MIC offset to write 16 zero bytes beyon...