CVE-2026-99080 baja kernel: fs: Free any excess xarray nodes in clear_inode() 27 oct 2026 build de las 07:13 UTC 23 oct 2026
CVE-2026-99075 baja kernel: kernel: Denial of Service via memory leak in Rust Binder 27 oct 2026 build de las 07:13 UTC 23 oct 2026
CVE-2026-99070 baja kernel: ipv6: do not warn on route notification size race 27 oct 2026 build de las 07:13 UTC 23 oct 2026
CVE-2026-99068 baja kernel: ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers 27 oct 2026 build de las 07:13 UTC 23 oct 2026
CVE-2026-98885 baja kernel: ima: return error early if file xattr cannot be changed 27 oct 2026 build de las 07:13 UTC 23 oct 2026
CVE-2026-115369 baja github.com/openbao/openbao: OpenBao: Unauthorized certificate issuance via CSR IP SAN validation bypass 27 oct 2026 build de las 07:13 UTC 22 oct 2026
CVE-2026-116159 baja ImageMagick: ImageMagick: Denial of Service via memory leak in the -cdl option 27 oct 2026 build de las 01:25 UTC 25 oct 2026
CVE-2026-116151 baja ImageMagick: ImageMagick: Denial of Service via memory leak in JNG encoder 27 oct 2026 build de las 01:25 UTC 25 oct 2026
CVE-2026-116150 baja ImageMagick: ImageMagick: Denial of Service via memory leak in FPX encoder 27 oct 2026 build de las 01:25 UTC 25 oct 2026
CVE-2026-116148 baja ImageMagick: ImageMagick: Command injection via unvalidated drawing options in MVG encoder 27 oct 2026 build de las 01:25 UTC 25 oct 2026
CVE-2026-116147 baja ImageMagick: ImageMagick: Denial of service via unchecked memory allocation in DJVU decoder 27 oct 2026 build de las 01:25 UTC 25 oct 2026
CVE-2026-116146 baja ImageMagick: ImageMagick: Denial of Service via MSL decoder memory leak 27 oct 2026 build de las 01:25 UTC 25 oct 2026
CVE-2026-116144 baja ImageMagick: ImageMagick: Denial of Service via uncontrolled recursion in MVG decoder 27 oct 2026 build de las 01:25 UTC 25 oct 2026
CVE-2026-106071 baja nodejs: nodejs: Permission model bypass via wildcard path matching flaw 27 oct 2026 build de las 01:25 UTC 23 oct 2026
CVE-2026-106070 baja nodejs: Node.js: Security inspection bypass via crafted ZIP archive header mismatch 27 oct 2026 build de las 01:25 UTC 23 oct 2026
CVE-2026-115449 baja libslirp: libslirp: ICMP echo reply length desynchronization leaks host IP to guest 27 oct 2026 build de las 01:25 UTC 22 oct 2026
CVE-2026-114236 baja podman: Goroutine/file-descriptor leak in storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer on malformed layers 27 oct 2026 build de las 01:25 UTC 21 oct 2026
CVE-2026-98844 baja kernel: netfs: clear post-EOF pagecache when extending a file via write 27 oct 2026 build de las 01:25 UTC 18 oct 2026
CVE-2026-98811 baja kernel: net/sched: cls_api: reclaim an empty proto on the error path 27 oct 2026 build de las 01:25 UTC 18 oct 2026
CVE-2026-98802 baja kernel: seg6: ensure packet data is writable before modifying SRH and IPv6 DA 27 oct 2026 build de las 01:25 UTC 18 oct 2026
CVE-2026-98777 baja kernel: binder: fix leaked fd fixups on TF_UPDATE_TXN supersede 27 oct 2026 build de las 01:25 UTC 18 oct 2026
CVE-2026-98774 baja kernel: rust_binder: cancel deferred work items in thread exit 27 oct 2026 build de las 01:25 UTC 18 oct 2026
CVE-2026-98700 baja kernel: wifi: mac80211: set info->band for 802.3 encap offload frames 27 oct 2026 build de las 01:25 UTC 18 oct 2026
CVE-2026-98691 baja kernel: thunderbolt: Tear down inactive DP tunnels when the domain is stopped 27 oct 2026 build de las 01:25 UTC 18 oct 2026
CVE-2026-98643 baja kernel: bpf: Fix out-of-bounds read of rtt_min in sock_ops 27 oct 2026 build de las 01:25 UTC 18 oct 2026
CVE-2026-98629 baja kernel: net/sched: cls_u32: fix manual hash table handle IDR aliasing 27 oct 2026 build de las 01:25 UTC 18 oct 2026
CVE-2026-98628 baja kernel: bpf: Make post-verification instruction rewrites killable 27 oct 2026 build de las 01:25 UTC 18 oct 2026
CVE-2026-98584 baja kernel: net/sched: fix potential stack infoleak in em_text_dump() 27 oct 2026 build de las 01:25 UTC 18 oct 2026
CVE-2026-98560 baja kernel: net/rds: size a connection's path set by the transport it ends up with 27 oct 2026 build de las 01:25 UTC 18 oct 2026
CVE-2026-98458 baja kernel: Bluetooth: ISO: release unused CIS holds after channel attach 27 oct 2026 build de las 01:25 UTC 18 oct 2026
CVE-2026-98451 baja kernel: smb: client: use finish_no_open() for non-regular inodes 27 oct 2026 build de las 01:25 UTC 18 oct 2026
CVE-2026-98438 baja kernel: mptcp: options: fix uninit-value in mptcp_write_data_fin 27 oct 2026 build de las 01:25 UTC 18 oct 2026
CVE-2026-111802 baja nautilus: nautilus: Arbitrary File Deletion via Trash Symlink 27 oct 2026 build de las 01:25 UTC 16 oct 2026
CVE-2026-46472 baja gstreamer1-plugins-good: gstreamer1-plugins-good: Information disclosure via out-of-bounds read in qtdemux_parse_chnl 27 oct 2026 build de las 01:25 UTC 16 oct 2026
CVE-2026-111581 baja libblockdev: libblockdev: argument injection in NTFS/VFAT label-setting helpers via udisks2 SetLabel() D-Bus method 27 oct 2026 build de las 01:25 UTC 16 oct 2026
CVE-2026-98427 baja kernel: net/sched: codel: bound the dropping loop per dequeue call 27 oct 2026 build de las 01:25 UTC 14 oct 2026
CVE-2026-98414 baja kernel: memcg: avoid charging the root memcg from obj_cgroup_charge_pages() 27 oct 2026 build de las 01:25 UTC 14 oct 2026
CVE-2026-98402 baja kernel: net: icmp: avoid invalid transport header access in icmp_send tracepoint 27 oct 2026 build de las 01:25 UTC 14 oct 2026
CVE-2026-98398 baja kernel: locking/lockdep: Invalidate stale class_cache entries for zapped classes 27 oct 2026 build de las 01:25 UTC 14 oct 2026
CVE-2026-98394 baja kernel: af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer 27 oct 2026 build de las 01:25 UTC 14 oct 2026
CVE-2026-98393 baja kernel: net: ipv4: Fix UDP length overflow with PMTU discover and big MTU 27 oct 2026 build de las 01:25 UTC 14 oct 2026
CVE-2026-98391 baja kernel: drm/xe: Guard page-fault worker with runtime PM check 27 oct 2026 build de las 01:25 UTC 14 oct 2026
CVE-2026-98390 baja kernel: x86/amd_node: Avoid divide by zero on virtualized systems 27 oct 2026 build de las 01:25 UTC 14 oct 2026
CVE-2026-98389 baja kernel: drm/amdgpu: skip gfx switch_power_profile during GPU reset 27 oct 2026 build de las 01:25 UTC 14 oct 2026
CVE-2026-100229 baja gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound check 27 oct 2026 build de las 01:25 UTC 14 oct 2026
CVE-2026-109278 baja ImageMagick: ImageMagick: Denial of Service via memory leak in wavelet-denoise operation 27 oct 2026 build de las 01:25 UTC 12 oct 2026
CVE-2026-105081 baja ImageMagick: ImageMagick: Security policy bypass via symbolic link 27 oct 2026 build de las 01:25 UTC 12 oct 2026
CVE-2026-98356 baja kernel: RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup 27 oct 2026 build de las 01:25 UTC 6 oct 2026
CVE-2026-104029 baja sssd: sssd: Denial of Service via out-of-bounds read in autofs responder 27 oct 2026 build de las 01:25 UTC 5 oct 2026
CVE-2026-105712 baja gnupg2: gnupg: Arbitrary file overwrite via symlink traversal in gpgtar 27 oct 2026 build de las 01:25 UTC 5 oct 2026