CVE-2026-99080 faible kernel: fs: Free any excess xarray nodes in clear_inode() 27 oct. 2026 build de 07:13 UTC 23 oct. 2026 CVE-2026-99075 faible kernel: kernel: Denial of Service via memory leak in Rust Binder 27 oct. 2026 build de 07:13 UTC 23 oct. 2026 CVE-2026-99070 faible kernel: ipv6: do not warn on route notification size race 27 oct. 2026 build de 07:13 UTC 23 oct. 2026 CVE-2026-99068 faible kernel: ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers 27 oct. 2026 build de 07:13 UTC 23 oct. 2026 CVE-2026-98885 faible kernel: ima: return error early if file xattr cannot be changed 27 oct. 2026 build de 07:13 UTC 23 oct. 2026 CVE-2026-115369 faible github.com/openbao/openbao: OpenBao: Unauthorized certificate issuance via CSR IP SAN validation bypass 27 oct. 2026 build de 07:13 UTC 22 oct. 2026 CVE-2026-116159 faible ImageMagick: ImageMagick: Denial of Service via memory leak in the -cdl option 27 oct. 2026 build de 01:25 UTC 25 oct. 2026 CVE-2026-116151 faible ImageMagick: ImageMagick: Denial of Service via memory leak in JNG encoder 27 oct. 2026 build de 01:25 UTC 25 oct. 2026 CVE-2026-116150 faible ImageMagick: ImageMagick: Denial of Service via memory leak in FPX encoder 27 oct. 2026 build de 01:25 UTC 25 oct. 2026 CVE-2026-116148 faible ImageMagick: ImageMagick: Command injection via unvalidated drawing options in MVG encoder 27 oct. 2026 build de 01:25 UTC 25 oct. 2026 CVE-2026-116147 faible ImageMagick: ImageMagick: Denial of service via unchecked memory allocation in DJVU decoder 27 oct. 2026 build de 01:25 UTC 25 oct. 2026 CVE-2026-116146 faible ImageMagick: ImageMagick: Denial of Service via MSL decoder memory leak 27 oct. 2026 build de 01:25 UTC 25 oct. 2026 CVE-2026-116144 faible ImageMagick: ImageMagick: Denial of Service via uncontrolled recursion in MVG decoder 27 oct. 2026 build de 01:25 UTC 25 oct. 2026 CVE-2026-106071 faible nodejs: nodejs: Permission model bypass via wildcard path matching flaw 27 oct. 2026 build de 01:25 UTC 23 oct. 2026 CVE-2026-106070 faible nodejs: Node.js: Security inspection bypass via crafted ZIP archive header mismatch 27 oct. 2026 build de 01:25 UTC 23 oct. 2026 CVE-2026-115449 faible libslirp: libslirp: ICMP echo reply length desynchronization leaks host IP to guest 27 oct. 2026 build de 01:25 UTC 22 oct. 2026 CVE-2026-114236 faible podman: Goroutine/file-descriptor leak in storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer on malformed layers 27 oct. 2026 build de 01:25 UTC 21 oct. 2026 CVE-2026-98844 faible kernel: netfs: clear post-EOF pagecache when extending a file via write 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98811 faible kernel: net/sched: cls_api: reclaim an empty proto on the error path 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98802 faible kernel: seg6: ensure packet data is writable before modifying SRH and IPv6 DA 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98777 faible kernel: binder: fix leaked fd fixups on TF_UPDATE_TXN supersede 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98774 faible kernel: rust_binder: cancel deferred work items in thread exit 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98700 faible kernel: wifi: mac80211: set info->band for 802.3 encap offload frames 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98691 faible kernel: thunderbolt: Tear down inactive DP tunnels when the domain is stopped 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98643 faible kernel: bpf: Fix out-of-bounds read of rtt_min in sock_ops 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98629 faible kernel: net/sched: cls_u32: fix manual hash table handle IDR aliasing 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98628 faible kernel: bpf: Make post-verification instruction rewrites killable 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98584 faible kernel: net/sched: fix potential stack infoleak in em_text_dump() 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98560 faible kernel: net/rds: size a connection's path set by the transport it ends up with 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98458 faible kernel: Bluetooth: ISO: release unused CIS holds after channel attach 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98451 faible kernel: smb: client: use finish_no_open() for non-regular inodes 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-98438 faible kernel: mptcp: options: fix uninit-value in mptcp_write_data_fin 27 oct. 2026 build de 01:25 UTC 18 oct. 2026 CVE-2026-111802 faible nautilus: nautilus: Arbitrary File Deletion via Trash Symlink 27 oct. 2026 build de 01:25 UTC 16 oct. 2026 CVE-2026-46472 faible gstreamer1-plugins-good: gstreamer1-plugins-good: Information disclosure via out-of-bounds read in qtdemux_parse_chnl 27 oct. 2026 build de 01:25 UTC 16 oct. 2026 CVE-2026-111581 faible libblockdev: libblockdev: argument injection in NTFS/VFAT label-setting helpers via udisks2 SetLabel() D-Bus method 27 oct. 2026 build de 01:25 UTC 16 oct. 2026 CVE-2026-98427 faible kernel: net/sched: codel: bound the dropping loop per dequeue call 27 oct. 2026 build de 01:25 UTC 14 oct. 2026 CVE-2026-98414 faible kernel: memcg: avoid charging the root memcg from obj_cgroup_charge_pages() 27 oct. 2026 build de 01:25 UTC 14 oct. 2026 CVE-2026-98402 faible kernel: net: icmp: avoid invalid transport header access in icmp_send tracepoint 27 oct. 2026 build de 01:25 UTC 14 oct. 2026 CVE-2026-98398 faible kernel: locking/lockdep: Invalidate stale class_cache entries for zapped classes 27 oct. 2026 build de 01:25 UTC 14 oct. 2026 CVE-2026-98394 faible kernel: af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer 27 oct. 2026 build de 01:25 UTC 14 oct. 2026 CVE-2026-98393 faible kernel: net: ipv4: Fix UDP length overflow with PMTU discover and big MTU 27 oct. 2026 build de 01:25 UTC 14 oct. 2026 CVE-2026-98391 faible kernel: drm/xe: Guard page-fault worker with runtime PM check 27 oct. 2026 build de 01:25 UTC 14 oct. 2026 CVE-2026-98390 faible kernel: x86/amd_node: Avoid divide by zero on virtualized systems 27 oct. 2026 build de 01:25 UTC 14 oct. 2026 CVE-2026-98389 faible kernel: drm/amdgpu: skip gfx switch_power_profile during GPU reset 27 oct. 2026 build de 01:25 UTC 14 oct. 2026 CVE-2026-100229 faible gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound check 27 oct. 2026 build de 01:25 UTC 14 oct. 2026 CVE-2026-109278 faible ImageMagick: ImageMagick: Denial of Service via memory leak in wavelet-denoise operation 27 oct. 2026 build de 01:25 UTC 12 oct. 2026 CVE-2026-105081 faible ImageMagick: ImageMagick: Security policy bypass via symbolic link 27 oct. 2026 build de 01:25 UTC 12 oct. 2026 CVE-2026-98356 faible kernel: RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup 27 oct. 2026 build de 01:25 UTC 6 oct. 2026 CVE-2026-104029 faible sssd: sssd: Denial of Service via out-of-bounds read in autofs responder 27 oct. 2026 build de 01:25 UTC 5 oct. 2026 CVE-2026-105712 faible gnupg2: gnupg: Arbitrary file overwrite via symlink traversal in gpgtar 27 oct. 2026 build de 01:25 UTC 5 oct. 2026 