CVE-2026-98432 is a critical vulnerability in the linux-aws kernel versions 4.4.0-1002.2 through 4.4.0-1031.34 involving improper freeing of inet_opt and ireq_opt structures after an RCU grace period. This flaw can lead to severe impacts including complete confidentiality, integrity, and availability compromise of affected systems.
CVE-2026-98419 is a high-severity vulnerability in the Linux kernel's drop_monitor component. It involves an out-of-bounds write in the reset_per_cpu_data() function caused by incorrect buffer size calculation and memory zeroing. This flaw can lead to corruption of kernel memory structures.
A high-severity vulnerability in the Linux kernel SMB client was fixed by adding proper bounds checking in the parse_posix_sids() function. The flaw allowed out-of-bounds reads of kernel memory due to improper validation of server-supplied length values. This could lead to information disclosure and denial of service.
CVE-2026-98401 is a vulnerability in the Linux kernel's iptunnel code where a stale transport header offset after tunnel decapsulation can cause a kernel crash. The issue arises when an encapsulated packet carrying GSO metadata is decapsulated, but the transport header offset is not properly reset, leading to an invalid memory access during packet processing. This can cause a kernel page fault and system instability. The vulnerability specifically affects scenarios involving GSO packets forwarded at layer 2 by a bridge or HSR. The fix involves clearing the transport header offset in the GRO cell processing for all tunnel drivers.
CVE-2026-97380 is a high-severity vulnerability affecting specific versions of MariaDB 10.0 and 10.1 as packaged in various Ubuntu releases. MariaDB is a community-developed fork of MySQL server. The vulnerability has a CVSS 3.1 score of 8.8, indicating network exploitable with low attack complexity and no user interaction required, leading to high impact on confidentiality, integrity, and availability.
A high-severity vulnerability (CVE-2026-97313) affecting specific versions of Bind9 has been published. The vulnerability has a CVSS 3.1 score of 7.5, indicating a network attack vector with low complexity and no privileges or user interaction required, resulting in high impact on availability but no impact on confidentiality or integrity. A security update addressing this vulnerability is available for the affected Bind9 versions.
NLnet Labs Unbound versions from 1.22.0 up to and including 1.26.1 contain a vulnerability identified as CVE-2026-97206. This vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity, and affects multiple Ubuntu package versions. The flaw does not impact confidentiality or integrity but results in a high impact on availability.
A high severity vulnerability (CVE-2026-96888) affecting multiple specific versions of Bind9 has been published. The vulnerability has a CVSS 3.1 score of 7.5, indicating a network exploitable issue with no required privileges or user interaction, causing a high impact on availability. This security update addresses the flaw in the affected Bind9 versions.
A high-severity vulnerability (CVE-2026-96778) affects the Pillow Python imaging library in versions from 9.4.0 up to 13.0.0. The vulnerability relates to the ImagingJp component. The CVSS 4.0 base score is 7.7, indicating a high impact with network attack vector, low attack complexity, and partial user interaction required. The vulnerability impacts confidentiality, integrity, and availability. No public exploits or patches are currently documented in the provided data.
A high-severity vulnerability (CVE-2026-96644) affects the Pillow Python imaging library on Windows platforms prior to version 13.0.0. The vulnerability has a CVSS 4.0 base score of 7.1, indicating a network-exploitable issue with low attack complexity and no privileges required, but requires user interaction. The impact is high, though no public exploits or vendor patch information are provided in the data.
A high-severity vulnerability (CVE-2026-96643) affects the Pillow Python imaging library in versions from 11.0.0 up to 13.0.0. The issue relates to the Exif.load functionality, though specific technical details are not fully provided. The CVSS 4.0 score is 7.1, indicating a significant security risk. The vulnerability is present in multiple Ubuntu package versions of Pillow. No public exploit or patch information is currently available.
CVE-2026-96642 is a high-severity vulnerability in the Pillow Python imaging library affecting versions prior to 13.0.0. The issue relates to the TarIO initialization process, potentially allowing an attacker to exploit the library. The CVSS 4.0 base score is 7.1, indicating a significant risk. Multiple Ubuntu package versions of Pillow are affected. No public exploits or vendor patches are currently documented.
A vulnerability exists in the Pillow Python imaging library prior to version 13.0.0 affecting the PILfont text-width functionality. The flaw has a CVSS 3.1 base score of 6.5, indicating a medium severity impact primarily causing availability disruption. No known exploits are reported in the wild. Multiple Ubuntu package versions of Pillow are affected.
A high-severity vulnerability (CVE-2026-96640) affects the Pillow Python imaging library versions from 5.1.0 up to 13.0.0. The issue involves the PdfParser component, though specific technical details are not provided. The vulnerability has a CVSS 4.0 base score of 8.2, indicating a network-exploitable flaw with high impact. Multiple Ubuntu package versions of Pillow are affected. No public exploits or vendor patch information are available in the provided data.
A critical vulnerability (CVE-2026-96639) affects the Pillow Python imaging library in versions from 11.0.0 up to 13.0.0. The vulnerability has a CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. The affected versions include multiple Ubuntu package builds of Pillow. No public exploits or vendor patch information are provided in the data.
A vulnerability exists in the Pillow Python imaging library affecting versions from 9.1.0 up to but not including 13.0.0. The issue relates to the BmpRleDec component. The CVSS 3.1 base score is 6.5, indicating a medium severity impact primarily affecting availability. No public exploits or known active exploitation have been reported. The affected versions include specific Ubuntu package builds of Pillow. No patch or remediation details are provided in the available data.
A vulnerability exists in the Pillow Python imaging library prior to version 13.0.0 affecting the SpiderImageFile.s component. This flaw has a CVSS 4.0 base score of 7.1, indicating high severity. The vulnerability allows an attacker to cause a high impact without requiring privileges or user interaction beyond what is specified. Multiple Ubuntu package versions of Pillow are affected. No public exploits or vendor patch information are provided in the input.
A vulnerability exists in the Pillow Python imaging library prior to version 13.0.0 involving the MpoImageFile.seek function. The flaw can cause a denial of service condition. The issue affects multiple Ubuntu package versions of Pillow. The CVSS score is 6.5, indicating a medium severity impact primarily due to availability disruption.
An incorrect DBus policy in lomiri-download-manager versions 0.1.0-8 through 0.2.2-1build1 allows arbitrary use of the download manager. This vulnerability has a medium severity with a CVSS score of 5.5 and impacts confidentiality but not integrity or availability.
CVE-2026-96424 is a high-severity vulnerability in the lomiri-download-manager related to an incorrect DBus policy for the lomiri-upload-manager component. This flaw allows a local attacker with low privileges to potentially gain high impact on confidentiality, integrity, and availability. The affected versions include multiple specific builds of lomiri-download-manager. No public exploits are known, and no patch or remediation details are provided in the source data.