Monthly
Integer-overflow handling in libxml2's xmlIO output path lets a negative length reach application-supplied write callbacks, allowing memory corruption or denial of service in programs that serialize large XML documents. All libxml2 builds before 2.15.4 are affected; the upstream commit 90f293ba adds INT_MAX guards to xmlOutputBufferWrite and xmlOutputBufferFlush and the fix ships in 2.15.4 (also distributed via RHSA-2026:64463). CVSS is 7.3 (AV:L/PR:L), EPSS is only 0.12% (2nd percentile), there is no public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
An integer coercion error was found in the openvswitch kernel module. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.
Integer-overflow handling in libxml2's xmlIO output path lets a negative length reach application-supplied write callbacks, allowing memory corruption or denial of service in programs that serialize large XML documents. All libxml2 builds before 2.15.4 are affected; the upstream commit 90f293ba adds INT_MAX guards to xmlOutputBufferWrite and xmlOutputBufferFlush and the fix ships in 2.15.4 (also distributed via RHSA-2026:64463). CVSS is 7.3 (AV:L/PR:L), EPSS is only 0.12% (2nd percentile), there is no public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
An integer coercion error was found in the openvswitch kernel module. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.