What you need to know today.

A heap buffer under-read in rsync's file checksum comparison functionality could allow an attacker to leak uninitialized memory. The vulnerability, CVE-2024-12085, arises from the manipulation of checksum lengths (s2length), potentially leading to the comparison of a checksum against uninitialized memory. This could expose sensitive information to an attacker. The issue is present in rsync and has been flagged by Red Hat. Further details on patching or mitigation are not immediately available, but users are advised to monitor for updates.

The libssh library, in versions prior to 0.11.2, is affected by an out-of-bounds read vulnerability. Identified as CVE-2025-5318, this flaw resides within the sftp_handle function. An incorrect comparison check allows the function to access memory beyond the valid handle, potentially leading to data corruption or disclosure. This vulnerability could be exploited by an attacker to gain unauthorized access to memory contents. Users of libssh should ensure they are running version 0.11.2 or later to mitigate this risk.

A privilege escalation vulnerability exists in linux-pam due to the pam_namespace module's improper handling of user-controlled paths. CVE-2025-6020 allows local users to elevate their privileges to root through a combination of symlink attacks and race conditions. The module fails to adequately protect user-supplied paths, enabling malicious actors to manipulate filesystem access and gain administrative control. This flaw highlights the importance of strict path validation in system authentication modules.

Libarchive versions containing a flaw in the archive_read_format_rar_seek_data() function are vulnerable to an integer overflow, ultimately resulting in a double-free condition. This vulnerability, CVE-2025-5914, could be exploited by an attacker to trigger a denial-of-service or potentially execute arbitrary code. The flaw involves an integer overflow that corrupts memory management, leading to the double-free condition. Users are advised to update libarchive to a patched version.

Red Hat has identified a memory corruption vulnerability in libxslt related to the modification of attribute types, atype, and flags. CVE-2025-7425 corrupts internal memory management, preventing proper processing of XSLT functions like key(), especially when they result in tree fragments. This could lead to application instability or crashes, and potentially be exploited for more severe impacts. Users should consult Red Hat for specific mitigation or patching information.

An insecure method in early versions of Operator-SDK allowed operator containers to run with a random UID, posing a security risk. Specifically, the user_setup script modified permissions of /etc/passwd and /etc/group insecurely, as detailed in CVE-2025-7195. This could allow unauthorized access or privilege escalation within the containerized environment. Users of Operator-SDK should update to version 0.15.2 or later to address this vulnerability.

A flaw in npm-serialize-javascript, CVE-2024-11831, allows for injection of malicious code due to improper sanitization of certain inputs like regex or other JavaScript object types. This vulnerability could enable attackers to execute arbitrary JavaScript code within the context of the application using the module. Users are advised to update to a version of npm-serialize-javascript that addresses this input sanitization issue.

The sort utility in GNU Coreutils is vulnerable to a heap buffer under-read in its begfield() function. CVE-2025-5278 allows the program to access memory outside its allocated buffer when processing crafted commands using the traditional key format. This could lead to information disclosure or application instability. Users should ensure they are using updated versions of Coreutils that rectify this memory access issue.

A low-severity integer overflow vulnerability in curl's tool_operate.c (CVE-2020-19909) could theoretically lead to a denial of service if a large value is used for the retry delay. While many parties report no direct security impact to curl users, the potential for DoS exists. Users should ensure they are on a patched version of curl to prevent this theoretical DoS condition.

Several Linux kernel vulnerabilities have been resolved, including CVE-2026-64423 concerning IGMP multicast group handling during device destruction, CVE-2026-64394 adding permission checks to ksmbd for FSCTL_SET_SECURITY, CVE-2026-64338 for unregistering parport on probe failure in uss720, CVE-2026-64509 fixing GenDisk cleanup paths in rust, CVE-2026-64353 keeping dynamic inner array lookups nullable in bpf, CVE-2026-64295 adding a count limit to page_ext_iter_next to prevent invalid PFN access, CVE-2026-64301 fixing an of_node refcount leak in scmi_regulator_probe, CVE-2026-64291 setting an upper bound for veventq_depth in iommufd, CVE-2026-64332 fixing a memory leak on registration failure in ulpi, and CVE-2026-64265 clearing intr_entry in fuse_resend and fuse_remove_pending_req. These fixes address various memory management, permission, and resource handling issues within the kernel.