Alertas de Seguridad de la Información

G Alto vulnerabilidad

04/06/2026

[CVE-2026-11224] Use after free in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attac…

Use after free in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Low)

nvdaltovulnerabilidad CVSS 8.1 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-11170] Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed …

Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to perform OS-level privilege escalation via malicious network traffic. (Chromium security severity: Medium)

nvdaltovulnerabilidad CVSS 8.1 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-11112] Insufficient validation of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0.78…

Insufficient validation of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: Medium)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-11074] Use after free in WebRTC in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker …

Use after free in WebRTC in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-11071] Use after free in Base in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker wh…

Use after free in Base in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-11000] Use after free in Fonts in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker t…

Use after free in Fonts in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Crítico vulnerabilidad

04/06/2026

[CVE-2026-10972] Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker t…

Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

nvdcriticovulnerabilidad CVSS 9.6 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10899] Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker w…

Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

nvdaltovulnerabilidad CVSS 7.5 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10891] Use after free in GFX in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to …

Use after free in GFX in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

nvdaltovulnerabilidad CVSS 8.8 NVD

G Alto vulnerabilidad

04/06/2026

[CVE-2026-10894] Use after free in Printing in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacke…

Use after free in Printing in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

nvdaltovulnerabilidad CVSS 8.3 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46273] In the Linux kernel, the following vulnerability has been resolved: ibmveth: Disable GSO for packet…

In the Linux kernel, the following vulnerability has been resolved: ibmveth: Disable GSO for packets with small MSS Some physical adapters on Power systems do not support segmentation offload when the MSS is less than 224 bytes. Attempting to send such packets causes the adapter to freeze, stopping all traffic until manually reset. Implement ndo_features_check to disable GSO for packets with sm…

nvdaltovulnerabilidad CVSS 8.6 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46265] In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix WQ_MEM_RECLAIM wa…

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix WQ_MEM_RECLAIM warning When sunrpc is used, if a reset triggered, our wq may lead the following trace: workqueue: WQ_MEM_RECLAIM xprtiod:xprt_rdma_connect_worker [rpcrdma] is flushing !WQ_MEM_RECLAIM hns_roce_irq_workq:flush_work_handle [hns_roce_hw_v2] WARNING: CPU: 0 PID: 8250 at kernel/workqueue.c:2644 check_fl…

nvdaltovulnerabilidad CVSS 7.5 NVD

L Crítico vulnerabilidad

03/06/2026

[CVE-2026-46266] In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO…

In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP Yizhou Zhao reported that simply having one RAW socket on protocol IPPROTO_RAW (255) was dangerous. socket(AF_INET, SOCK_RAW, 255); A malicious incoming ICMP packet can set the protocol field to 255 and match this socket, leading to FNHE cache changes. inner = IP(s…

nvdcriticovulnerabilidad CVSS 9.1 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46267] In the Linux kernel, the following vulnerability has been resolved: nfc: hci: shdlc: Stop timers an…

In the Linux kernel, the following vulnerability has been resolved: nfc: hci: shdlc: Stop timers and work before freeing context llc_shdlc_deinit() purges SHDLC skb queues and frees the llc_shdlc structure while its timers and state machine work may still be active. Timer callbacks can schedule sm_work, and sm_work accesses SHDLC state and the skb queues. If teardown happens in parallel with a …

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46270] In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: Fix use-…

In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: Fix use-after-free in power_supply_changed() Using the `devm_` variant for requesting IRQ _before_ the `devm_` variant for allocating/registering the `power_supply` handle, means that the `power_supply` handle will be deallocated/unregistered _before_ the interrupt handler (since `devm_` naturally dealloca…

nvdaltovulnerabilidad CVSS 8.4 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46271] In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: do WoW offloads o…

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: do WoW offloads only on primary link In case of multi-link connection, WCN7850 firmware crashes due to WoW offloads enabled on both primary and secondary links. Change to do it only on primary link to fix it. Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46260] In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bound access i…

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bound access in fib6_add_rt2node(). syzbot reported out-of-bound read in fib6_add_rt2node(). [0] When IPv6 route is created with RTA_NH_ID, struct fib6_info does not have the trailing struct fib6_nh. The cited commit started to check !iter->fib6_nh->fib_nh_gw_family to ensure that rt6_qualify_for_ecmp() will r…

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46263] In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bou…

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds stream encoder index v3 eng_id can be negative and that stream_enc_regs[] can be indexed out of bounds. eng_id is used directly as an index into stream_enc_regs[], which has only 5 entries. When eng_id is 5 (ENGINE_ID_DIGF) or negative, this can access memory past the end of the array. Add a …

nvdaltovulnerabilidad CVSS 7.8 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46264] In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix sysfs initializa…

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix sysfs initialization In case of devm_add_action_or_reset() failure the provided cleanup action will be run immediately on the not yet initialized kobject. This may lead to errors like: [ ] kobject: '(null)' (ff110001393608e0): is not initialized, yet kobject_put() is being called. [ ] WARNING: lib/kobject.c:734…

nvdaltovulnerabilidad CVSS 8.8 NVD

L Alto vulnerabilidad

03/06/2026

[CVE-2026-46253] In the Linux kernel, the following vulnerability has been resolved: pstore/ram: fix buffer overflow…

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: fix buffer overflow in persistent_ram_save_old() persistent_ram_save_old() can be called multiple times for the same persistent_ram_zone (e.g., via ramoops_pstore_read -> ramoops_get_next_prz for PSTORE_TYPE_DMESG records). Currently, the function only allocates prz->old_log when it is NULL, but it unconditionally u…

nvdaltovulnerabilidad CVSS 7.8 NVD