Alertas de Seguridad de la Información

M Crítico vulnerabilidad

26/08/2026

[CVE-2026-74751] In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen rea…

In the Linux kernel, the following vulnerability has been resolved: riscv: lib: Fix ZBB strnlen reading past count boundary The ZBB-optimized strnlen loop loads one word ahead before checking the aligned boundary: REG_L t1, SZREG(t0) // load next word addi t0, t0, SZREG // advance orc.b t1, t1 bgeu t0, t4, 4f // boundary check AFTER load where t4 …

nvdcriticovulnerabilidad CVSS 9.4 NVD

M Crítico vulnerabilidad

26/08/2026

[CVE-2026-74752] In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH stat…

In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before use When cookie authentication is disabled, COOKIE_ECHO restores fixed-size AUTH fields directly from peer-controlled cookie bytes. A forged RANDOM length, HMAC list, or CHUNKS list can then reach association consumers with lengths or identifiers that were never validated against the loca…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

26/08/2026

[CVE-2026-74753] In the Linux kernel, the following vulnerability has been resolved: perf: Reject exited events as g…

In the Linux kernel, the following vulnerability has been resolved: perf: Reject exited events as group leaders perf_event_remove_on_exec() sets remove-on-exec events to the EXIT state and detaches their group relationships. The event's file descriptor can remain open, however, and perf_event_open() currently accepts that event as a group leader because its early validation rejects only REVOKED…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Crítico vulnerabilidad

26/08/2026

[CVE-2026-74743] In the Linux kernel, the following vulnerability has been resolved: macvlan: inherit needed_headroo…

In the Linux kernel, the following vulnerability has been resolved: macvlan: inherit needed_headroom and needed_tailroom from lowerdev macvlan devices inherit hard_header_len from lowerdev during macvlan_init(), but leave needed_headroom and needed_tailroom set to 0. When the underlying lowerdev requires extra headroom or tailroom for headers/trailers (e.g. macsec, ipsec, wireguard, tunnels, or…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Crítico vulnerabilidad

26/08/2026

[CVE-2026-74744] In the Linux kernel, the following vulnerability has been resolved: ipvlan: inherit needed_headroom…

In the Linux kernel, the following vulnerability has been resolved: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev ipvlan devices inherit hard_header_len from phy_dev during ipvlan_init(), but leave needed_headroom and needed_tailroom set to 0. When the underlying phy_dev (or stacked lower device) requires extra headroom or tailroom for headers/trailers (e.g. macsec, ipsec, wi…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

26/08/2026

[CVE-2026-74745] In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: avoid deadlock when …

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: avoid deadlock when canceling IRQ affinity notifier Unregistering IRQ affinity notifiers waits for the callback synchronously. bnxt takes the netdev instance lock in the notifier (to restart the queue) and cancels the work under the same lock. This may obviously deadlock. Move the restart to the async service task. T…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

26/08/2026

[CVE-2026-74746] In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish G…

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC nev…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

26/08/2026

[CVE-2026-74747] In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent…

In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bounds access While the outer IP header is already pulled into the skb head, we must be careful and revalidate the embedded headers after reading them from the skb frags to prevent out-of-bounds access. One such place reported by Sashiko is ip_vs_nat_icmp() where local process can change t…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

26/08/2026

[CVE-2026-74748] In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix refcount …

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix refcount race between list:set GC and swap __ip_set_put_byindex() resolved the index to a set pointer under RCU, then took ip_set_ref_lock in __ip_set_put() to decrement set->ref. ip_set_swap() holds that same lock while swapping both the ip_set_list slots and the two sets' ref counters, so it can interleav…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

26/08/2026

[CVE-2026-74736] In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_bpf: reject dev-…

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_bpf: reject dev-bound programs bound to a different device cls_bpf_prog_from_efd() obtained a SCHED_CLS program via bpf_prog_get_type_dev() but never verified that a device-bound (offloaded) program's bound netdev matches the TC netdev the classifier is being attached to. This let a program loaded with prog_ifinde…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Crítico vulnerabilidad

26/08/2026

[CVE-2026-74737] In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nu…

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG On the packet reception path, the ID of the MAC Port on which the packet was received, is embedded in the RX DMA Descriptor's metadata. The ID is extracted using the helper function cppi5_desc_get_tags_ids() which fills in the 16-bit Source Tag into the 'port…

nvdcriticovulnerabilidad CVSS 9.8 NVD

M Alto vulnerabilidad

26/08/2026

[CVE-2026-74739] In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: skip hash t…

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: skip hash tables in u32_bind_class() u32_walk() enumerates both struct tc_u_hnode and struct tc_u_knode through the walker callback. u32_bind_class() unconditionally casts the passed fh to tc_u_knode and accesses &n->res, so when fh is actually a tc_u_hnode, which has no tcf_result member, this results in a s…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

26/08/2026

[CVE-2026-74741] In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix NULL pointer der…

In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode (such as legacy INTx or single MSI), wx->msix_entry is not allocated or initialized. Calling NGBE_INTR_MISC(wx) dereferences wx->msix_entry->entry, leading to a NULL pointer dereference crash. This issue was introduced by fixing the IRQ ve…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

26/08/2026

[CVE-2026-74742] In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to w…

In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in veth_poll veth_poll() derives the index of the peer TX queue to wake from rq->xdp_rxq.queue_index. That field is only initialized by xdp_rxq_info_reg() in veth_enable_xdp_range(), which runs only when an XDP program is attached. On the plain GRO/NAPI path (veth_napi_enable_range…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

26/08/2026

[CVE-2026-19042] A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.8…

A command injection vulnerability in TeamViewer Full Client and Host for Linux prior to version 15.81.5 allows a remote attacker to execute arbitrary commands in the context of the current user via a specially crafted URL sent through the out-of-session chat feature. Exploitation requires user interaction by clicking the malicious link.

nvdaltovulnerabilidad CVSS 8.8 NVD

M Alto vulnerabilidad

25/08/2026

Vulnerabilidad alta de buffer overflow en BlueZ afecta stack Bluetooth de Linux

Una vulnerabilidad de desbordamiento de búfer en la pila Bluetooth de Linux (BlueZ) permite a atacantes remotos dentro del rango de radio enviar paquetes Extended Inquiry Response (EIR) malformados que causan bloqueos del servicio bluetoothd. Afecta servidores Linux, dispositivos IoT y sistemas embebidos comunes en infraestructura LATAM, con potencial de denegación de servicio y ejecución de código remoto.

nvdaltovulnerabilidad CVSS 7.6 NVD

M Alto vulnerabilidad

25/08/2026

Vulnerabilidad de traversal de ruta en NVIDIA OpenShell Sandbox para Linux (CVE-2026-65092)

NVIDIA OpenShell Sandbox para Linux contiene una vulnerabilidad que permite a atacantes eludir la política de seguridad de red L7 REST mediante traversal de ruta, facilitando acceso no autorizado a información sensible y manipulación de datos. Esta falla afecta infraestructuras de contenedorización y edge computing en datacenters de LATAM que dependen de OpenShell para aislamiento de cargas de trabajo.

nvdaltovulnerabilidad CVSS 8.5 NVD

M Crítico vulnerabilidad

25/08/2026

Vulnerabilidad crítica de escape de sandbox en NVIDIA OpenShell para Linux (CVE-2026-65093)

NVIDIA OpenShell para Linux contiene una vulnerabilidad que permite a atacantes escapar del sandbox e ejecutar código arbitrario con privilegios elevados. El impacto incluye ejecución remota de código, escalada de privilegios, manipulación de datos y divulgación de información sensible. Empresas en LATAM que utilicen OpenShell en entornos containerizados o de virtualización deben considerar este vector de alto riesgo.

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Alto vulnerabilidad

25/08/2026

Vulnerabilidad alta en NVIDIA NemoClaw para Linux permite inyección de comandos del SO

NVIDIA NemoClaw para Linux contiene una vulnerabilidad en el componente Telegram bridge que permite a atacantes inyectar comandos del sistema operativo. La explotación exitosa podría resultar en ejecución de código arbitrario, escalada de privilegios, divulgación de información y manipulación de datos en servidores altas de empresas en LATAM.

nvdaltovulnerabilidad CVSS 7.8 NVD

M Alto vulnerabilidad

25/08/2026

Vulnerabilidad alta en NVIDIA NemoClaw para Linux permite ejecución de código remoto

NVIDIA NemoClaw para Linux contiene una vulnerabilidad en sus scripts de instalación que permite descargar código sin validar su integridad. Un atacante puede explotar esto para ejecutar código arbitrario, escalar privilegios, acceder a información sensible o modificar datos. Afecta especialmente a centros de datos y empresas que utilizan herramientas de IA basadas en NVIDIA en infraestructura on-premise.

nvdaltovulnerabilidad CVSS 7.5 NVD