security patch management

CVE-2026-46003 is a newly published Linux kernel denial-of-service flaw, disclosed by NVD on May 27, 2026, in the QRTR nameserver code used around Qualcomm IPC Router networking, where unbounded node registration could allow memory exhaustion. The fix is almost comically small: cap the total...

CVE-2026-41054 is a local privilege-escalation flaw in the Linux haveged entropy daemon, disclosed and fixed in haveged 1.9.21 on May 19–20, 2026, in which a failed root-only command-socket permission check still allowed unprivileged users to reach privileged daemon commands. The bug is not a...