PT-2026-94617

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the verifier fails to rewrite BPF LOAD ACQ instructions to BPF PROBE MEM loads, unlike the behavior for regular BPF LDX...

PT-2026-94660

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where the check atomic load function calls check load mem before atomic ptr type ok. In scenarios where a load-acquire operation fetches data into it...

PT-2026-95078

Name of the Vulnerable Software and Affected Versions SAIL versions prior to 1.0.0 Description A heap overwrite occurs in the sail codec load frame v8 xbm function within src/sail-codecs/xbm/xbm.c when processing X10 static short files. The issue arises because the decoded pixel buffer is allocat...

PT-2026-95133

Name of the Vulnerable Software and Affected Versions The Motors – Car Dealership & Classified Listings Plugin versions prior to 1.4.121 Description Missing authorization checks in the mvl ajax dealer load cars function allow unauthenticated attackers to gain unauthorized access to data. This fla...

PT-2026-94632

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the firmware loader where fw load sysfs fallback calls device add before adding fw priv to pending fw head. This allows a userspace helper to complete the request via...

CVE-2026-93130: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fix resource leak on module load failure We need to properly clean up the SMBIOS request and the privacy driver when the module load fails...

CVE-2026-93127: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Drop scalar id on sign-extending narrowing stack fills When a spilled scalar is filled back with a sign-extending narrowing load BPFMEMSX, checkstackreadfixedoff copies the spilled register including its scalar id, but...

SUSE CVE-2025-11395

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

EUVD-2026-80606

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dmsetupmdqueue walks &md-tabledevices without...

CVE-2026-89998 dm: fix race when loading and unloading a table

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dmsetupmdqueue walks &md-tabledevices without...

CVE-2026-89998 dm: fix race when loading and unloading a table

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dmsetupmdqueue walks &md-tabledevices without...

CVE-2026-87828 Seraphinite Accelerator < 2.29.24 - Subscriber+ DoS via seraph_accel_State Update

The Seraphinite Accelerator WordPress plugin before 2.29.24 does not perform a capability check on one of its state-update AJAX actions, allowing authenticated users such as subscribers to write a malformed value that causes an uncaught error on every subsequent admin page load, making the entire...

EUVD-2025-210915

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

Linux Distros Unpatched Vulnerability : CVE-2026-89998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a...

PT-2026-93835

Name of the Vulnerable Software and Affected Versions CrewAI affected versions not specified Description An unsafe reflection flaw exists in the crewAI Framework during the agent loading process. The load agent from repository function imports content from a provided repository without an...

podman -- vulnerabilities

The Podman developers report: This release addresses CVE-2025-11395, where importing images containing crafted layer tarballs with the podman load command, or importing volumes containing crafted symlinks with podman volume import, allows overwriting files on the host. This release also addresses...

DEBIAN-CVE-2025-11395

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

AZL-103086 CVE-2025-11395 affecting package podman 5.6.1-10

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

AZL-103068 CVE-2025-11395 affecting package buildah 1.43.1-3

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

AZL-103137 CVE-2025-11395 affecting package containerized-data-importer 1.62.0-8

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...