CVE-2026-89822

A flaw was found in the Linux kernel's drm/i915 module. A local user could exploit a null pointer dereference in the i915pciprobe function. This occurs when a device is force-bound via sysfs driveroverride, causing driverdata to be NULL and subsequently dereferenced. Successful exploitation could...

CVE-2026-89813

A flaw was found in the Linux kernel's amdgpu graphics driver. When a MODE1 reset occurs, the Kernel Interface Queue KIQ ring fences are not properly completed. This can cause the system to continuously poll for a fence value that is never written back, leading to a denial of service where the...

CVE-2026-89812

A flaw was found in the Linux kernel's AMD GPU Graphics Processing Unit driver. When the Multimedia Engine Scheduler MES ring stops responding and a system reset is triggered, the MES ring fences are not properly completed. This can lead to the system becoming unresponsive after resuming from the...

CVE-2026-89809

A flaw was found in the drm/amdkfd component of the Linux kernel. A local user can trigger a system crash by reading the /sys/kernel/debug/kfd/mqds file while a process holds an active Kernel Fusion Driver KFD queue. This issue arises from a NULL pointer dereference, where a critical variable is...

CVE-2026-89800

A flaw was found in the Linux kernel's drm/nouveau/uvmm component. When an OPUNMAPSPARSE operation is performed, a dirty flag is set for the affected memory region. If a subsequent operation within the same job fails, this dirty flag is not properly cleared during the error handling process. This...

CVE-2026-89808

A flaw was found in the drm/amdkfd component of the Linux kernel. During virtual memory VM migration, if a VM range is a 'hole' on the CPU side, an uninitialized variable is used. This can cause the system to drop all Video Random Access Memory VRAM, potentially leading to a denial of service or...

CVE-2026-89796

A flaw was found in the Linux kernel's DAMON Data Access MONitor core component. An integer overflow vulnerability in the kdamondmergeregions function, specifically during the calculation of a merge threshold, can lead to an infinite loop. This issue occurs under an unreasonable user setup...

CVE-2026-89795

A flaw was found in the Linux kernel's s390 PCI Peripheral Component Interconnect hotplug driver. On s390 systems, an incorrect assignment of PCI slot objects to multifunction devices can lead to the wrong PCI function being reset when a reset operation is initiated through the hotplug driver. Th...

GHSA-HHVR-8M24-QQR3

creationtimestamp| type| source ---|---|--- 2026-10-20 17:45:47+00:00| seen| https://infosec.exchange/users/cve/statuses/117474482366350954...

CVE-2026-113669

creationtimestamp| type| source ---|---|--- 2026-10-20 17:45:47+00:00| seen| https://infosec.exchange/users/cve/statuses/117474482366350954...

CVE-2026-90355

A flaw was found in the Wi-Fi driver mt76: mt7996 of the Linux kernel. After a full chip reset, the driver fails to properly clear stale link state information, causing the device to become inoperative. This issue arises because the system attempts to re-create device and station records while ol...

Exploit for CVE-2026-113468

CVE-2026-113468: EXT:shop stores unauthenticated PayPal paymen...

CVE-2026-90156

A flaw was found in ksmbd, a component of the Linux kernel. When handling deferred locks, a failure in setting up asynchronous work can lead to a null pointer dereference and the continued linking of a freed file lock. This memory corruption issue can cause a system crash, resulting in a denial o...

GHSA-GQH3-7856-RJJG

creationtimestamp| type| source ---|---|--- 2026-10-20 17:45:06+00:00| seen| https://infosec.exchange/users/cve/statuses/117474479722443786...

CVE-2026-113668

creationtimestamp| type| source ---|---|--- 2026-10-20 17:45:06+00:00| seen| https://infosec.exchange/users/cve/statuses/117474479722443786...

Exploit for CVE-2026-112071

CVE-2026-112071: any visitor can cancel other people's orders...

GHSA-44QR-RRJG-2CQQ

creationtimestamp| type| source ---|---|--- 2026-10-20 17:44:27+00:00| seen| https://infosec.exchange/users/cve/statuses/117474477056981709...

CVE-2026-113667

creationtimestamp| type| source ---|---|--- 2026-10-20 17:44:27+00:00| seen| https://infosec.exchange/users/cve/statuses/117474477056981709...

CVE-2026-113671 ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF

ApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-beta.13 of the AI helper, an editor with image-generation capability can create a base64-generated image record without a stored provider URL and invoke image acceptance on a deployment using local...

CVE-2026-113671 ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF

ApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-beta.13 of the AI helper, an editor with image-generation capability can create a base64-generated image record without a stored provider URL and invoke image acceptance on a deployment using local...