CVE-2026-90186 null_blk: reject per-device queue resize for shared tag set

In the Linux kernel, the following vulnerability has been resolved: nullblk: reject per-device queue resize for shared tag set When sharedtags is enabled, nullsetuptagset makes the device use the global tagset, whose driverdata stays NULL. nullmapqueues therefore falls back to the module-wide...

CVE-2026-90186

CVE-2026-90186 affects the Linux kernel null_blk driver. When the module is loaded with shared_tags enabled, a per-device resize of submit_queues or poll_queues via configfs calls blk_mq_update_nr_hw_queues() on the shared tag set, shrinking hardware queue contexts. The resulting NULL hardware co...

EUVD-2026-81779

In the Linux kernel, the following vulnerability has been resolved: nullblk: reject per-device queue resize for shared tag set When sharedtags is enabled, nullsetuptagset makes the device use the global tagset, whose driverdata stays NULL. nullmapqueues therefore falls back to the module-wide...

CVE-2026-82209

A flaw was found in libcurl when libpsl support is enabled. A remote attacker could exploit this vulnerability by setting a Set-Cookie header with a Domain attribute that explicitly matches a public suffix. This improper handling causes libcurl to save the cookie with a wildcard domain scope,...

mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()

A flaw was found in MariaDB server. An application processing non-validated user input, which then uses mysqlrealescapestring and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL...

PT-2026-94605

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read issue exists in the Bluetooth virtio bt component. The virtbt setup zephyr function sends a Zephyr vendor command 0xfc08 to read build information and processes the...

PT-2026-94615

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the SCSI subsystem when scsi alloc sgtables fails. The function sd set special bvec allocates a special payload page for UNMAP and WRITE SAME commands. If a...

PT-2026-94876

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cxlctl set feature function where the output buffer size is determined by the user-provided fwctl rpc.out len without verifying if it is large enough to accommodat...

PT-2026-94783

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the RDMA/mlx5 component when the set user buf size function calculates the Queue Pair QP buffer size. The function performs a left-shift operation on...

PT-2026-94835

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the RDMA/hfi1 component, the function set txreq header ahg fails to check the return value of sdma txinit ahg. When sdma txinit ahg fails, it returns before initializing tx-txreq, but...

PT-2026-94942

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the proc timens set offset function where the tv nsec field is not validated to be within the required range of 0, NSEC PER SEC-1 before being used in timespec64 add...

PT-2026-94892

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where Get or Set Feature payloads exceeding the mailbox payload size are split into multiple mailbox commands. Because the mbox mutex only serializes individual commands...

PT-2026-94996

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the i3c master controller. Sysfs attribute callbacks dereference the master-this pointer; however, this pointer is freed within the i3c master detach fre...

PT-2026-94583

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sunrpc xprtsock component where shared socket callbacks are handled using plain stores and loads. Specifically, when SUNRPC manages AF LOCAL, UDP, or TCP sockets a...

PT-2026-94582

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Network File System NFS implementation where the client fails to record a delegation granted by the server during an OPEN reply. Specifically, the nfs inode set...

PT-2026-94502

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where the ksmbd all conn set status function incorrectly treats every connection with a set transient binding flag as belonging to the target SessionI...

PT-2026-94484

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hsmp hwmon write function where user-supplied values for the power1 cap file are processed as signed longs. When a negative value is provided, the division by the...

PT-2026-94710

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/msm/dsi component where the use of the dev pm opp set rate0 function removes the vote specified in required-opps without actually parking the clock. This resul...

PT-2026-94456

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the SMC LLC Shared Memory Communications Local LLC implementation. When the smc llc event handler function transitions a local LLC flow from SMC LLC FLOW REQ ADD...

CVE-2026-92779

Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings without validation. Attackers can craft content blocks with binding keys containing proto, prototype, or constructor paths to...