PT-2026-90457

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where improper error handling in the video register device function leads to a double-free scenario. This occurs when device register fails and both p...

PT-2026-90263

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the SUNRPC component, the svc create function initializes three per-pool percpu counter stats but fails to check the return values. On SMP systems, if percpu counter init fails due to...

PT-2026-90420

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nfsd copy file range function where the dst-f wb err value is sampled into the since variable after the copy loop. Because the nfsd file cache reuses a single file...

PT-2026-90388

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the NFSACL v2 SETACL path where the nfsacld proc setacl function passes pointers to set posix acl unconditionally. Because nfsaclsvc decode setaclargs only populates...

PT-2026-90178

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Functions max17040 get vcell and max17040 get soc fail to handle errors returned by regmap read. If an I2C transfer fails, an uninitialized register value is processed and reported to...

PT-2026-90078

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A memory leak exists in the iwlwifi driver within the iwl op mode dvm start function. The issue occurs when the system jumps to the out free eeprom label, which bypasses the out free eeprom...

PT-2026-90122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ravb network component where the system may dereference a NULL pointer when querying the index of a PTP Precision Time Protocol clock before the first open...

PT-2026-90123

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the phylink inband caps function where the PCS returned by mac select pcs is only checked for NULL values. Because mac select pcs can also return an error pointer, the...

PT-2026-90136

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ipmi add smi function where sysfs files are not fully removed upon registration failure. Specifically, the function creates nr users and nr msgs files before...

PT-2026-90071

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the rtw88 wifi driver. The issue occurs within the rtw txq push skb function, where the error path fails to free the socket buffer skb before returning. This lead...

PT-2026-90072

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the rtlwifi component, specifically within the rtl8192du driver. The issue occurs in the rtl92du init sw vars function, where memory allocated by rtl92du init...

PT-2026-90409

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the nfsd component, the nfsd4 create function fails to properly handle the return value of the nfsd4 acl to attr function. The return value is stored in the status variable, but a...

PT-2026-90107

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in zerocopy state handling within the skb tx error function in net/skbuff allows for local privilege escalation. The issue occurs because skb tx error completes the zerocopy uarg...

CVE-2026-76059 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the...

Security Bulletin: Consul-template vulnerable to an information disclosure issue in error handling

Summary The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...

CVE-2026-87993

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...

CVE-2026-87993

The consul-template library is vulnerable to an information disclosure issue in its error handling path , which may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events . The vulnerability is rated CVSS 7.7 (High) with a net...

CVE-2026-87993 Consul-template vulnerable to an information disclosure issue in error handling

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...

EUVD-2026-75701

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...

CVE-2026-87993 Consul-template vulnerable to an information disclosure issue in error handling

The consul-template library is vulnerable to an information disclosure issue in its error handling path that may allow Vault secret values to appear in template error messages, log output, and downstream surfaces such as Nomad task events. This vulnerability CVE-2026-87993 is fixed in...