CVE-2026-47234 Admidio writes session IDs and auto-login cookie values to application logs

Admidio is an open-source user management solution. Prior to version 5.0.10, when debug logging is enabled, Session::setCookie logs full cookie values and Session::start logs the current session ID. In a real Admidio deployment this includes both the active session cookie and the persistent...

DEBIAN-CVE-2026-68438

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smpcallfunctionsingle CSD-lock diagnostics" changed smpcallfunctionsingle so that, when CSD lock debugging is enabled, async !wait calls use t...

CVE-2026-68438

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smpcallfunctionsingle CSD-lock diagnostics" changed smpcallfunctionsingle so that, when CSD lock debugging is enabled, async !wait calls use t...

EUVD-2026-57046

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smpcallfunctionsingle CSD-lock diagnostics" changed smpcallfunctionsingle so that, when CSD lock debugging is enabled, async !wait calls use t...

CVE-2026-68438 smp: Make CSD lock acquisition atomic for debug mode

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smpcallfunctionsingle CSD-lock diagnostics" changed smpcallfunctionsingle so that, when CSD lock debugging is enabled, async !wait calls use t...

CVE-2026-68438

The CVE-2026-68438 entry describes a Linux kernel issue in smp_call_function_single() related to the CSD lock diagnostic path. When CSD lock debugging is enabled, the patch makes CSD_FLAG_LOCK acquisition atomic via try_cmpxchg_acquire(), turning the previously non-atomic read-modify-write into a...

CVE-2026-68438

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smpcallfunctionsingle CSD-lock diagnostics" changed smpcallfunctionsingle so that, when CSD lock debugging is enabled, async !wait calls use t...

PT-2026-70952

In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d "smp: Improve smp call function single CSD-lock diagnostics" changed smp call function single so that, when CSD lock debugging is enabled, async !wait calls...

CVE-2026-47234: Exposure of Sensitive Information to an Unauthorized Actor

Admidio is an open-source user management solution. Prior to version 5.0.10, when debug logging is enabled, Session::setCookie logs full cookie values and Session::start logs the current session ID. In a real Admidio deployment this includes both the active session cookie and the persistent...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in the Debug Server

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17083, CVE-2026-16907, CVE-2026-17248, CVE-2026-17271, CVE-2026-17082 in Debug Server as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17083 DESCRIPTION: IBM i could allow a remote attacker to...

CVE-2025-15680

TBEA TLogger V2.1.0.0B0.0.0.0 exposes a UART interface on the device's circuit board without sufficient protection. A physically proximate attacker can connect to the UART interface and observe the device boot process and runtime debug output. The disclosed information includes operating system...

CVE-2025-15680

TBEA TLogger V2.1.0.0B0.0.0.0 exposes a UART interface on the device's circuit board without sufficient protection. A physically proximate attacker can connect to the UART interface and observe the device boot process and runtime debug output. The disclosed information includes operating system...

EUVD-2025-210668

TBEA TLogger V2.1.0.0B0.0.0.0 exposes a UART interface on the device's circuit board without sufficient protection. A physically proximate attacker can connect to the UART interface and observe the device boot process and runtime debug output. The disclosed information includes operating system...

CVE-2025-15680

CVE-2025-15680 affects TBEA TLogger V2.1.0.0B0.0.0.0. The issue is an exposed UART interface on the device’s circuit board with insufficient protection, allowing a physically proximate attacker to connect and observe the boot process and runtime debug output. Disclosed information includes operat...

CVE-2025-15680 Information Disclosure via UART

TBEA TLogger V2.1.0.0B0.0.0.0 exposes a UART interface on the device's circuit board without sufficient protection. A physically proximate attacker can connect to the UART interface and observe the device boot process and runtime debug output. The disclosed information includes operating system...

UBUNTU-CVE-2026-68165

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate ranges in damonsetregions DAMON core logic assumes zero length regions don't exist. However, a few DAMON API callers including DAMONSYSFS, DAMONRECLAIM and DAMONLRUSORT allow users to set empty monitoring...

UBUNTU-CVE-2026-68403

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: initialize SDIO data work before cleanup brcmfsdioprobe stores the newly allocated bus in sdiodev-bus before allocating the ordered workqueue. If that allocation fails, the function jumps to fail and calls...

CVE-2026-68090

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Plug race against a concurrent OOM disable syzbot reported a puzzling splat: WARNING: kernel/time/hrtimer.c:443 at stubtimer+0xa/0x20 stubtimer is installed as timer callback function in hrtimerfixupassertinit, whic...

CVE-2026-68199 wifi: ath6kl: fix OOB access from firmware ADDBA window size

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB access from firmware ADDBA window size aggrrecvaddbareqevt logs a debug message when the firmware-supplied winsz is outside AGGRWINSZMIN, AGGRWINSZMAX but does not return. The out-of-range winsz is then used...

CVE-2026-68165

The CVE affects the Linux kernel DAMON subsystem (mm/damon/core) where damon_set_regions() did not validate zero-length regions created by certain callers (DAMON_SYSFS, DAMON_RECLAIM, DAMON_LRU_SORT). This could trigger WARN_ONCE on CONFIG_DAMON_DEBUG_SANITY and cause a divide-by-zero in damon_me...