Security Bulletin: Vulnerability in DOMPurify affects DB2 Dev Extension (CVE-2026-49458, CVE-2026-49459, CVE-2026-49978)

Summary Upgraded dompurify to 3.4.7 to remediate CVE-2026-49458, CVE-2026-49459, and CVE-2026-49978 CWE-79: Cross-site Scripting via INPLACE sanitization bypasses — highest CVSS Base Score 6.3 Medium — PVR0817403. Vulnerability Details CVEID:CVE-2026-49458 DESCRIPTION: DOMPurify is a DOM-only...

DEBIAN-CVE-2026-90187

In the Linux kernel, the following vulnerability has been resolved: nullblk: free zones array on device power-off nullinitzoneddev allocates dev-zones when a zoned device is powered on, but nulldeldev never frees it on power-off; dev-zones is only freed later in nullfreedev, when the configfs...

DEBIAN-CVE-2026-90071

In the Linux kernel, the following vulnerability has been resolved: net/sched: schteql: restore skb-dev on the slave failure path teqlmasterxmit sets skb-dev = slave before calling the slave's ndostartxmit, but never restores it when that transmit fails. The skb then walks on to the next slave...

AZL-101894 CVE-2026-90071 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: schteql: restore skb-dev on the slave failure path teqlmasterxmit sets skb-dev = slave before calling the slave's ndostartxmit, but never restores it when that transmit fails. The skb then walks on to the next slave...

CVE-2026-90071

In the Linux kernel, the following vulnerability has been resolved: net/sched: schteql: restore skb-dev on the slave failure path teqlmasterxmit sets skb-dev = slave before calling the slave's ndostartxmit, but never restores it when that transmit fails. The skb then walks on to the next slave...

SUSE CVE-2026-89951

In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix stale receive device on merged fragments Fragment reassembly reuses the skb from the highest-numbered buffered fragment as the merged packet. When that fragment was received on a hard interface which is deleted...

CVE-2026-93068 drm/amd/display: Fix DM I2C teardown race

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix DM I2C teardown race DM I2C adapters can remain visible to userspace while DM teardown is already in progress. A concurrent i2c-dev transfer may then enter amdgpudmi2cxfer after the backing DM state has been...

CVE-2026-90185 null_blk: serialize configfs attribute stores with the lock

In the Linux kernel, the following vulnerability has been resolved: nullblk: serialize configfs attribute stores with the lock The NULLBDEVICEATTR store takes no lock: applyfn attributes submitqueues, pollqueues get dev-NAME written again after applyfn returns, outside its lock; APPLY=NULL...

CVE-2026-90185

This Linux kernel vulnerability affects the null_blk driver's configfs attribute store path. The NULLB_DEVICE_ATTR _store handlers fail to take the device lock, so concurrent stores on separate file descriptors race . For apply_fn attributes (submit_queues, poll_queues), a losing store can overwr...

CVE-2026-90071 net/sched: sch_teql: restore skb->dev on the slave failure path

In the Linux kernel, the following vulnerability has been resolved: net/sched: schteql: restore skb-dev on the slave failure path teqlmasterxmit sets skb-dev = slave before calling the slave's ndostartxmit, but never restores it when that transmit fails. The skb then walks on to the next slave...

CVE-2026-90071

CVE-2026-90071 is a use-after-free (UAF) in the Linux kernel's TEQL (Traffic Engineering Load Balancing) QoS scheduler (net/sched/sch_teql). The function teql_master_xmit() sets skb->dev to the current slave before attempting transmit but fails to restore it when the transmit fails. The skb th...

CVE-2026-90071 net/sched: sch_teql: restore skb->dev on the slave failure path

In the Linux kernel, the following vulnerability has been resolved: net/sched: schteql: restore skb-dev on the slave failure path teqlmasterxmit sets skb-dev = slave before calling the slave's ndostartxmit, but never restores it when that transmit fails. The skb then walks on to the next slave...

EUVD-2026-81932

In the Linux kernel, the following vulnerability has been resolved: net/sched: schteql: restore skb-dev on the slave failure path teqlmasterxmit sets skb-dev = slave before calling the slave's ndostartxmit, but never restores it when that transmit fails. The skb then walks on to the next slave...

dev.pathland:pathland-quarkus-starter (0.1.5), io.debezium:debezium-platform-conductor (>=3.7.0.beta2, <=3.7.0.final) +5 more potentially affected by CVE-2026-87742 via io.quarkus:quarkus-websockets-next (>=3.39.0, <=3.39.4)

io.quarkus:quarkus-websockets-next MAVEN version =3.39.0, =3.7.0.beta2, =3.39.0, =3.39.0, =3.39.0, =3.39.0, =3.39.4 - org.apache.camel.quarkus:camel-quarkus-integration-test-vertx-websocket 3.39.0 Source cves: CVE-2026-87742 Source advisory: MEND:CVE-2026-87742...

CVE-2026-90071: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/sched: schteql: restore skb-dev on the slave failure path teqlmasterxmit sets skb-dev = slave before calling the slave's ndostartxmit, but never restores it when that transmit fails. The skb then walks on to the next slave...

PT-2026-94605

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read issue exists in the Bluetooth virtio bt component. The virtbt setup zephyr function sends a Zephyr vendor command 0xfc08 to read build information and processes the...

PT-2026-94590

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/vt-d component where replacing a domain that has an iopf handler with another domain at the RID level causes a reference leak in info-iopf refcount. This...

PT-2026-94494

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bpf and xdp components where bpf xdp link update calls dev xdp install directly, bypassing the checks performed in dev xdp attach. This allows a user to create an...

CVE-2026-90187: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nullblk: free zones array on device power-off nullinitzoneddev allocates dev-zones when a zoned device is powered on, but nulldeldev never frees it on power-off; dev-zones is only freed later in nullfreedev, when the configfs...

PT-2026-94375

Name of the Vulnerable Software and Affected Versions RAGFlow versions prior to 0.27.3 Description Authenticated attackers can read arbitrary files by exploiting missing path validation. By providing absolute file paths in the file path parameter, users with valid access tokens can access any fil...