CVE-2026-89744: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnodeforeachchildnode When iterate over children of a fwnode that has a secondary fwnode, fwnodegetnextchildnode can enter an infinite loop if the secondary fwnode has more than one child...

CVE-2026-89586: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes atascsiwritesamexlat translates a SCSI WRITE SAME command with the UNMAP bit set into an ATA DATA SET MANAGEMENT TRIM command. The TRIM descriptor is built by...

CVE-2026-89717: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zramdestroycomps Patch series "zram: fix zram issues reported by sashiko". Sashiko drove by and reported 1 a couple of zram issues: a possible BUGON in zlib code due to missing winbits rang...

PT-2026-90474

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory management subsystem where the queue folios pmd function is called under pmd trans huge lock. Because pmd is huge returns true for any non-present, non-none...

PT-2026-96506

In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fix device reference leak on failed lookup Make sure to drop the reference taken to the SCP device when attempting to look up its driver data before the driver has been bound. Note that holding a reference to a...

PT-2026-96452

In the Linux kernel, the following vulnerability has been resolved: Revert "media: v4l2-dev: fix error handling in video register device" This reverts commit 2a934fdb01db6458288fc9386d3d8ceba6dd551a. The intentions of that patch were good, but it doesn't work. The idea is that if device register...

CVE-2026-17176: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in the TDDP module of Deco BE11000 and Deco M9 Plus allows an adjacent network attacker to execute arbitrary commands with root privileges by sending a crafted UDP packet. Successful exploitation may lead to complete device compromise, including unauthorized...

PT-2026-96426

In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb-bblog shift in super 1 load In super 1 load, sb-bblog shift is an u8 type value loaded from on- disk superblock. It is used for badblocks API badblocks set by the following sequence, 1930...

PT-2026-96378

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix info leak and UAF in device unregister path i3c master unregister i3c devs clears i3cdev-dev-desc before calling device unregister. During device unregister, device del emits a KOBJ REMOVE uevent and unbinds the...

PT-2026-90435

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the zram module. The read block state function calculates the nr pages variable before acquiring the dev lock. If the device is reset and...

PT-2026-90125

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel within the MCTP Management Component Transport Protocol implementation. The mctp route lookup function accesses the rt-dev device withou...

PT-2026-90153

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description A memory leak exists in the sar probe function. This occurs because memory allocated for device mode info within the parse package function, which is called by sar get data, is not properly...

PT-2026-90339

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the HID mcp2221 driver. The problem occurs because incoming HID reports can race with hardware teardown during device removal or probe failure. This is...

CVE-2026-82583

creationtimestamp| type| source ---|---|--- 2026-09-10 16:05:49+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6gm3rxy52o 2026-09-10 16:15:29+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01...

CVE-2026-82578

creationtimestamp| type| source ---|---|--- 2026-09-10 16:05:49+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6gm3rxy52o 2026-09-10 16:15:33+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01...

SUSE-SU-2026:4122-1 Security update for opensc

This update for opensc fixes the following issue: - CVE-2026-40510: stack buffer overflow in pivprocesshistory allows physically present attackers to trigger memory corruption by presenting a crafted PIV smart card or USB device bsc1266964...

CVE-2026-87961

ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds read vulnerability in the readID3Header function due to a shadowed length parameter in ID3 synchronized-lyrics processing. Attackers can craft malicious MP3 files or HTTP audio streams with oversized frame size...

EUVD-2026-75388

ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds read vulnerability in the readID3Header function due to a shadowed length parameter in ID3 synchronized-lyrics processing. Attackers can craft malicious MP3 files or HTTP audio streams with oversized frame size...

PYSEC-2026-3834 ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces

Summary On the Home Assistant add-on, the dashboard serves a trusted ingress site that skips authentication because the supervisor authenticates the request upstream. That site was binding 0.0.0.0. The add-on runs in host network mode for mDNS, so binding all interfaces also bound the host's LAN...

ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces

SummaryOn the Home Assistant add-on, the dashboard serves a trusted ingress site that skips authentication because the supervisor authenticates the request upstream. That site was binding 0.0.0.0. The add-on runs in host network mode for mDNS, so binding all interfaces also bound the host's LAN...