PT-2026-89801

WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attackers on the same network can spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection with the...

PT-2026-96399

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared zerocopy state in skb tx error skb tx error completes the zerocopy uarg and clears SKBFL ALL ZEROCOPY, and skb zcopy downgrade managed clears SKBFL MANAGED FRAG REFS. Both live in skb shinfo, which...

ROS-20260911-73-0221

The vulnerability of Google Chrome and Microsoft Edge is related to a data source confirmation error during the processing of DOM objects. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...

PT-2026-90306

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rocket job run function where error path handling is incorrect after a fence reference is taken for job-done fence via dma fence get. This leads to three specific...

PT-2026-90388

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the NFSACL v2 SETACL path where the nfsacld proc setacl function passes pointers to set posix acl unconditionally. Because nfsaclsvc decode setaclargs only populates...

PT-2026-90263

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the SUNRPC component, the svc create function initializes three per-pool percpu counter stats but fails to check the return values. On SMP systems, if percpu counter init fails due to...

CVE-2026-89586: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes atascsiwritesamexlat translates a SCSI WRITE SAME command with the UNMAP bit set into an ATA DATA SET MANAGEMENT TRIM command. The TRIM descriptor is built by...

PT-2026-96367

In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes ata scsi write same xlat translates a SCSI WRITE SAME command with the UNMAP bit set into an ATA DATA SET MANAGEMENT TRIM command. The TRIM descriptor is buil...

PT-2026-90274

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the md/raid10 component where the still degraded variable is incorrectly inverted within the raid10 sync request function. This occurred after a conversion from an...

PT-2026-90457

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where improper error handling in the video register device function leads to a double-free scenario. This occurs when device register fails and both p...

PT-2026-90298

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the bnx2x driver. The function bnx2x init firmware frees the pointers bp-init ops, bp-init data, and bp-init ops offsets during an error path without settin...

PT-2026-90342

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hid sensor custom add attributes function where the system fails to clean up sysfs groups if sysfs create group fails after some groups have already been created...

PT-2026-90134

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ipmi:msghandler where scheduled work may not be properly canceled if an error occurs during the startup of an IPMI interface. This prevents the interface from bein...

PT-2026-90423

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the nfsd cross mnt function when follow down returns a negative value. The function initializes a local path structure using mntget and dget, but fails to call...

PT-2026-89679

Flextype CMS versions 0.9.9 through 1.0.0-alpha.3 fail to HTML-escape plugin directory names in the dependency error page rendered by getValidPluginsDependencies. Attackers with write access to the plugins directory can create a plugin with HTML characters in its name to execute arbitrary scripts...

ROS-20260911-73-0166

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

PT-2026-90107

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in zerocopy state handling within the skb tx error function in net/skbuff allows for local privilege escalation. The issue occurs because skb tx error completes the zerocopy uarg...

CVE-2026-80936: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlopmwork on stop mt7925 queues mlopmwork with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work outlives...

PT-2026-90071

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the rtw88 wifi driver. The issue occurs within the rtw txq push skb function, where the error path fails to free the socket buffer skb before returning. This lead...

PT-2026-90072

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the rtlwifi component, specifically within the rtl8192du driver. The issue occurs in the rtl92du init sw vars function, where memory allocated by rtl92du init...