CVE-2026-93242 scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix response queue over-consumption in qlaconsumeiocb qla24xxprocessresponsequeue advances ringptr past the head IOCB before dispatching, so by the time qlaconsumeiocb runs, ringptr already points at the first...

CVE-2026-93242 scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix response queue over-consumption in qlaconsumeiocb qla24xxprocessresponsequeue advances ringptr past the head IOCB before dispatching, so by the time qlaconsumeiocb runs, ringptr already points at the first...

CVE-2026-93242

The Linux kernel contains a vulnerability in the scsi: qla2xxx driver related to response queue over-consumption in the __qla_consume_iocb() function. Specifically, qla24xx_process_response_queue() advances the ring_ptr past the head IOCB before dispatching; however, __qla_consume_iocb() loops pu...

CVE-2026-93242

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix response queue over-consumption in qlaconsumeiocb qla24xxprocessresponsequeue advances ringptr past the head IOCB before dispatching, so by the time qlaconsumeiocb runs, ringptr already points at the first...

CVE-2020-10257

/ \ \ / /|| \ / |/ | | | \ V /| | / / / / || | / /| \ / / | / | | / / / || /| /// root@kitploit: by darkcast root@kitploit: CVE-2020-10257: Vulnerabilidad de ejecución remota de código RCE no autenticada en el plugin TRX Addons de WordPress Plugin afectado: TRX Addons Tipo de vulnerabilidad:...

CVE-2026-93238

The Linux kernel contains a vulnerability in the s390/vfio-ap component where the apm_filtered bitmap is allocated on the stack using the DECLARE_BITMAP macro without being zero-initialized. In the vfio_ap_mdev_hot_plug_cfg() function, if a hot plug configuration change only adds control domains ...

CVE-2026-93238 s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix potential use of uninitialized apmfiltered bitmap The DECLAREBITMAPapmfiltered, APDEVICES macro allocates the bitmap on the stack without zero-initializing it. In vfioapmdevhotplugcfg, the vfioapmdevfiltermatrix...

CVE-2026-93238

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix potential use of uninitialized apmfiltered bitmap The DECLAREBITMAPapmfiltered, APDEVICES macro allocates the bitmap on the stack without zero-initializing it. In vfioapmdevhotplugcfg, the vfioapmdevfiltermatrix...

CVE-2026-93238 s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix potential use of uninitialized apmfiltered bitmap The DECLAREBITMAPapmfiltered, APDEVICES macro allocates the bitmap on the stack without zero-initializing it. In vfioapmdevhotplugcfg, the vfioapmdevfiltermatrix...

EUVD-2026-86244

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix potential use of uninitialized apmfiltered bitmap The DECLAREBITMAPapmfiltered, APDEVICES macro allocates the bitmap on the stack without zero-initializing it. In vfioapmdevhotplugcfg, the vfioapmdevfiltermatrix...

CVE-2026-63630

BentoPDF , a self-hostable client-side PDF toolkit, is vulnerable in versions 2.8.6 and earlier due to a lack of validation in the deserializeWorkflow() function. The application accepts an unvalidated tsaUrl control from imported JSON files. When a user processes a crafted workflow against a PDF...

CVE-2026-63630 BentoPDF: Workflow Import Allows Unvalidated TSA URL Leading to PDF Hash Exfiltration via RFC 3161 Requests

BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, deserializeWorkflow accepts the Timestamp node's tsaUrl control from imported JSON without schema or destination validation. When a user imports the crafted workflow and runs it against a PDF, timestampPdf sends an...

EUVD-2026-86242

BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, deserializeWorkflow accepts the Timestamp node's tsaUrl control from imported JSON without schema or destination validation. When a user imports the crafted workflow and runs it against a PDF, timestampPdf sends an...

CVE-2026-63630 BentoPDF: Workflow Import Allows Unvalidated TSA URL Leading to PDF Hash Exfiltration via RFC 3161 Requests

BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, deserializeWorkflow accepts the Timestamp node's tsaUrl control from imported JSON without schema or destination validation. When a user imports the crafted workflow and runs it against a PDF, timestampPdf sends an...

CVE-2026-93236

In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: fix NULL pointer deref in vdectryfmtcommon When VIDIOCTRYFMT is called with an unsupported pixel format on the OUTPUT queue, vdectryfmtcommon falls back to V4L2PIXFMTMPEG2. However, if a distro has locally...

CVE-2026-93236 media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common

In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: fix NULL pointer deref in vdectryfmtcommon When VIDIOCTRYFMT is called with an unsupported pixel format on the OUTPUT queue, vdectryfmtcommon falls back to V4L2PIXFMTMPEG2. However, if a distro has locally...

CVE-2026-93236

The Linux kernel contains a NULL pointer dereference vulnerability within the media: meson: vdec component. When the VIDIOC_TRY_FMT command is invoked with an unsupported pixel format on the OUTPUT queue , the function vdec_try_fmt_common() attempts to fall back to V4L2_PIX_FMT_MPEG2 . In distrib...

CVE-2026-93236 media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common

In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: fix NULL pointer deref in vdectryfmtcommon When VIDIOCTRYFMT is called with an unsupported pixel format on the OUTPUT queue, vdectryfmtcommon falls back to V4L2PIXFMTMPEG2. However, if a distro has locally...

EUVD-2026-86241

In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: fix NULL pointer deref in vdectryfmtcommon When VIDIOCTRYFMT is called with an unsupported pixel format on the OUTPUT queue, vdectryfmtcommon falls back to V4L2PIXFMTMPEG2. However, if a distro has locally...

wp-secure-mcp

wp-secure-mcp En términos sencillos: esto permite que un agente de IA lea y escriba ligeramente en un sitio de WordPress a través de una Application Password real de WordPress — el mismo tipo de credencial que wp-admin ya emite — y nada más. Aquí no hay formulario de registro, ni registro de...