CVE-2026-74353 drm/amdkfd: always resume_all after suspend_all

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: always resumeall after suspendall Need to restore any good queues even if the suspendall failed for some. Always run removequeue as that will schedule a GPU reset is removing the queue fails. v2: move resumeall after...

EUVD-2026-59500

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: always resumeall after suspendall Need to restore any good queues even if the suspendall failed for some. Always run removequeue as that will schedule a GPU reset is removing the queue fails. v2: move resumeall after...

CVE-2026-72425 ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()

In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in iceresetallvfs Resetting all VFs causes resource leak on VFs with FDIR filters enabled as CTRL VSIs are only invalidated and not freed. Fix by using icevfctrlvsirelease instead of...

CVE-2026-72425 ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()

In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in iceresetallvfs Resetting all VFs causes resource leak on VFs with FDIR filters enabled as CTRL VSIs are only invalidated and not freed. Fix by using icevfctrlvsirelease instead of...

EUVD-2026-59324

In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in iceresetallvfs Resetting all VFs causes resource leak on VFs with FDIR filters enabled as CTRL VSIs are only invalidated and not freed. Fix by using icevfctrlvsirelease instead of...

CVE-2026-72425

In Linux kernel, filtering/redirect (ice) driver had a resource leak in CTRL VSIs when resetting all VFs with FDIR filters enabled. The root cause was CTRL VSIs being invalidated but not freed during ice_reset_all_vfs(); the fix calls ice_vf_ctrl_vsi_release() instead of ice_vf_ctrl_invalidate_vs...

CVE-2026-72088 scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path

In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If physdisk-inreset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 SG...

CVE-2026-72088

The CVE-2026-72088 entry concerns the Linux kernel SCSI HPSA driver IOACCEL2 reset path. The root cause was a DMA mapping leak when phys_disk->in_reset is set, causing an early return without cleaning up resources allocated for the command. The fix adds proper error cleanup: unmapping the IOAC...

EUVD-2026-59046

In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If physdisk-inreset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 SG...

CVE-2026-72009 pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI The MIPI DSI and CSI domains share control bits for clock and reset, which can lead to incorrect behavior if one domain disables the shared resource while the oth...

CVE-2026-68475

Mode C: The CVE-2026-68475 entry concerns a Linux kernel sunxi reset path. In sunxi_reset_init(), if ioremap() fails, the memory region obtained with request_mem_region() is not released, causing a resource leak. The fix adds an err_mem_region label to properly release that memory region before f...

CVE-2026-68475 reset: sunxi: fix memory region leak on ioremap failure

In the Linux kernel, the following vulnerability has been resolved: reset: sunxi: fix memory region leak on ioremap failure In sunxiresetinit, when ioremap fails, the memory region obtained via requestmemregion is not released, leading to a resource leak. Add an errmemregion label to properly...

PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership

...

EUVD-2026-58821

A flaw was found in Red Hat Quay's Stripe billing webhook handler. This vulnerability allows an unauthenticated attacker to forge billing events by sending crafted JSON requests to the /webhooks/stripe endpoint without validating the Stripe-Signature header. Successful exploitation can lead to th...

PT-2026-72852

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the radeon ring restore function when radeon ring lock fails. The radeon ring restore function is responsible for freeing the data buffer allocated by radeon ring...

CVE-2026-74416: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix memory leak in radeonringrestore on lock failure radeonringrestore takes ownership of the data buffer allocated by radeonringbackup. The caller radeongpureset only frees it in the non-restore branch; in the restor...

PT-2026-72793

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu coredump ring dump The ring content dump in amdgpu coredump uses two separate loops over adev-rings: the first counts rings with unsignalled fences to size the allocation, and th...

PT-2026-72613

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs when resetting all Virtual Functions VFs on VFs that have FDIR filters enabled. This happens because CTRL VSIs are only invalidated rather than being freed. The...

CVE-2026-15689: Weak Password Recovery Mechanism for Forgotten Password

Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in defaultemailpasswordreset and defaultwelcomesend. Both default emails emit a link of the form $base/login/$code, whose authority comes from the request Host header,...

PT-2026-72277

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A DMA mapping leak exists in the hpsa SCSI driver during the IOACCEL2 reset path. When the phys disk-in reset variable is set, the system returns directly without releasing resources...