Stop administrator login - Moderately critical - Access bypass - SA-CONTRIB-2026-183

This module enables sites to block access for the administrative user account user 1 or users with the administrator role. The module does not sufficiently enforce these access restrictions across all supported authentication mechanisms. As a result, a blocked administrative user may still be abl...

MiracleLinux 9 : coreutils-8.32-41.el9_8.1 (AXSA:2026-1880:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1880:05 advisory. coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 Tenable has extracted the preceding description block directl...

CVE-2026-93042

CVE-2026-93042 affects the Linux kernel dw-edma DMA engine driver. When a deferred STOP reaches the interrupt handler, the driver calls vchan_cookie_complete(), which schedules a callback for the active descriptor and leaves other issued or submitted descriptors queued—contrary to the DMA Engine ...

PT-2026-94513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An invalid pointer dereference occurs in the ksmbd stop durable scavenger function. This happens when ksmbd launch ksmbd durable scavenger fails to run the kernel thread, resulting in th...

PT-2026-94945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the mac80211 hwsim stop function when draining the data-pending queue. The process currently checks if the queue is empty using skb queue empty before calling...

PT-2026-94626

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the md stop function where the bitmap is destroyed before mddev detach is called. This sequence causes mddev detach to skip the bitmap ops-wait behind writes operation...

PT-2026-94455

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the net/smc module when the smc llc flow stop function resets a flow structure using a blind memset. If the flow-qentry variable is non-NULL, the pointer is...

CVE-2026-93149: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211hwsim: avoid NULL skb in stop queue drain mac80211hwsimstop drops any frames left in data-pending. The loop currently checks skbqueueempty and then dequeues separately. That split is racy with TX status handling,...

PT-2026-94404

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net: fec component where the fec ptp stop function is called unconditionally during device removal in fec drv remove and on the failed initialization path in fec...

coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values

A flaw was found in GNU coreutils, specifically in the unexpand utility. This vulnerability, a heap-based buffer overflow, occurs due to an integer overflow when unexpand processes unusually large tab stop values provided by a local attacker. This can lead to an undersized memory buffer, allowing...

PT-2026-93509

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An infinite loop may occur when the stop streaming function is called. This issue is addressed by implementing a bounded poll of the queue status that continues until the queues drain or...

PT-2026-93667

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the usb: typec: qcom-pmic component where the pdphy stop function disables IRQs but leaves reset work pending. If the IRQ handler schedules this work immediately befor...

PT-2026-93516

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the media TI VPE component where the vip stop streaming function fails to synchronize the hardirq handler or disable recovery work. This can lead to a use-after-free...

PT-2026-93542

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the airspy driver. The airspy disconnect function clears the s-udev variable while holding the v4l2 lock. However, if a user closes the device after ...

PT-2026-93507

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the wave5 media driver where the system fails to resume the device before setting the End of Stream EOS flag. The process of setting the EOS flag involves communicatin...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: kthread: Unpark only parks kthreads. Calling kthreadunpark unconditionally is mostly harmless when the kthread is already unparked. In that case, the wake-up call is simply ignored because the task is not in the TASKPARKED state...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In usbnet, there was a flaw where unregisternetdev was called before unbind. The commit with the commit ID 2c9d6c2b871d “usbnet: run unbind before unregisternetdev” was intended to fix a use-after-free issue when disconnecting US...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: SUNRPC: Fixed a server shutdown leak A race condition was addressed where kthreadstop might prevent threadfn from being called at all. If this occurs, the svcrqst will not be cleaned up properly...

Astra Linux – Vulnerability in Firefox

A stop condition for the iterator was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only affects the application when the profiler is running. This vulnerability affects Firefox versions less than 12...

CVE-2026-16726

A buffer overflow in the Panasonic Industry USB Driver for MINAS A5/A6 (an AC servo product) allows local attackers with low privileges to cause a denial of service by stopping Windows . The CVSS 4.0 score is 6.8 (MEDIUM) with a local attack vector, low complexity, no user interaction, and high a...