The vulnerability of the `pin_user_pages_fast()` function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the pinuserpagesfast function in the Linux operating system’s kernel is related to deficiencies in error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260625-73-0007

The vulnerability in gnutls is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-52267

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Arithmetic issues exist in the dma length function within the accel/ethosu component. The function calculates DMA region usage based on command stream values to update the region size...

PT-2026-52296

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 nv component regarding the handling of XN0 when FEAT XNX is not present. The use of the FIELD PREP function on the mask intended to clear XN0 is incorrec...

PT-2026-52318

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the network subsystem where the skb is err queue function incorrectly identifies AF PACKET sockets as error-queue skbs because it relies solely on the PACKET OUTGOING...

PT-2026-52260

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu dma iova link swiotlb function when processing unaligned mappings divided into head, middle, and trailer parts. If the middle section is empty due to a lack ...

PT-2026-72325

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to July 2026 Description A double free issue exists in the xfrm component of the Linux kernel. The nat keepalive send function frees the keepalive skb socket buffer whenever the IPv4 or IPv6 send helper reports an...

UBUNTU-CVE-2026-12245

NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a DNS query over a DoT connection, and closing the connection without reading the response...

Google Chrome Bluetooth memory error and reference vulnerability

Google Chrome is a cross-platform web browser developed by Google. It primarily provides features for web browsing, extension support, and multi-platform synchronization. Google Chrome has a memory error reference vulnerability, which stems from the Bluetooth component failing to properly manage...

Linux Distros Unpatched Vulnerability : CVE-2026-53066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/sun4i: backend: fix error pointer dereference The function drmatomicgetplanestate can return an error pointer and is not checked for it. Add error pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-53126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - blk-cgroup: fix disk reference leak in blkcgmaybethrottlecurrent Add the missing putdisk on the error path in blkcgmaybethrottlecurrent. When blkcg lookup, blkg...

PT-2026-52261

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the iomap subsystem during buffered read failures. The function iomap finish folio read reports errors using fserror report iofolio-mapping-host, ... after...

PT-2026-52250

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel within the hugetlb folio copy paths. When alloc hugetlb folio is used to allocate a hugetlb folio, it consumes a Virtual Memory Area VMA reservation. ...

PT-2026-52273

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs during PCIe error recovery. When a Root Port or Downstream Port detects PCIe errors, recovery services run on all subordinate devices regardless of thei...

PT-2026-52210

Name of the Vulnerable Software and Affected Versions NSD version 4.13.0 Description A heap use-after-free bug exists when logging errors on TLS connections. This issue can be triggered by sending a DNS query over a DNS over TLS DoT connection and closing the connection before reading the respons...

PT-2026-52347

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Bluetooth HCI UART configuration during early failures in the hci alloc dev function. When device initialization fails before hci register dev completes, the...

ROS-20260625-73-0022

The vulnerability in Apache Kafka is related to incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-53082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: hamradio: 6pack: fix uninit-value in sixpackreceivebuf sixpackreceivebuf does not properly skip bytes with TTY error flags. The while loop iterates through...

CVE-2026-49979

Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.99, the POST /api/v1/admin/send-test-email endpoint accepts attacker-controlled smtpHost and smtpPort values and establishes a raw JavaMail TCP connection without any IP validation. This completely bypasses...

EUVD-2026-39129

Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.99, the POST /api/v1/admin/send-test-email endpoint accepts attacker-controlled smtpHost and smtpPort values and establishes a raw JavaMail TCP connection without any IP validation. This completely bypasses...