PT-2026-96558

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in oplock break notification smb2 oplock break noti reads opinfo-conn without any lock and dereferences it after two allocations which may sleep. When the durable handle owning the oplock is disconnected...

PT-2026-96492

In the Linux kernel, the following vulnerability has been resolved: libceph: validate OSD extent maps before cursor advance net/ceph/osd client.c:osd sparse read validates that the sparse-read data length matches the summed extent lengths, but it does not validate that each OSD-supplied extent is...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107281)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107281 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2isvalidoplockbreak Skip sessions that are being teared down...

PT-2026-90354

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the setuid or setgid bits are not properly cleared on the server when a file is written to. While the Virtual File System VFS strips these bits an...

CVE-2026-89634: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix ALIGN overflow in symlinkdata error context loop The check added by commit 7d9a7f1f96cd "smb/client: fix possible infinite loop and oob read in symlinkdata" compared the post-ALIGN length against the remaining...

PT-2026-90350

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the SMB client within the symlink data function. The issue occurs when the ALIGN macro is used to process ErrorDataLength. If ErrorDataLength is near UINT32...

PT-2026-90352

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the SMB client. When the free tgts function frees all structures within ce-tlist, the ce-tgthint variable continues to point to one of the freed cache df...

PT-2026-90376

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Network File System server NFSD during admin state revocation. The problem occurs because a stateid contains a pointer to the nfs4 client without...

CVE-2026-89636: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear ce-tgthint in freetgts When freetgts frees all structures in ce-tlist, ce-tgthint is left pointing to one of the freed cachedfstgt structures. If ce-tgthint is not reset before it is used later, it results in a...

PT-2026-90257

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SUNRPC component where the gss unwrap resp priv function improperly validates the RPCSEC GSS opaque length. Because the sum of offset and opaque len is computed...

CVE-2026-89707: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on followdown error nfsdcrossmnt initializes a local struct path with mntget and dget before calling followdown. On a negative return the error arm jumps to out without releasing those references: err =...

CVE-2026-89298: Exposure of Sensitive Information to an Unauthorized Actor

A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clients role accesses the client registration endpoint to retrieve client details. Due to a failure to mask sensitive...

PT-2026-89870

A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clients role accesses the client registration endpoint to retrieve client details. Due to a failure to mask sensitive...

PT-2026-96465

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear ce-tgthint in free tgts When free tgts frees all structures in ce-tlist, ce-tgthint is left pointing to one of the freed cache dfs tgt structures. If ce-tgthint is not reset before it is used later, it results ...

ROS-20260911-73-0035

The vulnerability of the Glic component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

PT-2026-89865

Name of the Vulnerable Software and Affected Versions compression versions prior to 1.8.2 Description This Node.js and Express compression middleware contains a memory leak. When a client aborts a connection while a compressed response is being transmitted, the zlib stream used for compression is...

CVE-2026-80926: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in oplock break notification smb2oplockbreaknoti reads opinfo-conn without any lock and dereferences it after two allocations which may sleep. When the durable handle owning the oplock is disconnected,...

PT-2026-90375

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the NFSD Network File System Daemon delegation handling. The problem occurs because nfs4 laundromat unhashes an expired delegation from cl delegations an...

Apache Artemis 1.3.0 < 2.45.0 / 2.50.0 < 2.57.0 Denial of Service (CVE-2026-57822)

The version of Apache Artemis formerly Apache ActiveMQ Artemis installed on the remote host is affected by a vulnerability: - When the broker is processing message-based management requests, sent by an authenticated messaging client that is authorized with MANAGE permission to perform...

AlmaLinux 9 : kernel (ALSA-2026:64808)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64808 advisory. kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933...