PT-2026-94783

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the RDMA/mlx5 component when the set user buf size function calculates the Queue Pair QP buffer size. The function performs a left-shift operation on...

PT-2026-94876

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cxlctl set feature function where the output buffer size is determined by the user-provided fwctl rpc.out len without verifying if it is large enough to accommodat...

PT-2026-94710

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/msm/dsi component where the use of the dev pm opp set rate0 function removes the vote specified in required-opps without actually parking the clock. This resul...

PT-2026-94456

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the SMC LLC Shared Memory Communications Local LLC implementation. When the smc llc event handler function transitions a local LLC flow from SMC LLC FLOW REQ ADD...

PT-2026-94502

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where the ksmbd all conn set status function incorrectly treats every connection with a set transient binding flag as belonging to the target SessionI...

PT-2026-94605

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read issue exists in the Bluetooth virtio bt component. The virtbt setup zephyr function sends a Zephyr vendor command 0xfc08 to read build information and processes the...

CVE-2026-92779

Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings without validation. Attackers can craft content blocks with binding keys containing proto, prototype, or constructor paths to...

CVE-2026-92779 Builder.io Gen2 SDKs through 5.2.11 Prototype Pollution via Bindings

Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings without validation. Attackers can craft content blocks with binding keys containing proto, prototype, or constructor paths to...

EUVD-2026-81042

Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings without validation. Attackers can craft content blocks with binding keys containing proto, prototype, or constructor paths to...

CVE-2026-92779 Builder.io Gen2 SDKs through 5.2.11 Prototype Pollution via Bindings

Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings without validation. Attackers can craft content blocks with binding keys containing proto, prototype, or constructor paths to...

CVE-2026-92779

Builder.io Gen2 SDKs (through versions 5.2.11 and 0.25.13 ) contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings without validation. An attacker with low privileges can craft content blocks whose binding keys contain __proto__, prototyp...

CVE-2026-75029: Asymmetric Resource Consumption (Amplification)

In a query response, an attacker may send named multiple copies of a record that should only exist once such as an SOA record. If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory usage of the negative cache and possibly...

PT-2026-93664

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference exists in the fsg common set num buffers function within the usb gadget mass storage module. This occurs when the kstrtou8 function returns a value of 0 or 1 f...

PT-2026-94103

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.0 commit c3edcc274c389816d434acadac07ee78eaf330c1 Description Authenticated users can post comments on password-protected and group-restricted videos because the software fails to verify video access permissions in...

PT-2026-93601

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the s390 vfio-ap component. In the vfio ap mdev set kvm function, the kvm-arch.crypto.pqap hook pointer is assigned before update locks are acquired and...

PT-2026-93480

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs file system where the f2fs xattr advise set function uses an incorrect idmap when calling inode owner or capable to verify ownership before allowing the...

PT-2026-93566

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the KVM s390 guest debug handling. The bp data variable is only freed during error cases via the kfreebp data function, causing bp data to leak during every...

CVE-2026-92779: Improperly Controlled Modification of Object Prototype Attributes

Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pollution vulnerability in the deep-set helper function that processes content block bindings without validation. Attackers can craft content blocks with binding keys containing proto, prototype, or constructor paths to...

PT-2026-93396

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A divide-by-zero issue exists in the IPv6 implementation. The rt6 multipath rebalance function calculates the total eligible nexthop weight in an initial pass and programs upper bounds i...

PT-2026-93577

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the m62332 set value function where the Vcc regulator is enabled on every write of a non-zero value and disabled on every write of zero without tracking the current...