PT-2026-72944

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kernel-side hash adds mtype resize copies comment pointers with memcpy, not the comment objects themselves. During the window after an entry has been copied but before the table swap...

PT-2026-72923

In the Linux kernel, the following vulnerability has been resolved: tracing: Check return value of register event in trace module add events trace module add events ignores the return value of register event and unconditionally calls add event to tracers for each event. If register event fails fo...

GO-2026-5940 vulnerabilities

Vulnerabilities for packages: keda-http-add-on, keda-http-add-on-fips...

EUVD-2026-57898

Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on = 2.5.1 versions...

UBUNTU-CVE-2026-73622

GitPython before 3.1.55 fails to disable environment variable expansion in Remote.create and Submodule.add URL handling, allowing attackers to exfiltrate secrets by supplying URLs containing variable references. Attackers can craft URLs with environment variable tokens that are expanded into...

CVE-2026-19566

Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths. The encode method accepts any prefix length matching 0|1-90-9 and passes it to width2bits, which builds the mask as '1' x $width + 8, one character per bit. The inc...

CVE-2026-73250

Notepad++ prior to 8.9.7 on Windows 11 x64/ARM64: the installer passes the attacker-controlled installation directory into a PowerShell -Command string used by RegisterMSIX to invoke Add-AppxPackage, enabling PowerShell subexpression syntax (e.g., $()) in the path to execute commands in the insta...

UBUNTU-CVE-2026-73281

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected] extension...

CVE-2026-73281

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected] extension...

EUVD-2026-56890

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected] extension...

CVE-2026-73281

CVE-2026-73281 affects the ssh-agent component of OpenSSH prior to version 10.5. The issue arises from a misinteraction between agent locking and the [email protected] extension, allowing some operations that were intended to be local to occur remotely (e.g., adding tokens or using keys). ...

...[ More ]

A proof of concept exploit for a local privilege escalation vulnerability in QEMU Guest Agent version 11.0.3. The vulnerability exists in the guest-ssh-add-authorized-keys handler, where improper handling of symbolic links allows an unprivileged guest user to redirect root-privileged file...

EUVD-2026-55603

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: publish QP after initialization siwcreateqp currently calls siwqpadd before the queues, CQ pointers, state, completion, and device list entry are ready. A QPN lookup can therefore reach a QP that is still being...

CVE-2026-68416

Linux kernel CVE-2026-68416 fixes a double-free in add_mtd_device() for MTD partitions and prevents a WARN_ON by overriding dev->type and dev->release before put_device() in error paths. The patch ensures mtd_release() is not called during error handling, avoiding freeing mtd_info twice. Fo...

EUVD-2026-55602

In the Linux kernel, the following vulnerability has been resolved: mtd: fix double free and WARNON in addmtddevice error paths When deviceregister or mtdnvmemadd fails inside addmtddevice for a partition, the error handling triggers mtdrelease via putdevice or deviceunregister. mtdrelease calls...

CVE-2026-68317

The CVE-2026-68317 entry concerns the Linux kernel pds_core component, focusing on races when adding or deleting an auxiliary device slot (pf->vfs[vf_id].padev). Root cause: both the VF and PF paths (pdsc_reset_done and devlink enable_vnet/disable_vnet) serialize on config_lock but fail to gua...

CVE-2026-68128 ice: reject out-of-range ptype in ice_parser_profile_init

In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in iceparserprofileinit setbitrslt-ptype, prof-ptypes operates on a DECLAREBITMAP of ICEFLOWPTYPEMAX 1024 bits. Nothing prevents a malicious VF from providing ptype = 1024 through VIRTCHNL, resultin...

CVE-2026-68099

The CVE-2026-68099 vulnerability is in ksmbd within the Linux kernel, where check_add_overflow() could cause an on-wire NT ACL to be malformed. In the affected DACL builders (set_posix_acl_entries_dacl() and set_ntacl_dacl()), overflow handling previously allowed the loop to break while the desti...

CVE-2026-64564

A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. A remote attacker could send a specially crafted sequence of ASCONF Add IP Address Configuration chunks, including DEL-IP Delete IP Address parameters, to trigger a use-after-free condition...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fixed a potential UAF in xeoaaddconfigioctl In xeoaaddconfigioctl, we accessed oaconfig-id after dropping metricslock. Since this lock protects the lifetime of oaconfig, an attacker could guess the id and call...