PT-2026-61127

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs file system during atomic write operations. When updating an atomic-write file, the f2fs write begin function may incorrectly use a COW Copy-on-Write inode to...

PT-2026-61110

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel KVM SVM implementation within the sev dbg crypt function. In the encryption path handled by sev dbg encrypt user, the per-iteration transfer length is...

PT-2026-61382

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.0.0-rc1 Description A kernel BUG occurs in the netfs component due to a VM BUG ON FOLIO issue within the netfs write begin function. This issue is triggered when folio unlock is called on a folio that is not locked,...

Linux Distros Unpatched Vulnerability : CVE-2026-63819

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix to do sanity check on f2fsgetnodefoliora kernel BUG at fs/f2fs/file.c:845! Oops: invalid opcode: 0000 1 SMP KASAN NOPTI CPU: 0 UID: 0 PID: 5336 Comm:...

Fedora 44 : openssh (2026-c9d8542bb3)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c9d8542bb3 advisory. - CVE-2026-59996: Fix remote glob result of .. causing files to be placed in unintended parent directories when scp performs remote-to-remote copy v...

PT-2026-61251

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the itg3200 read all channels function where an incorrect memory address is used during an I2C read operation. The function incorrectly uses the address of the local...

PT-2026-61325

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the rocket ioctl create bo function. The function inserts a GEM handle into the file's IDR using drm gem handle create before completing several...

PT-2026-61272

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the mm/vmalloc component where the get vm area node function incorrectly triggers a BUG a kernel panic when bottom halves BH are disabled. This occurs because the in...

PT-2026-61436

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An unprivileged local user can cause a host CPU to pin indefinitely. This occurs when L2TP CMD SESSION GET is issued on L2TP ATTR IFNAME concurrently with L2TP CMD SESSION CREATE and L2T...

PT-2026-61140

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An overflow occurs in the keyctl pkey params get 2 function due to an incorrect calculation of the internal output buffer length. This issue manifests when a buffer that is too small is...

Linux Distros Unpatched Vulnerability : CVE-2026-53368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: fix fsck inconsistency caused by incorrect natentry flag usage f2fsneeddentrymark reads natentry flags without mutual exclusion with the checkpoint path,...

Linux Distros Unpatched Vulnerability : CVE-2026-63805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: nx - fix nxcryptoctxexit argument nxcryptoctxshashexit calls nxcryptoctxexit with cryptoshashctx... but cryptoshashctx gives a nxcryptoctx , not a...

PT-2026-61491

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cfg80211 merge profile function, which is responsible for reassembling Multi-BSSID non-transmitted BSS profiles split across multiple MBSSID elements. The function...

PT-2026-61467

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter module, specifically within the nft inner component. In the error path, the local bh enable function is called before local unlock nested bh, which resul...

Linux Distros Unpatched Vulnerability : CVE-2026-63809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: use kvfree for replaced sysctl write buffer procsyscallhandler allocates its temporary sysctl buffer with kvzalloc and passes it to cgroupbpfrunfiltersysct...

Linux Distros Unpatched Vulnerability : CVE-2026-63818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - f2fs: validate orphan inode entry count f2fsrecoverorphaninodes trusts the orphan block entrycount when replaying orphan inodes from the checkpoint pack. A...

Rocket.Chat: Stored HTML Injection (CWE-79) via Livechat Visitor Name

Vulnerability description not provided...

EUVD-2025-210483

SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 fails to properly escape table and field names in the command-line export command. An authenticated System User with OWNER or EDITOR roles can create tables or fields with malicious names containing SurrealQL. When a...

CVE-2024-58359 SurrealDB before 2.1.0 Denial of Service via rand() Sorting

SurrealDB versions before 2.1.0 contain a denial of service vulnerability in the sorting mechanism when using ORDER BY rand clause. Authorized clients can execute queries with ORDER BY rand to trigger a panic in the sorting function, crashing the server...

EUVD-2024-55673

SurrealDB before 2.1.4 silently fails to overwrite table definitions when the DEFINE TABLE ... OVERWRITE clause is used on tables defined with TYPE RELATION. Because table definitions include the PERMISSIONS clause, an attempt to tighten a table's permissions via OVERWRITE does not take effect, a...