CVE-2026-64036

The CVE-2026-64036 issue affects the Linux kernel cgroup/rstat path. The vuln arises because css_rstat_updated(), a BPF kfunc, accepts a caller-provided cpu value used for per-cpu rstat lookups without validating it against a valid CPU. A BPF iter/cgroup program with CAP_BPF and CAP_PERFMON could...

CVE-2025-11032: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This issue affects some unknown processing of the file /Profilers/PriProfile/COUNT3s6.php. Executing manipulation of the argument CPU can lead to sql injection. The attack may be performed from...