CVE-2026-64093

A flaw was found in the batman-adv component of the Linux kernel. A race condition exists where a timer can be re-armed after its associated reference has been removed during cleanup. This can occur when batadvtpsendercleanup attempts to shut down a timer, but a separate execution context re-arms...

CVE-2026-64163

A flaw was found in the Linux kernel's kprobes test module. Improper cleanup of kprobes and kretprobes kernel probes used for debugging and tracing between test runs can lead to registration failures. Repeated execution of the kprobes sanity tests can cause the kernel to crash, resulting in a...

Gitea: Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content

When a collaborator with admin permission on a private repo creates a webhook, that webhook keeps firing after the collaborator's access is revoked. Gitea's revocation cleanup DeleteCollaboration removes the collaboration record, recalculates accesses, drops watches, and unassigns issues — but it...

PT-2026-95652

Name of the Vulnerable Software and Affected Versions Suricata versions 8.0.0 through 8.0.5 Description The AppLayerParserSetTransactionInspectId function in src/app-layer-parser.c uses an inverted guard, which results in only already-inspected transactions being marked as inspected. When flows a...

PT-2026-63306

Name of the Vulnerable Software and Affected Versions Gitea version 1.25.4 Description A flaw exists where webhooks created by a collaborator with admin permissions on a private repository continue to trigger after the collaborator's access has been revoked. The DeleteCollaboration function in...

PT-2026-62124

The CONFIG USERSPACE syscall verifier z vrfy k poll in kernel/poll.c allocates a kernel-side copy of the user-supplied k poll event via z thread malloc and then validates each event's object handle. Before this fix, validation used K OOPSK SYSCALL OBJ... inline inside the loop, which kills the...

Amazon Linux 2 : libssh2, --advisory ALAS2-2026-3813 (ALAS-2026-3813)

The version of libssh2 installed on the remote host is prior to 1.4.3-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3813 advisory. libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses i...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2730)

According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Input: alps - fix use-after-free bugs caused by dev3registerworkCVE-2025-68822 ext4: reject mount if bigalloc with sfirstdatablock !=...

GHSA-FMM7-X4GX-8JHR File Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanup

Summary A scoped, non-admin File Browser user holding only the Create permission can delete arbitrary files outside their scope other tenants' data, and the application's own database via the upload failure-cleanup path. This is an incomplete fix of CVE-2026-54094: the v2.63.14 ScopedFs containme...

File Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanup

Summary A scoped, non-admin File Browser user holding only the Create permission can delete arbitrary files outside their scope other tenants' data, and the application's own database via the upload failure-cleanup path. This is an incomplete fix of CVE-2026-54094: the v2.63.14 ScopedFs containme...

MGASA-2026-0273 Updated libssh2 packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Heap Buffer Over-read via sftpsymlink in sftp.c. CVE-2025-15661 libssh2 userauth.c userauthpassword integer overflow. CVE-2026-7598 Pre-Authentication DoS via SSHMSGEXTINFO Handler. CVE-2026-55199 Out-of-Bounds Write via Unchecked packetlength in...

Updated libssh2 packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Heap Buffer Over-read via sftpsymlink in sftp.c. CVE-2025-15661 libssh2 userauth.c userauthpassword integer overflow. CVE-2026-7598 Pre-Authentication DoS via SSHMSGEXTINFO Handler. CVE-2026-55199 Out-of-Bounds Write via Unchecked packetlength in...

AZL-92858 CVE-2026-64205 affecting package kernel for versions less than 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: i2c: i801: fix hardware state machine corruption in error path A severe livelock and subsequent Hung Task panic were observed in the i2c-i801 driver during concurrent Fuzzing. The crash is caused by an unconditional hardware...

CVE-2026-64205

Summary: CVE-2026-64205 affects the Linux kernel i2c-i801 driver, where an unconditional hardware register cleanup in the error path could corrupt the SMBus hardware state machine during concurrent fuzzing, causing livelock and a Hung Task panic. Root cause: on i801_check_pre() failure (e.g., -EB...

CVE-2026-64205 i2c: i801: fix hardware state machine corruption in error path

In the Linux kernel, the following vulnerability has been resolved: i2c: i801: fix hardware state machine corruption in error path A severe livelock and subsequent Hung Task panic were observed in the i2c-i801 driver during concurrent Fuzzing. The crash is caused by an unconditional hardware...

CVE-2026-46412 Malicious code in @beproduct/nestjs-auth (0.1.2 through 0.1.19) — Mini Shai-Hulud worm

@beproduct/nestjs-auth is a NestJS authentication module for BeProduct IDS Identity Server with OpenID Connect support. Between 2026-05-11 20:19 UTC and 22:56 UTC, an attacker used a compromised npm publish token to publish 18 malicious versions of @beproduct/nestjs-auth 0.1.2 through 0.1.19. The...

CVE-2026-64058

A flaw was found in the Linux kernel's network file system netfs component. The netfsreadfolio function fails to wait for ongoing writeback operations to complete. This can lead to the system incorrectly trusting the dirty flag and prematurely cleaning up private data associated with a folio,...

NFSD: Fix SECINFO_NO_NAME decode error cleanup

...

Malicious code in @gocortexio/npmgremlinbox-osl-3-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d30579e205476f67d9146972cc0e2aabdd79345dabe3af1c9e0d07fd8d81a9f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gocortexio/npmgremlinbox-epl-2-0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 728df3c304b887b63c9511d43eddca5090e5c35bc4abdf77826acbe9325c5b31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...