CVE-2026-98124

A flaw was found in the Linux kernel's SMB Server Message Block client subsystem. When file modification operations such as fallocate range requests are performed on a mounted network share, the system fails to invalidate the local file system cache FS-Cache. This flaw allows a local user to read...

kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps

A flaw was found in the libceph component of the Linux kernel. A remote attacker could send a specially crafted monitor map monmap that advertises zero monitors. This malformed monmap is incorrectly processed as valid, which can lead to a client crash when attempting to open a session. This...

EUVD-2026-88260

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...

EUVD-2026-88258

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...

CVE-2026-86334

Path traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all platforms allows a remote malicious or machine-in-the-middle image server to overwrite arbitrary local files and execute code on the client system via a...

CVE-2025-14181

A flaw was found in PHP. A malicious server can cause a Denial of Service DoS by exploiting an improper buffer size check in the Simple Object Access Protocol SOAP client during HTTP response parsing. When responding to a request, the server can supply crafted data that triggers an integer...

CVE-2026-93801

A flaw was found in the Linux kernel's SMB Server Message Block client. Certain file information structures allocated on the stack are not zero-initialized, leaving them containing random data when specific fields are not explicitly set. A local user performing file operations on a mounted SMB...

kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps

A flaw was found in the libceph component of the Linux kernel. A remote attacker could send a specially crafted monitor map monmap that advertises zero monitors. This malformed monmap is incorrectly processed as valid, which can lead to a client crash when attempting to open a session. This...

CVE-2026-93794

A flaw was found in the Linux kernel's SMB Server Message Block client. A local user can cause data corruption when performing hole-punching operations on a mounted SMB share. Because dirty memory pages are not flushed prior to punching a hole, uncommitted cached data can subsequently be written...

CVE-2026-93787

A flaw was found in the Linux kernel's SMB Server Message Block client subsystem. When a user lists files in a directory on a mounted share, a malicious SMB server can return a crafted directory entry with an oversized filename length. Because the client fails to verify that the filename remains...

Security Bulletin: Multiple Security Vulnerabilities in Apache HttpComponents Client affect IBM Content Navigator

Summary Apache HttpComponents Client is affected by two vulnerabilities CVSS up to 9.1, Critical. CVE-2026-71290 CVSS 9.1 is an improper TLS hostname verification flaw in the async HttpClient versions 5.4 and later where HostnameVerificationPolicyBUILTIN has no effect, allowing a network attacker...

CVE-2026-94286

An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 could be used by malicious X servers to crash attached X clients...

CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

UBUNTU-CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94286

The libXtst library (versions prior to 1.2.6 ) contains an out-of-bounds read vulnerability within its RECORD reply parser . This flaw could be exploited by malicious X servers to cause a crash of attached X clients. No specific remediation versions or exploit links are provided in the documents.

EUVD-2026-88175

An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...

CVE-2026-94283 Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser

An out-of-bounds read vulnerability in libX11's XIM X Input Method attribute parser in libX11 before 1.8.14 could be used by malicious X servers to crash attached X clients...

EUVD-2026-88168

An out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion in libXi before 1.8.4 could be used by malicious X server to crash an attached X client...

CVE-2026-94282

An out-of-bounds read exists in libXi 's XI2 enter/leave/focus cookie conversion affecting versions before 1.8.4 . This vulnerability could be exploited by a malicious X server to crash an attached X client. No specific exploit information or direct mitigation details are provided in the documents.