CVE-2026-80565 crypto: qce - fix error path in devm_qce_register_algs

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devmqceregisteralgs If ops-registeralgs fails, the error path repeatedly calls the same ops-unregisteralgs from the failed registration. Use the loop index to unregister the previously registered...

CVE-2026-80565 crypto: qce - fix error path in devm_qce_register_algs

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devmqceregisteralgs If ops-registeralgs fails, the error path repeatedly calls the same ops-unregisteralgs from the failed registration. Use the loop index to unregister the previously registered...

CVE-2026-80559

CVE-2026-80559 is a Linux kernel vulnerability in the sur40 input driver. The root cause is an incorrect registration ordering in sur40_probe(): input_register_device() was called before the V4L2 video device and vb2_queue were fully initialized. If userspace opened the input device immediately, ...

CVE-2026-80538

CVE-2026-80538 affects the XFS filesystem in the Linux kernel. The function xfs_rtginode_ensure() incorrectly treats all errors returned by xfs_rtginode_load() other than -ENOENT as success, which can leave the realtime group inode unset after an I/O, allocation, or corruption error. The growfs u...

CVE-2026-80538 xfs: propagate errors from xfs_rtginode_load

In the Linux kernel, the following vulnerability has been resolved: xfs: propagate errors from xfsrtginodeload xfsrtginodeensure treats every xfsrtginodeload error other than -ENOENT as success. This can leave the realtime group inode unset after an I/O, allocation, or corruption error. Growfs th...

CVE-2026-80538 xfs: propagate errors from xfs_rtginode_load

In the Linux kernel, the following vulnerability has been resolved: xfs: propagate errors from xfsrtginodeload xfsrtginodeensure treats every xfsrtginodeload error other than -ENOENT as success. This can leave the realtime group inode unset after an I/O, allocation, or corruption error. Growfs th...

CVE-2026-80534 xfs: fix ilock leak on error in xfs_dq_get_next_id

In the Linux kernel, the following vulnerability has been resolved: xfs: fix ilock leak on error in xfsdqgetnextid xfsdqgetnextid takes the quota inode ILOCK before calling xfsireadextents. If xfsireadextents fails, the function returns immediately without releasing the lock, leaking the quota...

CVE-2026-80529

CVE-2026-80529 affects the Linux kernel's XFS filesystem . In xlog_recover_dquot_commit_pass2() , a recovered dquot is validated via xfs_dqblk_verify() ; on failure the function sets error = -EFSCORRUPTED and jumps to out_release , which unconditionally returns 0. This discards the corruption err...

CVE-2026-80529 xfs: don't swallow dquot recovery verification errors

In the Linux kernel, the following vulnerability has been resolved: xfs: don't swallow dquot recovery verification errors xlogrecoverdquotcommitpass2 validates the recovered dquot with xfsdqblkverify and, on failure, sets error = -EFSCORRUPTED and jumps to outrelease. But outrelease unconditional...

CVE-2026-74754

CVE-2026-74754 is a race condition in the Linux kernel SCSI core. The shost->eh_noresume flag is consulted twice per error-handling (EH) iteration—once before scsi_autopm_get_host() and once before scsi_autopm_put_host(). If a power-management path (e.g., ufshcd_set_dev_pwr_mode()) flips this ...

CVE-2026-74734 firewire: ohci: fix NULL pointer dereference in ar_context_release

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

CVE-2026-74734

A NULL pointer dereference in the Linux kernel's firewire/ohci driver can crash the kernel. During early probe failure (e.g., pcim_enable_device() or MMIO mapping failure), the devres cleanup calls ar_context_release(), which dereferences ctx->ohci before verifying the context was ever initial...

php_filter_chains_oracle_exploit

PHP filter chains: lettura di file da oracolo basato su errori Una CLI per sfruttare parametri affetti dalla lettura di file causata dall'oracolo basato su errori delle catene di filtri PHP. Può essere usata per esfiltrare il contenuto di un file locale quando viene passato a funzioni vulnerabili...

CVE-2019-14529

CVE-2019-14529 Vulnerabilità di SQL Injection multipla nel progetto OpenEMR Funzione vulnerabile nel file: /openemr/interface/forms/eyemag/save.php Condizioni : qualsiasi utente autorizzato Versioni vulnerabili: 5.0.2, Corretta nella versione 5.0.2. Descrizione Ci sono due funzioni: 1. "storePDF"...

cpanel-xss-177

xss - cpanelCVE-2023-29489 cPanel in den Versionen 11.102.0.x 11.102.0.31 / 11.106.0.x 11.106.0.x / 11.108.0.x 11.108.0.13 / 11.109.9999.x 11.109.9999.116 ist anfällig für Reflected Cross-Site Scripting über speziell gestaltete Anfragen an die Web-Call-ID, wenn diese auf der Fehlerseite für cpsrv...

CVE-2017-7308

CVE-2017-7308 CVE-ID: CVE-2017-7308 Veröffentlichungsdatum: 2017-03-29T20:59:00.373 Basis-Score CVSS 3.0/3.1: 7.8 Beschreibung: Die Funktion packetsetring in net/packet/afpacket.c im Linux-Kernel bis 4.10.6 validiert bestimmte Blockgrößendaten nicht ordnungsgemäß, was lokalen Benutzern ermöglicht...

CVE-2024-55374

CVE-2024-55374 Redcap 14.3.13 è vulnerabile all'enumerazione degli utenti perché restituisce messaggi di errore distinti a seconda che l'utente esista o meno. Ciò consente a un attaccante di inviare molteplici richieste di autenticazione HTTP per effettuare attacchi di forza bruta. Sebbene esista...

CVE-2026-58108

The personal access token removal query selects from PersonalAccessTokenDB but filters on columns of Session, with no join between them. SQLAlchemy resolves that as an implicit cross join, so the filter does not constrain the delete to the calling user's own token in the way the code reads as...

CVE-2026-58108

Ericsson CodeChecker 's personal access token deletion query selects from PersonalAccessTokenDB but filters on Session columns without a join. SQLAlchemy resolves this as an implicit cross join, meaning the filter fails to constrain the delete to the calling user's own token. As a result, a suffi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098768)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098768 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O When completing emulation of...