CVE-2026-25127

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the server does not properly validate user permission. Unauthorized users can view the information of authorized users. Version 8.0.0 fixes the issue...

kernel: ext4: fix use-after-free in ext4_orphan_cleanup

A use-after-free vulnerability was found in the ext4 filesystem's orphan inode cleanup routine in the Linux kernel. When ext4inodeattachjinode fails with -ENOMEM during orphan cleanup at mount time, the error is not properly propagated. The inode is freed via iput, but the orphan list still...

SUSE CVE-2026-25795

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...

SUSE CVE-2026-27623

Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with network access to Valkey can cause the system to abort by triggering an assertion. When processing incoming requests, the Valkey system does not properly reset the networking...

The vulnerability of the `snd_jack_dev_register()` function in the sound/core/jack.c module allows a hacker to cause a service failure in Linux operating systems with integrated audio cards.

The vulnerability of the sndjackdevregister function in the sound/core/jack.c module, which supports audio cards in Linux operating systems, is related to the assignment of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the extcon_dev_register() function in the drivers/extcon/extcon.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the extcondevregister function in the drivers/extcon/extcon.c module of the Linux kernel is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the trace_event_buffer_lock_reserve() function in the kernel/trace/trace.c module, which supports Linux operating system kernel tracing, allows a attacker to cause a service failure.

The vulnerability of the traceeventbufferlockreserve function in the kernel/trace/trace.c module, which supports Linux operating system kernel tracing, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow ...

Vulnerability of the nvme_alloc_admintags() function in the drivers/nvme/host/pci.c module – The NVME kernel support driver in the Linux operating system allows a hacker to trigger a service failure.

Vulnerability of the nvmeallocadmintags function in the drivers/nvme/host/pci.c module – The Linux operating system’s NVME kernel support driver is vulnerable due to a pointer dereferencing issue involving NULL pointers. Exploiting this vulnerability could allow an attacker to cause a service...

Vulnerability of the ata_host_alloc_pinfo() function in the drivers/ata/libata-core.c module – The SATA/PATA driver of the Linux operating system allows a hacker to trigger a service failure.

Vulnerability of the atahostallocpinfo function in the drivers/ata/libata-core.c module – The Linux kernel’s SATA/PATA driver relies on the assignment of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

langgraph 代码问题漏洞

Langgraph is a large-scale model framework developed by LangChain. Versions of Langgraph prior to 4.0.0 had code-related vulnerabilities. These vulnerabilities stemmed from the caching layer’s ability to deserialize cached values using pickle.loads when msgpack serialization fails, potentially...

The vulnerability of the gpio_keys_quiesce_key() function in the drivers/input/keyboard/gpio_keys.c file of the Linux kernel’s keyboard support driver allows a hacker to induce a system halt.

The vulnerability of the gpiokeysquiescekey function in the drivers/input/keyboard/gpiokeys.c file of the Linux kernel’s keyboard support driver is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the cifs_kill_sb() function in the fs/cifs/cifs.c module of the Linux kernel file system support mechanism allows a hacker to cause a service failure.

The vulnerability of the cifskillsb function in the fs/cifs/cifs.c module of the Linux operating system’s file system support module is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mc_probe() function in the sound/soc/intel/boards/sof_sdw.c file allows a hacker to cause a system failure in the Linux operating system’s SoC kernel support for audio.

The vulnerability of the mcprobe function in the sound/soc/intel/boards/sofsdw.c file, which is part of the Linux operating system’s audio support for SoC cores, involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the hdlcdev_init() function in the drivers/tty/synclink_gt.c module – This driver for console TTY in the Linux kernel allows a hacker to cause a service failure.

Vulnerability of the hdlcdevinit function in the drivers/tty/synclinkgt.c module – The console TTY driver for the Linux operating system is vulnerable due to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mpol_rebind_preferred() function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the mpolrebindpreferred function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a attacker to cause a service failure...

PT-2026-57177

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 Description A use-after-free issue exists in the PDB decoder. This occurs when the system uses a stale pointer following a memory allocation failure. An attacker can exploit this by processing specially...

The vulnerability of the ext4_convert_inline_data() function in the fs/ext4/inline.c module of the Ext4 file system support for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ext4convertinlinedata function in the fs/ext4/inline.c module of the Ext4 file system support for the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause...

Vulnerability of the lpfc_abort_handler() function in the drivers/scsi/lpfc/lpfc_scsi.c module – The SCSI device support driver for the Linux operating system, which allows a hacker to trigger a service failure.

Vulnerability of the lpfcaborthandler function in the drivers/scsi/lpfc/lpfcscsi.c module – The Linux SCSI device driver has synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the common() function in the arch/x86/kernel/asm-offsets.c module, which supports the x86 kernel of the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the common function in the arch/x86/kernel/asm-offsets.c module, which is part of the Linux operating system’s x86 kernel support, involves a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ext4_resize_begin() function in the fs/ext4/resize.c module of the Ext4 file system support module in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4resizebegin function in the fs/ext4/resize.c module of the Linux file system support module is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...