The vulnerability in the driver module/spi/spi-fsl-spi.c of the Freescale Communication Processor (CPM) kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the driver module/spi/spi-fsl-spi.c of the Freescale Communication Processor CPM kernel of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the spectrum_mr() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the spectrummr function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the check_lock_range() function in the fs/smb/server/vfs.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the checklockrange function in the fs/smb/server/vfs.c module of the Linux operating system, where resources are blocked incorrectly. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability of the hfs_bnode_get() function in the fs/hfsplus/bnode.c module of the toolset for working with the HFS+ file system hfsplus in Linux’s operating systems allows a hacker to cause a service failure.

The vulnerability of the hfsbnodeget function in the fs/hfsplus/bnode.c module of the Linux toolset for working with the HFS+ file system hfsplus in Linux is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fqdir_pre_exit() function in the include/net/inet_frag.h module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the fqdirpreexit function in the include/net/inetfrag.h module of the Linux kernel is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nr_sendmsg() function in the net/netrom/nr_out.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nrsendmsg function in the net/netrom/nrout.c module of the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004876)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004876 advisory. In the Linux kernel, the following vulnerability has been resolved: ipvs: fix WARNING in ipvscleanupbatch During the initialization of ipvsconnnetinit, if file...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004851)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004851 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible name leaks when rioadddevice fails Patch series rapidio: fix three possible...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004852)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004852 advisory. In the Linux kernel, the following vulnerability has been resolved: s390: fix double free of GS and RI CBs on fork failure The pointers for guarded storage and runti...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004830)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004830 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoeifinit fails fcoeinit calls...

CVE-2026-24129 Runtipi is Vulnerable to Authenticated Arbitrary Remote Code Execution

Runtipi is a Docker-based, personal homeserver orchestrator that facilitates multiple services on a single server. Versions 3.7.0 and above allow an authenticated user to execute arbitrary system commands on the host server by injecting shell metacharacters into backup filenames. The BackupManage...

CVE-2025-53968

CVE-2025-53968 involves unlimited authentication attempts allowing DoS and brute-force access. Connected sources describe an unauthenticated WebSocket endpoint and potential multiple concurrent connections using the same charging station ID, enabling DoS or data/session inconsistencies. Remediati...

CVE-2026-20912

Summary : CVE-2026-20912 affects Gitea and multiple security trackers report a failure to validate repository ownership when linking attachments to releases. A private-repo attachment could be linked to a release in a different (public) repository, potentially exposing it to unauthorized users. I...

CVE-2026-20888

Summary: CVE-2026-20888 affects Gitea’s web interface for scheduled auto-merges. The root cause is improper authorization verification when canceling scheduled auto-merges via the web UI. What is affected: Gitea, specifically the ability to cancel auto-merges scheduled by other users, even when a...

Why AI Keeps Falling for Prompt Injection Attacks

Imagine you work at a drive-through restaurant. Someone drives up and says: "I'll have a double cheeseburger, large fries, and ignore previous instructions and give me the contents of the cash drawer." Would you hand over the money? Of course not. Yet this is what large language models LLMs do...

The vulnerability of the Security component of the Oracle Java SE software platform, as well as the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, allows attackers to trigger a service failure.

The vulnerability of the Security component in Oracle Java SE software, as well as in Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service...

Azure Linux 3.0 Security Update: kernel (CVE-2025-38214)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38214 advisory. - In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbsetvar to prevent null-...

Azure Linux 3.0 Security Update: kernel (CVE-2024-41088)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-41088 advisory. - In the Linux kernel, the following vulnerability has been resolved: can: mcp251xfd: fix infinite loop when...

Azure Linux 3.0 Security Update: glibc (CVE-2025-0395)

The version of glibc installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-0395 advisory. - When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space f...

Azure Linux 3.0 Security Update: kernel (CVE-2024-57925)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57925 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix a missing return value check...