PT-2026-79701

In the Linux kernel, the following vulnerability has been resolved: tcp: fix TFO max qlen accounting across reuseport migration A listener's TCP FASTOPEN max qlen stops being accurate and lets through far more pending Fast Open requests than it was configured for. This only shows up with SO...

Linux Distros Unpatched Vulnerability : CVE-2026-74696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: fix TFO maxqlen accounting across reuseport migration A listener's TCPFASTOPEN maxqlen stops being accurate and lets through far more pending Fast Open...

fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization

A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode Internationalized Domain Name - IDN hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when...

CVE-2026-74480

A flaw was found in the Linux kernel's network bridge module. When handling multicast fast-leave, a vulnerability exists where the system may attempt to access a port group after it has been deleted. This can occur if multicast-to-unicast was previously enabled and then disabled, leading to a sta...

CVE-2026-74358

A flaw was found in the ext4 filesystem component of the Linux kernel. On 64-bit systems, an incorrect mapping of wait/wake bits during fast commits could lead to unexpected behavior. This issue, if triggered, may result in system instability or data integrity problems...

Malicious code in fast-glob-fast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7695ac02a2492bbf3118fc68514378edb201a93183f2dcb0035727781f31d408 fast-glob-fast is a name-squat of the popular fast-glob package its repository field even points at mrmlnc/fast-glob. The declared postinstall hook...

CVE-2026-72243

A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux module. When using TCP Fast Open, SELinux failed to properly check connect-related permissions. This oversight could allow a local attacker to bypass SELinux network access controls, potentially enabling unauthorized network...

Security Bulletin: Multiple Vulnerabilities in IBM Data Product Hub

Summary Multiple vulnerabilities were addressed in IBM Data Product Hub version 5.3.1 Patch 11 Vulnerability Details CVEID:CVE-2026-16221 DESCRIPTION: Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal backslas...

ROOT-APP-NPM-CVE-2026-18446 CVE-2026-18446 in fast-uri - Patched by Root

Root has patched CVE-2026-18446 in the fast-uri package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-16221 CVE-2026-16221 in fast-uri - Patched by Root

Root has patched CVE-2026-16221 in the fast-uri package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-13676 CVE-2026-13676 in fast-uri - Patched by Root

Root has patched CVE-2026-13676 in the fast-uri package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-26278 CVE-2026-26278 in fast-xml-parser - Patched by Root

Root has patched CVE-2026-26278 in the fast-xml-parser package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-33036 CVE-2026-33036 in fast-xml-parser - Patched by Root

Root has patched CVE-2026-33036 in the fast-xml-parser package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-25896 CVE-2026-25896 in fast-xml-parser - Patched by Root

Root has patched CVE-2026-25896 in the fast-xml-parser package for Root:npm. Multiple fixed versions available...

SUSE CVE-2026-74480

In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group brmulticastleavegroup iterates mp-ports with pp = &p-next in its fast-leave path. After brmulticastdelpg removes p, continuing the loop advances pp through the deleted entr...

CVE-2026-74480

In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group brmulticastleavegroup iterates mp-ports with pp = &p-next in its fast-leave path. After brmulticastdelpg removes p, continuing the loop advances pp through the deleted entr...

CVE-2026-74480

In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group brmulticastleavegroup iterates mp-ports with pp = &p-next in its fast-leave path. After brmulticastdelpg removes p, continuing the loop advances pp through the deleted entr...

CVE-2026-74480 net: bridge: stop fast-leave after deleting a port group

In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group brmulticastleavegroup iterates mp-ports with pp = &p-next in its fast-leave path. After brmulticastdelpg removes p, continuing the loop advances pp through the deleted entr...

EUVD-2026-59673

In the Linux kernel, the following vulnerability has been resolved: net: bridge: stop fast-leave after deleting a port group brmulticastleavegroup iterates mp-ports with pp = &p-next in its fast-leave path. After brmulticastdelpg removes p, continuing the loop advances pp through the deleted entr...

CVE-2026-74480

CVE-2026-74480 affects the Linux kernel networking bridge code. The fast-leave path in br_multicast_leave_group() can dereference a stale mp->ports entry after br_multicast_del_pg() removes a port group, enabling a scenario where multiple port groups for the same port/group with different sour...