SUSE CVE-2026-64054

In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request netshapernlgroupdoit does not deduplicate NETSHAPERALEAVES entries. When userspace supplies the same leaf handle twice, the same old-parent pointer lands twice in oldnodes. Th...

CVE-2026-64054

In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request netshapernlgroupdoit does not deduplicate NETSHAPERALEAVES entries. When userspace supplies the same leaf handle twice, the same old-parent pointer lands twice in oldnodes. Th...

CVE-2026-64054

CVE-2026-64054 is a Linux kernel vulnerability in the net_shaper (Network Shaper API) subsystem. The function net_shaper_nl_group_doit() fails to deduplicate NET_SHAPER_A_LEAVES entries, so when userspace supplies the same leaf handle twice, the same parent pointer is stored twice in old_nodes[],...

CVE-2026-64054 net: shaper: reject duplicate leaves in GROUP request

In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request netshapernlgroupdoit does not deduplicate NETSHAPERALEAVES entries. When userspace supplies the same leaf handle twice, the same old-parent pointer lands twice in oldnodes. Th...

CVE-2026-64054

In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request netshapernlgroupdoit does not deduplicate NETSHAPERALEAVES entries. When userspace supplies the same leaf handle twice, the same old-parent pointer lands twice in oldnodes. Th...

CVE-2026-64054: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP request netshapernlgroupdoit does not deduplicate NETSHAPERALEAVES entries. When userspace supplies the same leaf handle twice, the same old-parent pointer lands twice in oldnodes. Th...

PT-2026-61371

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the network shaper component where the net shaper nl group doit function fails to deduplicate NET SHAPER A LEAVES entries. If a user provides the same leaf handle multip...

CVE-2025-1408 ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.4 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests Management

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pmdeclinejoingrouprequest and pmapprovejoingrouprequest functions in all versions up to, and including, 5.9.4.4. This makes it...

CVE-2025-1408 ProfileGrid – User Profiles, Groups and Communities <= 5.9.4.4 - Missing Authorinzation to Authenticated (Subscriber+) Join Group Requests Management

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pmdeclinejoingrouprequest and pmapprovejoingrouprequest functions in all versions up to, and including, 5.9.4.4. This makes it...

PT-2025-12465

Name of the Vulnerable Software and Affected Versions The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress versions up to, and including, 5.9.4.4 Description The issue is related to unauthorized modification of data due to a missing capability check on the pm decline join...