CVE-2026-98967

A flaw was found in the Linux kernel's cxgb4 network driver. During connection cleanup or error handling, the driver removes entries from an internal tracking table without disabling software interrupts. If concurrent network traffic triggers an interrupt on the same processor core during this...

CVE-2025-55315-detection-playground

Here are some tests that can be performed against these services to observe different behavior on GET/POST routes between the patched and unpatched versions of Kestrel. GET against unpatched sends 200 and socket remains open printf 'GET / HTTP/1.1\r\nHost: localhost\r\nTransfer-Encoding:...

EUVD-2026-105021

filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout...

GHSA-FJ95-FR6C-H845 filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its record

SoftReadWriteLock and AsyncSoftReadWriteLock, which wraps one refreshes its holder record the file under .rw/holders/ that says a process holds or wants the lock on every poll of a waiting acquire and on every heartbeat the periodic refresh a holder runs to keep its record fresh. It does so by...

CVE-2026-111496

Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next computed the next punctuation time as timestamp + intervalsMissed + 1 interval with no overflow check. A record with a timestamp at or near Long.MAXVALUE advances stream time to that value, so the next...

EUVD-2026-112171

Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next computed the next punctuation time as timestamp + intervalsMissed + 1 interval with no overflow check. A record with a timestamp at or near Long.MAXVALUE advances stream time to that value, so the next...

CVE-2026-99188

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac1000: clear the RGMII status interrupt Since commit 2e2c878a3141 "net: stmmac: remove SGMII/RGMII/SMII interrupt handling" nothing on the RGMII path reads GMACRGSMIIIS, so RGSMIIIS stays pending behind GMACINTMA...

EUVD-2026-111940

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac1000: clear the RGMII status interrupt Since commit 2e2c878a3141 "net: stmmac: remove SGMII/RGMII/SMII interrupt handling" nothing on the RGMII path reads GMACRGSMIIIS, so RGSMIIIS stays pending behind GMACINTMA...

CVE-2026-99188 net: stmmac: dwmac1000: clear the RGMII status interrupt

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac1000: clear the RGMII status interrupt Since commit 2e2c878a3141 "net: stmmac: remove SGMII/RGMII/SMII interrupt handling" nothing on the RGMII path reads GMACRGSMIIIS, so RGSMIIIS stays pending behind GMACINTMA...

CVE-2026-99188

The Linux kernel contains a vulnerability in the stmmac driver for the dwmac1000 controller. Due to the removal of certain interrupt handling in a previous commit, the GMAC_RGSMIIIS status remains pending behind the GMAC_INT_MASK after a link change. When stmmac_resume() resets the MAC, the mask ...

K000164033: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2026-46142 In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WXCFGPORTST is a PF restricted register. When a VF is initialized, attempting to read this register triggers an illegal register...

CVE-2026-99188

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac1000: clear the RGMII status interrupt Since commit 2e2c878a3141 "net: stmmac: remove SGMII/RGMII/SMII interrupt handling" nothing on the RGMII path reads GMACRGSMIIIS, so RGSMIIIS stays pending behind GMACINTMA...

UBUNTU-CVE-2026-99188

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac1000: clear the RGMII status interrupt Since commit 2e2c878a3141 "net: stmmac: remove SGMII/RGMII/SMII interrupt handling" nothing on the RGMII path reads GMACRGSMIIIS, so RGSMIIIS stays pending behind GMACINTMA...

Linux Distros Unpatched Vulnerability : CVE-2026-99188

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: stmmac: dwmac1000: clear the RGMII status interrupt Since commit 2e2c878a3141 net: stmmac: remove SGMII/RGMII/SMII interrupt handling nothing on the RGMII...

CVE-2026-116774 russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From 0.60.0 until 0.65.0, channel-open parsing accepts a peer-declared maximumpacketsize of zero and passes it into ChannelTx::pollwritable in russh/src/channels/io/tx.rs. The Channel::data,...

CVE-2026-116774 russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From 0.60.0 until 0.65.0, channel-open parsing accepts a peer-declared maximumpacketsize of zero and passes it into ChannelTx::pollwritable in russh/src/channels/io/tx.rs. The Channel::data,...

CVE-2026-116774

The russh Rust SSH client and server library is vulnerable to a denial-of-service condition in versions 0.60.0 through 0.65.0 . The root cause is that channel-open parsing accepts a peer-declared maximum_packet_size of zero , which is then passed into ChannelTx::poll_writable in russh/src/channel...

CVE-2026-116774 russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From 0.60.0 until 0.65.0, channel-open parsing accepts a peer-declared maximumpacketsize of zero and passes it into ChannelTx::pollwritable in russh/src/channels/io/tx.rs. The Channel::data,...

Linux Distros Unpatched Vulnerability : CVE-2026-101752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are MySQL...

Linux Distros Unpatched Vulnerability : CVE-2026-101629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 9.7.0-9.7.3,...