CVE-2026-89852 scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero mailbox struct in qla2x00getfirmwarestate The mbxcmdt is allocated on the stack but left uninitialized. qla2x00mailboxcommand has several early-return paths PCI permanent failure, device failed, EEH busy, ISP...

CVE-2026-89846

CVE-2026-89846 is a critical out-of-bounds read in the Linux kernel's qla2xxx SCSI driver. In qla2x00_status_entry(), the FWI2 status path subtracts rsp_info_len (a 32-bit value from the target's FCP response) from par_sense_len (the IOCB data area size: 28 bytes for 24xx, 60 bytes for 29xx) with...

EUVD-2026-80443

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak Several bsg handlers stage their request/reply in an uninitialized 256-byte on-stack buffer uint8t bsgDMAPOOLSIZE and fill it via sgcopytobuffer, which only copies as...

CVE-2026-89843 scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak Several bsg handlers stage their request/reply in an uninitialized 256-byte on-stack buffer uint8t bsgDMAPOOLSIZE and fill it via sgcopytobuffer, which only copies as...

CVE-2026-89843

CVE-2026-89843 affects the Linux kernel scsi: qla2xxx driver (QLogic). Several bsg handlers use an uninitialized 256-byte on-stack buffer (uint8_t bsg[DMA_POOL_SIZE]) that is filled via sg_copy_to_buffer(), which copies only the user-supplied request length. When the request is shorter than the s...

CVE-2026-89843 scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak Several bsg handlers stage their request/reply in an uninitialized 256-byte on-stack buffer uint8t bsgDMAPOOLSIZE and fill it via sgcopytobuffer, which only copies as...

CVE-2026-89826 drm/panthor: harden firmware build-info bounds checks

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: harden firmware build-info bounds checks panthorfwreadbuildinfo checks whether the metadata range fits in the firmware image with hdr.metastart + hdr.metasize. Both fields are u32, so the addition can wrap and let an...

CVE-2026-89826 drm/panthor: harden firmware build-info bounds checks

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: harden firmware build-info bounds checks panthorfwreadbuildinfo checks whether the metadata range fits in the firmware image with hdr.metastart + hdr.metasize. Both fields are u32, so the addition can wrap and let an...

CVE-2026-89794

CVE-2026-89794 affects the ksmbd (SMB server) component in the Linux kernel . The root cause lies in smb2_read_pipe(): compound response handling extends the last response iov to an eight-byte boundary, but the function allocates only the payload size. This mismatch means the alignment padding ca...

CVE-2026-73461

creationtimestamp| type| source ---|---|--- 2026-09-16 09:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmtbybvf22f 2026-09-16 10:07:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvmvfbtulx2j...

CVE-2026-81642

creationtimestamp| type| source ---|---|--- 2026-09-16 09:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/117279898097004138 2026-09-16 09:00:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvmrn45c3b2a 2026-09-16 09:40:07+00:00| seen|...

CVE-2026-58704

creationtimestamp| type| source ---|---|--- 2026-09-16 08:37:21+00:00| seen| https://bsky.app/profile/ahmandonk.bsky.social/post/3mvmqdpg2ld2u 2026-09-16 10:08:54+00:00| seen| https://bsky.app/profile/shortinfo.bsky.social/post/3mvmvhfexad2z 2026-09-16 11:46:28+00:00| seen|...

CVE-2026-73447

creationtimestamp| type| source ---|---|--- 2026-09-16 08:02:29+00:00| seen| https://gist.github.com/ichintu/267a83b424137af67bec5f39bcd35594 2026-09-16 08:07:15+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvmonvh4mn2p 2026-09-16 09:10:07+00:00| seen|...

CVE-2026-27565

creationtimestamp| type| source ---|---|--- 2026-09-16 07:56:59+00:00| seen| https://infosec.exchange/users/certvde/statuses/117279648543638927 2026-09-16 07:57:06+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mvmo3krdbfq2 2026-09-16 07:57:38+00:00| seen|...

CVE-2026-87217

creationtimestamp| type| source ---|---|--- 2026-09-16 07:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmlho3feg2f 2026-09-22 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mw3ztepmhs2e 2026-09-23 08:46:53+00:00| seen|...

CVE-2026-18113

creationtimestamp| type| source ---|---|--- 2026-09-16 06:10:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmi4ikzed2p...

CVE-2026-81898

creationtimestamp| type| source ---|---|--- 2026-09-16 06:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmi4fbkuf2w...

EUVD-2026-80201

The LearnPress WordPress plugin before 4.4.7 does not check the user's capabilities in one of its administrative template handlers, allowing unauthenticated attackers to retrieve the text, identifier and type of every published quiz question on the site, along with a keyword search over them, whi...

CVE-2026-91964

creationtimestamp| type| source ---|---|--- 2026-09-16 05:20:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmfd2ttlv2r...

CVE-2026-91925

creationtimestamp| type| source ---|---|--- 2026-09-16 05:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmer3usl222 2026-09-18 04:00:13+00:00| seen| Telegram/ihh6lu2JwVHbxCCtzMwz7J2so3OYSU8lmtMIGGUfSqoltoc 2026-09-19 00:00:13+00:00| published-proof-of-concept|...