CVE-2026-23183

In the Linux kernel, the following vulnerability has been resolved: cgroup/dmem: fix NULL pointer dereference when setting max An issue was triggered: BUG: kernel NULL pointer dereference, address: 0000000000000000 PF: supervisor read access in kernel mode PF: errorcode0x0000 - not-present page P...

CVE-2026-23166

In the Linux kernel, the following vulnerability has been resolved: ice: Fix NULL pointer dereference in icevsisetnapiqueues Add NULL pointer checks in icevsisetnapiqueues to prevent crashes during resume from suspend when ringsqidx-qvector is NULL. Tested adaptor: 60:00.0 Ethernet controller 020...

CVE-2026-23152

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: correctly decode TTLM with default link map TID-To-Link Mapping TTLM elements do not contain any link mapping presence indicator if a default mapping is used and parsing needs to be skipped. Note that access point...

CVE-2026-23125

A NULL pointer dereference flaw was found in the Linux kernel's SCTP implementation. When SCTP-AUTH key initialization fails during INITACK processing, the association's shared key asoc-shkey remains NULL while authentication capability flags are already set. If a DATA chunk is subsequently queue...

CVE-2026-23116

A flaw was found in the Linux kernel. On i.MX8MQ platforms, the Video Processing Unit VPU power management incorrectly attempts to reset or ungate VPU instances independently. This invalid hardware sequence can be triggered by a local user through driver operations, runtime power management, or...

CVE-2026-23173

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, delete flows only for existing peers When deleting TC steering flows, iterate only over actual devcom peers instead of assuming all possible ports exist. This avoids touching non-existent peers and ensures cleanup ...

CVE-2026-23175

In the Linux kernel, the following vulnerability has been resolved: net: cpsw: Execute ndosetrxmode callback in a work queue Commit 1767bb2d47b7 "ipv6: mcast: Don't hold RTNL for IPV6ADDMEMBERSHIP and MCASTJOINGROUP." removed the RTNL lock for IPV6ADDMEMBERSHIP and MCASTJOINGROUP operations...

CVE-2026-23186

A deadlock vulnerability was found in the ACPI power meter hwmon driver. The acpipowermeternotify function holds a lock while calling hwmondeviceunregister, but sysfs attribute callbacks also acquire this lock, creating a circular dependency that can cause system hangs. Mitigation To mitigate thi...

CVE-2026-2540

creationtimestamp| type| source ---|---|--- 2026-02-15 11:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mevgpa2ysd2u 2026-02-15 11:30:32+00:00| seen| https://infosec.exchange/users/offseq/statuses/116074415932456488...

CVE-2026-25120

creationtimestamp| type| source ---|---|--- 2026-02-14 21:23:41+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-jj5m-h57j-5gv7 2026-02-16 17:30:48+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116081495116754230...

CVE-2026-25991

creationtimestamp| type| source ---|---|--- 2026-02-13 19:24:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meraapzgpe2o...

CVE-2026-25996

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. String fields from eBPF events in columns output mode are rendered to the terminal without any sanitization of control characters or ANSI escape sequences...

CVE-2026-24044

creationtimestamp| type| source ---|---|--- 2026-02-13 09:00:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3meq5feqddv2f...

CVE-2026-21435

creationtimestamp| type| source ---|---|--- 2026-02-12 21:40:23+00:00| seen| https://gist.github.com/alon710/d01a7eedfc71c05885cd1abab59c3272...

CVE-2026-1837

An out of bounds write has been discovered in libjxl. A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated memory. Soon after that data from another uninitialized unallocated region is copied to pixel data. This can be done by requesting color...

CVE-2026-0228

creationtimestamp| type| source ---|---|--- 2026-02-11 17:56:24+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116053283364003733 2026-02-11 19:03:20+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mem65c2d6v22 2026-02-11 19:17:01+00:00| seen|...

CVE-2026-23598

creationtimestamp| type| source ---|---|--- 2026-02-11 13:55:22+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3melmwllbwu2m...

CVE-2026-21335

creationtimestamp| type| source ---|---|--- 2026-02-11 10:17:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3melaqqrxq32h...

CVE-2026-26039

Not used...

PT-2026-7977

CVE-2026-26039 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2026-26039 Published : Feb. 11, 2026, 5:16 a.m. | 2 hours, 4 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...