CVE-2026-90333 dm-integrity: replace forgeable discard filler with a keyed sector marker

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: replace forgeable discard filler with a keyed sector marker The discard-block check in dmintegrityrwtag treats a stored tag of all 0xf6 bytes DISCARDFILLER as proof a block was discarded and skips HMAC verification...

CVE-2026-90333

This CVE affects the dm-integrity target in the Linux kernel (standalone mode). The discard-block check in dm_integrity_rw_tag() treats a stored tag of all 0xf6 bytes (DISCARD_FILLER) as proof a block was discarded, skipping HMAC verification. An attacker with raw write access to the backing devi...

CVE-2026-90333 dm-integrity: replace forgeable discard filler with a keyed sector marker

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: replace forgeable discard filler with a keyed sector marker The discard-block check in dmintegrityrwtag treats a stored tag of all 0xf6 bytes DISCARDFILLER as proof a block was discarded and skips HMAC verification...

EUVD-2026-81994

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: replace forgeable discard filler with a keyed sector marker The discard-block check in dmintegrityrwtag treats a stored tag of all 0xf6 bytes DISCARDFILLER as proof a block was discarded and skips HMAC verification...

CVE-2026-90052

CVE-2026-90052 is a buffer overflow in the Linux kernel's dm-integrity subsystem. Since commit 68c5c42567bc, integrity_metadata computes a checksum for every discarded block, but integrity_sector_checksum always writes the full digest regardless of the configured tag size. When the tag size is sm...

CVE-2026-90052 dm-integrity: fix buffer overflow with keyed discard

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow with keyed discard Since commit 68c5c42567bc "dm-integrity: replace forgeable discard filler with a keyed sector marker", integritymetadata computes a checksum for every discarded block into the...

EUVD-2026-81913

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow with keyed discard Since commit 68c5c42567bc "dm-integrity: replace forgeable discard filler with a keyed sector marker", integritymetadata computes a checksum for every discarded block into the...

CVE-2026-90052 dm-integrity: fix buffer overflow with keyed discard

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow with keyed discard Since commit 68c5c42567bc "dm-integrity: replace forgeable discard filler with a keyed sector marker", integritymetadata computes a checksum for every discarded block into the...

HTTP Response Splitting

Overview Affected versions of this package are vulnerable to HTTP Response Splitting via the HTTP/1.1 request parsing logic in sanic/http/http1.py, where malformed or conflicting transfer-encoding and content-length headers allow an attacker to inject a smuggled request into the processing...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Content Cortex(CCx) 26.0.0-IF002 for August 2026

Summary IBM Content Cortex CCx 26.0.0-IF002 addresses CVEs across components including AI Services & tools, FDM and CPE. Vulnerability Details CVEID:CVE-2026-69247 DESCRIPTION: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 unti...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in bcpkix-jdk18on jar

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-12802, CVE-2026-13586, CVE-2026-15055, CVE-2026-59639, CVE-2026-59642 and CVE-2026-59647 reported for bcpkix-jdk18on-1.81.jar Vulnerability Details CVEID:CVE-2026-12802 DESCRIPTION: In Bouncy Castle for Java befo...

PT-2026-95010

Name of the Vulnerable Software and Affected Versions mport versions prior to 2.7.8 Description The MidnightBSD Package Manager contains a flaw where the do actual install function in libmport/bundle read install pkg.c utilizes path-based lstat, chown, stat, and chmod operations during package...

The vulnerability of the RepoRemove() function in the PackageKit package manager allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the RepoRemove function in the PackageKit package manager is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

PT-2026-94400

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow exists in the dm-integrity component. The integrity metadata function computes a checksum for every discarded block into the checksums buffer. Because the integrity...

CVE-2026-90052: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow with keyed discard Since commit 68c5c42567bc "dm-integrity: replace forgeable discard filler with a keyed sector marker", integritymetadata computes a checksum for every discarded block into the...

PT-2026-95156

Name of the Vulnerable Software and Affected Versions CubeCart versions prior to 6.7.5 Description An authorization bypass exists in the GDPR tools located in the admin/sources/customers.gdpr.inc.php file. The system relies on page-level CC PERM READ access and fails to require CC PERM DELETE for...

PT-2026-95013

Name of the Vulnerable Software and Affected Versions mport versions prior to 2.7.8 Description The MidnightBSD Package Manager fails to treat all truncated, corrupt, or failed zstd streams as fatal within the mport decompress zstd function. Additionally, the libmport/fetch.c component does not...

PT-2026-94654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ARM architecture implementation where the hw breakpoint cfi handler stub incorrectly claims breakpoint type 0x03 ARM ENTRY CFI BREAKPOINT even when Control Flow...

PT-2026-95011

Name of the Vulnerable Software and Affected Versions mport versions prior to 2.7.8 Description The mport verify package function in libmport/verify.c may continue execution after MD5File or SHA256 File fails. This allows the system to compare an expected checksum against stale data remaining in...

PT-2026-94139

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Memory corruption occurs when copying large input data that exceeds normal allocation limits. This issue allows for a local attack vector that can significantly...