CVE-2026-54582 mport package installation can overwrite existing unmanaged or differently owned files

mport is the MidnightBSD Package Manager. Prior to 2.7.8, package installation lacked a preflight check for incoming non-directory assets that already existed on disk. The affected logic across libmport/checkpreconditions.c, libmport/installprimative.c, and libmport/mportprivate.h did not apply...

SUSE CVE-2026-89997

In the Linux kernel, the following vulnerability has been resolved: dm: fix resume-vs-remove race If the user issues the resume ioctl and the remove ioctl at the same time, it may be possible that the device is resumed after it is suspended in dmdestroy. The result is that the table is destroyed...

CVE-2026-90396

CVE-2026-90396 affects the Linux kernel block subsystem. When an integrity mapping fails, it holds a DIO (direct I/O) reference that is not properly released. The fix ensures the full bio ending path is taken, which properly handles previously submitted bios in the sequence and releases the leake...

EUVD-2026-82057

In the Linux kernel, the following vulnerability has been resolved: block: fix dio leak on metadata mapping error A failed integrity mapping holds a dio reference, so we need to go through the full bio ending in case there were previously submitted bio's in the sequence...

CVE-2026-90396 block: fix dio leak on metadata mapping error

In the Linux kernel, the following vulnerability has been resolved: block: fix dio leak on metadata mapping error A failed integrity mapping holds a dio reference, so we need to go through the full bio ending in case there were previously submitted bio's in the sequence...

CVE-2026-90333 dm-integrity: replace forgeable discard filler with a keyed sector marker

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: replace forgeable discard filler with a keyed sector marker The discard-block check in dmintegrityrwtag treats a stored tag of all 0xf6 bytes DISCARDFILLER as proof a block was discarded and skips HMAC verification...

EUVD-2026-81994

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: replace forgeable discard filler with a keyed sector marker The discard-block check in dmintegrityrwtag treats a stored tag of all 0xf6 bytes DISCARDFILLER as proof a block was discarded and skips HMAC verification...

CVE-2026-90333

This CVE affects the dm-integrity target in the Linux kernel (standalone mode). The discard-block check in dm_integrity_rw_tag() treats a stored tag of all 0xf6 bytes (DISCARD_FILLER) as proof a block was discarded, skipping HMAC verification. An attacker with raw write access to the backing devi...

CVE-2026-90333 dm-integrity: replace forgeable discard filler with a keyed sector marker

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: replace forgeable discard filler with a keyed sector marker The discard-block check in dmintegrityrwtag treats a stored tag of all 0xf6 bytes DISCARDFILLER as proof a block was discarded and skips HMAC verification...

CVE-2026-90052

CVE-2026-90052 is a buffer overflow in the Linux kernel's dm-integrity subsystem. Since commit 68c5c42567bc, integrity_metadata computes a checksum for every discarded block, but integrity_sector_checksum always writes the full digest regardless of the configured tag size. When the tag size is sm...

CVE-2026-90052 dm-integrity: fix buffer overflow with keyed discard

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow with keyed discard Since commit 68c5c42567bc "dm-integrity: replace forgeable discard filler with a keyed sector marker", integritymetadata computes a checksum for every discarded block into the...

CVE-2026-90052 dm-integrity: fix buffer overflow with keyed discard

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow with keyed discard Since commit 68c5c42567bc "dm-integrity: replace forgeable discard filler with a keyed sector marker", integritymetadata computes a checksum for every discarded block into the...

EUVD-2026-81913

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow with keyed discard Since commit 68c5c42567bc "dm-integrity: replace forgeable discard filler with a keyed sector marker", integritymetadata computes a checksum for every discarded block into the...

HTTP Response Splitting

Overview Affected versions of this package are vulnerable to HTTP Response Splitting via the HTTP/1.1 request parsing logic in sanic/http/http1.py, where malformed or conflicting transfer-encoding and content-length headers allow an attacker to inject a smuggled request into the processing...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Content Cortex(CCx) 26.0.0-IF002 for August 2026

Summary IBM Content Cortex CCx 26.0.0-IF002 addresses CVEs across components including AI Services & tools, FDM and CPE. Vulnerability Details CVEID:CVE-2026-69247 DESCRIPTION: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 unti...

Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in bcpkix-jdk18on jar

Summary IBM Sterling Control Center is affected by multiple vulnerabilities CVE-2026-12802, CVE-2026-13586, CVE-2026-15055, CVE-2026-59639, CVE-2026-59642 and CVE-2026-59647 reported for bcpkix-jdk18on-1.81.jar Vulnerability Details CVEID:CVE-2026-12802 DESCRIPTION: In Bouncy Castle for Java befo...

PT-2026-95010

Name of the Vulnerable Software and Affected Versions mport versions prior to 2.7.8 Description The MidnightBSD Package Manager contains a flaw where the do actual install function in libmport/bundle read install pkg.c utilizes path-based lstat, chown, stat, and chmod operations during package...

PT-2026-94400

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow exists in the dm-integrity component. The integrity metadata function computes a checksum for every discarded block into the checksums buffer. Because the integrity...

CVE-2026-90052: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow with keyed discard Since commit 68c5c42567bc "dm-integrity: replace forgeable discard filler with a keyed sector marker", integritymetadata computes a checksum for every discarded block into the...

PT-2026-95156

Name of the Vulnerable Software and Affected Versions CubeCart versions prior to 6.7.5 Description An authorization bypass exists in the GDPR tools located in the admin/sources/customers.gdpr.inc.php file. The system relies on page-level CC PERM READ access and fails to require CC PERM DELETE for...