CVE-2026-43389

CVE-2026-43389 affects the Linux kernel memfd_luo subsystem. The root cause is a flaw where preserving LUO state could leave folios marked clean, risking data loss if they are dirtied later and reclaimed under memory pressure. The fix changes all folios of the file to be dirty and sets MEMFD_LUO_...

CVE-2026-4299: Missing Authorization

The MainWP Child Reports plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 2.2.6. This is due to a missing capability check in the heartbeatreceived function in the LiveUpdate class. This makes it possible for authenticated attackers, with...