EUVD-2026-88334

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be...

CVE-2026-93820

A flaw was found in the Linux kernel's Rockchip PCIe host controller driver. Stopping and removing a PCIe root bus without proper synchronization creates a race condition with concurrent device rescanning or hotplug operations. A local attacker could exploit this flaw to cause a use-after-free...

CVE-2026-93287

A flaw was found in the Linux kernel's I2C System Management Bus SMBus subsystem. A local user can trigger an out-of-bounds memory read by submitting a transfer request with an oversized or invalid block length. This occurs because the kernel does not properly validate user-supplied transfer...

CVE-2026-98133

A flaw was found in the Linux kernel's NTFS file system implementation. When an error occurs while setting an extended attribute EA, the kernel prematurely clears the flag indicating that extended attributes are present. A local user can exploit this vulnerability by triggering a failed extended...

CVE-2026-98131

A flaw was found in the Linux kernel's stmmac network driver. During network packet transmission, a failure in Direct Memory Access DMA mapping for packet fragments causes the driver to drop the packet without releasing previously allocated mappings. A local user could exploit this flaw by...

CVE-2026-98129

A flaw was found in the Linux kernel's mpi3mr SCSI driver. The driver fails to validate the return value of a memory allocation when adding a Serial Attached SCSI SAS port, leading to a NULL pointer dereference if the allocation fails. A local user could exploit this flaw under low-memory...

CVE-2026-98128

A flaw was found in the Linux kernel's mpi3mr driver. This vulnerability can lead to a Denial of Service DoS due to kernel memory exhaustion. When an error occurs during Serial Attached SCSI SAS port addition, the driver fails to properly release an acquired reference count on the target device...

CVE-2026-93816

A flaw was found in the Linux kernel's Flash-Friendly File System F2FS. When converting inline directory entries into standard directory blocks, the kernel does not properly validate recorded filename lengths before copying them. A local user could exploit this flaw by mounting a specially crafte...

CVE-2026-93284

A flaw was found in the Linux kernel's DRM Direct Rendering Manager pagemap subsystem. During page migration error handling, the kernel clears the page tracking array before finishing Direct Memory Access DMA unmapping operations. A local user could exploit this flaw by triggering migration...

CVE-2026-93817

A flaw was found in the Linux kernel's performance events perf subsystem. This vulnerability occurs because memory allocated for event address filters is released prematurely while still in active use by other kernel processes. A local user could exploit this use-after-free flaw during performanc...

CVE-2026-70413

Dell Live Optics Collector versions prior to 27.2.13.310 are vulnerable to a Use of Hard-coded Password vulnerability. A low privileged attacker with local access could potentially exploit this flaw, resulting in Information exposure . Remediation is available via security update DSA-2026-339 . N...

CVE-2026-98127

A flaw was found in the Linux kernel's SMB client. The smb3insertrange function does not properly validate the resulting file size when inserting a range of space into an existing file on a mounted share. A local user can exploit this flaw using a fallocate request to bypass configured file size...

CVE-2026-98126

A flaw was found in the Linux kernel's SMB client. This flaw allows a local user to bypass enforced file-size restrictions and expand files beyond authorized limits. When handling file allocation operations that zero out a range of data without preserving the file's existing size, the kernel fail...

CVE-2026-93279

A flaw was found in the Linux kernel's Octeon network driver. During network device shutdown or driver removal, a pending cleanup task may execute after associated network device structures have already been freed from memory. A local user could exploit this race condition during device teardown ...

USN-8829-1 plasma-workspace vulnerability

Fabian Vogt discovered that Plasma Workspace did not properly authenticate local clients connecting to the session manager. A local attacker could possibly use this issue to execute arbitrary code as another user...

USN-8829-1: Plasma Workspace vulnerability

Fabian Vogt discovered that Plasma Workspace did not properly authenticate local clients connecting to the session manager. A local attacker could possibly use this issue to execute arbitrary code as another user...

kernel: drm/amdgpu: Fix context pstate override handling

A flaw was found in the Linux kernel's amdgpu graphics driver. Improper handling of context pstate overrides can lead to use-after-free and NULL pointer dereferences during context initialization and finalization. A local attacker could exploit this vulnerability to cause system instability or a...

kernel: perf: Reject exited events as group leaders

A flaw was found in the Linux kernel's performance monitoring perf subsystem. This vulnerability allows a local attacker to trigger a use-after-free condition by improperly handling exited events as group leaders. Successful exploitation could lead to a system crash, resulting in a denial of...

kernel: perf/core: Detach event groups during remove_on_exec

A flaw was found in the Linux kernel's performance monitoring unit PMU subsystem. This vulnerability occurs when a performance event group leader is removed during process execution, but its associated events siblings remain active and linked to a stale list. This inconsistent state can lead to a...

CVE-2026-93278

A flaw was found in the Linux kernel's Octeon network driver. During interface shutdown, the driver deletes the packet polling mechanism without properly disabling it first, allowing active polling routines to continue running after interrupt handlers are released. A local attacker could exploit...