CVE-2026-97512

A flaw was found in the Linux kernel's Qualcomm Serial Peripheral Interface spi-qcom-qspi driver. This flaw can result in a Denial of Service DoS or system instability due to incomplete error handling during runtime power management PM suspend and resume operations. If an operation fails midway,...

CVE-2026-98075

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When a BPF program references its main function as a callback, the kernel fails to translate the function reference into a valid memory address. A local user with permissions to load BPF programs could exploit this...

CVE-2026-98074

A flaw was found in the Linux kernel's network bonding driver. A local user with network administration privileges can cause a physical network adapter to permanently remain in promiscuous mode a configuration where an interface captures all traffic on the local network segment, rather than only...

CVE-2026-98071

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A race condition occurs in the connection path reset logic when connection state flags are completely cleared while concurrent transmission or completion tasks attempt to update them. A local user could exploit this...

CVE-2026-98069

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A race condition between active data transmission and connection teardown can lead to a Denial of Service DoS via a kernel crash. A local user could exploit this flaw by generating network traffic while terminating a...

CVE-2026-98067

A flaw was found in the Linux kernel's EROFS Enhanced Read-Only File System. The rolling decompression mechanism used for LZ4-compressed files assumes that data is always copied forward in memory. On certain system architectures, the underlying memory copy operation can copy backward, invalidatin...

CVE-2026-98064

A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS and crash the system by running a specially crafted BPF Berkeley Packet Filter program. The issue occurs within the BPF Type Format BTF component when attempting to display data referencing a void data type, whic...

CVE-2026-98063

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When formatting data using BPF Type Format BTF, the kernel attempts to access type identifiers without checking if they are initialized. A local user with permissions to execute BPF programs can exploit this vulnerabilit...

CVE-2026-98062

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. The kernel incorrectly treats certain signal tracepoint arguments as trusted memory pointers, even when special non-pointer indicator values are passed during signal delivery. A local user with privileges to attach BPF...

CVE-2026-98060

A flaw was found in the Linux kernel. A local user with permissions to load Berkeley Packet Filter BPF programs can cause a Denial of Service DoS or potentially achieve privilege escalation. The BPF verifier fails to prevent resilient lock operations within red-black tree comparison callbacks,...

CVE-2026-98057

A flaw was found in the Linux kernel's tracing ring buffer. The persistent ring buffer validation logic fails to verify that the recorded sub-buffer count matches the expected page count in the metadata. A local attacker capable of manipulating persistent memory metadata could exploit this issue ...

Important: dotnet9.0

Issue Overview: Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally. CVE-2026-62886 Affected Packages: dotnet9.0 Issue Correction...

CVE-2026-102371

In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the pro client with the Ubuntu Pro token passed as a command-line argument pro attach . On systems where /proc is mounted without...

PT-2026-102850

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description Improper privilege management in Mojo, a Chromium IPC Inter-Process Communication framework, allows a local attacker to potentially execute arbitrary code outside the sandbox via a loca...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95302): chromium -- security fixes

Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

PT-2026-102520

Name of the Vulnerable Software and Affected Versions DeepSeek-Reasonix Studio versions prior to 2.21.0 DeepSeek Reasonix npm versions prior to 1.39.3 Description An OS command injection flaw exists in the internal/gitcmd component of DeepSeek-Reasonix Reasonix Studio. A local attacker who contro...

CVE-2026-79403

Versions of Kilo Code prior to v7.4.1 are vulnerable to an issue that allows a local attacker to achieve arbitrary code execution . The vulnerability is accessible via the permission/allow-everything endpoint. While the technical root cause is not explicitly detailed in the provided documents, th...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95298): chromium -- security fixes

Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95358): chromium -- security fixes

Incorrect authorization in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...

CVE-2026-95316: Unchecked Return Value

Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program. Chromium security severity: Low...