CVE-2026-68467 mtd: mchp23k256: use SPI match data for chip caps

In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in both the OF match table and the SPI id table. Probe currently uses ofdevicegetmatchdata, so a non-OF SPI modalias match falls back t...

CVE-2026-68467

The CVE-2026-68467 issue affects the Linux kernel mtd: mchp23k256 driver. The driver stored chip capacity in both the OF match table and the SPI id table, and probe used of_device_get_match_data(), which caused an id-table-only match to fallback to mchp23k256_caps. The fix switches to spi_get_dev...

EUVD-2026-59089

In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in both the OF match table and the SPI id table. Probe currently uses ofdevicegetmatchdata, so a non-OF SPI modalias match falls back t...

PT-2026-72179

In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in both the OF match table and the SPI id table. Probe currently uses of device get match data, so a non-OF SPI modalias match falls ba...

PT-2026-72444

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt cluster: reject template conntracks in hash match xt cluster mt treats any non-NULL nf ct get result as a fully initialized conntrack and passes it to xt cluster hash. This causes a state confusion bug when the raw...

PT-2026-72638

In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen during match syzbot reported a shift-out-of-bounds in xfrm selector match due to AF UNSPEC selector with large prefixlen e.g. 128 matched against IPv4 flow when XFRM STATE AF UNSPEC is...

PT-2026-72538

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt u32: reject invalid shift counts u32 match it executes rule-supplied shift operands on a 32-bit value. A malformed u32 rule can provide a shift count of 32 or more, triggering an undefined shift out-of-bounds during...

Linux Distros Unpatched Vulnerability : CVE-2026-68467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in both the OF match table and the SPI id table. Probe currently...

Linux Distros Unpatched Vulnerability : CVE-2026-19487

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in...

Malicious code in path-match-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7606d3a4e2ac3f49313aee20db3419de70aa76e17ec213031a0c3b6a62110273 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14005 Malicious code in path-match-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7606d3a4e2ac3f49313aee20db3419de70aa76e17ec213031a0c3b6a62110273 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

DEBIAN-CVE-2026-19487

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in Sfindbyclass. The prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one...

AZL-95756 CVE-2026-19487 affecting package perl for versions less than 5.38.2-516

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in Sfindbyclass. The prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one...

CVE-2026-19487

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in Sfindbyclass. The prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one...

CVE-2026-19487 Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in Sfindbyclass. The prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one...

CVE-2026-19487 Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in Sfindbyclass. The prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one...

CVE-2026-19487 Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in Sfindbyclass. The prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one...

EUVD-2026-58110

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in Sfindbyclass. The prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one...

CVE-2026-19487

Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in Sfindbyclass. The prescan walks the subject for positions where the full pattern could match, and the engine tries it from the leftmost one...

CVE-2026-14679

CVE-2026-14679 : PostgreSQL suffers a stack buffer overflow in argument name matching that can affect object creators through OUT parameter count. Affected versions are PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 (and earlier). The attack writes 0x0 and 0x1 bytes to server memory. The descrip...