CVE-2026-68340

A flaw was found in the Linux kernel's hwmon OCC OpenPOWER Abbreviated Command and Control poll response parser. This vulnerability occurs because the parser incorrectly uses a static array capacity as the boundary for sensor data blocks instead of the actual data length. A specially crafted,...

CVE-2026-68427

A flaw was found in the gpu: host1x component of the Linux kernel. The host1xbounpin function incorrectly dereferences a memory mapping after it has been freed, leading to a use-after-free vulnerability. This issue could allow a local attacker to cause memory corruption, potentially leading to a...

CVE-2026-68123

A flaw was found in the Open vSwitch component of the Linux kernel. This vulnerability arises from an underflow condition when handling Generic Segmentation Offload GSO packets in userspace. A length calculation error can lead to a buffer underflow when data is processed by the skbzerocopy...

CVE-2026-57262

A vulnerability has been identified in LOGO! Soft Comfort All versions V9. Affected products use a static, hardcoded AES master key to encrypt project files. This could allow a local attacker to extract the master key from the application files or memory and use it to decrypt project files or...

firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.13 and Firefox 153

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of...

firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38 and Firefox ESR 140.13

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been...

firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the DOM: Bindings WebIDL component...

firefox: thunderbird: Site isolation issue in the Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Networking component...

firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...

firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.38, Firefox ESR 140.13 and Firefox 153

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript: WebAssembly component...

firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: GMP component...

CVE-2026-68227

A flaw was found in the cx231xx media driver within the Linux kernel. This vulnerability arises from incorrect management of device-managed resources, where their lifetime is tied to the parent Universal Serial Bus USB device instead of the USB interface. This can lead to memory leaks when driver...

CVE-2026-68220

A flaw was found in the Linux kernel's NXP i.MX8 Image Sensor Interface ISI component. This flaw occurs because the system fails to properly free allocated memory when certain subdevice modules are removed. This oversight can lead to a memory leak, potentially impacting system stability and...

CVE-2026-68314

A flaw was found in the Linux kernel's MCTP I3C network module. When the i3cdriverregister function fails during module initialization, the system does not properly unregister notifiers and deallocate bus objects. This oversight leads to a memory leak, which could be exploited by a local attacker...

CVE-2026-68234

A flaw was found in the Linux kernel's drm/amdgpu component. The amdgpubocreatereserved function unconditionally increments a pin counter for a Buffer Object BO even if it is already pinned. This occurs when the function is called multiple times with the same BO, such as during firmware buffer...

CVE-2026-68379

A flaw was found in the Linux kernel's TCP implementation. A reference leak in TIMEWAIT sockets can occur upon a PSP Policy Security Policy failure in both IPv4 and IPv6 receive paths. This vulnerability can lead to a memory leak of tcptwbucket structures, potentially resulting in a Denial of...

CVE-2026-68168

A flaw was found in the Linux kernel's Andrew File System AFS component. The system's directory removal function, afseditdirremove, incorrectly manages memory blocks, specifically block 0. This improper handling could lead to an unstable system state or data integrity issues during directory...

CVE-2026-68101

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. During the allocation or deallocation of a user pointer buffer object, a critical reference to its virtual memory object can become unavailable. This improper handling of memory submissions could lead to system instability or a denial ...