CVE-2026-98493: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: ipconfig: bound DHCP option construction icdhcpinitoptions appends the hostname option 12, vendor-class option 60 and client-ID option 61 options into the fixed 312-byte bootppkt.exten buffer. Only the client-ID branch check...

CVE-2026-98486: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: ena: fix MMIO read buffer leak on probe failure enadeviceinit initializes the MMIO read mechanism with enacommmioregreadrequestinit, which allocates a coherent DMA buffer for MMIO read responses. The normal removal path...

dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

dotnet: dotnet9.0: dotnet10.0: dotnet8.0: .NET Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

dotnet8.0: dotnet10.0: dotnet9.0: .NET Remote Code Execution Vulnerability

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...

dotnet10.0: dotnet9.0: dotnet: dotnet8.0: .NET Denial of Service Vulnerability

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network...

dotnet9.0: dotnet: dotnet10.0: dotnet8.0: .NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from the actct in net/sched, which triggers a WARN when flowoffloadalloc returns NULL due to the disappearance of conntrack entries or a failure in GFPATOMIC allocation. This could allow non-privileged users...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.10 contains a security vulnerability. This vulnerability stems from the meshpathadd function in net/mac80211/meshpathtbl.c, which does not release the reserved mesh path quotas when path allocation or insertion fails. This can lead to repeated failures or repeated...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.0 contains a security vulnerability. This vulnerability stems from the function rdsconncreate in net/rds, which calculates the number of connection paths based on the caller’s transmission before determining the final transmission. This inconsistency leads to inconsiste...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.1 contains a security vulnerability. This vulnerability stems from the fact that in the file drivers/net/dsa/mt7530-mdio.c, the function mt7530remove unconditionally disables regulator. However, the core and io power pointers for MT7531 and MT7621 remain NULL. As a...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.14 contains a security vulnerability. This vulnerability stems from the phylinkbringupPhy function in drivers/net/phy/phylink.c. The function records the PHY state before calling phyeeerxclockstop, which may fail. After failure, pl-phydev is not cleared, causing the...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains a security vulnerability. This vulnerability stems from emmactxmemmap in drivers/net/ethernet/spacemit/k1emac.c, which fails to clear the written TX descriptors when fragment mapping fails. As a result, the DMA engine may access an old address that has been...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel from 6.1.119 to 6.1.189, from 6.6.63 to 6.6.158, from 6.11.10 to 6.12, and version 6.12 contain security vulnerabilities. The vulnerability stems from inconsistent IDR key fields in the manual hashtable handles in net/sched clsu32. Hashtables created with an explicit...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.18 contains a security vulnerability. This vulnerability arises from the incorrect invocation of the bonding-specific API when processing team device events by using net/mlx5. This leads to out-of-bound memory access to the slab structure...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.14 has a security vulnerability. This vulnerability stems from improper filtering of connection flags or their combinations in the IPVS SYNC protocol in the file net/netfilter/ipvs/ipvssync.c. The combination of NOCPORT and TEMPLATE may cause normal connection searche...

CLSA-2026-1792242216 ruby: Fix of CVE-2026-42246

CVE-2026-42246: fix Net::IMAPstarttls returning success without TLS on a man-in-the-middle error response - CVE-2026-42258: fix IMAP command injection via Symbol arguments...

MGASA-2026-0511 Updated perl-Net-Whois-Raw package fixes a security vulnerability

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. CVE-2026-19954...