CVE-2026-72918 Rocket.Chat: Insecure implementation of websocket notifications

Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 7.10.14, 8.0.8, 8.1.7, 8.2.7, 8.3.7, 8.4.5, 8.5.2, and 8.6.1, the stream-notify-user stream in the WebSocket protocol allows an authenticated user to write arbitrary notification bodies because the sender ...

CVE-2026-72918

CVE-2026-72918 affects Rocket.Chat. Prior to versions 7.10.14, 8.0.8, 8.1.7, 8.2.7, 8.3.7, 8.4.5, 8.5.2, and 8.6.1, the stream-notify-user stream over WebSocket allows an authenticated user to write arbitrary notification bodies because the sender isn’t checked, enabling a client-side UI to show ...

CVE-2026-68381

In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notification smb2oplockbreaknoti and smb2leasebreaknoti store a ksmbdconn pointer in an async ksmbdwork and then queue that work on ksmbd-io. The work only increments conn-rcount, which...

CVE-2026-68259

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocateeventnotificationslot The valid event ids go from 0 to KFDSIGNALEVENTLIMIT allocateeventnotificationslot has an option to specify an event id to allocate at, used by CRIU. We weren't checking t...

UBUNTU-CVE-2026-68259

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocateeventnotificationslot The valid event ids go from 0 to KFDSIGNALEVENTLIMIT allocateeventnotificationslot has an option to specify an event id to allocate at, used by CRIU. We weren't checking t...

CVE-2026-68140

In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix use-after-free of a severed iucvpath afiucv queues not-yet-received message notifications on iucv-messageq, each holding a raw pointer to the connection's iucvpath. When the peer severs the connection, iucvseverpath...

CVE-2026-68381

The CVE-2026-68381 issue in ksmbd within the Linux kernel involves async oplock/lease break notifications queuing work that references a ksmbd_conn object. The vulnerable path increments r_count but does not pin the ksmbd_conn, creating a window where connection teardown can race with the notific...

EUVD-2026-55567

In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notification smb2oplockbreaknoti and smb2leasebreaknoti store a ksmbdconn pointer in an async ksmbdwork and then queue that work on ksmbd-io. The work only increments conn-rcount, which...

CVE-2026-68381 ksmbd: pin conn during async oplock break notification

In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notification smb2oplockbreaknoti and smb2leasebreaknoti store a ksmbdconn pointer in an async ksmbdwork and then queue that work on ksmbd-io. The work only increments conn-rcount, which...

EUVD-2026-55419

In the Linux kernel, the following vulnerability has been resolved: pdscore: fix use-after-free on workqueue during remove In pdscremove, the workqueue is destroyed before pdscteardown is called. This ordering allows two paths to queue work on the destroyed workqueue: 1. If pdscteardown -...

CVE-2026-68259 drm/amdkfd: Check bounds in allocate_event_notification_slot

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocateeventnotificationslot The valid event ids go from 0 to KFDSIGNALEVENTLIMIT allocateeventnotificationslot has an option to specify an event id to allocate at, used by CRIU. We weren't checking t...

CVE-2026-68259

CVE-2026-68259 affects the Linux kernel's DRM/amdkfd path, specifically allocate_event_notification_slot. The vulnerability arises from not validating the upper bound of user-supplied event IDs used by CRIU; valid IDs are 0 to KFD_SIGNAL_EVENT_LIMIT. The fix adds bounds checks, ensuring the upper...

CVE-2026-68259 drm/amdkfd: Check bounds in allocate_event_notification_slot

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocateeventnotificationslot The valid event ids go from 0 to KFDSIGNALEVENTLIMIT allocateeventnotificationslot has an option to specify an event id to allocate at, used by CRIU. We weren't checking t...

EUVD-2026-55294

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRXNOTIFY on non-mmio buses PKTTYPETXRXNOTIFY is an mmio-only event, but mt7925rxcheck and mt7925queuerxskb dispatch it to mt7925mactxfree on every bus. mt7925mactxfree cleans the DMA tx queues with...

GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: coder, gitsign, cloudbeat, kyverno-fips, cloudbeat-fips, xeol-fips, kubescape-server, jfrog-cli, grype-db, zot, nuclio-controller-fips, bom, steampipe, trivy, guac, k9s-fips, amazon-ssm-agent, kubescape, chainloop-cli-fips, gitea-fips, teleport, nfpm,...

GHSA-HC8V-WWC9-VGXM vulnerabilities

Vulnerabilities for packages: coder, gitsign, cloudbeat, kyverno-fips, cloudbeat-fips, xeol-fips, kubescape-server, jfrog-cli, grype-db, zot, nuclio-controller-fips, bom, steampipe, trivy, guac, k9s-fips, amazon-ssm-agent, kubescape, chainloop-cli-fips, gitea-fips, teleport, nfpm,...

CVE-2026-71557 vulnerabilities

Vulnerabilities for packages: coder, gitsign, cloudbeat, kyverno-fips, cloudbeat-fips, xeol-fips, kubescape-server, jfrog-cli, grype-db, zot, nuclio-controller-fips, bom, steampipe, trivy, guac, k9s-fips, amazon-ssm-agent, kubescape, chainloop-cli-fips, gitea-fips, teleport, nfpm,...

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: coder, gitsign, cloudbeat, kyverno-fips, cloudbeat-fips, xeol-fips, kubescape-server, jfrog-cli, grype-db, zot, nuclio-controller-fips, bom, steampipe, trivy, guac, k9s-fips, amazon-ssm-agent, kubescape, chainloop-cli-fips, gitea-fips, teleport, nfpm,...

GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: goreleaser, gitea, grafana-alloy, trivy-operator, trivy, crossplane, argocd-image-updater, argo-events, gptscript, pulumi-language-dotnet, kargo, gomplate, syft, k9s, pulumi-language-yaml, scorecard, trufflehog, nuclei, flux-notification-controller, kubescape, grype,...

GHSA-HC8V-WWC9-VGXM vulnerabilities

Vulnerabilities for packages: goreleaser, gitea, grafana-alloy, trivy-operator, trivy, crossplane, argocd-image-updater, argo-events, gptscript, pulumi-language-dotnet, kargo, gomplate, syft, k9s, pulumi-language-yaml, scorecard, trufflehog, nuclei, flux-notification-controller, kubescape, grype,...