CVE-2026-68381

CVE-2026-68381 affects the Linux kernel ksmbd (SMB server) and describes a race between connection teardown and asynchronous oplock/lease break notifications. The vulnerability occurs when a ksmbd_conn pointer is stored in an async work item and queued on ksmbd-io; the work only increments conn-&...

CVE-2026-68381 ksmbd: pin conn during async oplock break notification

In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notification smb2oplockbreaknoti and smb2leasebreaknoti store a ksmbdconn pointer in an async ksmbdwork and then queue that work on ksmbd-io. The work only increments conn-rcount, which...

EUVD-2026-55419

In the Linux kernel, the following vulnerability has been resolved: pdscore: fix use-after-free on workqueue during remove In pdscremove, the workqueue is destroyed before pdscteardown is called. This ordering allows two paths to queue work on the destroyed workqueue: 1. If pdscteardown -...

CVE-2026-68259 drm/amdkfd: Check bounds in allocate_event_notification_slot

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocateeventnotificationslot The valid event ids go from 0 to KFDSIGNALEVENTLIMIT allocateeventnotificationslot has an option to specify an event id to allocate at, used by CRIU. We weren't checking t...

CVE-2026-68259

CVE-2026-68259 affects the Linux kernel's DRM/amdkfd path, specifically allocate_event_notification_slot. The vulnerability arises from not validating the upper bound of user-supplied event IDs used by CRIU; valid IDs are 0 to KFD_SIGNAL_EVENT_LIMIT. The fix adds bounds checks, ensuring the upper...

CVE-2026-68259 drm/amdkfd: Check bounds in allocate_event_notification_slot

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocateeventnotificationslot The valid event ids go from 0 to KFDSIGNALEVENTLIMIT allocateeventnotificationslot has an option to specify an event id to allocate at, used by CRIU. We weren't checking t...

CVE-2026-68259

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocateeventnotificationslot The valid event ids go from 0 to KFDSIGNALEVENTLIMIT allocateeventnotificationslot has an option to specify an event id to allocate at, used by CRIU. We weren't checking t...

EUVD-2026-55294

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRXNOTIFY on non-mmio buses PKTTYPETXRXNOTIFY is an mmio-only event, but mt7925rxcheck and mt7925queuerxskb dispatch it to mt7925mactxfree on every bus. mt7925mactxfree cleans the DMA tx queues with...

PT-2026-69987

Name of the Vulnerable Software and Affected Versions Rocket.Chat versions prior to 7.10.14 Rocket.Chat versions prior to 8.0.8 Rocket.Chat versions prior to 8.1.7 Rocket.Chat versions prior to 8.2.7 Rocket.Chat versions prior to 8.3.7 Rocket.Chat versions prior to 8.4.5 Rocket.Chat versions prio...

PT-2026-69659

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdkfd component where the allocate event notification slot function fails to perform bounds checking on the event id specified for allocation. This...

CVE-2026-72918: Missing Authorization

Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 7.10.14, 8.0.8, 8.1.7, 8.2.7, 8.3.7, 8.4.5, 8.5.2, and 8.6.1, the stream-notify-user stream in the WebSocket protocol allows an authenticated user to write arbitrary notification bodies because the sender ...

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: gitea-fips, nuclei, argo-workflows-fips, gomplate-fips, steampipe, flux-source-controller, pulumi-language-java, goreleaser, cloudbeat, redpanda-console, gitlab-rails-ce, flux, pulumi-kubernetes-operator, syft, google-osconfig-agent, rancher-fleet-fips,...

CVE-2026-71557 vulnerabilities

Vulnerabilities for packages: gitea-fips, nuclei, argo-workflows-fips, gomplate-fips, steampipe, flux-source-controller, pulumi-language-java, goreleaser, cloudbeat, redpanda-console, gitlab-rails-ce, flux, pulumi-kubernetes-operator, syft, google-osconfig-agent, rancher-fleet-fips,...

GHSA-HC8V-WWC9-VGXM vulnerabilities

Vulnerabilities for packages: gitea-fips, nuclei, argo-workflows-fips, gomplate-fips, steampipe, flux-source-controller, pulumi-language-java, goreleaser, cloudbeat, redpanda-console, gitlab-rails-ce, flux, pulumi-kubernetes-operator, syft, google-osconfig-agent, rancher-fleet-fips,...

GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: gitea-fips, nuclei, argo-workflows-fips, gomplate-fips, steampipe, flux-source-controller, pulumi-language-java, goreleaser, cloudbeat, redpanda-console, gitlab-rails-ce, flux, pulumi-kubernetes-operator, syft, google-osconfig-agent, rancher-fleet-fips,...

CVE-2026-71556 vulnerabilities

Vulnerabilities for packages: gitaly, pulumi-language-yaml, tfsec, steampipe, grafana-alloy, trivy-operator, act, argo-events, argocd-image-updater, grype, witness, kubescape, scorecard, nfpm, flux, nuclei, gptscript, src-fingerprint, flux-notification-controller, kyverno,...

CVE-2026-71557 vulnerabilities

Vulnerabilities for packages: gitaly, pulumi-language-yaml, tfsec, steampipe, grafana-alloy, trivy-operator, act, argo-events, argocd-image-updater, grype, witness, kubescape, scorecard, nfpm, flux, nuclei, gptscript, src-fingerprint, flux-notification-controller, kyverno,...

GHSA-HC8V-WWC9-VGXM vulnerabilities

Vulnerabilities for packages: gitaly, pulumi-language-yaml, tfsec, steampipe, grafana-alloy, trivy-operator, act, argo-events, argocd-image-updater, grype, witness, kubescape, scorecard, nfpm, flux, nuclei, gptscript, src-fingerprint, flux-notification-controller, kyverno,...

GHSA-QGQ7-7HM3-Q39J vulnerabilities

Vulnerabilities for packages: gitaly, pulumi-language-yaml, tfsec, steampipe, grafana-alloy, trivy-operator, act, argo-events, argocd-image-updater, grype, witness, kubescape, scorecard, nfpm, flux, nuclei, gptscript, src-fingerprint, flux-notification-controller, kyverno,...

CVE-2026-66000

Frappe is a full-stack web application framework. Prior to 16.23.0 and 15.112.0, Document Follow notification generation does not re-evaluate the recipient's current document permissions, allowing users whose access was revoked or reduced to continue receiving document data by email. This issue i...