OpenPrinting CUPS security vulnerability

OpenPrinting CUPS is an open-source printing system developed by OpenPrinting Inc., suitable for Linux® and other Unix®-based operating systems. OpenPrinting CUPS versions 2.4.16 and earlier contain security vulnerabilities. These vulnerabilities stem from the RSS notification program, which allo...

CVE-2026-34978: Improper Limitation of a Pathname to a Restricted Directory

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, the RSS notifier allows .. path traversal in notify-recipient-uri e.g., rss:///../job.cache, letting a remote IPP client write RSS XML bytes outside CacheDir/rss...

Malicious Package

Overview strapi-plugin-notify is a malicious package. This package contains malicious code that conceals a command-and-control agent and credential harvester. A malicious actor published a coordinated campaign of thirty-six packages disguised as community Strapi CMS plugins. These packages aren't...

PT-2026-37413

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the lapbether network driver where the lapbeth data transmit function expects the underlying device type to be ARPHRD ETHER. The issue is addressed by returning NOTIFY B...

aos-keys (>=1.7.0b1, <=1.10.0b1), aos-prov (>=4.5.0b3, <=4.5.0b6) +61 more potentially affected by CVE-2026-34073 via cryptography (42.0.4)

cryptography PYPI version 42.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aos-keys =1.7.0b1, =4.5.0b3, =1.1.2, =1.2.0, =2.6.18, =0.0.79, =0.0.58, =0.0.69, =0.0.51, =1.0.579, =0.20.1, =0.23.0 and more Source...

Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1495)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1495 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix null-deref in aggdequeue CVE-2025-40083 In the Linux kernel, the following vulnerability has been...

PT-2026-34351

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ext4 file system during the unmount process. The problem occurs when update super work races with umount, specifically when ext4 notify error sysfs...

aos-keys (>=1.7.0b1, <=1.10.0b1), aos-prov (>=4.5.0b3, <=4.5.0b6) +61 more potentially affected by CVE-2026-34073 via cryptography (42.0.4)

cryptography PYPI version 42.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aos-keys =1.7.0b1, =4.5.0b3, =1.1.2, =1.2.0, =2.6.18, =0.0.79, =0.0.58, =0.0.69, =0.0.51, =1.0.579, =0.20.1, =0.23.0 and more Source...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix null-deref in aggdequeue CVE-2025-40083 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leak of qgrouplist in btrfsaddqgrouprelation CVE-2025-40209 In t...

Linux kernel net/caif/caif_usb Heap Buffer Overflow DoS

The vulnerability of the cfusbldevicenotify function in the net/caif/caifusb.c module, which is part of the Linux kernel’s networking functions, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

ROS-20260317-73-0005

A vulnerability in the qlennotify function of the sched component of the sched kernel of Linux operating systems is related to the use of memory after it has been freed. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

fs/notify Component Data Compromise

The vulnerability of the fs/notify component in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

CLSA-2026-1773048865 kernel: Fix of 53 CVEs

xhci: Remove device endpoints from bandwidth list when freeing the device CVE-2022-50470 - HID: multitouch: Add NULL check in mtinputconfigured CVE-2024-58020 - netfilter: nftsetpipapo: clamp maximum map bucket size to INTMAX CVE-2025-38201 - fs: writeback: fix use-after-free in markinodedirty...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005809)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005809 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdiscs may...

UBUNTU-CVE-2026-23237

In the Linux kernel, the following vulnerability has been resolved: platform/x86: classmate-laptop: Add missing NULL pointer checks In a few places in the Classmate laptop driver, code using the accel object may run before that object's address is stored in the driver data of the input device usi...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-005714)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005714 advisory. In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosusbpdnotify: Fix error handling in crosusbpdnotifyinit The following WARNING...

Malicious code in spark-audit-notify (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1c527925d1e7cb4055b6c154326cd54a713ad543349c2b3b6f8ab8f0d75e8cbe During installation, host identification details including AD domain are exfiltrated through a series of functions obfuscating this behavior. --- Category:...

MAL-2026-1019 Malicious code in spark-audit-notify (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1c527925d1e7cb4055b6c154326cd54a713ad543349c2b3b6f8ab8f0d75e8cbe During installation, host identification details including AD domain are exfiltrated through a series of functions obfuscating this behavior. --- Category:...

CVE-2026-23186

In the Linux kernel, the following vulnerability has been resolved: hwmon: acpipowermeter Fix deadlocks related to acpipowermeternotify The acpipowermeter driver's .notify callback function, acpipowermeternotify, calls hwmondeviceunregister under a lock that is also acquired by callbacks in sysfs...

CVE-2026-23186

In the Linux kernel, the following vulnerability has been resolved: hwmon: acpipowermeter Fix deadlocks related to acpipowermeternotify The acpipowermeter driver's .notify callback function, acpipowermeternotify, calls hwmondeviceunregister under a lock that is also acquired by callbacks in sysfs...