ALSA-2026:84595 Moderate: cockpit-files security update

A filesystem browser for Cockpit Security Fixes: cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste CVE-2026-91202 cockpit-files: cockpit-files: Local attacker can hijack file ownership via symlink race CVE-2026-91205 For more details about the...

PT-2026-117699

IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session...

Linux Distros Unpatched Vulnerability : CVE-2026-98462

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hciconn: fix CIS hold ownership on reuse Commit 69997d50ec57 Bluetooth: ISO: handle bound CIS cleanup via hciconn made hcibindcis and hciconnectcis...

RHEL 9 : cockpit-files (RHSA-2026:84595)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:84595 advisory. A filesystem browser for Cockpit Security Fixes: cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in...

Moderate: cockpit-files security update

A filesystem browser for Cockpit Security Fixes: cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste CVE-2026-91202 cockpit-files: cockpit-files: Local attacker can hijack file ownership via symlink race CVE-2026-91205 For more details about the...

DEBIAN-CVE-2026-98462

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fix CIS hold ownership on reuse Commit 69997d50ec57 "Bluetooth: ISO: handle bound CIS cleanup via hciconn" made hcibindcis and hciconnectcis return a connection with one hold for the ISO layer. hcibindcis...

UBUNTU-CVE-2026-98462

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fix CIS hold ownership on reuse Commit 69997d50ec57 "Bluetooth: ISO: handle bound CIS cleanup via hciconn" made hcibindcis and hciconnectcis return a connection with one hold for the ISO layer. hcibindcis...

CVE-2026-98823

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: preserve hidden-group beacon IE ownership A hidden-group probe-response entry borrows its beacon IEs from the group's beacon entry. cfg80211updateassocbssentry can pass such an entry to cfg80211updateknownbss when...

CVE-2026-98462 Bluetooth: hci_conn: fix CIS hold ownership on reuse

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fix CIS hold ownership on reuse Commit 69997d50ec57 "Bluetooth: ISO: handle bound CIS cleanup via hciconn" made hcibindcis and hciconnectcis return a connection with one hold for the ISO layer. hcibindcis...

CVE-2026-98462 Bluetooth: hci_conn: fix CIS hold ownership on reuse

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fix CIS hold ownership on reuse Commit 69997d50ec57 "Bluetooth: ISO: handle bound CIS cleanup via hciconn" made hcibindcis and hciconnectcis return a connection with one hold for the ISO layer. hcibindcis...

CVE-2026-98462

The Linux kernel Bluetooth stack contains a flaw in how CIS hold ownership is handled during reuse. Specifically, the functions hci_bind_cis() and hci_connect_cis() may fail to correctly manage ISO layer holds. In hci_bind_cis(), holds are currently taken only after CIS configuration, leading to ...

CVE-2026-98462

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fix CIS hold ownership on reuse Commit 69997d50ec57 "Bluetooth: ISO: handle bound CIS cleanup via hciconn" made hcibindcis and hciconnectcis return a connection with one hold for the ISO layer. hcibindcis...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.19 contains a security vulnerability. This vulnerability stems from the fixhostownership function in KVM arm64, which only iterates through the linear mapping aliases of each memblock area, without iterating through the VA range of each CPU’s hypervisor stack. This may...

CVE-2026-98462: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fix CIS hold ownership on reuse Commit 69997d50ec57 "Bluetooth: ISO: handle bound CIS cleanup via hciconn" made hcibindcis and hciconnectcis return a connection with one hold for the ISO layer. hcibindcis...

PT-2026-116685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 component where the fix host ownership function only processes the linear-map alias of each memblock region. Consequently, the per-CPU hyp stack, which i...

PT-2026-128468

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 fix host ownership walks only the linear-map alias of each memblock region, and the per-CPU hyp stack, mapped in the private VA range for its guard page, has none...

CLSA-2026-1792212029 gvfs: Fix of CVE-2026-88924

CVE-2026-88924: gvfsd-admin changed the ownership of its D-Bus socket with a link-following chown after creating it in a user-controlled directory, allowing a local user to take ownership of arbitrary root-owned files; set the filesystem UID before creating the socket instead upstream 371909dd...

CVE-2026-92715

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the 'ID' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, wi...

EUVD-2026-103222

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the 'ID' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, wi...

CVE-2026-92715

The Tutor LMS plugin for WordPress (versions up to and including 4.1.0 ) is vulnerable to an Insecure Direct Object Reference (IDOR) . The root cause is a lack of validation on the 'ID' parameter ; the Input::sanitize_array() function preserves attacker-supplied POST keys, allowing WordPress's wp...