PT-2026-94864

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the x86 memory management PAT Page Attribute Table implementation. The problem occurs when loading and unloading modules concurrently on multiple CPUs...

PT-2026-99524

TuxCare rebuilt drupal/protected pages to address 1 CVE. Fixed in 7.2.4-p1+tuxcare...

PT-2026-94766

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel BUG occurs within the nilfs copy dirty pages function, which is responsible for copying dirty DAT file folios or pages to the shadow page cache. The issue is triggered when a...

PT-2026-94782

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the zisofs fill pages function where the compressed block pointer table is read. While error paths and loop advancements correctly release the buffer head, the success...

PT-2026-94843

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bpf arena free pages function where scalar arena addresses are processed by masking the address to the low 32 bits and reconstructing a full user address from the...

EUVD-2026-80508

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Preserve memslot arch flags on KVMMRFLAGSONLY kvmarchpreparememoryregion computes new-arch.flags, i.e. whether a memslot is KVMMEMHUGEPAGECAPABLE or KVMMEMHUGEPAGEINCAPABLE, only for KVMMRCREATE and KVMMRMOVE, and...

CVE-2026-89908 LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Preserve memslot arch flags on KVMMRFLAGSONLY kvmarchpreparememoryregion computes new-arch.flags, i.e. whether a memslot is KVMMEMHUGEPAGECAPABLE or KVMMEMHUGEPAGEINCAPABLE, only for KVMMRCREATE and KVMMRMOVE, and...

CVE-2026-89908 LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Preserve memslot arch flags on KVMMRFLAGSONLY kvmarchpreparememoryregion computes new-arch.flags, i.e. whether a memslot is KVMMEMHUGEPAGECAPABLE or KVMMEMHUGEPAGEINCAPABLE, only for KVMMRCREATE and KVMMRMOVE, and...

EUVD-2026-80200

The LearnPress WordPress plugin before 4.4.7 does not escape a user supplied value before using it in an HTML attribute on a public page, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who opens a crafted link, including a logged in administrator. Only...

CVE-2026-85706 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner, gitlab-workhorse-ce, gitlab-pages, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner-fips...

GHSA-F47W-MRG9-G9P2 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-runner, gitlab-workhorse-ce, gitlab-pages, gitlab-workhorse-ce-fips, gitlab-rails-ce-fips, gitlab-runner-fips...

GHSA-F47W-MRG9-G9P2 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-runner...

CVE-2026-85706 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-runner...

Google Chrome Authorization Issue Vulnerability

Google Chrome is a free web browser developed by Google Inc. Google Chrome has a licensing issue vulnerability, which stems from improper licensing management in CORS. Attackers can exploit this vulnerability by using specially crafted HTML pages to bypass Web source policies...

Google Chrome Authorization Vulnerability (CNVD-2026-37842)

Google Chrome is a free web browser developed by Google Inc. Google Chrome has a licensing issue vulnerability, which stems from improper licensing management in FedCM. Attackers can exploit this vulnerability by using specially crafted HTML pages to bypass Web source policies...

Google Chrome has an authorization vulnerability (CNVD-2026-37834)

Google Chrome is a free web browser developed by Google Inc. Google Chrome has a vulnerability related to authorization issues, which stems from improper authorization in the Actor component. Attackers can exploit this vulnerability to obtain sensitive information through specially crafted HTML...

CVE-2026-89931: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Ensure KVMREQGETNESTEDSTATEPAGES is cleared on VM-Exit Always check and clear KVMREQGETNESTEDSTATEPAGES when emulating a nested VM-Exit to ensure the request is cleared, even when KVM was built with CONFIGKVMHYPERV=n, ...

PT-2026-93628

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the zap huge pmd folio function fails to propagate the pmd dirty bit to the folio during the zap process. In MAP SHARED tmpfs mappings, a read fault installs a...

PT-2026-93602

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the powerpc memory management where the vmemmap populate compound pages function incorrectly tracks addr pfn. The addr pfn variable is advanced manually in parallel wi...

PT-2026-93474

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the f2fs file system that can lead to a potential deadloop within the f2fs fsync node pages function. This occurs when one thread performs an fsync operation v...