CVE-2026-63793 ntfs: serialize volume label accesses

In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol-volumelabel with a mutex and snaphost the label before copytouser. This prevent a use-after-free when FSIOCSETFSLABEL replaces the vol-volumelabel and FSIOCGETTSLABEL reads it...

CVE-2026-63793

In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol-volumelabel with a mutex and snaphost the label before copytouser. This prevent a use-after-free when FSIOCSETFSLABEL replaces the vol-volumelabel and FSIOCGETTSLABEL reads it...

CVE-2026-53380

In the Linux kernel, the following vulnerability has been resolved: media: rzv2h-ivc: Fix concurrent buffer list access The list of buffers rzv2hivc::buffers.queue is protected by a spinlock rzv2hivc::buffers.lock. However, in rzv2hivctransferbuffer, which runs in a separate workqueue, the listde...

CVE-2026-53380 media: rzv2h-ivc: Fix concurrent buffer list access

In the Linux kernel, the following vulnerability has been resolved: media: rzv2h-ivc: Fix concurrent buffer list access The list of buffers rzv2hivc::buffers.queue is protected by a spinlock rzv2hivc::buffers.lock. However, in rzv2hivctransferbuffer, which runs in a separate workqueue, the listde...

CVE-2026-53375

CVE-2026-53375 affects the Linux kernel, specifically the drm/amdgpu/vce component. The issue arises during patching when only one of the lo/hi address parts is valid, which could cause a bad address to be written to firmware. The vulnerability is described as resolved, with linked kernel commits...

CVE-2026-53368

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by incorrect natentry flag usage f2fsneeddentrymark reads natentry flags without mutual exclusion with the checkpoint path, which can result in an incorrect inode block marking state. The...

Cleartext Storage of Sensitive Information

Overview django-blog-zinnia is an A clear and powerful weblog application powered with Django Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information in the entryprotection.py process. An attacker can access sensitive information by reading cleartext data...

CVE-2026-16213

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

CVE-2026-16213 Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

CVE-2026-16213 Fantomas42 django-blog-zinnia Protected Entry Password entry_protection.py cleartext storage

A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixins/entryprotection.py of the component Protected Entry Password Handler. The manipulation results in cleartext storage of...

PT-2026-61047

Name of the Vulnerable Software and Affected Versions django-blog-zinnia versions prior to 0.21 Description A security flaw in the Protected Entry Password Handler component, specifically within the zinnia/views/mixins/entry protection.py file, leads to the cleartext storage of sensitive...

PT-2026-61151

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the batman-adv module when a hard interface is disabled. While the worker is disabled via batadv hardif disable interface and batadv v ogm iface disable, and the...

CVE-2026-64079: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtables: allocate hook ops while under mutex arp/ip6tregistertable add the table to the per-netns list via xtregistertable before allocating the per-netns hook ops copy via kmemduparray. This leaves a window where the...

CVE-2026-63811: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...

PT-2026-61254

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM SEV component where entries and indices are read from the guest-accessible Page State Change PSC buffer without proper synchronization. This lack of...

CVE-2026-53382: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtvmuxpushsi syzbot reported a general protection fault in vidtvpsitspsiwriteinto 1. vidtvmuxgetpidctx can return NULL, but vidtvmuxpushsi does not check for this before dereferenci...

Linux Distros Unpatched Vulnerability : CVE-2026-53387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: light: veml6075: add bounds check to veml6075itms index veml6075itms has 5 elements but VEML6075CONFIT can yield values 0-7. If it returns a value = 5, thi...

CVE-2026-64052: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: block: bio-integrity: Fix null-ptr-deref in biointegritymapuser pinuserpagesfast can partially succeed and return the number of pages that were actually pinned. However, the biointegritymapuser does not handle this partial pinnin...

PT-2026-61293

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth L2CAP implementation where the l2cap ecred reconf rsp function fails to clear the chan-ident variable upon a successful ECRED reconfiguration. This diffe...

PT-2026-61109

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the NTFS driver due to a lack of serialization when accessing volume labels. This occurs when the FS IOC SETFSLABEL operation replaces the vol-volume lab...