CVE-2026-89911 KVM: arm64: Correctly cap TLBI Range to the architural limit

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap TLBI Range to the architural limit TLB Invalidation by Range has a fairly powerful way of encoding pretty large ranges in a small number of bits. This range can be based on an arbitrary VA, which means i...

CVE-2026-92475: Out-of-bounds Read

A weakness has been identified in GPAC 26.08-DEV. This impacts the function waitforheaderandparse of the file src/utils/downloader.c. This manipulation of the argument Content-Range causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and...

PT-2026-93475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs filesystem within the free segment range function. The curseg evacuation loop only iterates up to NR CURSEG PERSIST TYPE, which fails to include non-persisten...

PT-2026-93944

Name of the Vulnerable Software and Affected Versions GPAC version 26.08-DEV Description An out-of-bounds read occurs in the wait for header and parse function within the src/utils/downloader.c file. This issue is triggered by the manipulation of the Content-Range argument and requires local acce...

PT-2026-93481

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs file system where the F2FS IOC MOVE RANGE operation fails to validate the destination end before updating the i size the size of the inode. This occurs becaus...

PT-2026-93552

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the KVM arm64 implementation, a flaw exists in how TLB Invalidation by Range is handled. Because the range can be based on an arbitrary Virtual Address VA, a guest could potentially...

CVE-2026-89911: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap TLBI Range to the architural limit TLB Invalidation by Range has a fairly powerful way of encoding pretty large ranges in a small number of bits. This range can be based on an arbitrary VA, which means i...

PT-2026-93555

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 component where the decode range tlbi function failed to perform the required sign extension for Virtual Address VA during range-based Translation...

PT-2026-93619

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the SYNC BO operation does not constrain its size, allowing a request for zero bytes to reach the drm clflush virt range function. This function performs an...

PT-2026-93608

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write occurs in the migrate device range and migrate device pfns functions. This happens when a compound folio extends beyond the end of the range provided by the caller...

Linux Distros Unpatched Vulnerability : CVE-2026-89911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Correctly cap TLBI Range to the architural limit TLB Invalidation by Range has a fairly powerful way of encoding pretty large ranges in a small numb...

CVE-2026-86885

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

CVE-2026-86885

This vulnerability affects iOS and iPadOS due to an input validation issue . An attacker within radio range can exploit this flaw to cause unexpected system termination . The issue has been resolved in iOS 27 and iPadOS 27 . No specific exploit details or links are provided in the documents.

CVE-2026-86885

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

EUVD-2026-77925

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

CVE-2026-86885

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

OESA-2026-3825 libsoup3 security update

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. Security Fixes: A heap out-of-bounds read flaw was found in libsoup. When parsing...

OESA-2026-3782 libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fixes: A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTT...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Range check on CHDBOFF and ERDBOFF If the values read from the CHDBOFF and ERDBOFF registers are outside the range of the MHI register space, an invalid address may be calculated, which can later cause a kernel...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: arm64: ftrace: fixed module PLTs with mcount Li Huafei reports that the ftrace with module PLTs based on mcount was broken by the commit: a6253579977e4c6f “arm64: ftrace: consistently handle PLTs.” When module PLTs are used and a...