SUSE CVE-2026-64263

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix moving cancelled entry to entinuserspace list fuseuringcancel moves entries that are available these have no reqs attached to the entinuserspace list. entlistrequestexpired checks the first entry on entinuserspace...

CVE-2026-64262

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: end fusereq on io-uring cancel task work When iouring delivers task work with tw.cancel set PFEXITING, PFKTHREAD fallback, or percpurefisdying on the ring context, fuseuringsendintask takes the cancel branch, assigns...

CVE-2026-64263

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix moving cancelled entry to entinuserspace list fuseuringcancel moves entries that are available these have no reqs attached to the entinuserspace list. entlistrequestexpired checks the first entry on entinuserspace...

PT-2026-64484

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the fuse-uring component where the fuse uring cancel function moves available entries without attached requests to the ent in userspace list. The ent list request expire...

CVE-2026-64235

In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines With CONFIGCALLDEPTHTRACKING enabled on an x86 retbleed-affected platform eg: Skylake, with retbleed=stuff, registering a dynamic ftrace trampoline crashes on...

CVE-2026-64235

CVE-2026-64235 refers to a Linux kernel issue where, on x86 with CONFIG_CALL_DEPTH_TRACKING and retbleed protections (e.g., Skylake), relocating percpu references for dynamic ftrace trampolines caused a crash on the first call to a traced function. The crash was due to a mis relocation of the CAL...

PT-2026-64350

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.0.10 Description An issue exists in the x86 ftrace implementation where registering a dynamic ftrace trampoline on retbleed-affected platforms such as Skylake with CONFIG CALL DEPTH TRACKING enabled and retbleed=stuff...

GHSA-FCRP-7GC2-93G7 Envoy Gateway custom backendRef cross-namespace ReferenceGrant bypass

Impact Envoy Gateway accepts extension-managed custom backendRefs from an HTTPRoute to a backend resource in another namespace without requiring a matching Gateway API ReferenceGrant in the target namespace. This breaks the Gateway API cross-namespace consent model: the namespace that owns the...

PT-2026-58164

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A numeric truncation error in the Windows Resilient File System ReFS allows an authorized attacker to execute code locally. Additionally, it is reported that remote...

CVE-2026-50357: Numeric Truncation Error

Numeric truncation error in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

CVE-2026-58530: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code locally...

CVE-2026-50501: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code locally...

CVE-2026-50492: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-50441: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-50407: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-49792: Numeric Truncation Error

Numeric truncation error in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

CVE-2026-50318: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-54109: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

CVE-2026-50362: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code locally...

Prototype Pollution

apidevtools json-schema-ref-parser is vulnerable to Prototype Pollution. The vulnerability is due to improper validation of property names in the Refs.set and Pointer.set functions, where attacker-controlled input can modify object prototype attributes, allowing attackers to manipulate applicatio...