CVE-2026-90249: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes The IIO core does not filter duplicate writes to the event enable attribute, so writing the same value twice invokes writeeventconfig twice. Enabling twice...

PT-2026-94572

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the NFC NCI subsystem where nci close device and nci rx work can concurrently call the nci data exchange complete function. This occurs because rx work is no...

PT-2026-94922

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the remoteproc: qcom q6v5 adsp component. The issue arises within the adsp map carveout function, which fails to call of node put to release the device node...

CVE-2026-90291: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: module/dups: Fix use-after-free in kmoddupreq lifetime handling The kmod dups code uses RCU to ensure that a kmoddupreq instance is freed only after it is no longer referenced. When releasing an instance, the kmodduprequestdelete...

PT-2026-94636

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rcar-gen2 Renesas PHY driver where a double reference release occurs during PHY creation failure. The for each child of node scoped function automatically releases...

PT-2026-94590

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/vt-d component where replacing a domain that has an iopf handler with another domain at the RID level causes a reference leak in info-iopf refcount. This...

CVE-2026-93059: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix taskstruct reference leak in recoverworker getpidtask increments the task reference count, but the corresponding puttaskstruct was missing in the else branch, leaking a reference on every GPU hang recovery. Patchwork...

PT-2026-94175

Name of the Vulnerable Software and Affected Versions Event Booking Manager for WooCommerce versions prior to 5.3.8 Description The plugin fails to perform ownership or authorization checks before rendering booking confirmation details. This allows unauthenticated attackers to retrieve personal...

ROS-20260917-73-0020

The vulnerability in the kernel-lt is related to the use of a name with an incorrect reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-94702

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7915 driver where the mt7915 pci init hif2 function is called unconditionally and then called again within the WED-inactive branch. This results in the global hi...

PT-2026-94939

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the ipu7 resume function within the staging media ipu7 component. The issue arises because pm runtime get sync is called before resuming the device; if t...

PT-2026-94932

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A device reference count leak exists during MHI device creation. The function mhi ep create device allocates references for the UL and DL channels; however, if dev set name or device add...

PT-2026-94857

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the recover worker function within the drm/msm component. The get pid task function increments the task reference count, but the corresponding put task struct...

PT-2026-94901

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the esp ssg unref function where it incorrectly releases page references on the source scatterlist after an AEAD operation. When a socket buffer skb contains managed...

PT-2026-94844

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access in the property array occurs when the software node get reference args function is called with an index of UINT MAX representing -1, as the bounds check fails to...

CVE-2026-92626

Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/dguardintegration/dguardVersion endpoint dereferences DGuard integration login state that may be unset, raising an unhandled null reference exception. The exception is thrown from an...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the absence of a guard in espssgunref, which is responsible for handling skbzcopymanaged. This oversight allows for the incorrect release of pages that have never been referenced by the skb. This can lead to undercountin...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from netfilter nftables’ double cloning of set expression elements during element insertion. This may lead to an imbalance in the reference count of the connlimit expression module and trigger warnings...

github.com/go-git/go-git: github.com/go-git/go-git/v5: go-git: Unauthorized file modification via directory traversal in reference names

A flaw was found in go-git, an extensible Git implementation library. Maliciously crafted reference names, which can contain directory-traversal sequences, are not properly sanitized. This vulnerability allows an attacker to write files outside of the intended reference storage directory,...

EUVD-2026-80804

Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/dguardintegration/dguardVersion endpoint dereferences DGuard integration login state that may be unset, raising an unhandled null reference exception. The exception is thrown from an...