Linux Distros Unpatched Vulnerability : CVE-2026-80841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/packet: defer vmalloc TXRING free until skbs finish AFPACKET TXRING skbs keep a raw pointer to their ring frame. The skb page references preserve page-backe...

CVE-2026-80888: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: drop dmabuf reference on foreign-fd prime import ttmprimefdtohandle returns -ENOSYS when the imported fd's dmabuf-ops do not match the ttmobjectdevice's ops, but does so without releasing the reference acquired by...

PT-2026-85686

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: put CQ ref on create cq mapping failure nvmet pci epf create cq calls nvmet cq create, which takes a reference on the controller and installs the completion queue. If the subsequent PCI address-space mapping fails...

PT-2026-85788

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the attribute-list entry in ntfs read inode mount The $MFT attribute-list walk in ntfs read inode mount validates each entry only with "u8 al entry + 6 al end" and "u8 al entry + le16 to cpual entry-length al end", bu...

PT-2026-85797

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Andrew File System afs component where the afs lookup volume rcu function fails to properly handle cases where afs try get volume fails, leading to a leak of a dyi...

PT-2026-86188

CVE-2026-80897 - Linux kernel netfs flaw leaves readahead folio refs held on iterator prep failure, risking memory exhaustion. CVSS N/A. Currently unpatched. If you run a kernel with netfs, monitor for updates and test mitigations. https://t.co/Nnac5t2z7p CVE infosec XSS valtersit snippet infosec...

PT-2026-86194

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel when the xe oa emit oa config function fails during fence allocation, config buffer allocation, or batch submission. In these failure scenarios,...

PT-2026-86179

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the drm/vmwgfx component when importing a foreign file descriptor. The function ttm prime fd to handle returns an error when the imported file descriptor's dma...

CVE-2026-80821: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: put CQ ref on createcq mapping failure nvmetpciepfcreatecq calls nvmetcqcreate, which takes a reference on the controller and installs the completion queue. If the subsequent PCI address-space mapping fails or...

MINI-8669-JXM8-4QQQ

Bulletin has no description...

CVE-2026-85389 Worklenz before 3.0.0 Authorization Bypass on Task-Scoped Endpoints

Worklenz before 3.0.0 fails to verify task ownership by organization when resolving task-scoped API endpoints, allowing authenticated users to access another tenant's task data. Attackers can query task endpoints with arbitrary task UUIDs to retrieve work logs, comments, attachments, and project...

CVE-2026-84769

Unauthenticated Insecure Direct Object References IDOR in Business Directory = 6.4.26 versions...

CVE-2026-84836

WC Ukraine Shipping is a WordPress plugin affected by an Insecure Direct Object References (IDOR) vulnerability in versions 1.22.3 and earlier . The flaw allows a low-privilege user (Subscriber level) to access restricted objects, resulting in high confidentiality impact and low integrity impact,...

CVE-2026-84836 WordPress WC Ukraine Shipping plugin <= 1.22.3 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in WC Ukraine Shipping = 1.22.3 versions...

EUVD-2026-70568

Subscriber Insecure Direct Object References IDOR in WC Ukraine Shipping = 1.22.3 versions...

CVE-2026-84769 WordPress Business Directory plugin <= 6.4.26 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Business Directory = 6.4.26 versions...

CVE-2026-84769 WordPress Business Directory plugin <= 6.4.26 - Insecure Direct Object References (IDOR) vulnerability

Unauthenticated Insecure Direct Object References IDOR in Business Directory = 6.4.26 versions...

CVE-2026-84769

CVE-2026-84769 affects the WordPress Business Directory plugin in versions

EUVD-2026-70577

Unauthenticated Insecure Direct Object References IDOR in Business Directory = 6.4.26 versions...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.14 contains security vulnerabilities. These vulnerabilities stem from the netfspreparereaditerator function, which prepares I/O iterators by batching pre-read folios into putbatch. When rollingbufferloadfromra fails, the already batched folio references are not released...