Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: Fixed the issue where enabling Bluetooth fails again for QCA6390 after a warm reboot. The commit 272970be3dab “Bluetooth: hciqca: Fixed the driver shutdown issue when the serdev is closed” causes the following...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: phylib: fixed potential use-after-free issues. The commit bafbdd527d56 “phylib: Added support for device reset GPIO” includes a call to phydeviceresetphydev after the putdevice call in phydetach. The comment before the putdevice...

libkcapi: IV reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...

CVE-2026-57229

smtp: evasion due to incomplete state reset...

UBUNTU-CVE-2026-57229

smtp: evasion due to incomplete state reset...

RHEL 9 : libkcapi (RHSA-2026:67265)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67265 advisory. libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so...

Linux Distros Unpatched Vulnerability : CVE-2026-72709

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before version 4.4.18 contains a missing authorization vulnerability in sensitive actions under ecrire/action/ that allows unauthenticated attackers to...

Flowise-CVE-2025-58434-PasswordReset

CVE-2025-58434 — Restablecimiento de Contraseña No Autenticado en Flowise AI Resumen ID CVE: CVE-2025-58434 Software Afectado: Flowise AI Versiones Vulnerables: = 3.0.5 Versión Corregida: 3.0.6 y posteriores Gravedad: Crítica Autor: r3nsi15 Fecha: 2025 Descripción Las versiones de Flowise AI hast...

CVE-2026-90562

LangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies no rate limiting to the unauthenticated reset-password endpoint. Remote attackers knowing the administrator email can exhaust the keyspace through concurrent requests to reset the admin password and...

EUVD-2026-76987

LangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies no rate limiting to the unauthenticated reset-password endpoint. Remote attackers knowing the administrator email can exhaust the keyspace through concurrent requests to reset the admin password and...

CVE-2026-90562 LangBot before 4.10.11 Authentication Bypass via Weak Recovery Key

LangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies no rate limiting to the unauthenticated reset-password endpoint. Remote attackers knowing the administrator email can exhaust the keyspace through concurrent requests to reset the admin password and...

CVE-2026-90562 LangBot before 4.10.11 Authentication Bypass via Weak Recovery Key

LangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies no rate limiting to the unauthenticated reset-password endpoint. Remote attackers knowing the administrator email can exhaust the keyspace through concurrent requests to reset the admin password and...

CVE-2026-89080

The Really Simple Security WordPress plugin before 9.8.1 does not prevent an unauthenticated request from resetting an account's completed email two-factor enrolment, allowing an attacker who already knows the account's password to bypass the second factor and obtain that user's session, up to...

CVE-2026-77705

CVE-2026-77705 affects the Booking for Appointments and Events Calendar (Amelia) WordPress plugin in versions before 2.4.10 . The root cause is a missing authorization check: when a user with Amelia's customer or employee management permissions edits a record, the plugin does not verify that the ...

Linux Distros Unpatched Vulnerability : CVE-2026-80999

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: dsa: realtek: use gpiodsetvaluecansleep for reset GPIO rtl83xxresetassert and rtl83xxresetdeassert are only called from the probe path, which may sleep an...

CVE-2026-80999

A flaw was found in the Linux kernel's Realtek Digital Subscriber Line DSA driver. The driver incorrectly uses gpiodsetvalue instead of gpiodsetvaluecansleep for reset GPIO operations. This can lead to system warnings when the reset GPIO is managed by a sleeping controller, potentially causing...

CVE-2026-89717

A flaw was found in the zram component of the Linux kernel. When zramdestroycomps is called, it incorrectly resets the primary compressor to a NULL state. This invalid state can lead to a NULL pointer dereference when compalgorithmshow attempts to access the compressor, potentially causing system...

CVE-2026-89719

A flaw was found in the Linux kernel's zram module. This vulnerability occurs when the readblockstate function calculates the number of pages before acquiring a device lock. If the zram device is reset and reinitialized with a smaller disk size, the function can attempt to access memory beyond th...

DEBIAN-CVE-2026-89718

In the Linux kernel, the following vulnerability has been resolved: zram: fix out-of-bounds access in writebackstore Patch series "zram: fix stale scan bounds after reinitialization". Both writebackstore and readblockstate derive their table scan bounds from zram-disksize before acquiring devlock...

DEBIAN-CVE-2026-80999

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiodsetvaluecansleep for reset GPIO rtl83xxresetassert and rtl83xxresetdeassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a sleepin...