CVE-2026-89764

CVE-2026-89764 affects the Linux kernel's Rust devres (device resource) subsystem. A race condition occurs when two code paths concurrently revoke a Devres resource: the driver core's devres_release_all() calls Revocable::revoke() via the release callback, while Devres::drop() calls revoke_nosync...

CVE-2026-89764 rust: devres: fix race between concurrent revokers

In the Linux kernel, the following vulnerability has been resolved: rust: devres: fix race between concurrent revokers There is a potential race condition when two paths try to revoke a Devres concurrently. The driver core's devresreleaseall calls Revocable::revoke via the release callback, while...

CVE-2026-89764 rust: devres: fix race between concurrent revokers

In the Linux kernel, the following vulnerability has been resolved: rust: devres: fix race between concurrent revokers There is a potential race condition when two paths try to revoke a Devres concurrently. The driver core's devresreleaseall calls Revocable::revoke via the release callback, while...

[SECURITY] Fedora 45 Update: rust-webbrowser-1.2.4-1.fc45

Open URLs in web browsers available on a platform...

crossfyre-toolchain

Crossfyre Toolchain Five standalone reconnaissance and sc...

CVE-2026-87528

A type confusion flaw was found in the Rust component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=539569491...

apk-info v1.0.13

apk-info A full-featured apk parser. Features A malware-friendly zip extractor. Great article about BadPack technique; A malware-friendly axml and arsc extractor; A full AXML Android Binary XML implementation; A full ARSC Android Resource implementation; Support for extracting information contain...

AZL-101799 CVE-2026-89160 affecting package rust 1.75.0-31

PCRE2 before 10.48 has a pcre2match out-of-bounds read during the PCRE2MATCHINVALIDUTF matching of an invalid UTF subject...

AZL-101823 CVE-2026-89161 affecting package rust 1.96.1-1

In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur...

AZL-101817 CVE-2026-89160 affecting package rust 1.96.1-1

PCRE2 before 10.48 has a pcre2match out-of-bounds read during the PCRE2MATCHINVALIDUTF matching of an invalid UTF subject...

AZL-101805 CVE-2026-89158 affecting package rust 1.75.0-31

PCRE2 before 10.48, on 32-bit platforms, has a pcre2compile32 integer overflow and resultant out-of-bounds write...

AZL-101814 CVE-2026-89158 affecting package rust for versions less than 1.96.0-1

PCRE2 before 10.48, on 32-bit platforms, has a pcre2compile32 integer overflow and resultant out-of-bounds write...

Fedora 45 : rust-ppmd-rust (2026-78406777e8)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-78406777e8 advisory. Update to version 1.4.1; Fixes RHBZ2526655 Security fix for GHSA-rqc2-j9v2-j22v, an out-of-bounds read in the PPMd8 decoder. Tenable has extracted the...

PT-2026-90480

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Rust implementation of the device resource management devres system. This occurs when two execution paths attempt to revoke a Devres concurrently: the driv...

CVE-2026-89764: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rust: devres: fix race between concurrent revokers There is a potential race condition when two paths try to revoke a Devres concurrently. The driver core's devresreleaseall calls Revocable::revoke via the release callback, while...

Fedora 45 : rust-webbrowser (2026-64307ca6fb)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-64307ca6fb advisory. Update to version 1.2.4. This includes a fix for RUSTSEC-2026-0257. Tenable has extracted the preceding description block directly from the Fedora security...

CVE-2026-88024

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

CVE-2026-88024

A flaw was found in the GridFS component of the MongoDB Rust Driver. An authenticated user can exploit this vulnerability by manipulating a file identifier, causing it to be misinterpreted as a query condition. This improper handling of special elements in data query logic can lead to unauthorize...

EUVD-2026-75638

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

CVE-2026-88024

CVE-2026-88024 affects the GridFS component of the MongoDB Rust Driver . A caller-supplied structured file identifier is not properly neutralized in query logic, allowing it to be interpreted as a query condition rather than a literal identifier. An authenticated user who can influence the identi...