PT-2026-128125

In the Linux kernel, the following vulnerability has been resolved: xfs: don't hold buffer locks across sync transaction commit in xfs sync sb buf xfs sync sb buf holds sb/rtsb buffer locks across a synchronous xfs trans commit, which flushes the CIL push workqueue internally. If shutdown occurs...

PT-2026-122431

Summary An allocation-without-limits vulnerability CWE-770 in the Twisted conch telnet transport lets any unauthenticated remote peer exhaust server memory over a single connection. When the peer opens a telnet subnegotiation with IAC SB and then streams bytes without ever sending the IAC SE...

PT-2026-121877

In the Linux kernel, the following vulnerability has been resolved: btrfs: protect sb write pointer with invalidate lock sb write pointer reads the super block from the block device page cache using read cache page gfp. This has the same race with BLKBSZSET as the one fixed by commit 3f29d661e568...

@storybook/cli (>=11.0.0-alpha.0, <=11.0.0-alpha.5), @storybook/codemod (>=11.0.0-alpha.0, <=11.0.0-alpha.5) +2 more potentially affected by CVE-2026-114126 via storybook (>=11.0.0-alpha.0, <=11.0.0-alpha.5)

storybook NPM version =11.0.0-alpha.0, =11.0.0-alpha.0, =11.0.0-alpha.0, =11.0.0-alpha.0, =11.0.0-alpha.0, =11.0.0-alpha.5 Source cves: CVE-2026-114126 Source advisory: GHSA-PX85-F4Q5-JH77...

@storybook/cli (>=11.0.0-alpha.0, <=11.0.0-alpha.5), @storybook/codemod (>=11.0.0-alpha.0, <=11.0.0-alpha.5) +2 more potentially affected by CVE-2026-114126 via storybook (>=11.0.0-alpha.0, <=11.0.0-alpha.5)

storybook NPM version =11.0.0-alpha.0, =11.0.0-alpha.0, =11.0.0-alpha.0, =11.0.0-alpha.0, =11.0.0-alpha.0, =11.0.0-alpha.5 Source cves: CVE-2026-114126 Source advisory: SNYK:JS-STORYBOOK-21460714...

@storybook/cli (>=11.0.0-alpha.0, <=11.0.0-alpha.5), @storybook/codemod (>=11.0.0-alpha.0, <=11.0.0-alpha.5) +2 more potentially affected by CVE-2026-114125 via storybook (>=11.0.0-alpha.0, <=11.0.0-alpha.5)

storybook NPM version =11.0.0-alpha.0, =11.0.0-alpha.0, =11.0.0-alpha.0, =11.0.0-alpha.0, =11.0.0-alpha.0, =11.0.0-alpha.5 Source cves: CVE-2026-114125 Source advisory: SNYK:JS-STORYBOOK-21689171...

@storybook/cli (>=11.0.0-alpha.0, <=11.0.0-alpha.5), @storybook/codemod (>=11.0.0-alpha.0, <=11.0.0-alpha.5) +2 more potentially affected by CVE-2026-114126 via storybook (>=11.0.0-alpha.0, <=11.0.0-alpha.5)

storybook NPM version =11.0.0-alpha.0, =11.0.0-alpha.0, =11.0.0-alpha.0, =11.0.0-alpha.0, =11.0.0-alpha.0, =11.0.0-alpha.5 Source cves: CVE-2026-114126 Source advisory: MEND:CVE-2026-114126...

PT-2026-116772

In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi-pipe file reference leak in autofs kill sb When autofs fill super fails before clearing AUTOFS SBI CATATONIC for example, when find get pid fails on an invalid pgrp mount option, or when an fs context is closed...

CLSA-2026-1792161069 TuxCare security update for sb (1 CVE)

TuxCare rebuilt sb to address 1 CVE. Fixed in 7.0.7-tuxcare.1...

PT-2026-123733

TuxCare rebuilt sb to address 1 CVE. Fixed in 7.0.7-tuxcare.1...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check the return result of sbminblocksize Syzkaller reports a bug named “UBSAN: shift-out-of-bounds in squashfsbioread”. Syzkaller forks multiple processes. After mounting the Squashfs filesystem, it issues an...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs/sysv: Null check to prevent the null-ptr-deref bug...

KLA91326 Multiple vulnerability in Microsoft Dynamics

Multiple vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to bypass security restrictions, execute arbitrary code. Original advisories CVE-2026-88131 Exploitation Related products Microsoft-Dataverse CVE list CVE-2026-88131 critical KB list Solution...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: scsi: qedi: Fixed a possible memory leak in qediallocandinitsb. The hook “qediops-common-sbinit = qedsbinit” does not release the DMA-mapped memory when it fails. Add dmafreecoherent to release this memory. This is the same...

CVE-2026-97927

In the Linux kernel, the following vulnerability has been resolved: ufs: create the root dentry after loading cylinder metadata ufsfillsuper installed sb-sroot before it loaded the cylinder group structures for a writable mount: sb-sroot = dmakerootinode; ... if !sbrdonlysb if...

PT-2026-98502

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the SMB client where tcon super cb stores a raw superblock pointer. Because cifs get super only takes an active reference after iterate supers type has dropped...

PT-2026-98496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the SMB client when the cifs sb tlink function fails. This issue specifically affects configurations using the -o multiuser option. In these scenarios, t...

PT-2026-98559

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the io uring/rw component where write accounting was incorrectly moved from the kiocb completion handler to the io req rw complete task work. This deferral creates a...

PT-2026-97956

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A circular lock dependency exists in the ext4 ext migrate function. This occurs between s writepages rwsem and sb internal used for freeze protection, which can lead to a deadlock. The...

PT-2026-94625

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the md/md-llbitmap component. The llbitmap create function publishes mddev-bitmap before reading the bitmap superblock. If the llbitmap read sb...