Google Chrome Vulnerability: CVE-2026-113184

Memory corruption in Scheduling in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

Oracle E-Business Suite: CVE-2026-101843: Critical Patch Update

Vulnerability in the Production Scheduling product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Production Scheduling...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46168)

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix scheduling with atomic in timestamp sockopt Using locksockfast atomic context around socksettimestamp and socksettimestamping is unsafe, as both helpers can sleep. Replace locksockfast with sleepable locksock/releaseso...

PT-2026-119375

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Concurrent Processing versions 12.2.3 through 12.2.15 Description An issue exists in the Request Submission and Scheduling component of Oracle Concurrent Processing. A high privileged attacker with access to the...

Oracle E-Business Suite: CVE-2026-101701: Critical Patch Update

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: Request Submission and Scheduling. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

PT-2026-119765

Name of the Vulnerable Software and Affected Versions Oracle SOA Suite versions 12.2.1.4.0 Oracle SOA Suite versions 14.1.2.0.0 Description An issue exists in the Enterprise Scheduling System component of Oracle Fusion Middleware. An unauthenticated attacker with network access via SOAP can...

PT-2026-118881

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption occurs in the Scheduling component, which could allow a remote attacker to potentially execute arbitrary code inside the sandbox by inducing the user to visit a crafte...

CLSA-2024-1709204660 kernel: Fix of 7 CVEs

KVM: nSVM: avoid picking up unsupported bits from L2 in intctl CVE-2021-3653 CVE-2021-3653 - xen/netfront: fix leaking data in shared pages CVE-2022-33740 - xfs: fix up non-directory creation in SGID directories CVE-2021-4037 - netsched: clsroute: remove from list when handle is 0 CVE-2022-2588 -...

CVE-2026-98735

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Serialize ACL scheduling with channel deletion hcichansent selects a channel under RCU but drops the read lock before accessing chan-conn and returning the channel. The ACL and LE schedulers then use its packe...

CLSA-2025-1757962453 kernel: Fix of 34 CVEs

inet: fully convert sk-skrxdst to RCU rules CVE-2021-47103 - ALSA: usb-audio: Fix out of bounds reads when finding clock sources CVE-2024-53150 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - can: peakusb: fix use after free bugs CVE-2021-47670 -...

CLSA-2024-1705927642 kernel: Fix of 8 CVEs

netsched: clsroute: remove from list when handle is 0 CVE-2022-2588 - netfilter: nftables: do not allow RULEID to refer to another chain CVE-2022-2586 - netfilter: nftables: do not allow SETID to refer to another table CVE-2022-2586 - netfilter: nftables: prevent OOB access in nftbyteordereval...

CLSA-2023-1701963303 kernel: Fix of 19 CVEs

net/tls: do not free tlsrec on async operation in bpfexectxverdict CVE-2023-6176 - wifi: mac80211: fix MBSSID parsing use-after-free CVE-2022-42719 - mac80211: always allocate struct ieee80211elems CVE-2022-42719 - x86/sev: Check for user-space IOIO pointing to kernel space CVE-2023-46813 -...

CLSA-2025-1736783731 kernel: Fix of 10 CVEs

media: edia: dvbdev: fix a use-after-free CVE-2024-27043 - vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans CVE-2024-50264 - net/sched: stop qdisctreereducebacklog on TCHROOT CVE-2024-53057 - bpf: Fix out-of-bounds write in triegetnextkey CVE-2024-50262 - KVM: nSVM:...

CLSA-2025-1763722365 kernel: Fix of 63 CVEs

wifi: mwifiex: Fix OOB and integer underflow when rx packets CVE-2023-53226 CVE-2023-53226 - wifi: mac80211: check S1G action frame size CVE-2023-53257 CVE-2023-53257 - wifi: cfg80211: fix use-after-free in cmpbss CVE-2025-39864 CVE-2025-39864 - partitions: mac: fix handling of bogus partition...

CLSA-2026-1771077729 kernel: Fix of 108 CVEs

net/ieee802154: don't warn zero-sized rawsendmsg CVE-2022-50706 - bpf: Don't redirect packets with invalid pktlen CVE-2022-49975 - media: uvcvideo: Fix 1-byte out-of-bounds read in uvcparseformat CVE-2025-38680 - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network...

CLSA-2023-1695716575 kernel: Fix of 28 CVEs

xen/xenbus: don't let xenbusgrantring remove grants in error case CVE-2022-23040 - xen/xenbus: Fix granting of vmalloc'd memory - xen/blkfront: don't use gnttabqueryforeignaccess for mapped status CVE-2022-23036 - xen/grant-table: add gnttabtryendforeignaccess CVE-2022-23036 - xen/blkfront: don't...

PT-2026-116954

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci core: Serialize ACL scheduling with channel deletion hci chan sent selects a channel under RCU but drops the read lock before accessing chan-conn and returning the channel. The ACL and LE schedulers then use its...

Linux Kernel Security Vulnerabilities

The Linux kernel version 7.1 contains a security vulnerability. This vulnerability arises from the fact that schedext does not wait for the SCXOPSSDISPATCHING state to be cleared before re-enqueueing tasks. As a result, the scheduling state is overwritten, potentially causing subsequent task...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.0 contains security vulnerabilities. These vulnerabilities arise from the fact that the IRQ is not stopped before terminating the work queue, resulting in the possibility of the IRQ still scheduling plat-work into the queue when the remove function removes the queue...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Wifi: cfg80211: Values of NL80211ATTRTXQQUANTUM are restricted. syzbot can trigger soft lockups by setting NL80211ATTRTXQQUANTUM to 2^31. We had a similar issue in schfq, which was fixed in the commit d9e15a273306 „pktsched: f...