CVE-2026-80955 dm-pcache: fix use-after-free and invalid seg operations in kset_replay()

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in ksetreplay In ksetreplay, when key-seggen is stale key-seggen cachepos.cacheseg-gen, cachekeyputkey is called but then key-cachepos.cacheseg is accessed as the argument ...

CVE-2026-80955 dm-pcache: fix use-after-free and invalid seg operations in kset_replay()

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in ksetreplay In ksetreplay, when key-seggen is stale key-seggen cachepos.cacheseg-gen, cachekeyputkey is called but then key-cachepos.cacheseg is accessed as the argument ...

CVE-2026-89710: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfslayoutprocess forget path When the server returns a new layout stateid while a valid one is still held, pnfslayoutprocess calls pnfsmarkmatchinglsegsreturn on the on-stack freeme list a...

PT-2026-90085

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in kset replay In kset replay, when key-seg gen is stale key-seg gen cache pos.cache seg-gen, cache key putkey is called but then key-cache pos.cache seg is accessed as the...

CVE-2026-80955: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg operations in ksetreplay In ksetreplay, when key-seggen is stale key-seggen cachepos.cacheseg-gen, cachekeyputkey is called but then key-cachepos.cacheseg is accessed as the argument ...

PT-2026-90089

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the persisted tail-position offset cache pos decode takes the persisted key tail and dirty tail seg off from the cache device and addresses within the segment with it. A seg off at or past the segment data size,...

PT-2026-90086

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments get cache segment scans the segment map up to cache-n segs, the physical device segment count, but cache segs init only initializes the first cache info-n segs segments. A craft...

PT-2026-90090

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate on-media seg num against the cache device size seg num is read from the crc32c-only superblock, so whoever supplies the cache device on a table load CAP SYS ADMIN controls it. It sizes cache-segments and is th...

PT-2026-90426

In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfs layout process forget path When the server returns a new layout stateid while a valid one is still held, pnfs layout process calls pnfs mark matching lsegs return on the on-stack free ...

DEBIAN-CVE-2026-88046

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone core does not reject parent-directory segments in source Object.Remote values before fs/list, fs/walk, fs/sync, and fs/operations pass those values to destination...

Security Bulletin: IBM MQ Appliance is affected by a heap buffer underflow vulnerability (CVE-2026-10858)

Summary IBM MQ Appliance has addressed a heap buffer underflow vulnerability that could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code when processing multi-segment messages. Vulnerability Details CVEID:CVE-2026-10858 DESCRIPTION: IBM MQ could...

EUVD-2026-75589

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone core does not reject parent-directory segments in source Object.Remote values before fs/list, fs/walk, fs/sync, and fs/operations pass those values to destination...

CVE-2026-87734

An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service...

CVE-2026-87734

An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service...

CVE-2026-87734

CVE-2026-87734 affects the utcp package for OCaml prior to version 0.0.6 . The vulnerability stems from out-of-order segment reassembly , which enables a remote denial of service with no authentication required (CVSS 3.1 score: 7.5 HIGH , vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Remediation i...

CVE-2026-87734

An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service...

CVE-2026-87734: Improper Restriction of Communication Channel to Intended Endpoints

An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment reassembly allows remote denial of service...

NPM: Astro: Authorization bypass from missing path-segment boundary check when stripping the configured base

NPM: Astro: Authorization bypass from missing path-segment boundary check when stripping the configured base vulnerability discovered by ? in WordPress Npm astro versions = 7.2.3...

GHSA-376H-93R7-7G6F Astro: Authorization bypass from missing path-segment boundary check when stripping the configured base

Summary Astro stripped a configured base path from request pathnames using a string-prefix check that did not verify a path-segment boundary. With base: "/app", a request to /appX/admin was treated as being under the base and resolved internally to the /admin route, while middleware still observe...

SUSE CVE-2026-73505

Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, the setStyle function in src/segments/path.go passed pt.Path, which includes raw folder names, to template.Render, whose function map exposes cmd, so an attacker-controlled directory name...