CVE-2026-73632

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...

EUVD-2026-59606

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...

CVE-2026-73632

Apache Struts 7.2.1's JSON plugin shares per-response serialization state across concurrent requests, letting one user observe another's response content. Only the SMD/JSON-RPC interceptor path is affected; it is disabled by default. No in-the-wild exploitation is reported. Upgrade to 7.3.0. See ...

EUVD-2026-59605

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data associated with one request to become observable in another, and configured parsing limits not to be enforced as intende...

CVE-2026-73631

Apache Struts 7.2.1's JSON plugin shares per-request parsing state across concurrent requests, allowing one user's JSON-parsed data to leak into another's session and bypassing configured parsing limits. Affected deployments are those using JSON request body population. Upgrade to Struts 7.3.0. N...

CVE-2026-73631 Apache Struts: Shared parsing state in the JSON plugin

Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data associated with one request to become observable in another, and configured parsing limits not to be enforced as intende...

CVE-2026-74370

In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix TOCTOU race in luosessionretrieve Extend the scope of the rwsemread lock in luosessionretrieve to overlap with the acquisition of the session mutex. This prevents a concurrent thread from releasing and freeing the...

UBUNTU-CVE-2026-74370

In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix TOCTOU race in luosessionretrieve Extend the scope of the rwsemread lock in luosessionretrieve to overlap with the acquisition of the session mutex. This prevents a concurrent thread from releasing and freeing the...

CVE-2026-74370

In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix TOCTOU race in luosessionretrieve Extend the scope of the rwsemread lock in luosessionretrieve to overlap with the acquisition of the session mutex. This prevents a concurrent thread from releasing and freeing the...

UBUNTU-CVE-2026-72044

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-68455

In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all session types. PRESERVEFD is only applicable to outgoing sessions. RETRIEVEFD and FINISH are only valid for incoming...

UBUNTU-CVE-2026-68455

In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all session types. PRESERVEFD is only applicable to outgoing sessions. RETRIEVEFD and FINISH are only valid for incoming...

CVE-2026-18216

The Backup Migration WordPress plugin before 2.1.7 fails to restrict its post-restore auto-login mechanism in multisite deployments. A site admin can trigger a restore on another site in the network, obtaining a long-lived admin session without credentials and bypassing 2FA. CISA flags it as expl...

CVE-2026-74370

The CVE-2026-74370 issue affects the Linux kernel and is resolved by a liveupdate fix for a TOCTOU race in luo_session_retrieve(). The root cause was a race between the lookup and the session mutex where a thread could release and free the session; the patch extends the scope of the rwsem_read lo...

CVE-2026-74370 liveupdate: fix TOCTOU race in luo_session_retrieve()

In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix TOCTOU race in luosessionretrieve Extend the scope of the rwsemread lock in luosessionretrieve to overlap with the acquisition of the session mutex. This prevents a concurrent thread from releasing and freeing the...

EUVD-2026-59517

In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix TOCTOU race in luosessionretrieve Extend the scope of the rwsemread lock in luosessionretrieve to overlap with the acquisition of the session mutex. This prevents a concurrent thread from releasing and freeing the...

CVE-2026-74370 liveupdate: fix TOCTOU race in luo_session_retrieve()

In the Linux kernel, the following vulnerability has been resolved: liveupdate: fix TOCTOU race in luosessionretrieve Extend the scope of the rwsemread lock in luosessionretrieve to overlap with the acquisition of the session mutex. This prevents a concurrent thread from releasing and freeing the...

EUVD-2026-59077

In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all session types. PRESERVEFD is only applicable to outgoing sessions. RETRIEVEFD and FINISH are only valid for incoming...

CVE-2026-68455

The CVE-2026-68455 entry concerns the Linux kernel liveupdate path, where certain session ioctls were allowed on mismatched session types. A user could create an outgoing session, preserve a memfd, then retrieve without a kexec, causing the memfd retrieve handler to run in an invalid post-kexec c...

CVE-2026-68455 liveupdate: validate session type before performing operation

In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all session types. PRESERVEFD is only applicable to outgoing sessions. RETRIEVEFD and FINISH are only valid for incoming...