CVE-2026-80989

A flaw was found in the Linux kernel's Thunderbolt networking subsystem. When a Thunderbolt connection fails to establish, the system may not correctly update its state, leading to repeated attempts to tear down an already inactive connection. This can result in a kernel warning and, under certai...

DEBIAN-CVE-2026-80989

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bringing it up fails Every failure path in tbnetconnectedwork undoes its own work and returns without clearing loginsent, so the connection still looks established. The next...

CVE-2026-89692 nfsd: clear CALLBACK_RUNNING on failed delegation recall queue

In the Linux kernel, the following vulnerability has been resolved: nfsd: clear CALLBACKRUNNING on failed delegation recall queue nfsdbreakonedeleg sets NFSD4CALLBACKRUNNING via testandsetbit at entry to serialize recall work, then calls nfsd4runcb to queue the recall. When the queue attempt fail...

CVE-2026-89692

CVE-2026-89692 is a denial-of-service vulnerability in the Linux kernel's nfsd (NFS daemon). When a delegation recall queue attempt fails, the NFSD4_CALLBACK_RUNNING flag is left permanently set because the only code path that clears it (nfsd41_destroy_cb) is unreachable in that scenario. This ca...

CVE-2026-89663 nfsd: revoke copy-notify stateids before dropping their reference

In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before dropping their reference Copy-notify stateids live in the s2scpstateids IDR and on their parent stid's sccplist, pinned by a single membership reference. freecpntfstatelocked only unlinks ...

EUVD-2026-76312

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bringing it up fails Every failure path in tbnetconnectedwork undoes its own work and returns without clearing loginsent, so the connection still looks established. The next...

PT-2026-90119

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bringing it up fails Every failure path in tbnet connected work undoes its own work and returns without clearing login sent, so the connection still looks established. The next tbne...

CVE-2026-80231

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

CVE-2026-80786

In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fbsetvar in helper Handle fbcon during display updates in fbsetvarfromuser. Check with fbcon if the mode change is possible, update hardware state and finally update fbcon. Update all callers. On...

The vulnerability of the batadv_gw_node_delete() function in the net/batman-adv/gateway_client.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the batadvgwnodedelete function in the net/batman-adv/gatewayclient.c module, which is part of the Linux kernel’s networking functions, is related to state management errors. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the check_scalar_ids() function in the kernel/bpf/verifier.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the checkscalarids function in the kernel/bpf/verifier.c module of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux Distros Unpatched Vulnerability : CVE-2026-65332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1,...

CVE-2026-65351

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper state management. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...

webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data

A flaw was found in WebKitGTK. A malicious website can silently hijack clipboard data due to improper state management...

webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data

A flaw was found in WebKitGTK. A malicious website can silently hijack clipboard data due to improper state management...

The vulnerability of the xfrm_nat_keepalive_net_init() function in the net/xfrm/xfrm_nat_keepalive.c module, which implements networking functions for the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xfrmnatkeepalivenetinit function in the net/xfrm/xfrmnatkeepalive.c module, which implements networking functions in the Linux kernel, is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

Astra Linux – Vulnerability in WebKit2GTK

A logic issue has been resolved through improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, and watchOS 10.4. Processing maliciously crafted web content may prevent the Content Security...

Astra Linux – Vulnerability in WebKit2GTK

A logic issue has been addressed through improved state management. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1, and iPadOS 16. Processing maliciously crafted web content may disclose sensitive user information...

Astra Linux – Vulnerability in cups

An authentication issue has been resolved through improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, and macOS Ventura 13.4. Unauthenticated users may be able to access recently printed documents...

Astra Linux – Vulnerability in WebKit2GTK

A memory corruption issue has been resolved through improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2, and iPadOS 16.2, as well as watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution...