CVE-2026-78135

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...

CVE-2026-78135

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...

CVE-2026-78135

CVE-2026-78135 affects the libcharon component of strongSwan 5.9.7 through 6.0.7 . The root cause is a mishandling of CREATE_CHILD_SA requests on unestablished IKE SAs within the IKEv2 state machine, which can result in the creation of a usable Child SA before authentication completes —effectivel...

CVE-2026-78135

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...

EUVD-2026-75921

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...

CVE-2026-78135

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...

EUVD-2026-75876

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the exploration state machine...

PT-2026-89877

Name of the Vulnerable Software and Affected Versions Robotics-STAR-Lab SYSU STAR Group RACER Tested version commit abcdef1234567890 Description A missing default case in the Finite State Machine FSM prevents the publishing of swarm trajectories when a drone enters the IDLE state. This flaw can...

PT-2026-90237

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in core scheduling where the pick next task function fails when a pick task implementation releases the rq lock. The selection state established at the start is only vali...

PT-2026-90489

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amd/display component where the system fails to skip the HDCP High-bandwidth Digital Content Protection configuration routine during a transition state. Becaus...

PT-2026-90470

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the page walk mechanism where the walk-action variable can remain erroneously set to ACTION AGAIN when escaping the walk pmd range function. This occurs if -pmd entry...

PT-2026-96348

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip Update HDCP Config In Transition State Transition state does not have a valid dm stream ctx that should skip configuring HDCP routine. The routine is valid to go through only when a valid stream is created...

CVE-2026-71646

The Robotics-STAR-Lab (SYSU STAR Group) RACER software (affected version: commit abcdef1234567890 ) is vulnerable to a denial of service (DoS) . The root cause is located within the FastExplorationFSM::optTimerCallback() function in the file swarm_exploration/exploration_manager/src/fast_explorat...

CVE-2026-89773: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip Update HDCP Config In Transition State Transition state does not have a valid dmstreamctx that should skip configuring HDCP routine. The routine is valid to go through only when a valid stream is created...

CVE-2026-89462: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: propagate register read errors max17040getvcell and max17040getsoc ignore errors returned by regmapread. When an I2C transfer fails, the uninitialized register value is converted and reported to userspace...

CVE-2026-89717: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zramdestroycomps Patch series "zram: fix zram issues reported by sashiko". Sashiko drove by and reported 1 a couple of zram issues: a possible BUGON in zlib code due to missing winbits rang...

Linux Distros Unpatched Vulnerability : CVE-2026-57222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, crafted IPv4 an...

PT-2026-90472

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the migrate pages batch function where it fails to report RCU-tasks quiescent states during the unmapping of folios. On KVM hosts, the process of unmapping a large bat...

PT-2026-90107

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in zerocopy state handling within the skb tx error function in net/skbuff allows for local privilege escalation. The issue occurs because skb tx error completes the zerocopy uarg...

PT-2026-90119

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the thunderbolt network component where failure paths in the tbnet connected work function do not clear the login sent variable. This causes the connection to appear...