webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data

A flaw was found in WebKitGTK. A malicious website can silently hijack clipboard data due to improper state management...

The vulnerability in the `drivers/net/wireless/realtek/rtw88/main.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/wireless/realtek/rtw88/main.c component of the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2026-74654

In the Linux kernel, the following vulnerability has been resolved: serial: 8250dma: Clear stale RX state on shutdown serial8250releasedma terminates RX DMA and releases the channel, but leaves rxrunning set. If the port is closed while an RX transfer is active, the stale state remains while rxch...

SUSE CVE-2026-74720

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

AZL-97209 CVE-2026-74720 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

CVE-2026-74720

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

AZL-97346 CVE-2026-74654 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: serial: 8250dma: Clear stale RX state on shutdown serial8250releasedma terminates RX DMA and releases the channel, but leaves rxrunning set. If the port is closed while an RX transfer is active, the stale state remains while rxch...

CVE-2026-74654

In the Linux kernel, the following vulnerability has been resolved: serial: 8250dma: Clear stale RX state on shutdown serial8250releasedma terminates RX DMA and releases the channel, but leaves rxrunning set. If the port is closed while an RX transfer is active, the stale state remains while rxch...

UBUNTU-CVE-2026-74720

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

CVE-2026-74720

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

CVE-2026-74720 bpf: Preserve pointer state for commuted arithmetic

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

CVE-2026-74720

CVE-2026-74720 affects the BPF component of the Linux kernel . In adjust_ptr_min_max_vals(), handling of the commuted arithmetic operation scalar += pointer copies only selected fields from the source pointer state to the destination register. Because pointer provenance is tracked across multiple...

EUVD-2026-64407

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

CVE-2026-74720 bpf: Preserve pointer state for commuted arithmetic

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer state for commuted arithmetic When scalar += pointer is handled in adjustptrminmaxvals, the destination register inherits the pointer state from the source pointer. Copying only selected fields is fragile...

CVE-2026-74699 drm/xe: Fix memory leak in exec_queue_set_hang_replay_state()

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in execqueuesethangreplaystate The q-replaystate is blindly overwritten, which can potentially leak memory that was previously allocated by vmemdupuser. Return an error if q-replaystate is not empty...

CVE-2026-74660 netfilter: ebt_nflog: pin the NFLOG backend

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtnflog: pin the NFLOG backend nflogunregister runs after the per-net teardown so its final RCU grace period also drains readers that obtained the logger from a per-net binding. However, ebtnflog passes an explicit UL...

CVE-2026-74654 serial: 8250_dma: Clear stale RX state on shutdown

In the Linux kernel, the following vulnerability has been resolved: serial: 8250dma: Clear stale RX state on shutdown serial8250releasedma terminates RX DMA and releases the channel, but leaves rxrunning set. If the port is closed while an RX transfer is active, the stale state remains while rxch...

CVE-2026-74654

This Linux kernel vulnerability affects the serial 8250 DMA driver . When a serial port is closed while an RX DMA transfer is active, serial8250_release_dma() leaves the rx_running flag set. On subsequent reopen, the DesignWare BUSY workaround calls serial8250_rx_dma_flush() before a new RX chann...

EUVD-2026-64538

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Use currentcontext for safe per-CPU buffer swap The ringbufferswapcpu function currently checks the per-CPU committing counter to determine if a buffer is actively being written to before performing the swap. However...

CVE-2026-74601 ring-buffer: Use current_context for safe per-CPU buffer swap

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Use currentcontext for safe per-CPU buffer swap The ringbufferswapcpu function currently checks the per-CPU committing counter to determine if a buffer is actively being written to before performing the swap. However...