PT-2026-69364

Name of the Vulnerable Software and Affected Versions Salon Booking System versions prior to 10.30.34 Description The plugin fails to perform capability checks or validate the OAuth state value during the Google Calendar authorization callback. Because this callback is accessible to unauthenticat...

PT-2026-69815

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xfrm component where the xfrm state gc task can run after a failed IPTFS state setup. Specifically, the xfrm init state function caches x-mode cbs, but if the IPTF...

PT-2026-69533

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel BUG occurs during driver unload due to an invalid state transition in the ice driver. When a Physical Function PF reset happens while the Precision Time Protocol PTP state is IC...

CVE-2026-68150: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/super: fix emergency thaw double-unlock of sumount dothawall iterates over all superblocks via iteratesupers with SUPERITEREXCL, which acquires sumount exclusively before calling the callback and releases it afterwards. Howeve...

CVE-2026-68352: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware IE lengths in connect event The firmware-controlled beaconielen, assocreqlen, and assocresplen fields in ath6klwmiconnecteventrx are not validated against the buffer length. Their sum up t...

PT-2026-69694

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the QRTR transport of the Linux kernel where port and node states are stored in module-global variables that are not partitioned per network namespace. Specifically,...

PT-2026-69752

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the ath6kl wmi connect event rx function. The firmware-controlled fields beacon ie len, assoc req len, and assoc resp len are not validated against the...

PT-2026-69604

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vivid media driver where the vivid update format cap and vivid update format out functions are called without verifying if the capture or output queues are busy...

PT-2026-69825

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the kernel-handled RMPP receive processing where reassembly for active DATA responses begins before the response is matched to an outstanding send. This ordering allow...

PT-2026-69486

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth hci uart component where the HCI UART SENDING bit in tx state is not cleared when write work is canceled within the hci uart close function. This bit...

CVE-2026-68313: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tipc: fix infinite loop in tipcnlcompatdumpit cmd-dumpit callback can return a negative errno, causing an infinite loop due to the whilelen condition. As the loop never terminates, genlmutex is never released, and other tasks...

PT-2026-69820

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xfrm module where optional IPTFS templates in outbound policies can trigger a stack-out-of-bounds read. This occurs in the xfrm state find function, which is reach...

CVE-2026-68150: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/super: fix emergency thaw double-unlock of sumount dothawall iterates over all superblocks via iteratesupers with SUPERITEREXCL, which acquires sumount exclusively before calling the callback and releases it afterwards. Howeve...

STAIR: Effective Incident Response Using an End-To-End Agentic Planning Framework

Incident response planning is critical for restoring compromised software systems after cyberattacks. Common practice relies on expert-driven playbooks that encode fixed response procedures, but these static workflows struggle to adapt to evolving incident states, changing recovery objectives, an...

Safe ErrorRegistry APIs can cause undefined behavior

All published versions of dcrypt-api before 2.0.0 exposed safe ErrorRegistry operations that could trigger undefined behavior when the default std feature was enabled. Stored Box values were erased to raw pointers and later deallocated as Box. The geterror operation also performed an unchecked ca...

Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries

...

SUSE CVE-2026-68081

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid guest while emulating VMLAUNCH or VMRESUME. The invalid guest state path...

CVE-2026-68081

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid guest while emulating VMLAUNCH or VMRESUME. The invalid guest state path...

UBUNTU-CVE-2026-68081

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid guest while emulating VMLAUNCH or VMRESUME. The invalid guest state path...

CVE-2026-68081

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid guest while emulating VMLAUNCH or VMRESUME. The invalid guest state path...