Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fixed the calltrace warning in psphwfini. The call trace occurs when the amdgpu is removed after a mode1 reset. During a mode1 reset, from suspend to resume, there is no need to reinitialize the ta firmware buffer,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ftrace: A regression was fixed related to the module command in stacktracefilter. When executing the following command: echo "write:mod:ext3" /sys/kernel/tracing/stacktracefilter The current mod command causes a null pointer...

CVE-2026-50276: Allocation of Resources Without Limits or Throttling

dd-trace-rb is Datadog's client library for Ruby. Prior to 2.32.0, W3C baggage extraction does not enforce DDTRACEBAGGAGEMAXITEMS, which defaults to 64, or DDTRACEBAGGAGEMAXBYTES, which defaults to 8192, although those limits apply during baggage injection. A remote unauthenticated attacker can...

CVE-2026-50270: Allocation of Resources Without Limits or Throttling

dd-trace-java is a Datadog APM client for Java. Prior to 1.62.0, W3C baggage extraction does not enforce DDTRACEBAGGAGEMAXITEMS, which defaults to 64, or DDTRACEBAGGAGEMAXBYTES, which defaults to 8192, although those limits apply during baggage injection. A remote unauthenticated attacker can sen...

CVE-2026-89771

A flaw was found in the Linux kernel. A race condition exists in the ring buffer resizing mechanism, where tracebuffer subbufsize can be read without proper locking while it is being simultaneously resized. This could allow a local attacker to trigger unpredictable behavior or a denial of service...

EUVD-2026-76683

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring buffer readers tracebuffer subbufsize is read lockless in ringbufferreadpage and ringbufferreadstart, while it can simultaneously be resized with ringbuffersubbuforderset. Instead of...

CVE-2026-89771

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring buffer readers tracebuffer subbufsize is read lockless in ringbufferreadpage and ringbufferreadstart, while it can simultaneously be resized with ringbuffersubbuforderset. Instead of...

CVE-2026-89771

This Linux kernel race condition affects the trace ring buffer resize mechanism. The field trace_buffer::subbuf_size is read locklessly in ring_buffer_read_page() and ring_buffer_read_start() while it can be concurrently modified by ring_buffer_subbuf_order_set(). According to Red Hat, this can a...

PT-2026-90463

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in trace pipe read on sub-buffer order change Writing to buffer subbuf size kb calls ring buffer subbuf order set, which frees every sub-buffer of the ring buffer, including the reader page, and replac...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107272)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107272 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: blocklist the kclient when receiving corrupted snap trace When received corrupted snap trac...

PT-2026-90487

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring buffer readers trace buffer subbuf size is read lockless in ring buffer read page and ring buffer read start, while it can simultaneously be resized with ring buffer subbuf order set...

The vulnerability of the __doTraceBtrfsSyncFile() function in the include/trace/events/btrfs.h module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the doTraceBtrfsSyncFile function in the include/trace/events/btrfs.h header of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-56198

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...

EUVD-2026-73367

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...

CVE-2026-56198

CVE-2026-56198 is an out-of-bounds read in Microsoft Trace Data Helper that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impact across confidentia...

Microsoft Trace Data Helper Elevation of Privilege Vulnerability

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...

PT-2026-87196

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...

CVE-2026-56198: Out-of-bounds Read

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...

CVE-2026-17442

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credentials being written to trace logs in cleartext...

CVE-2026-17442 IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 could allow a local attacker to obtain sensitive information due to credentials being written to trace logs in cleartext...