PT-2026-21387

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=472871119 Crash type: UNKNOWN READ Crash state: rb managed id table lookup vm lookup cc rb vm search method slowpath...

ruby:fuzz_iseq: Crash in rb_managed_id_table_lookup

Detailed Report: https://oss-fuzz.com/testcase?key=4911430727172096 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzziseq Job Type: libfuzzerubsanruby Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000d3124 Crash State: rbmanagedidtablelookup vmlookupcc...

PT-2026-22011

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.23.0 Description FreeRDP is a free implementation of the Remote Desktop Protocol. A flaw exists in the RAIL channel window management where the xf rail server local move size function dereferences a freed xfAppWindo...

PT-2026-22020

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.23.0 Description FreeRDP is a free implementation of the Remote Desktop Protocol. A flaw exists where the rail window free function dereferences a freed xfAppWindow pointer during HashTable Free cleanup. This occurs...

PT-2026-27658

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s VXLAN implementation. When the system boots with IPv6 disabled 'ipv6.disable=1', the necessary network table nd tbl is not initialized, leading to a...

PT-2026-6124

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the networking subsystem related to the hv netvsc driver. Specifically, the driver does not properly validate the presence of a Receive Side...

PT-2026-7992

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow exists in the NVMe-TCP component where the nvmet tcp build pdu iovec function could walk past cmd-req.sg when a Protocol Data Unit PDU length or offset exceeds sg cnt...

PT-2026-27710

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.0-rc1 Description The Linux kernel contains a flaw in the GCS Global Cache System mapping when FEAT LPA2 is enabled. Specifically, the code incorrectly sets the PTE SHARED bit on GCS mappings, leading to a...

CVE-2023-54232

In the Linux kernel, the following vulnerability has been resolved: m68k: Only force 030 bus error if PC not in exception table getkernelnofault does copy data in supervisor mode when forcing a task backtrace log through /proc/sysrqtrigger. This is expected cause a bus error exception on e.g. NUL...

SUSE CVE-2022-50824

In the Linux kernel, the following vulnerability has been resolved: tpm: tpmtis: Add the missed acpiputtable to fix memory leak In checkacpitpm2, we get the TPM2 table just to make sure the table is there, not used after the init, so the acpiputtable should be added to release the ACPI memory...

SUSE CVE-2023-54232

In the Linux kernel, the following vulnerability has been resolved: m68k: Only force 030 bus error if PC not in exception table getkernelnofault does copy data in supervisor mode when forcing a task backtrace log through /proc/sysrqtrigger. This is expected cause a bus error exception on e.g. NUL...

SUSE CVE-2023-54243

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix table blob use-after-free We are not allowed to return an error at this point. Looking at the code it looks like ret is always 0 at this point, but its not. t = findtablelocknet, repl-name, &ret, &ebtmute...

WordPress Product Table for WooCommerce plugin <= 5.0.8 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin Product Table for WooCommerce versions = 5.0.8...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993080)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993080 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes WHY When PTEBufferSizeInReques...

Unity Linux 20.1060a Security Update: kernel (UTSA-2025-993265)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993265 advisory. In the Linux kernel, the following vulnerability has been resolved: tpm: tpmcrb: Add the missed acpiputtable to fix memory leak In crbacpiadd, we get the TPM2 table ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993089)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993089 advisory. In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix memory leak in ocfs2stackglueinit ocfs2tableheader should be free in ocfs2stackglueini...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993229)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993229 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: Don't map the entire mokvar table to determine its size Currently, when validating the mokva...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992776)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992776 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fwlevel Though...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993251)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993251 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/qedr: Fix potential memory leak in qedrallocmr qedrallocmr allocates a memory chunk for...

WordPress WP Online Users Stats plugin <= 1.0.0 - Authenticated (Editor+) SQL Injection via table_name Parameter vulnerability

Authenticated Editor+ SQL Injection via tablename Parameter vulnerability discovered by rajanhoyr in WordPress Plugin WP Online Users Stats versions = 1.0.0...