CVE-2026-63848

The CVE-2026-63848 entry describes a Linux kernel vulnerability in the drm/amdgpu/jpeg path, specifically the JPEG v2.0 ring. The underlying issue is a change to set no_user_fence for the JPEG v2.0 ring, as JPEG rings do not support 64‑bit user fence writes and will reject CS submissions with use...

CVE-2026-63848 drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set nouserfence for JPEG v2.0 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit 96179da0c6b059eb31706a0abe8dd6381c533143...

EUVD-2026-45532

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set nouserfence for JPEG v2.0 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit 96179da0c6b059eb31706a0abe8dd6381c533143...

EUVD-2026-45531

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set nouserfence for JPEG v2.5 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit 3216a7f4e2642bda5fd14f57586e835ae9202587...

OESA-2026-3054 giflib security update

giflib is a library of gif images and provides utilities for processing images. Security Fixes: Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validati...

OESA-2026-3033 gpsd security update

gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications such as...

CVE-2026-16223

creationtimestamp| type| source ---|---|--- 2026-07-19 09:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116945821784754940 2026-07-19 09:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqyg4qahpk2n...

CVE-2026-16209

creationtimestamp| type| source ---|---|--- 2026-07-19 08:24:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqye452ogs2g 2026-07-19 08:30:14+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mqyegoqwk22f...

CVE-2026-16224 jxxghp MoviePilot Application API improper authorization

A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the file /jxxghp/MoviePilot of the component Application API. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The identifier of the pat...

CVE-2026-16204

A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This affects the function toolrunscriptexecute of the file claw/services/tools/script.c of the component Telegram-to-AI Tool Execution Flow. Performing a manipulation results in code injection. It is possible to initiate the attac...

CVE-2026-53994

creationtimestamp| type| source ---|---|--- 2026-07-19 01:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116944052588841641 2026-07-19 01:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqxmy73t342g 2026-07-19 06:00:37+00:00| seen|...

EUVD-2026-45404

A vulnerability was determined in zhayujie CowAgent up to 2.1.1. This affects the function WebFetch.execute of the file agent/tools/webfetch/webfetch.py. Executing a manipulation of the argument url can lead to server-side request forgery. The attack may be performed from remote. The exploit has...

PT-2026-61517

Name of the Vulnerable Software and Affected Versions Meshtastic versions prior to 2.7.23.b246bcd Description A node advertising a User.long name with malformed character encoding can render other radios unusable over BLE when managed via the iOS app. This issue occurs when a null terminator is...

PT-2026-61453

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A locking issue exists in the SMB client where the tc count increment within the smb2 find smb sess tcon unlocked function is not properly protected. This occurs because the code failed ...

MiracleLinux 9 : redis-6.2.22-1.el9_8 (AXSA:2026-1300:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1300:02 advisory. redis: RESTORE invalid memory access may allow remote code execution CVE-2026-25243 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-63796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: reject oversized group bitmap descriptors ocfs2validategdparent only bounds bgbits against the parent allocator's chain geometry. A malicious descriptor...

PT-2026-61258

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 implementation regarding how the ZCR EL2 register is handled for VHE guest hypervisors. When a guest hypervisor updates ZCR EL2 via ZCR EL1, the value is...

PT-2026-61165

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/jpeg component where JPEG v2.0 rings do not support 64-bit user fence writes. This leads to a failure to reject CS submissions that include user fences...

PT-2026-61173

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The VCN encoder and decoder rings in the drm/amdgpu/vcn component do not support 64-bit user fence writes. This issue leads to the rejection of CS submissions that utilize user fences...

PT-2026-61206

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An adjacent Fibre Channel fabric actor, such as a compromised switch, fabric controller, or a same-zone N Port capable of source spoofing, can trigger a non-return state in the generic F...