CVE-2026-2681

A flaw was found in the blst cryptographic library. This out-of-bounds stack write vulnerability, specifically in the blstsha256bcopy assembly routine, occurs due to a missing zero-length guard. A remote attacker can exploit this by providing a zero-length salt parameter to key generation...

Linux Distros Unpatched Vulnerability : CVE-2026-27171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination...

CVE-2026-25087

A use after free flaw was found in Apache Arrow C++. This Use After Free vulnerability can be triggered when an application reads a specially crafted Arrow IPC Inter-Process Communication file with pre-buffering enabled, leading to memory corruption or application crashes. This could plausibly...

CVE-2026-2447

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Heap buffer overflow in libvpx. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

CVE-2026-2474

Crypt::URandom for Perl is vulnerable to a heap buffer overflow in the XS function crypturandomgetrandom. The function does not validate that the length parameter is non-negative. If a negative value e.g. -1 is supplied, the expression length + 1u causes an integer wraparound, resulting in a...

CVE-2025-15578

Maypole versions from 2.10 through 2.13 for Perl generates session ids insecurely. The session id is seeded with the system time which is available from HTTP response headers, a call to the built-in rand function, and the PID. Mitigation Mitigation for this issue is either not available or the...

CVE-2026-2604

A flaw was found in evolution-data-server. Inconsistent comparison logic in the addressbook file backend allows a Flatpak application with D-Bus access to craft a malicious URI containing directory traversal sequences. This URI is stored without proper validation during contact creation or...

CVE-2026-23198

In the Linux kernel, the following vulnerability has been resolved: KVM: Don't clobber irqfd routing type when deassigning irqfd When deassigning a KVMIRQFD, don't clobber the irqfd's copy of the IRQ's routing entry as doing so breaks kvmarchirqbypassdelproducer on x86 and arm64, which explicitly...

CVE-2026-23178

A potential buffer overflow vulnerability was found in the i2c-hid driver. When handling HID reports via the hidraw interface, userspace can request a recvlen up to HIDMAXBUFFERSIZE 16384 bytes, but the destination buffer ihid-rawbuf may be smaller, leading to a heap buffer overflow...

CVE-2026-23157

A deadlock vulnerability was found in the Linux kernel's Btrfs filesystem when used with cgroups that have low memory/dirty page limits. Btrfs has an internal 32MiB threshold before writing back btree metadata, but if a cgroup's dirty limit is lower e.g., 16MB, processes can become stuck...

CVE-2026-23150

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix memleak in nfcllcpsenduiframe. syzbot reported various memory leaks related to NFC, struct nfcllcpsock, skbuff, nfcdev, etc. 0 The leading log hinted that nfcllcpsenduiframe failed to allocate skb due to sockerrors...

CVE-2026-23164

A flaw was found in the rocker component of the Linux kernel. This memory leak vulnerability allows a local attacker with low privileges to repeatedly add and remove ports. This action prevents memory from being properly freed, leading to memory exhaustion and a denial of service DoS on the syste...

CVE-2026-23169

A flaw was found in the Linux kernel's Multipath TCP MPTCP implementation. A race condition exists in the mptcppmnlflushaddrsdoit function due to improper synchronization when handling network addresses. This flaw could allow a local attacker to trigger system crashes, leading to a Denial of...

CVE-2026-2553

A security flaw has been discovered in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. This affects an unknown part of the file /home.php of the component HTTP POST Request Handler. Performing a manipulation of the argument Name/Email results in sql injection...

CVE-2026-23143

A structure misalignment flaw was found in the Linux kernel's virtionet driver. Due to incorrect padding handling between struct virtionetrssconfigtrailer and the rsshashkeydata array in struct virtnetinfo, the RSS hash key passed to the device is shifted by one byte. This causes the last byte of...

CVE-2026-23182

In the Linux kernel, the following vulnerability has been resolved: spi: tegra: Fix a memory leak in tegraslinkprobe In tegraslinkprobe, when platformgetirq fails, it directly returns from the function with an error code, which causes a memory leak. Replace it with a goto label to ensure proper...

CVE-2026-23181

A race condition was found in the Linux kernel's Btrfs filesystem when reading the disk superblock. If a user changes the block device's block size via BLKBSZSET ioctl while Btrfs is mounting, the inconsistency between folio allocation and the new block size can trigger a VMBUGON assertion or NUL...

CVE-2025-71220

In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdsessionrpcclose on error path in createsmb2pipe When ksmbdiovpinrsp fails, we should call ksmbdsessionrpcclose...

CVE-2026-23163

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix NULL pointer dereference in amdgpugmcfilterfaultsremove On APUs such as Raven and Renoir GC 9.1.0, 9.2.2, 9.3.0, the ih1 and ih2 interrupt ring buffers are not initialized. This is by design, as these secondary IH...

Linux Distros Unpatched Vulnerability : CVE-2026-23160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeonep: Fix memory leak in octepdevicesetup In octepdevicesetup, if octepctrlnetinit fails, the function returns directly without unmapping the mapped resourc...