CVE-2026-45925

In the Linux kernel, the following vulnerability has been resolved: thermal/of: Fix reference leak in thermalofcmlookup In thermalofcmlookup, trnp is obtained via ofparsephandle, but never released. Use the freedevicenode cleanup attribute to automatically release the node and fix the leak. rjw:...

CVE-2026-45919

In the Linux kernel, the following vulnerability has been resolved: sched/rt: Skip currently executing CPU in rtonextcpu CPU0 becomes overloaded when hosting a CPU-bound RT task, a non-CPU-bound RT task, and a CFS task stuck in kernel space. When other CPUs switch from RT to non-RT tasks, RT load...

CVE-2026-45880

In the Linux kernel, the following vulnerability has been resolved: PCI/P2PDMA: Release per-CPU pgmap ref when vminsertpage fails When vminsertpage fails in p2pmemallocmmap, p2pmemallocmmap doesn't invoke percpurefput to free the per-CPU ref of pgmap acquired after genpoolallocowner, and...

CVE-2026-45876

In the Linux kernel, the following vulnerability has been resolved: arm64/gcs: Fix error handling in archsetshadowstackstatus allocgcs returns an error-encoded pointer on failure, which comes from dommap, not NULL. The current NULL check fails to detect errors, which could lead to using an invali...

CVE-2026-45865

In the Linux kernel, the following vulnerability has been resolved: mctp i2c: initialise event handler read bytes Set a 0xff value for i2c reads of an mctp-i2c device. Otherwise reads will return "val" from the i2c bus driver. For i2c-aspeed and i2c-npcm7xx that is a stack uninitialised u8. Teste...

CVE-2026-45862

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush cache for PASID table before using it When writing the address of a freshly allocated zero-initialized PASID table to a PASID directory entry, do that after the CPU cache flush for this PASID table, not before i...

CVE-2026-7817 vulnerabilities

Vulnerabilities for packages: pgadmin4...

CVE-2026-46060

crypto: qat - fix IRQ cleanup on 6xxx probe failure...

CVE-2026-46074

spi: ch341: fix memory leaks on probe failures...

CVE-2026-46061

jbd2: fix deadlock in jbd2journalcancelrevoke...

CVE-2026-45975

ublk: use READONCE to read struct ublksrvctrlcmd...

CVE-2026-45852

RDMA/rxe: Fix double free in rxesrqfrominit...

CVE-2026-6951 vulnerabilities

Vulnerabilities for packages: renovate...

CVE-2026-4408

Unauthenticated Remote Code Execution in Samba DCE/RPC SAMR server...

[SECURITY] Fedora 44 Update: aw-server-rust-0.14.0^20260516.gitdf49b3d-1.fc44

A re-implementation of aw-server in Rust...

GHSA-QJX8-664M-686J vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse-fips, langfuse, redisinsight, wazuh-dashboard-fips, saf, wazuh-dashboard, kibana, opensearch-dashboards-fips...

CVE-2026-46673 vulnerabilities

Vulnerabilities for packages: yazi...

CVE-2026-41075

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2 contain an SQL injection vulnerability. An authenticated user can craft input that is incorporated into database queries without proper validation, potentially allowing th...

GHSA-FW88-PF9M-P947 vulnerabilities

Vulnerabilities for packages: wildfly...

GHSA-C3QV-MH67-FPXW vulnerabilities

Vulnerabilities for packages: firefox...