CVE-2026-93210

In the Linux kernel, the following vulnerability has been resolved: smb: client: harden DFS cache against invalid target hints Currently, gettgtname returns ERRPTR-ENOENT when ce-tgthint is NULL, and dfscachenorequpdatetgthint assumes ce-tgthint is always valid. In preparation for clearing...

CVE-2026-93209

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: use skbget instead of skbclone for reqskb BT enable fails intermittently with -ETIMEDOUT -110. The kernel log shows the HCI Read Local Version command was sent and the firmware replied with status 0x00 logged ...

CVE-2026-93208

In the Linux kernel, the following vulnerability has been resolved: kasan: fix cache shrink race with CPU hotplug kasanquarantineremovecache first invokes percpuremovecache on all online CPUs. Each callback moves objects belonging to the cache from cpuquarantine to the CPU's shrinkqlist, where th...

CVE-2026-93207

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Zero rpcgsswirecred at svcauthgssdecodecredbody entry svcauthgssdecodecredbody writes the caller's rpcgsswirecred field by field and assigns gcctx.len only on the success tail. The caller storage is svcdata-clcred, which...

CVE-2026-93206

In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use filenscapable when checking config space read access procbuspciread decides how much of the config space is readable based on capableCAPSYSADMIN, which checks the credentials of the task calling read, not the...

CVE-2026-93205

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Manage teardown with devm armsmmudeviceremove manually frees the IOPF queue, destroys the vmidmap and disables the device, while the IRQs and queues are devm managed. devm unwinds only after remove returns, so...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

CVE-2026-73064

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers...

GHSA-R2XF-8XR9-62GW vulnerabilities

Vulnerabilities for packages: pinot, hadoop-client-modules, ghidra, apache-nifi, zookeeper-fips, opensearch, apache-pulsar, apache-pulsar-fips, pinot-fips, zookeeper, hadoop-fips, spark, akhq, opensearch-fips, apache-camel-karavan-devmode, wazuh-indexer, spark-fips, kafka-fips, scala, kafka, drui...

GHSA-PH9C-7HW9-VHHW vulnerabilities

Vulnerabilities for packages: pinot, hadoop-client-modules, ghidra, apache-nifi, zookeeper-fips, opensearch, apache-pulsar, apache-pulsar-fips, pinot-fips, zookeeper, hadoop-fips, spark, akhq, opensearch-fips, apache-camel-karavan-devmode, wazuh-indexer, spark-fips, kafka-fips, scala, kafka, drui...

CVE-2026-77421 vulnerabilities

Vulnerabilities for packages: pinot, hadoop-client-modules, ghidra, apache-nifi, zookeeper-fips, opensearch, apache-pulsar, apache-pulsar-fips, pinot-fips, zookeeper, hadoop-fips, spark, akhq, opensearch-fips, apache-camel-karavan-devmode, wazuh-indexer, spark-fips, kafka-fips, scala, kafka, drui...

CVE-2026-77422 vulnerabilities

Vulnerabilities for packages: pinot, hadoop-client-modules, ghidra, apache-nifi, zookeeper-fips, opensearch, apache-pulsar, apache-pulsar-fips, pinot-fips, zookeeper, hadoop-fips, spark, akhq, opensearch-fips, apache-camel-karavan-devmode, wazuh-indexer, spark-fips, kafka-fips, scala, kafka, drui...

GHSA-5Q95-HRPC-M3W3 vulnerabilities

Vulnerabilities for packages: pinot, hadoop-client-modules, elasticsearch, ghidra, apache-nifi, zookeeper-fips, opensearch, apache-pulsar, apache-pulsar-fips, elasticsearch-fips, pinot-fips, zookeeper, hadoop-fips, spark, akhq, opensearch-fips, apache-camel-karavan-devmode, wazuh-indexer,...

CVE-2026-77420 vulnerabilities

Vulnerabilities for packages: pinot, hadoop-client-modules, elasticsearch, ghidra, apache-nifi, zookeeper-fips, opensearch, apache-pulsar, apache-pulsar-fips, elasticsearch-fips, pinot-fips, zookeeper, hadoop-fips, spark, akhq, opensearch-fips, apache-camel-karavan-devmode, wazuh-indexer,...

CVE-2026-77420 vulnerabilities

Vulnerabilities for packages: druid, spark, akhq, kafka, opensearch, zookeeper, apache-pulsar...

GHSA-R2XF-8XR9-62GW vulnerabilities

Vulnerabilities for packages: druid, spark, akhq, kafka, opensearch, zookeeper, apache-pulsar...

GHSA-5Q95-HRPC-M3W3 vulnerabilities

Vulnerabilities for packages: druid, spark, akhq, kafka, opensearch, zookeeper, apache-pulsar...

CVE-2026-77422 vulnerabilities

Vulnerabilities for packages: druid, spark, akhq, kafka, opensearch, zookeeper, apache-pulsar...

CVE-2026-97404

In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticated remote attacker who knows a target project's UUID may bypass both Keystone authentication and pre-signed URL verification, resulting in...

kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

A race condition was found in the Linux kernel cryptographic user API, AFALG in the way concurrent writes to the same AFALG socket are handled. Interleaved data and inconsistent internal socket state may result. A local user could use this flaw to crash the system or corrupt cryptographic operati...