UBUNTU-CVE-2026-80711

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplier power supply. If no supplier is registered,...

CVE-2026-80712

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

CVE-2026-80712

This vulnerability affects the Linux kernel's spi-qpic-snand driver (Qualcomm QPIC SPI-NAND controller). The root cause is an off-by-one in SET_FEATURE command handling : qcom_spi_send_cmdaddr() submits and executes the command immediately, but the feature value is only written to NAND_FLASH_FEAT...

CVE-2026-80711 power: supply: max17040: handle missing status supplier

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplier power supply. If no supplier is registered,...

CVE-2026-80711

CVE-2026-80711 affects the Linux kernel power: supply: max17040 driver. The MAX17040 fuel gauge does not report charger state itself, so the driver forwards POWER_SUPPLY_PROP_STATUS to a supplier power supply. When no supplier is registered, power_supply_get_property_from_supplier() returns -ENOD...

CVE-2026-80711 power: supply: max17040: handle missing status supplier

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplier power supply. If no supplier is registered,...

EUVD-2026-67446

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWERSUPPLYPROPSTATUS to a supplier power supply. If no supplier is registered,...

CVE-2026-80709

CVE-2026-80709 is a flaw in the Linux kernel s390/zcrypt subsystem. When an EP11 CPRB is processed for sending to a crypto card, an incorrect upper-limit check on the domain value is applied. This check is only active on custom device nodes but may lead to heap memory access behind perms->adm ...

CVE-2026-80656 hfsplus: Add a sanity check for btree node size

In the Linux kernel, the following vulnerability has been resolved: hfsplus: Add a sanity check for btree node size Syzbot reported an uninit-value bug in 1 with a corrupted HFS+ image, during the file system mounting process, specifically while loading the catalog, a corrupted nodesize value of ...

CVE-2026-80656 hfsplus: Add a sanity check for btree node size

In the Linux kernel, the following vulnerability has been resolved: hfsplus: Add a sanity check for btree node size Syzbot reported an uninit-value bug in 1 with a corrupted HFS+ image, during the file system mounting process, specifically while loading the catalog, a corrupted nodesize value of ...

CVE-2026-80656

CVE-2026-80656 is an uninitialized value vulnerability in the Linux kernel's hfsplus (HFS+) filesystem driver. During mounting of a crafted HFS+ image, a corrupted node_size value of 1 causes an excessively large rec_off argument to be passed to hfs_bnode_read_u16() within hfs_bnode_find(), leavi...

EUVD-2026-67532

In the Linux kernel, the following vulnerability has been resolved: hfsplus: Add a sanity check for btree node size Syzbot reported an uninit-value bug in 1 with a corrupted HFS+ image, during the file system mounting process, specifically while loading the catalog, a corrupted nodesize value of ...

PT-2026-83011

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supplier MAX17040 does not report charger state itself, so the driver forwards POWER SUPPLY PROP STATUS to a supplier power supply. If no supplier is registered, power supply get...

The vulnerability of the Corosync cluster engine, which allows a hacker to trigger a service failure

The vulnerability of the Corosync cluster engine is related to incorrect checking of the return value of a function. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-80684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airqivcreate can return NULL on failure, but the return value was never checked. If it fails...

Linux Distros Unpatched Vulnerability : CVE-2026-80709

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs There is a wrong upper limit check for the domain value when an EP11 CPRB is processed for...

PT-2026-83009

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs There is a wrong upper limit check for the domain value when an EP11 CPRB is processed for sending to a crypto card. This check is only active on custom device node...

PT-2026-82956

In the Linux kernel, the following vulnerability has been resolved: hfsplus: Add a sanity check for btree node size Syzbot reported an uninit-value bug in 1 with a corrupted HFS+ image, during the file system mounting process, specifically while loading the catalog, a corrupted node size value of...

CVE-2026-59276

Several components in Spring Security compare security-sensitive values using standard string equality String.equals rather than a constant-time comparison. Because String.equals returns as soon as it finds a differing character, the time taken to reject an incorrect value is proportional to the...

PYSEC-2026-3794

opensslencrypt 1.4.x before 1.4.9 contains an optional D-Bus crypto service whose org.freedesktop.DBus.Properties.Set method performs neither a polkit authorization check nor value validation. Any local user on the system bus can call Set without authorization and set MaxConcurrentOperations to...