CVE-2026-98027: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size mv88e6xxxgetrxnfc uses rxnfc-rulecnt as the write index while dumping the policy IDR, clobbering the input value before it has been looked at. That input...

CVE-2026-98108: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix chan mode for LECONNREQ + EXTFLOWCTL pchan l2capnewconnection sets default value of channel mode to match the parent channel. l2capleconnectreq left this at the default, and created L2CAPMODEEXTFLOWCTL...

CVE-2026-97916

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Validate firmware log buffer metadata The tracing log headers parsed by fwlogprintbuffer reside in DMA-shared BOs that the NPU firmware can write to. fwlogfrombo validated log-headersize and log-size, but...

PT-2026-98855

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A path traversal issue exists in the Universal Connector Oracle Wallet upload component. This allows an authenticated remote attacker to write arbitrary files to the system. Path traversal ...

CVE-2026-78394: Improper Limitation of a Pathname to a Restricted Directory

The Link Library WordPress plugin before 7.9.6 does not sanitize a user-supplied destination folder before writing a generated image to disk, allowing users with the Contributor role and above to create directories and write or overwrite image files anywhere the web server can write, including...

PT-2026-98782

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the netfs unbuffered write function when the subreq-io iter variable results in zero length during the preparation phase. Recommendations At the moment, there ...

PT-2026-98802

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the NTFS driver when the write mft record nolock function maps the MFT record folio using kmap local folio. If the pre write mst fixup or bio add folio functions...

PT-2026-98697

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem where the check map kptr access function allows a scalar store into an untrusted kptr field if the register is known to contain zero, but fails to ma...

PT-2026-98683

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the pds core component where pdsc reset prepare and the pdsc map bars error path in pdsc reset done clear or unmap cmd regs without holding the devcmd lock...

PT-2026-98655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vdpasim blk check range function where it logs an invalid start sector but continues validating the request. This leads to an unsigned capacity subtraction...

PT-2026-98770

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth L2CAP implementation where l2cap le connect req fails to correctly set the channel mode, leaving it at the default value set by l2cap new connection. Thi...

PT-2026-98781

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference occurs in the netfs component during unbuffered write operations. When the function netfs alloc subrequest fails, it returns a NULL value for the subreq...

PT-2026-98475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the scsi qla2xxx driver. The qla25xx ctrlvp iocb function calculates a map index using the vp index variable and writes to the vp idx map array without...

PT-2026-98804

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The cirrus-qemu driver fails to verify that the PCI BAR0 size matches the expected CIRRUS VRAM SIZE 4 MB during the PCI probe process. If a PCI device with a BAR0 smaller than 4 MB is...

PT-2026-98510

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write issue exists in the bnxt en driver. The bnxt alloc agg idx function is designed to map firmware TPA IDs to software IDs used to index the rxr-rx tpa array. When th...

PT-2026-98769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the l2cap ecred connect function within the Bluetooth L2CAP subsystem. The issue occurs because l2cap chan connect only counts deferred channels when...

PT-2026-98835

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi wifi driver within the mei component where an incorrect argument is passed to the iwl mei write cyclic buf function. Specifically, the q head pointer is...

PT-2026-98844

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pmem submit bio function where a REQ PREFLUSH error is recorded but the process continues to copy bio data. This can lead to the error being overwritten by a...

PT-2026-98550

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where the netfs unbuffered write function may exit its loop before the ret variable is initialized, which can occur if the first subrequest...

CVE-2026-84882: Improper Limitation of a Pathname to a Restricted Directory

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the Universal Connector Oracle Wallet upload component. An authenticated remote attacker could exploit this vulnerability to write arbitrary files to the system...