CVE-2026-2616

creationtimestamp| type| source ---|---|--- 2026-02-17 16:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mf2wpkt5pa2x...

CVE-2026-0968

creationtimestamp| type| source ---|---|--- 2026-02-17 06:01:53+00:00| seen| https://bsky.app/profile/slackers.it/post/3mezvbgx6ze2e 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-03 21:17:42+00:00| published-proof-of-concept|...

This Week in Spring - February 17th, 2026

Hi, Spring fans! Welcome to another rip-roaring installment of This Week in Spring! It's Lunar New Year or Chinese New Year for billions of people around the world and to those who celebrate, Happy Chinese/Lunar New Year 新年快乐! Or Happy Spring Festival 春节快乐! My favorite kind of festival! In honor ...

CVE-2026-23144

A flaw was found in the Linux kernel's Data Access MONitor DAMON sysfs interface. A local attacker, typically a privileged user, could exploit a cleanup bug during DAMON context setup. If the setup fails after the attrs directory is created, stale sysfs directories are left behind. This can lead ...

CVE-2026-23161

A race condition was found in the Linux kernel's shmem/swap handling during truncate operations. The swap entry order is retrieved without proper lock protection, allowing it to become stale before the subsequent xacmpxchgirq operation. This can cause truncation to erase data beyond the intended...

CVE-2026-23174

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: handle changing device dma map requirements The initial state of dmaneedsunmap may be false, but change to true while mapping the data iterator. Enabling swiotlb is one such case that can change the result. The nvme...

CVE-2025-71221

In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmppdma: Fix race condition in mmppdmaresidue Add proper locking in mmppdmaresidue to prevent use-after-free when accessing descriptor list and descriptor contents. The race occurs when multiple threads call txstatus...

CVE-2026-23155

A potential use of uninitialized variable was found in the gsusb CAN driver. When a short read occurs before the netdev has been assigned, the error message code could dereference an undefined netdev pointer value, potentially causing a crash or information leak...

CVE-2026-23176

In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshibahaps: Fix memory leaks in add/remove routines toshibahapsadd leaks the haps object allocated by it if it returns an error after allocating that object successfully. toshibahapsremove does not free the object...

CVE-2026-23171

A flaw was found in the Linux kernel's bonding module. This use-after-free vulnerability occurs when a new slave device is added to the bonding array but fails during the enslave process. A local attacker can exploit this by triggering the enslave failure, which may lead to a system crash,...

CVE-2025-71202

A flaw was found in the Linux kernel. This vulnerability, an IOMMU SVA Input/Output Memory Management Unit Shared Virtual Addressing coherency issue, affects x86 systems. An unprivileged local user can trigger this by causing the kernel to free and reuse page table memory, while the IOMMU retains...

BELL-CVE-2026-0967

Bulletin has no description...

DEBIAN-CVE-2025-71220

In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdsessionrpcclose on error path in createsmb2pipe When ksmbdiovpinrsp fails, we should call ksmbdsessionrpcclose...

PT-2026-8285

CVE-2026-26295 - Adobe Flash Memory Corruption Vulnerability CVE ID : CVE-2026-26295 Published : Feb. 14, 2026, 4:15 a.m. | 1 hour, 26 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

CVE-2026-2003

creationtimestamp| type| source ---|---|--- 2026-02-13 15:05:17+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3meqrrhko4d2m 2026-02-18 23:09:27+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mf675nhsis2h 2026-03-18 00:00:00+00:00| seen|...

CVE-2026-26257

Not used...

Ubuntu: Security Advisory (USN-8029-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for CVE-2025-49132

No d...

CVE-2025-14892

creationtimestamp| type| source ---|---|--- 2026-02-12 15:51:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meoduqr3gn2h...

Crypto-Funded Human Trafficking Is Exploding

The use of cryptocurrency in sales of human beings for prostitution and scam compounds nearly doubled in 2025, according to a conservative estimate. Many of the deals are happening in plain sight...