CVE-2026-53375

CVE-2026-53375 affects the Linux kernel, specifically the drm/amdgpu/vce component. The issue arises during patching when only one of the lo/hi address parts is valid, which could cause a bad address to be written to firmware. The vulnerability is described as resolved, with linked kernel commits...

CVE-2026-53375

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only one of lo/hi is valid, the patching could result in a bad address written to in FW...

CVE-2026-53374 drm/amdgpu: zero-initialize GART table on allocation

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GART table on allocation GART TLB is flushed after unmapping but not after mapping. Since amdgpubocreatekernel does not zero-initialize the buffer, when a single PTE is written the TLB may speculativel...

CVE-2026-53372 iommu/vt-d: Block PASID attachment to nested domain with dirty tracking

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

CVE-2026-53372 iommu/vt-d: Block PASID attachment to nested domain with dirty tracking

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

CVE-2026-53372

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking support on nested domain attached to PASID, fails the attachment early if nesting parent domain is dirty tracking configured,...

CVE-2026-53370 perf/x86/intel: Improve validation and configuration of ACR masks

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks Currently there are several issues on the user space ACR mask validation and configuration. - The validation for user space ACR mask attr.config2 is incomplete,...

CVE-2026-16211

creationtimestamp| type| source ---|---|--- 2026-07-19 08:06:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqyd3tl5li2b...

EUVD-2026-45407

A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrRestrictedIP of the file pkg/tools/integration/web.go of the component webfetch. This manipulation causes server-side request forgery. The attack can be initiated remotely. The exploit has been made...

Linux Distros Unpatched Vulnerability : CVE-2026-53391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4/pNFS: reject zero-length raddr in nfs4decodempdsaddr nfs4decodempdsaddr decodes the rnetid and raddr opaques of a netaddr4 from a GETDEVICEINFO multipath-...

PT-2026-61080

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the DRM AMD GPU VCE component where patching could result in an incorrect address being written to the firmware if only one of the lo/hi address components is valid...

PT-2026-61230

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An unintended behavior in the TCP conntrack state machine allows a connection to be forced into the CLOSE state via an RST packet with an invalid sequence number. After a SYN packet is...

PT-2026-61096

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the Linux kernel within the NFSv4/pNFS implementation. The function nfs4 decode mp ds addr decodes r netid and r addr opaques from a GETDEVICEINFO...

PT-2026-61074

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/vt-d component where the kernel lacks dirty tracking support on nested domains attached to a Process Address Space ID PASID. A PASID is a unique identifier...

CVE-2026-16198 Sipeed PicoClaw First Run Setup access_control.go authentication bypass

A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. The impacted element is an unknown function of the file web/backend/middleware/accesscontrol.go of the component First Run Setup. Performing a manipulation of the argument allowedcidrs results in authentication bypass using alternate...

CVE-2026-16133

creationtimestamp| type| source ---|---|--- 2026-07-18 20:19:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqx3moyuxa2q...

CVE-2026-16124 nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32. This affects the function CheckSSRF/isPrivateIP of the file internal/tools/webshared.go of the component webfetch. Such manipulation leads to server-side request forgery. The attack can be launched remotel...

EUVD-2026-45385

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.15.0-beta.32. This affects the function CheckSSRF/isPrivateIP of the file internal/tools/webshared.go of the component webfetch. Such manipulation leads to server-side request forgery. The attack can be launched remotel...

CVE-2026-50274

creationtimestamp| type| source ---|---|--- 2026-07-18 05:01:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvicwsojf2f 2026-07-19 14:01:05+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqywwbtptl2t 2026-07-19 14:01:07+00:00| seen|...

PT-2026-60935

Name of the Vulnerable Software and Affected Versions @fastify/reply-from versions 8.3.1 through 12.6.3 Description Internal URL cache keys are constructed by concatenating the destination and source paths without a delimiter. This allows different destination and source pairs to generate identic...