CVE-2026-90025 usb: typec: ucsi: displayport: Fix OOB altmode array index

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix OOB altmode array index The UCSI displayport driver indexes the connector's port altmode array with the GETCURRENTCAM response after checking it is not 0xff. The port altmode array is...

CVE-2026-90025 usb: typec: ucsi: displayport: Fix OOB altmode array index

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix OOB altmode array index The UCSI displayport driver indexes the connector's port altmode array with the GETCURRENTCAM response after checking it is not 0xff. The port altmode array is...

CVE-2026-89922

CVE-2026-89922 is a race condition in the Linux kernel's KVM s390 subsystem. The function __import_wp_info() uses kvm_read_guest() to back up guest memory contents of a watchpoint, which resolves memslots via __kvm_memslots(). This call requires holding kvm->srcu (or kvm->slots_lock), but t...

EUVD-2026-80504

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix acpipackageids array overflow With LoongArch virt machine, a typical setting is one core per socket, there will max 256 sockets packages on one VM. With PPTT acpi table, array acpipackageids will be overflowed. Her...

CVE-2026-89904 LoongArch: Fix acpi_package_ids[] array overflow

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix acpipackageids array overflow With LoongArch virt machine, a typical setting is one core per socket, there will max 256 sockets packages on one VM. With PPTT acpi table, array acpipackageids will be overflowed. Her...

CVE-2026-89904

This Linux kernel vulnerability affects the LoongArch architecture, where the acpi_package_ids[] array overflows when processing the PPTT ACPI table . In a typical LoongArch virtual machine configuration with one core per socket, up to 256 sockets (packages) can be present, exceeding the array's ...

CVE-2026-89904 LoongArch: Fix acpi_package_ids[] array overflow

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix acpipackageids array overflow With LoongArch virt machine, a typical setting is one core per socket, there will max 256 sockets packages on one VM. With PPTT acpi table, array acpipackageids will be overflowed. Her...

CVE-2026-89814 drm/amdgpu: clamp the isolation index for rings outside a partition

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: clamp the isolation index for rings outside a partition adev-isolation has one slot per partition, but a ring that is not assigned to one keeps AMDGPUXCPNOPARTITION, which is 0, so indexing the array with it is out of...

postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow

A flaw was found in PostgreSQL pgstatstatements. A local attacker, specifically a query author, could exploit a heap buffer overflow vulnerability by crafting special queries containing array constants. This could allow the attacker to execute arbitrary code as the operating system user running t...

CVE-2026-89778

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...

CVE-2026-89778

In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...

CVE-2026-92581: Improper Input Validation

In AVideo through 29.0, Like::construct performs counter arithmetic on raw request values before validation, allowing array-typed parameters to desynchronize stored votes from counters. Authenticated attackers can send array-typed like parameters followed by ordinary requests to drive video like...

Linux Distros Unpatched Vulnerability : CVE-2026-90025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: ucsi: displayport: Fix OOB altmode array index The UCSI displayport driver indexes the connector's port altmode array with the GETCURRENTCAM respons...

PT-2026-93455

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds array indexing issue exists in the drm/amdgpu component. The adev-isolation array contains one slot per partition; however, rings not assigned to a partition retain the...

CVE-2026-84859: Improper Neutralization of Special Elements used in an SQL Command

ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Blind SQL Injection The /api/events/search endpoint accepts a JSON body containing a sortBy array. The values in this array are concatenated directly into the SQL ORDER BY clause without any sanitization or parameterization...

Linux Distros Unpatched Vulnerability : CVE-2026-89814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: clamp the isolation index for rings outside a partition adev-isolation has one slot per partition, but a ring that is not assigned to one keeps...

PT-2026-93666

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The UCSI displayport driver contains an out-of-bounds OOB array index issue. The driver uses the response from a GET CURRENT CAM request to index the connector's port altmode array. Whil...

Linux Distros Unpatched Vulnerability : CVE-2026-89904

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LoongArch: Fix acpipackageids array overflow With LoongArch virt machine, a typical setting is one core per socket, there will max 256 sockets packages on one V...

PT-2026-93545

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An array overflow occurs in the acpi package ids array when using a LoongArch virtual machine. This issue is triggered by the PPTT ACPI table in configurations where there is one core pe...

CVE-2026-89904: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix acpipackageids array overflow With LoongArch virt machine, a typical setting is one core per socket, there will max 256 sockets packages on one VM. With PPTT acpi table, array acpipackageids will be overflowed. Her...