CVE-2026-2584

A critical SQL Injection SQLi vulnerability has been identified in the authentication module of the system. An unauthenticated, remote attacker AV:N/PR:N can exploit this flaw by sending specially crafted SQL queries through the login interface. Due to low attack complexity AC:L and the absence o...

lpfcdebugfs.c Kernel Compromise

The vulnerability of the lpfcdebugfslockstatwrite function in the drivers/scsi/lpfc/lpfcdebugfs.c driver for Linux SCSI devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

Linux TCP Disconnect Use-After-Free

The vulnerability of the tcpdisconnect function in the net/ipv4/tcp.c module of the Linux kernel’s IPv4 protocol implementation is related to improper release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux Ethernet Network Adapter Driver Heap Buffer Overflow

The vulnerability of the hnaeaeregister function in the drivers/net/ethernet/hisilicon/hns/hnae.c module of the Ethernet network adapter driver for the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allo...

MTD memory driver Kernel Data Compromise

The vulnerability of the ioinit function in the drivers/mtd/ubi/build.c file of the MTD memory driver for the Linux operating system relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

BPF_CALL_2() Kernel Buffer Overflow DoS

The vulnerability of the BPFCALL2 function in the net/core/filter.c module related to Linux’s kernel network functions involves unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

Linux kernel USB network adapter driver Heap Buffer Overflow DoS

The vulnerability of the rndisquery function in the drivers/net/usb/rndishost.c module of the Linux kernel’s USB network adapter driver is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

Linux kernel MPTCP Protocol Buffer Overflow

The vulnerability of the mptcpworker function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in Linux’s kernel is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

ath9k_wmi_ctrl_rx Heap Buffer Overflow DoS

The vulnerability of the ath9kwmictrlrx function in the drivers/net/wireless/ath/ath9k/wmi.c module of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an...

fs/nfsd/nfs4callback.c NFS Data Compromise

The vulnerability of the setupcallbackclient function in the fs/nfsd/nfs4callback.c module, which supports the Network File System in Linux kernels, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Apache NiFi Authentication Bypass

The vulnerability of the Apache NiFi data processing platform lies in the lack of authentication. Exploiting this vulnerability allows a malicious actor to remotely compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel trace_pid_write buffer overflow DoS

The vulnerability of the tracepidwrite function in the kernel/trace/trace.c module, which supports Linux operating system tracing, is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Linux kernel Bluetooth HIDP Buffer Overflow

The vulnerability of the hidpsettimer function in the net/bluetooth/hidp/core.c module of the Linux kernel’s Bluetooth subsystem is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

PT-2026-25126

Summary @openclaw/voice-call and the bundled copy shipped in openclaw accepted media-stream WebSocket upgrades before stream validation. In reachable deployments, unauthenticated pre-start sockets could be held open and increase resource pressure. Affected Packages / Versions - openclaw npm:...

OPENSUSE-SU-2026:10277-1 python311-pypdf-6.7.5-1.1 on GA media

These are all security issues fixed in the python311-pypdf-6.7.5-1.1 package on the GA media of openSUSE Tumbleweed...

Linux net/sched sch_sfb Heap Buffer Overflow DoS

The vulnerability of the sfbReset function in the net/sched/schsfb.c module of the Linux operating system’s network/scheduling subsystem is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel Persistent RAM Vmap Function Use-After-Free

The vulnerability of the persistentramvmap function in the fs/pstore/ramcore.c module, which supports the persistent storage of the Linux kernel, is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise t...

Linux kernel opt3001_irq() function Heap Buffer Overflow

The vulnerability of the opt3001irq function in the drivers/iio/light/opt3001.c file of the Linux kernel’s photodetection sensor driver is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

OPENSUSE-SU-2026:10276-1 libsoup-3_0-0-3.6.6-2.1 on GA media

These are all security issues fixed in the libsoup-30-0-3.6.6-2.1 package on the GA media of openSUSE Tumbleweed...

OESA-2026-1486 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...