EUVD-2026-76549

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifschecktrans2 for malformed secondary T2 When a valid primary TRANSACT2 response has been received mid-respbuf set, mid-multiRsp true and a subsequent secondary response causes...

CVE-2026-89637 smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifschecktrans2 for malformed secondary T2 When a valid primary TRANSACT2 response has been received mid-respbuf set, mid-multiRsp true and a subsequent secondary response causes...

CVE-2026-89637 smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifschecktrans2 for malformed secondary T2 When a valid primary TRANSACT2 response has been received mid-respbuf set, mid-multiRsp true and a subsequent secondary response causes...

PT-2026-96539

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifs check trans2 for malformed secondary T2 When a valid primary TRANSACT2 response has been received mid-resp buf set, mid-multiRsp true and a subsequent secondary response causes cifs...

PT-2026-90353

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A use-after-free and buffer leak exists in the SMB client within the cifs check trans2 function. This occurs when a valid primary TRANSACT2 response is received, but a subsequent seconda...

CVE-2026-89637: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifschecktrans2 for malformed secondary T2 When a valid primary TRANSACT2 response has been received mid-respbuf set, mid-multiRsp true and a subsequent secondary response causes...

CVE-2026-42806

An out-of-bounds read vulnerability exists in the Bosch BME690 SensorAPI C-driver (v1.0.3 and prior) within the read_all_field_data function (bme69x.c). The driver prefetches heater configuration registers into a 30-byte stack buffer, but the gas_index field is extracted with a 4-bit mask (0–15) ...

PT-2026-86452

Name of the Vulnerable Software and Affected Versions RouterOS versions prior to 6.49.21 RouterOS versions prior to 7.23.4 RouterOS versions prior to 7.24.2 Description An unauthenticated client can initiate an IPv4 UDP test by exploiting a state where the system accepts a related btest connectio...

SUSE CVE-2026-72466

In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek rpcrdmaisbcall decodes a reply's first words to decide whether the frame is a backchannel call. Two issues in that decode path let a short or malformed reply leak the receive buffer...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: xsk: fixed a buffer leak in xskdropskb for AFXDP multi-buffer Tx This patch is inspired by the work from sashiko. It states that when an overflow occurs, the address of cq to be published is invalid. In fact, the more serious iss...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: In the net subsystem, a leak in the skbtstamptx function was fixed. Commit 50749f2dd685 “tcp/udp: Fixed memory leaks in sk and zerocopy skbs during TX timestamping” added a call to skborphanfragsrx, to fix leaks related to zeroco...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: etases58x: es58xreadbulkcallback – Fixed the issue of RX buffer leak when the resubmit operation fails. The es58xreadbulkcallback function resubmits the RX URB after processing a received packet. If the resubmit succeeds, the URB...

CVE-2026-12999

The Infineon Airoc Wi-Fi driver's transmit callback airocmgmtsend in drivers/wifi/infineon/airocwifi.c allocates a netbuf from the fixed airocpool for every outbound packet. When whdnetworksendethernetdata returns a synchronous failure, the underlying WHD library does not take ownership of the...

CVE-2026-12999 Infineon Airoc Wi-Fi driver leaks TX buffers on send failure, leading to permanent pool exhaustion

The Infineon Airoc Wi-Fi driver's transmit callback airocmgmtsend in drivers/wifi/infineon/airocwifi.c allocates a netbuf from the fixed airocpool for every outbound packet. When whdnetworksendethernetdata returns a synchronous failure, the underlying WHD library does not take ownership of the...

CVE-2026-12999

CVE-2026-12999 affects the Infineon Airoc Wi-Fi driver in Zephyr RTOS (drivers/wifi/infineon/airoc_wifi.c). The transmit callback airoc_mgmt_send() leaks a net_buf from the fixed airoc_pool (default 20 buffers) whenever whd_network_send_ethernet_data() returns a synchronous failure, because the b...

EUVD-2026-64597

The Infineon Airoc Wi-Fi driver's transmit callback airocmgmtsend in drivers/wifi/infineon/airocwifi.c allocates a netbuf from the fixed airocpool for every outbound packet. When whdnetworksendethernetdata returns a synchronous failure, the underlying WHD library does not take ownership of the...

CVE-2026-12999 Infineon Airoc Wi-Fi driver leaks TX buffers on send failure, leading to permanent pool exhaustion

The Infineon Airoc Wi-Fi driver's transmit callback airocmgmtsend in drivers/wifi/infineon/airocwifi.c allocates a netbuf from the fixed airocpool for every outbound packet. When whdnetworksendethernetdata returns a synchronous failure, the underlying WHD library does not take ownership of the...

CVE-2026-12999 Infineon Airoc Wi-Fi driver leaks TX buffers on send failure, leading to permanent pool exhaustion

The Infineon Airoc Wi-Fi driver's transmit callback airocmgmtsend in drivers/wifi/infineon/airocwifi.c allocates a netbuf from the fixed airocpool for every outbound packet. When whdnetworksendethernetdata returns a synchronous failure, the underlying WHD library does not take ownership of the...

PT-2026-79740

Name of the Vulnerable Software and Affected Versions Infineon Airoc Wi-Fi driver affected versions not specified Description A memory leak exists in the transmit callback airoc mgmt send within the drivers/wifi/infineon/airoc wifi.c file. The driver allocates a net buf from a fixed pool called...

Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Eclipse Jetty

Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in Eclipse Jetty. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2024-7708 DESCRIPTION: For requests that have a body, but reading the body may end up in reading 0 bytes...