CVE-2026-23230

In the Linux kernel, the following vulnerability has been resolved: smb: client: split cachedfid bitfields to avoid shared-byte RMW races isopen, haslease and onlist are stored in the same bitfield byte in struct cachedfid but are updated in different code paths that may run concurrently. Bitfiel...

CVE-2026-23230 smb: client: split cached_fid bitfields to avoid shared-byte RMW races

In the Linux kernel, the following vulnerability has been resolved: smb: client: split cachedfid bitfields to avoid shared-byte RMW races isopen, haslease and onlist are stored in the same bitfield byte in struct cachedfid but are updated in different code paths that may run concurrently. Bitfiel...

CVE-2026-23230

In the Linux kernel, the following vulnerability has been resolved: smb: client: split cachedfid bitfields to avoid shared-byte RMW races isopen, haslease and onlist are stored in the same bitfield byte in struct cachedfid but are updated in different code paths that may run concurrently. Bitfiel...

Linux Distros Unpatched Vulnerability : CVE-2026-23230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: split cachedfid bitfields to avoid shared-byte RMW races isopen, haslease and onlist are stored in the same bitfield byte in struct cachedfid but a...

PT-2026-25812

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.0 through 10.11.10 Description Mattermost fails to invalidate cached permalink preview data when a user loses channel access. This allows a user to continue viewing private channel content through previously cached...

CVE-2026-25999

Klaw (self-service Apache Kafka Topic Management/Governance tool) contains an improper access control vulnerability prior to v2.10.2 that allows an unauthorized user to trigger a reset or deletion of metadata for any tenant by calling the /resetMemoryCache endpoint. The CVE notes the impact as hi...

Improper Handling of Unicode Encoding

Overview litestar is a Litestar - A production-ready, highly performant, extensible ASGI API Framework Affected versions of this package are vulnerable to Improper Handling of Unicode Encoding via the safefilename in the stores/file.py‎. An attacker can cause cached responses for one URL to be...

CVE-2026-24683

FreeRDP is a free implementation of the Remote Desktop Protocol. ainputsendinputevent caches channelcallback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This...

CVE-2025-59023

Crafted delegations or IP fragments can poison cached delegations in Recursor...

CVE-2025-59024 Crafted delegations or IP fragments can poison cached delegations in Recursor

Crafted delegations or IP fragments can poison cached delegations in Recursor...

CVE-2025-59024

Crafted delegations or IP fragments can poison cached delegations in Recursor...

CVE-2025-59024 Crafted delegations or IP fragments can poison cached delegations in Recursor

Crafted delegations or IP fragments can poison cached delegations in Recursor...

CVE-2025-59024

PowerDNS Recursor (CVE-2025-59024; also related CVE-2025-59023) is affected by cache-pollution vulnerabilities due to insufficient validation of delegation information. The issue can poison cached delegations in Recursor, with CVSS ~6.5 (Network, High impact on integrity; Availability low) as per...

CVE-2025-59024 Crafted delegations or IP fragments can poison cached delegations in Recursor

Crafted delegations or IP fragments can poison cached delegations in Recursor...

CVE-2025-59024

Crafted delegations or IP fragments can poison cached delegations in Recursor...

CVE-2025-59023 Crafted delegations or IP fragments can poison cached delegations in Recursor

Crafted delegations or IP fragments can poison cached delegations in Recursor...

CVE-2025-59023

Crafted delegations or IP fragments can poison cached delegations in Recursor...

CVE-2025-59023 Crafted delegations or IP fragments can poison cached delegations in Recursor

Crafted delegations or IP fragments can poison cached delegations in Recursor...

CVE-2025-59023 Crafted delegations or IP fragments can poison cached delegations in Recursor

Crafted delegations or IP fragments can poison cached delegations in Recursor...

CVE-2025-59023

CVE-2025-59023 affects PowerDNS Recursor. The vulnerability arises from insufficient validation of delegation information, which can poison cached delegations in the Recursor. Affected component is the Recursor’s handling of delegation data; the root cause is validation weaknesses in delegation i...