PT-2026-90474

In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: skip non-present PMDs when queueing folios Patch series "mm: handle device-private PMDs in walk callbacks", v3. Since commit 368076f52ebe "mm/huge memory: add device-private THP support to PMD operations" a PMD may...

PT-2026-90484

In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backing file open derives the path to be stored in the new backing file from user file-f path. This is incorrect when user file itself is a backing file, which is the case for nested...

PT-2026-90160

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer set attribute populates the security area of the BIOS attribute request buffer with the current admin password via populate security buffer, then dumps the...

SUSE SLED15: libopenssl-3-devel / libopenssl-3-fips-provider / etc (SUSE-SU-2026:3835-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3835-1 advisory. OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107265)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107265 advisory. In the Linux kernel, the following vulnerability has been resolved: md: Don't ignore read-only array in mdcheckrecovery Usually if the array is not read-write,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107292 advisory. In the Linux kernel, the following vulnerability has been resolved: dm cache: fix flushing uninitialized delayedwork on cachectr error An unexpected WARNON from...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107320 advisory. In the Linux kernel, the following vulnerability has been resolved: hwpoison, memoryhotplug: lock folio before unmap hwpoisoned folio Commit b15c87263a69 hwpoison,...

PT-2026-90350

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix ALIGN overflow in symlink data error context loop The check added by commit 7d9a7f1f96cd "smb/client: fix possible infinite loop and oob read in symlink data" compared the post-ALIGN length against the remaining...

PT-2026-90547

Summary The Shopper Framework discount management functionality accepts negative discount values without server-side validation. It was confirmed that negative fixed-amount discounts can be created through the administrative interface, persisted to the database, and subsequently processed by the...

Bridging the First-Hour Gap: Evaluating AI Reliability and Benchmarking Deficiencies in Cyber Incident Response for Law Enforcement

The actions of frontline law enforcement officers in the initial hour of a cyber incident play a vital role in determining the ultimate success of an investigation. The minor mistakes they commit might result in irreversible critical impacts. The integrity of the investigation can be compromised,...

EUVD-2026-76111

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via thenteraction between trajserver, poscmd2odom, and the EGOReplanFSM emergency recovery logic...

ROS-20260911-73-0118

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260911-73-0128

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

PT-2026-90222

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Add UVERBS ATTR UHW to UVERBS METHOD REG MR The original commit missed that three drivers mthca, irdma, siw have UHW data associated with reg mr that cannot be passed through the ioctl. They also assume that the udat...

PT-2026-90043

Certain Woltlab products are affected by RCE via Cache Poisoning. WCF = 6.1.0 until = 6.2.0 until 6.2.6. An authenticated low-privileged user can inject PHP into executable cache files generated by WoltLab Suite Core. Attacker-controlled data can terminate the nowdoc prematurely and inject...

PT-2026-90170

In the Linux kernel, the following vulnerability has been resolved: PCI: plda: Fix IRQ domain leaks in the error paths of plda init interrupts plda init interrupts initializes IRQ domains and creates IRQ mapping but does not unwind them when later step fails. If platform get irq or either irq...

PT-2026-90422

In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY writeback fails Async COPY captures nn-writeverf at request time and reports it to the client via CB OFFLOAD after the worker kthread completes. When the post-copy vfs fsync range or...

PT-2026-90198

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: do not accept C2HData based on blk rq payload bytes alone Commit 25e5cb780e62 "nvme-tcp: fix possible crash in write zeroes processing" established that blk rq payload bytes must not be read without first checking blk r...

PT-2026-90225

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Embed counter driver data in rdma counter allocation Commit 7e53b31acc7f "RDMA/core: Create and destroy rdma counter using rdma zalloc drv obj" requires drivers implementing counter ops to embed struct rdma counter in...

PT-2026-90544

Summary Three Livewire admin components in shopper/framework latest master at commit fcd0c59, released as v2.8.0 gate state-mutating actions on the read-only view users permission. This is the same class as the issue Shopper fixed in v2.8.0 / PR 511 / GHSA-f946-9qp6-vgch — the PR moved most write...