PT-2026-61295

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/handshake component where pending requests are not properly drained during net namespace exit. This occurs because the arguments to the list splice init functi...

PT-2026-61459

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Two race conditions exist in the ksmbd durable scavenger function when interacting with walkers that iterate f ci-m fp list, such as ksmbd lookup fd inode used by ksmbd vfs rename and...

PT-2026-61268

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the zram writeback endio function. A race condition occurs between the bio completion handler zram writeback endio and the writeback task. Specifically,...

PT-2026-61046

A vulnerability was identified in awesto django-shop up to 1.2.4. Affected is an unknown function of the file shop/models/inventory.py of the component Purchase Stock Handler. The manipulation leads to race condition. The attack is possible to be carried out remotely. The attack is considered to...

PT-2026-61227

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the dma buf fd tracepoint. This occurs because a thread sharing the file descriptor table can call close after FD ADD returns but before DMA BUF TRACE...

PT-2026-61261

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free read occurs in the Bluetooth subsystem within the hci le create cis sync function. The issue arises when the function dereferences the conn-conn timeout variable after...

PT-2026-61200

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the qcom geni serial driver when uart flush buffer is executed before the DMA completion interrupt request IRQ is delivered. If kfifo reset is called while a D...

PT-2026-61211

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the FunctionFS gadget driver. The ffs epfile dmabuf io complete function calls usb ep free request on a completed request but fails to clear the priv-req...

PT-2026-61042

A flaw has been found in django-tastypie up to 0.15.1. The affected element is the function CacheThrottle/CacheDBThrottle of the file tastypie/throttle.py. This manipulation causes race condition. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitability...

PT-2026-61321

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the net/iucv component when recvmsg is called simultaneously with getsockoptSO MSGSIZE. An AF IUCV HIPER user can trigger a NULL pointer dereference because th...

PT-2026-61129

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A race condition exists in the F2fs file system of the Linux kernel, which can lead to list corruption and subsequent kernel panics, particularly when the F2fs partition is nearly full...

Exploit for Missing Release of Memory after Effective Lifetime in Linux Linux_Kernel

badepoll-selinux-disabler Standalone extraction of the SELinu...

CVE-2026-15995

IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's concurrent request-handling logic when multiple...

GO-2026-5977 Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode in github.com/SpectoLabs/hoverfly

Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode in github.com/SpectoLabs/hoverfly...

CVE-2026-15995 IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use

IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's concurrent request-handling logic when multiple...

CVE-2026-15995

Summary of CVE-2026-15995 : IBM Cognos Analytics 12.1.3 GA (build up to 12.1.3-2606251736) contains a race condition in the Agentic AI assistant’s concurrent request handling. Under certain concurrent usage, two authenticated users submitting the same action can cause incorrect report summaries o...

EUVD-2026-45294

IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's concurrent request-handling logic when multiple...

CVE-2026-15995

IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's concurrent request-handling logic when multiple...

kernel: XFS data corruption using reflink

A flaw was found in the XFS filesystem. A race condition in the copy-on-write mechanism for reflinked files can cause writes to bypass the copy-on-write process and modify shared data blocks directly. As a result, data intended for a private copy may be written to the original shared location,...

EUVD-2026-45182

A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment PVE 9.x pve-manager 9.1.x before 9.1.9 and 8.4.x before 8.4.19; qemu-server 9.1.x before 9.1.7 and 8.4.x before 8.4.7; and pve-container 6.1.x before 6.1.3 and 5.3.x before 5.3.4 allows an attacker wit...