CVE-2025-40634

CVE-2025-40634 جهاز التوجيه TP-Link Archer AX50 عرضة لثغرة تجاوز سعة المخزن المؤقت stack-based buffer overflow في إصدار البرنامج الثابت 1.0.14 Build 20240108 rel.426554555، مما يؤدي إلى تنفيذ التعليمات البرمجية عن بُعد Remote Code Execution على جانبي الشبكة المحلية LAN والشبكة الواسعة WAN. لهذه...

conn-burst

تحديد الاتصالات الاندفاعية تتعرف هذه الحزمة على "الاتصالات الاندفاعية"، وهي الاتصالات التي تُعتبر تنقل كمية كبيرة من البيانات بسرعة. وبمجرد تحديد اتصال اندفاعي، لا تتم مراقبته بعد الآن لكونه اندفاعيًا. عندما يتم تحديد اتصال اندفاعي، يتم توليد الحدث ConnBurst::detected ويُكتب سجل إلى تدفق سجلات با...

PT-2026-106686

In the Linux kernel, the following vulnerability has been resolved: IB/isert: wait for deferred control PDU completions before releasing the connection isert send done hands ISTATE SEND TASKMGTRSP, ISTATE SEND REJECT and ISTATE SEND TEXTRSP completions off to isert comp wq and returns. The work...

PT-2026-106622

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix parent socket leak in iso conn ready iso get sock returns the parent socket with a reference held, which is dropped by sock put once the child socket has been set up. The error path taken when iso sock alloc...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: sof-common: Added a NULL check for the normallink string. It is not guaranteed that all entries of struct sofconnstream declare a normallink a non-SOF, direct link string. This applies to SoCs that only support SO...

CLEANSTART-2026-YO61836 When Conn

Security vulnerability affects the cri-tools package. When Conn...

PT-2026-98769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the l2cap ecred connect function within the Bluetooth L2CAP subsystem. The issue occurs because l2cap chan connect only counts deferred channels when...

PT-2026-98732

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Reliable Datagram Sockets RDS implementation. The rds conn shutdown function attempts to quiesce transmit and receive-refill paths by checking if RDS IN XM...

PT-2026-98770

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth L2CAP implementation where l2cap le connect req fails to correctly set the channel mode, leaving it at the default value set by l2cap new connection. Thi...

PT-2026-98734

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race exists in the rds conn path reset function. The function performs a plain store operation to clear the cp-cp flags word, while other accessors use atomic bitops. This can lea...

PT-2026-98735

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A store-buffering pattern exists in the release in xmit function. The function uses clear bit unlock to clear RDS IN XMIT, which orders the critical section before the bit clear but fail...

PT-2026-98731

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Reliable Datagram Sockets RDS implementation. The rds conn shutdown function incorrectly handles the RDS CONN ERROR state during its final transition to RD...

PT-2026-98110

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A hang occurs during the teardown of ib network configurations. This issue is caused by the shutdown worker thread sleeping on the wait event call, which subsequently blocks other work...

PT-2026-97624

Name of the Vulnerable Software and Affected Versions pmTicket Project-Management-Software versions up to 078fa56a782490c5059a0814f84df27984f4d7e2 Description A remote SQL injection is possible due to improper handling of the conn settings argument within the setSync function of the '/ajax/add...

PT-2026-94604

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the Bluetooth L2CAP implementation. The l2cap data member of hci conn is accessed without proper locking within the l2cap disconn ind function, which...

PT-2026-94603

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where hci setup sync queues a conn handle t with a NULL destroy callback. This leads to a memory leak if the entry is cancelled, as hci cmd syn...

PT-2026-94435

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth subsystem where an hci conn is leaked when a second Low Energy LE connection attempt is rejected. This occurs because the create le conn complete functio...

PT-2026-94502

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where the ksmbd all conn set status function incorrectly treats every connection with a set transient binding flag as belonging to the target SessionI...

PT-2026-94488

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the cuse module of the Linux kernel. The fuse conn put function frees the fuse conn using call rcu asynchronously. If the cuse module is removed via...

PT-2026-93380

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the Bluetooth SCO implementation. The problem occurs because the socket sk is dereferenced in the sco conn ready function without holding the conn-lo...