CVE-2026-80980 net/smc: stop killed, freed and out_of_sync sharing a byte

In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and outofsync sharing a byte The three connection state flags are single-bit bitfields, so they occupy one byte of struct smcconnection and every store to one is a read-modify-write of the other two: u...

CVE-2026-80926

CVE-2026-80926 is a use-after-free in the Linux kernel's ksmbd (in-kernel SMB server) module, in the smb2_oplock_break_noti() function. The function reads opinfo->conn without holding a lock and dereferences it after two allocations that may sleep. When the durable handle owning the oplock is ...

EUVD-2026-76248

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in oplock break notification smb2oplockbreaknoti reads opinfo-conn without any lock and dereferences it after two allocations which may sleep. When the durable handle owning the oplock is disconnected,...

curl: Socket API drops expired timeouts for transfers queued behind a connection limit

Hi all, I found a way to make libcurl silently and permanently drop a transfer's CURLOPTTIMEOUTMS/CURLOPTCONNECTTIMEOUTMS deadline. It happens when that transfer is queued behind a connection-count limit and the application drives libcurl through the event-driven curlmultisocketaction API instead...

CVE-2026-87776

compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib stream created to compress that response is never destroyed, so each aborted compressed response leaks its native zl...

UBUNTU-CVE-2026-87776

compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib stream created to compress that response is never destroyed, so each aborted compressed response leaks its native zl...

CVE-2026-87776

compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib stream created to compress that response is never destroyed, so each aborted compressed response leaks its native zl...

CVE-2026-89179

WeenyGenius , a computer lab management system by Howyar Technologies , is affected by a Missing Support for Integrity Check vulnerability. An unauthenticated attacker on the same (adjacent) network can intercept a student's connection packet and replay it, forging the appearance that the student...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

CLEANSTART-2026-NN12099 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

Multiple security vulnerabilities affect the haproxy-ingress package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

CLEANSTART-2026-ZJ50310 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

Multiple security vulnerabilities affect the haproxy-ingress package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

PT-2026-96448

In the Linux kernel, the following vulnerability has been resolved: sunrpc: route to a populated pool in svc pool for cpu svc set num threads spreads the requested threads evenly across the service's pools base = nrservs / sv nrpools. When a service runs fewer threads than it has pools -- e.g. an...

CVE-2026-89549: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sunrpc: route to a populated pool in svcpoolforcpu svcsetnumthreads spreads the requested threads evenly across the service's pools base = nrservs / svnrpools. When a service runs fewer threads than it has pools -- e.g. an nfsd...

PT-2026-90299

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the eir get service data function within the Bluetooth component. The issue occurs when the function iterates through advertising data to find a Service...

Fedora 43 : curl (2026-6841033933)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6841033933 advisory. - fix HTTP/2 stream-dependency tree UAF CVE-2026-10536 - fix stale proxy password leak CVE-2026-9079 - fix wrong reuse for different services...

CVE-2026-89178: Improper Verification of Source of a Communication Channel

WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attackers on the same network can spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection with the...

Linux Distros Unpatched Vulnerability : CVE-2026-87776

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still...

PT-2026-90119

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the thunderbolt network component where failure paths in the tbnet connected work function do not clear the login sent variable. This causes the connection to appear...

PT-2026-90120

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the thunderbolt net driver. The function tb xdomain alloc in hopid uses ida alloc range to request a HopID; if the requested ID is taken, the allocator returns...

PT-2026-90110

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the net/smc module within the struct smc connection. The connection state flags killed, freed, and out of sync are defined as single-bit bitfields sharing a...