CVE-2026-64530

In the Linux kernel, CVE-2026-64530 affects the net/sched cls_api path, specifically tcf_qevent_handle and tcf_classify, where returning TC_ACT_CONSUMED could leave the skb touchable after defragmentation (e.g., act_ct on out-of-order fragments). The defect allowed RED qdisc handling (qe_mark, qe...

CVE-2026-4325

A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an attacker to delete arbitrary single-use entries, which can enable the replay of consumed action tokens, such as password reset links. This...