EUVD-2026-64883

Multiple vulnerabilities on affected versions of Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value recycle Map update and delete operations currently call bpfobjfreefields when a value is being replaced or recycled. This means that the destruction of special fields depends on the context...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Proper mmstruct should be used in inuprobetrampoline. In the unregistered path, we use inuprobetrampoline to check the VMA lookup using current-mm, which is incorrect. This is because we are in the tracer context, no...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: always put unsuccessfully committed target pids damoncommittarget puts and gets the destination and the source target pids. It puts the destination target pid because it will be overwritten by the source target pid...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: iouring/rw: Defer fsnotify calls to task context. We cannot defer these calls outside of the kiocb completion, as that might be off-soft/hard IRQ context. We should defer the calls until we process the taskwork for this reques...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec – fixed the aead software fallback for the engine. Due to the misuse of the subreq pointer, private context memory was affected. The aead software-related crypto function occasionally causes the operating...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Avoid using GFPKERNEL in an atomic context. Using GFPKERNEL in a preemption-disabled context may cause the following warning when CONFIGDEBUGATOMICSLEEP is enabled. 32.542271 BUG: A sleeping function was called from...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-pf: Fixed the use of GFPKERNEL in atomic contexts for rt. The commit 4af1b64f80fb “octeontx2-pf: Fixed the lmtst ID used in aurafree” uses get/putcpu to protect the usage of percpu pointers in the -aurafreeptr...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drivers/perf: hisi: Do not migrate perf to the CPU that is going to be torned down. The driver needs to migrate the perf context if the currently used CPU is going to be torned down. By the time the cpuhp::teardown callback is...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ICE: Fixed ‘scheduling while atomic’ in aux critical error interrupts There’s a kernel bug related to processing aux critical error interrupts in icemiscintr: 2100.917085 BUG: Scheduling while atomic: swapper/15/0/0x00010000… …...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clearing the Present bit before tearing down the scalable-mode context entry The devicepasidtableteardown function zeros the 128-bit scalable-mode context entry using contextclearentry, even when the Present bit is...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: iouring/bpf-ops: Rejection of re-registration of an already-bound ops. The ioinstallbpf function only rejects a second registration on the ctx-bpfops side and unconditionally sets the per-map back-pointer ops-priv. The structops...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock. Since DMAfence objects can be shared with other subsystems, they may be accessed from the hardirq context in those drivers. We must take that into accoun...

CVE-2026-74607

A flaw was found in the Kernel-based Virtual Machine KVM Secure Virtual Machine SVM module within the Linux kernel. This vulnerability involves a race condition during the management of encrypted virtual machine contexts, specifically when handling owner and mirror lists. A privileged user or...

PT-2026-80887

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector affected versions not specified Description Remote code execution flaws allow an unauthenticated and unprivileged user to execute arbitrary code within the ZCC context. This issue affects Windows, macOS, and mobile...

`en_accel/ipsec.c` component of `drivers/net/ethernet/mellanox/mlx5/core` DoS

The vulnerability in the drivers/net/ethernet/mellanox/mlx5/core/enaccel/ipsec.c component of the Linux kernel is related to a race condition associated with context switching. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

IPC web Firefox Thunderbird DoS

The vulnerability of the IPC web browser Firefox and the email client Thunderbird is related to context privilege switching errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

SUSE CVE-2026-68286

In the Linux kernel, the following vulnerability has been resolved: dropmonitor: perform u64stats updates under IRQ-disabled section In netdmpackettracekfreeskbhit and netdmhwtrappacketprobe, u64statsupdatebegin / u64statsinc / u64statsupdateend were called after...

On Predicting Vulnerability Severity Using In-Context Learning: An Industrial Case Study

Modern software systems require earlier and more scalable vulnerability severity assessment to reduce exposure to high-impact security flaws. Security analysts typically assign CVSS scores, but this manual triage does not scale with the growth of disclosed vulnerabilities and often depends on clo...

PT-2026-99448

Name of the Vulnerable Software and Affected Versions vm2 versions prior to 3.12.2 Description An authorization bypass exists in the NodeVM external-module resolver. When an embedder configures require.external with a custom resolver and context: 'host', the LegacyResolver.customResolve function ...