CVE-2026-80757

CVE-2026-80757 is a vulnerability in the Linux kernel affecting the SELinux subsystem. The root cause is in security_get_permissions(), which maps an inherited common's permissions into an array sized by the class's own nprim field. However, class_read() takes nprim verbatim from the policy image...

CVE-2026-80754 Input: synaptics-rmi4 - fix F55 transmitter electrode count typo

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

CVE-2026-80754 Input: synaptics-rmi4 - fix F55 transmitter electrode count typo

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

EUVD-2026-70358

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

CVE-2026-80754

CVE-2026-80754 affects the Linux kernel synaptics-rmi4 input driver. During F55 sensor detection , the transmitter (TX) electrode count was incorrectly assigned the receiver (RX) value due to copy-paste typos . On devices where RX exceeds TX electrode counts, this inflated perceived TX count prop...

kernel: NFSv4/flexfiles: reject zero filehandle version count

A flaw was found in the Linux kernel's NFSv4 Network File System version 4 flexfiles component. This vulnerability occurs when the fflayoutalloclseg function processes a malformed flexfiles layout that specifies a zero filehandle version count. An attacker could exploit this by providing a...

UBUNTU-CVE-2026-65165

Fix various issues around job steps and node count discrepancies...

CVE-2026-65165

Fix various issues around job steps and node count discrepancies...

PT-2026-90880

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electrode count typo During F55 sensor detection, the transmitter TX electrode count was incorrectly assigned the value of the receiver RX electrode count due to copy-paste typos. This...

PT-2026-84952

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A copy-paste error during F55 sensor detection causes the transmitter TX electrode count to be incorrectly assigned the value of the receiver RX electrode count. This incorrect value is...

Linux Distros Unpatched Vulnerability : CVE-2026-65165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to a logic processing flaw when handling job steps using an arbitrary node distribution, leading to node count discrepancies...

PT-2026-84955

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds heap write exists in the SELinux component. The class read function accepts a permission count nprim from the policy image without verifying if it covers the inherited...

PT-2026-90778

Fix various issues around job steps and node count discrepancies...

PT-2026-85294

Name of the Vulnerable Software and Affected Versions MOOS-IvP versions prior to 24.8.2 Description A denial of service issue exists in the Demuxer::addMuxPacket function. The system trusts the packet count declared in mux headers without proper validation, allowing attackers to specify arbitrari...

NPM: fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count

NPM: fastify vulnerable to X-Forwarded- spoofing under trustProxy hop-count vulnerability discovered by ? in WordPress Npm fastify versions = 5.8.3, 5.12.1...

fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count

Impact The fix for CVE-2026-3635 GHSA-444r-cwp2-x5xf added a proxyFnsocket.remoteAddress, 0 guard on the X-Forwarded- reads in request.host, request.protocol, request.hostname, request.ip, and request.ips. That guard closes the IP, CIDR, and custom-function forms of trustProxy correctly because...

GHSA-3M5P-2C4R-XXW2 fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count

Impact The fix for CVE-2026-3635 GHSA-444r-cwp2-x5xf added a proxyFnsocket.remoteAddress, 0 guard on the X-Forwarded- reads in request.host, request.protocol, request.hostname, request.ip, and request.ips. That guard closes the IP, CIDR, and custom-function forms of trustProxy correctly because...

kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs

A flaw was found in the Linux kernel's Generic Receive Offload GRO networking subsystem. This vulnerability occurs when skbgroreceive attempts to merge zerocopy socket buffers skbs without properly managing page reference counts, specifically when the SKBFLMANAGEDFRAGREFS flag is set. An attacker...

CVE-2026-84308

phpseclib is a PHP secure communications library. Prior to 3.0.57 and 4.0.1, pure-PHP X25519 scalar multiplication in phpseclib/Math/PrimeField/Integer.php performs data-dependent conditional modular reductions in add and subtract. During the Montgomery ladder in...

SUSE CVE-2026-74608

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifstryaddingchannels cifstryaddingchannels takes a temporary reference to an interface before dropping ifacelock. If cifssesaddchannel fails, it drops that reference and then increments...