PT-2026-72696

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf dup netdev: add nf dev xmit recursion helpers and use them Update nft dup and nft fwd to use the nf dev xmit recursion helpers. This patch also disables BH when transmitting the skb to address a possible migration t...

SUSE CVE-2026-56859

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...

CVE-2026-12363 Out-of-bounds write in LoRaWAN fragmented transport from a fragment index of 0

The LoRaWAN Fragmented Data Block Transport service subsys/lorawan/services/fragtransport.c does not validate the fragment counter in a received DATAFRAGMENT command before forwarding it to the configured decoder. In fragtransportpackagecallback the value fragcounter = hdr-fragindexn & 0x3FFF is...

EUVD-2026-58509

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...

DEBIAN-CVE-2026-56859

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...

CVE-2026-56859

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...

AZL-98637 CVE-2026-56859 affecting package golang 1.27.1-1

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...

AZL-96641 CVE-2026-56859 affecting package golang 1.25.12-1

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...

AZL-96677 CVE-2026-56859 affecting package golang 1.26.7-1

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...

CVE-2026-56859

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...

UBUNTU-CVE-2026-56859

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...

CVE-2026-56859

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...

CVE-2026-56859

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...

PT-2026-71897

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The DecodeElement function resets the depth counter, preventing it from triggering. This behavior can lead to stack exhaustion, a condition where the program...

CVE-2026-68174

A flaw was found in the Linux kernel's tracing subsystem. When handling dynamic events, a memory collision occurs where a reference counter is mistakenly interpreted as a module pointer. This can happen when filtering or setting events for a specific module without properly checking the event's...

CVE-2026-72780

Craft CMS before 5.10.5 fails to persist updated credential counters after WebAuthn assertion validation in the passkey login endpoint. Attackers can replay captured login request bodies containing requestOptions and response to create additional authenticated sessions for victim accounts...

CVE-2026-68234

A flaw was found in the Linux kernel's drm/amdgpu component. The amdgpubocreatereserved function unconditionally increments a pin counter for a Buffer Object BO even if it is already pinned. This occurs when the function is called multiple times with the same BO, such as during firmware buffer...

CVE-2026-72780 Craft CMS before 5.10.5 WebAuthn Assertion Replay via login-with-passkey

Craft CMS before 5.10.5 fails to persist updated credential counters after WebAuthn assertion validation in the passkey login endpoint. Attackers can replay captured login request bodies containing requestOptions and response to create additional authenticated sessions for victim accounts...

CVE-2026-72780 Craft CMS before 5.10.5 WebAuthn Assertion Replay via login-with-passkey

Craft CMS before 5.10.5 fails to persist updated credential counters after WebAuthn assertion validation in the passkey login endpoint. Attackers can replay captured login request bodies containing requestOptions and response to create additional authenticated sessions for victim accounts...

CVE-2026-72780

Craft CMS before 5.10.5 fails to persist updated credential counters after WebAuthn assertion validation in the passkey login endpoint. Attackers can replay captured login request bodies containing requestOptions and response to create additional authenticated sessions for victim accounts...