CVE-2026-98226 mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count

In the Linux kernel, the following vulnerability has been resolved: mm, swap: fix SWAPUSAGEOFFLISTBIT collision with real usage count SWAPUSAGEOFFLISTBIT is embedded in the si-inusepages usage counter, and is meant to sit above any value that counter can reach. However, it is defined from...

EUVD-2026-93154

In the Linux kernel, the following vulnerability has been resolved: mm, swap: fix SWAPUSAGEOFFLISTBIT collision with real usage count SWAPUSAGEOFFLISTBIT is embedded in the si-inusepages usage counter, and is meant to sit above any value that counter can reach. However, it is defined from...

CVE-2026-98226

The Linux kernel contains a vulnerability where the SWAP_USAGE_OFFLIST_BIT collides with the real usage count because it is defined as bit 30 of an atomic_t type. On systems with 4 KiB pages, this collision occurs once the count reaches 4 TiB . This leads to several issues: /proc/swaps understate...

CVE-2026-98226 mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count

In the Linux kernel, the following vulnerability has been resolved: mm, swap: fix SWAPUSAGEOFFLISTBIT collision with real usage count SWAPUSAGEOFFLISTBIT is embedded in the si-inusepages usage counter, and is meant to sit above any value that counter can reach. However, it is defined from...

PT-2026-106555

In the Linux kernel, the following vulnerability has been resolved: mm, swap: fix SWAP USAGE OFFLIST BIT collision with real usage count SWAP USAGE OFFLIST BIT is embedded in the si-inuse pages usage counter, and is meant to sit above any value that counter can reach. However, it is defined from...

PT-2026-106798

Name of the Vulnerable Software and Affected Versions Payload versions prior to 3.90.0 Payload canary versions prior to 4.0.0-canary.34 Description An authenticated user with permissions to update or delete locally stored uploads can trigger a file cleanup process that removes unintended files...

PT-2026-106627

In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmp pdma: fix wrong sg length in mmp pdma prep slave sg In mmp pdma prep slave sg, for each sg iterates the scatterlist putting each entry into 'sg', but the entry length is read from 'sgl' the list head instead of 'sg...

Linux Distros Unpatched Vulnerability : CVE-2026-98298

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: mmppdma: fix wrong sg length in mmppdmaprepslavesg In mmppdmaprepslavesg, foreachsg iterates the scatterlist putting each entry into 'sg', but the...

PT-2026-107232

Name of the Vulnerable Software and Affected Versions Apache log4net versions 1.2.9 through 3.4.x Description Improper neutralization of null bytes or NUL characters in the OutputDebugStringAppender allows logged content to be truncated. When a NUL character is present, the debug output record en...

Linux Distros Unpatched Vulnerability : CVE-2026-98304

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bcmgenet: restore the hardware filters on open bcmgenethfbinit runs INITLISTHEAD on priv-rxnfclist, which drops every rule off the list, and bcmgenetopen...

CVE-2023-22518

CVE-2023-22518 Confluence Data Center 및 Server의 부적절한 권한 부여 취약점 Atlassian은 Confluence의 심각한 취약점에 대해 관리자에게 경고했습니다. 이 문제를 악용하면 데이터 손실로 이어질 수 있으므로 개발자들은 가능한 한 빨리 패치를 설치할 것을 촉구합니다. 이 취약점은 데이터 유출에는 사용될 수 없으며, atlassian.net 도메인을 통해 접근하는 Atlassian Cloud 사이트에는 영향을 미치지 않는다는 점에 유의하십시오...

CVE-2023-0400

Trellix 데이터 손실 방지 DLP 우회 https://kcm.trellix.com/corporate/index?page=content&id=SB10394...

D-Link DNS-320 - Remote Code Execution

The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. id: CVE-2019-16057 info: name: D-Link DNS-320 - Remote Code Execution author: DhiyaneshDk severity: critical description: | The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerabl...

CVE-2026-51916

TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in the delete_user_knowledge function located at superagi/controllers/knowledges.py. The POST /knowledges/delete/{knowledge_id} route allows for the deletion of knowledge objects without requiring authenticatio...

CVE-2026-103248: Improper Neutralization of Special Elements used in an SQL Command

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a filter injection vulnerability in the Supabase node's Filters String mode that fails to escape field values. Attackers can inject filter expressions from untrusted input to read all table rows, update...

AlmaLinux 9.6 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1776601980)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776601980 advisory. - A denial of service vulnerability exists in curl v8.1.0 in the way libcurl provides several different backends for resolving host...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1765208529)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1765208529 advisory. - Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198...

SUSE CVE-2026-97945

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix user-space data loss with MADVFREE and THP Some of users of Polars a data analytics library have lost production data from this bug. They seem to have just the right combination of huge pages, MADVFREE and heavy recla...

CVE-2026-97945

A flaw was found in the Linux kernel. A local user can cause silent data loss or data corruption due to improper memory tracking in the x86 memory management subsystem. When modifying permissions on transparent huge pages a mechanism that optimizes memory by grouping it into larger blocks, the...

CVE-2026-100631

Parse Server is an open source backend server. In versions prior to 8.6.90 and in versions from 9.0.0 prior to 9.10.1-alpha.9, the device token deduplication logic for installation records does not validate the type of client-supplied installation fields before using them to build database querie...