CLSA-2025-1757962453 kernel: Fix of 34 CVEs

inet: fully convert sk-skrxdst to RCU rules CVE-2021-47103 - ALSA: usb-audio: Fix out of bounds reads when finding clock sources CVE-2024-53150 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - can: peakusb: fix use after free bugs CVE-2021-47670 -...

CLSA-2026-1784277735 kernel: Fix of CVE-2026-64600

xfs: resample the data fork mapping after cycling ILOCK...

CVE-2026-87844

The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...

CVE-2026-110069 Modern Events Calendar Lite < 7.37.0 - Subscriber+ Sensitive Data Disclosure via mec_event_bookings and mec_attendees AJAX Actions

The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing any authenticated user, including Subscribers, to disclose the names, email addresses, transaction IDs and payment...

WordPress Modern Events Calendar Lite plugin < 7.37.0 - Subscriber+ Sensitive Data Disclosure vulnerability

Subscriber+ Sensitive Data Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin Modern Events Calendar Lite versions 7.37.0...

CVE-2026-110069

The Modern Events Calendar Lite WordPress plugin, in versions prior to 7.37.0 , is vulnerable to sensitive data disclosure. The root cause is the failure to perform capability, nonce, or ownership checks before returning event booking and attendee data via the mec_event_bookings and mec_attendees...

CVE-2026-110069 Modern Events Calendar Lite < 7.37.0 - Subscriber+ Sensitive Data Disclosure via mec_event_bookings and mec_attendees AJAX Actions

The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing any authenticated user, including Subscribers, to disclose the names, email addresses, transaction IDs and payment...

CVE-2026-87844 Product Designer <= 1.0.40 - Unauthenticated Design Template Data Injection

The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...

WordPress PickPlugins Product Designer for WooCommerce plugin <= 1.0.40 - Unauthenticated Design Template Data Injection vulnerability

Unauthenticated Design Template Data Injection vulnerability discovered by Valida Abdullayeva in WordPress Plugin Product Designer versions = 1.0.40...

CVE-2026-87844

The PickPlugins Product Designer for WooCommerce WordPress plugin (version 1.0.40 and below ) is vulnerable to unauthenticated data injection. The flaw stems from a lack of capability checks , an inverted nonce verification mechanism that accepts invalid or absent nonces, and a failure to validat...

EUVD-2026-103389

The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...

CVE-2026-87844 Product Designer <= 1.0.40 - Unauthenticated Design Template Data Injection

The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...

CLSA-2026-1770032032 kernel: Fix of 63 CVEs

mm/memory-failure: fix VMBUGONPAGEPagePoisonedpage when unpoison memory CVE-2025-39883 - comedi: aioiiro16: Fix bit shift out of bounds CVE-2025-38529 - comedi: das6402: Fix bit shift out of bounds CVE-2025-38482 - comedi: pcl812: Fix bit shift out of bounds CVE-2025-38530 - comedi: das16m1: Fix...

CLSA-2026-1784274653 kernel: Fix of 2 CVEs

xfs: resample the data fork mapping after cycling ILOCK - macvlan: observe an RCU grace period in macvlancommonnewlink error path CVE-2026-23209...

CVE-2026-98860: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssizet when checking hidbpfhwrequest As reported by Sashiko: If a transport driver encounters a hardware error and returns a negative error code such as -EPIPE, ret is implicitly promoted to sizet when...

CVE-2026-98802: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advancenextseg modifies the SRH Segments Left field and the IPv6 destination address without ensuring the packet data is writable. seg6nextcsidadvancearg has t...

CVE-2026-98755: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tty: vcc: zero-initialize control packet in vccsendctl The stack-allocated struct viovcc pkt was partially initialized, leaving the tag.stypeenv field uninitialized before being sent via ldcwrite, potentially leaking kernel stack...

CVE-2026-98743: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized streamconfig-type streamconfig is not initialized before being passed to sdwstreamaddslave. The type field may contain garbage and is later copied to stream-type by sdwconfigstream...

CVE-2026-98738: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Serialize SMP remote OOB data access buildpairingcmd looks up remote OOB data and copies its contents without holding hdev-lock, which serializes the list's writers. After SMP finds an entry, a concurrent management...

CVE-2026-98711: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: cw1200: fix TX padding OOB read leaking heap data to device The TX path rounds the transfer size up to the bus alignment alignsize, up to 511 bytes for SDIO, 1 byte for SPI but sends the padded length straight from the fram...