CLSA-2025-1757962453 kernel: Fix of 34 CVEs

inet: fully convert sk-skrxdst to RCU rules CVE-2021-47103 - ALSA: usb-audio: Fix out of bounds reads when finding clock sources CVE-2024-53150 - posix-cpu-timers: fix race between handleposixcputimers and posixcputimerdel CVE-2025-38352 - can: peakusb: fix use after free bugs CVE-2021-47670 -...

CLSA-2026-1784277735 kernel: Fix of CVE-2026-64600

xfs: resample the data fork mapping after cycling ILOCK...

CVE-2026-87844

The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...

CVE-2026-110069 Modern Events Calendar Lite < 7.37.0 - Subscriber+ Sensitive Data Disclosure via mec_event_bookings and mec_attendees AJAX Actions

The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing any authenticated user, including Subscribers, to disclose the names, email addresses, transaction IDs and payment...

WordPress Modern Events Calendar Lite plugin < 7.37.0 - Subscriber+ Sensitive Data Disclosure vulnerability

Subscriber+ Sensitive Data Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin Modern Events Calendar Lite versions 7.37.0...

CVE-2026-110069

The Modern Events Calendar Lite WordPress plugin, in versions prior to 7.37.0 , is vulnerable to sensitive data disclosure. The root cause is the failure to perform capability, nonce, or ownership checks before returning event booking and attendee data via the mec_event_bookings and mec_attendees...

CVE-2026-110069 Modern Events Calendar Lite < 7.37.0 - Subscriber+ Sensitive Data Disclosure via mec_event_bookings and mec_attendees AJAX Actions

The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing any authenticated user, including Subscribers, to disclose the names, email addresses, transaction IDs and payment...

CVE-2026-87844 Product Designer <= 1.0.40 - Unauthenticated Design Template Data Injection

The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...

WordPress PickPlugins Product Designer for WooCommerce plugin <= 1.0.40 - Unauthenticated Design Template Data Injection vulnerability

Unauthenticated Design Template Data Injection vulnerability discovered by Valida Abdullayeva in WordPress Plugin Product Designer versions = 1.0.40...

CVE-2026-87844

The PickPlugins Product Designer for WooCommerce WordPress plugin (version 1.0.40 and below ) is vulnerable to unauthenticated data injection. The flaw stems from a lack of capability checks , an inverted nonce verification mechanism that accepts invalid or absent nonces, and a failure to validat...

EUVD-2026-103389

The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...

CVE-2026-87844 Product Designer <= 1.0.40 - Unauthenticated Design Template Data Injection

The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...

CLSA-2026-1770032032 kernel: Fix of 63 CVEs

mm/memory-failure: fix VMBUGONPAGEPagePoisonedpage when unpoison memory CVE-2025-39883 - comedi: aioiiro16: Fix bit shift out of bounds CVE-2025-38529 - comedi: das6402: Fix bit shift out of bounds CVE-2025-38482 - comedi: pcl812: Fix bit shift out of bounds CVE-2025-38530 - comedi: das16m1: Fix...

CLSA-2026-1784274653 kernel: Fix of 2 CVEs

xfs: resample the data fork mapping after cycling ILOCK - macvlan: observe an RCU grace period in macvlancommonnewlink error path CVE-2026-23209...

PT-2026-116962

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream config-type stream config is not initialized before being passed to sdw stream add slave. The type field may contain garbage and is later copied to stream-type by sdw config...

PT-2026-116903

In the Linux kernel, the following vulnerability has been resolved: smb: client: flush and commit data before querying allocated ranges The mode 0 / FALLOC FL KEEP SIZE fallocate emulation for small interior ranges in smb3 simple fallocate range issues FSCTL QUERY ALLOCATED RANGES and zero-fills...

PT-2026-117021

In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advance nextseg modifies the SRH Segments Left field and the IPv6 destination address without ensuring the packet data is writable. seg6 next csid advance arg...

PT-2026-116802

In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: validate helper command length before pull The firmware download receive path removes the NCI data header and reads the helper command before validating the remaining packet length. A short frame can therefore reach...

PT-2026-116957

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Serialize SMP remote OOB data access build pairing cmd looks up remote OOB data and copies its contents without holding hdev-lock, which serializes the list's writers. After SMP finds an entry, a concurrent management...

PT-2026-116930

In the Linux kernel, the following vulnerability has been resolved: wifi: cw1200: fix TX padding OOB read leaking heap data to device The TX path rounds the transfer size up to the bus alignment align size, up to 511 bytes for SDIO, 1 byte for SPI but sends the padded length straight from the fra...