PT-2026-116974

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vcc send ctl function where a stack-allocated struct vio vcc packet is partially initialized. This leaves the tag.stype env field uninitialized before it is...

PT-2026-116903

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the fallocate emulation for small interior ranges in the smb3 simple fallocate range function issues FSCTL QUERY ALLOCATED RANGES and zero-fills...

PT-2026-116930

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the TX path of the cw1200 wifi driver. The system rounds the transfer size up to the bus alignment using the align size callback, but sends the padded...

PT-2026-117079

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the HID BPF subsystem where a negative error code returned by a transport driver, such as -EPIPE, is implicitly promoted to size t when compared against size. This...

CVE-2026-98738: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Serialize SMP remote OOB data access buildpairingcmd looks up remote OOB data and copies its contents without holding hdev-lock, which serializes the list's writers. After SMP finds an entry, a concurrent management...

CVE-2026-98551: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fill branch entries with a single assignment perfclearbranchentrybitfields clears the bitfields of struct perfbranchentry one by one and leaves from/to alone, since callers overwrite those straight away. The list has t...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains a security vulnerability. This vulnerability stems from the nouveauschedestroy function in drm/nouveau, which directly releases the nouveausched object containing the drmgpuscheduler after destroying the scheduler. As a result, the fence that has been exporte...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.29 has a security vulnerability. This vulnerability stems from the fact that the Data-In branch of iscsitcphdrdissect does not check the data direction. As a result, data provided by the target may be written into the page that the initiator is about to send, causing...

Linux Distros Unpatched Vulnerability : CVE-2026-98684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: flush and commit data before querying allocated ranges The mode 0 / FALLOCFLKEEPSIZE fallocate emulation for small interior ranges in...

Linux Distros Unpatched Vulnerability : CVE-2026-98471

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SEV: Do cache maintenance on the source VM during intra-host migration Manually perform cache maintenance on the source VM during intra-host migration to...

CVE-2026-98743: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized streamconfig-type streamconfig is not initialized before being passed to sdwstreamaddslave. The type field may contain garbage and is later copied to stream-type by sdwconfigstream...

CVE-2026-98802: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advancenextseg modifies the SRH Segments Left field and the IPv6 destination address without ensuring the packet data is writable. seg6nextcsidadvancearg has t...

PT-2026-116929

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the iwlegacy wifi driver for 3945 devices. The il3945 pci probe function calls il eeprom init to allocate memory for EEPROM data. While failure paths correctly...

PT-2026-116551

The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing any authenticated user, including Subscribers, to disclose the names, email addresses, transaction IDs and payment...

Security update for ntfs-3g_ntfsprogs (moderate)

openSUSE security update: security update for ntfs-3gntfsprogs ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22053-1 Rating: moderate References: bsc1281756 bsc1281757 bsc1281758 bsc1281759 bsc1281760 bsc1281761 bsc1281762 bsc1281763 Affected...

CVE-2026-110069: Exposure of Sensitive Information to an Unauthorized Actor

The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing any authenticated user, including Subscribers, to disclose the names, email addresses, transaction IDs and payment...

CVE-2026-107436: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12...

CVE-2026-98684: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: flush and commit data before querying allocated ranges The mode 0 / FALLOCFLKEEPSIZE fallocate emulation for small interior ranges in smb3simplefallocaterange issues FSCTLQUERYALLOCATEDRANGES and zero-fills any...

Linux Distros Unpatched Vulnerability : CVE-2026-98710

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlegacy: 3945: free EEPROM data on remove il3945pciprobe calls ileeprominit, which allocates memory for the EEPROM data. The probe failure paths release...

CVE-2026-110886: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue affects Conversational Forms for ChatBot: from n/a through 1.5.1...