CVE-2026-53383 ksmbd: reject non-VALID session in compound request branch

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject non-VALID session in compound request branch smb2checkusersession takes a shortcut for any operation that is not the first in a COMPOUND request: it reuses work-sess the session bound by the first operation and...

CVE-2026-53383

The CVE-2026-53383 issue affects the Linux kernel’s ksmbd component where a COMPOUND request could bypass validation of the session state. Specifically, smb2_check_user_session() reused work->sess for operations beyond the first in a COMPOUND, validating only SessionId and not rechecking work-...

CVE-2026-53382

CVE-2026-53382 affects the Linux kernel’s media/vidtv subsystem. The issue arises when vidtv_mux_get_pid_ctx() returns NULL and vidtv_mux_push_si() dereferences it to access the continuity counter, triggering a general protection fault. Root cause: vidtv_mux_pid_ctx_init() could skip creating a P...

CVE-2026-53383 ksmbd: reject non-VALID session in compound request branch

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject non-VALID session in compound request branch smb2checkusersession takes a shortcut for any operation that is not the first in a COMPOUND request: it reuses work-sess the session bound by the first operation and...

OESA-2026-3084 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A flaw was found in...

OESA-2026-3091 wireshark security update

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. Security Fixes: Multiple...

OESA-2026-3089 wireshark security update

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. Security Fixes: Multiple...

OESA-2026-3090 wireshark security update

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. Security Fixes: Multiple...

OESA-2026-3006 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer...

OESA-2026-3003 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer...

PT-2026-61088

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module during the handling of SMB2 compound requests. The smb2 check user session function fails to verify if a session is in the SMB2 SESSION VALID state fo...

PT-2026-61290

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference issue exists in the net: mana component. When queue allocation fails during the attach process, the error cleanup routine frees and sets apc-tx qp and apc-rxqs...

PT-2026-61416

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the drm/v3d component. In the CPU job ioctl error path, the system calls kvfree on timestamp and performance query arrays after v3d job cleanup has alrea...

Linux Distros Unpatched Vulnerability : CVE-2026-53392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4/flexfiles: reject zero filehandle version count fflayoutalloclseg decodes the filehandle- version array count from the flexfiles layout body. The value is...

PT-2026-61105

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during the registration of I2C adapters. The i2c get adapter function allows looking up adapters by ID and takes a reference to the embedded struct device. If an...

PT-2026-61126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bdev pseudo-filesystem, an internal kernel filesystem that should not be accessible to userspace. A kernel NULL pointer dereference occurs when userspace attempts ...

PT-2026-61090

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the vcs write function. When the console lock is temporarily released to copy data from userspace, the vc data pointer obtained from vcs vc can become stale. I...

PT-2026-61345

In the Linux kernel, the following vulnerability has been resolved: tracing: Avoid NULL return from hist field name on truncation hist field name returns "" everywhere except the fully-qualified VAR REF/EXPR case, where snprintf truncation returns NULL early and bypasses the bottom NULL-"" guard...

Linux Distros Unpatched Vulnerability : CVE-2026-53403

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: Fix fbnewmodelist to prevent null-ptr-deref in fbvideomodetovar info-var, a framebuffer's current mode, is expected to have a matching entry in...

PT-2026-61365

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMC-D client where the system fails to properly validate the ism dev slot when processing a CHID-0 ACCEPT. Specifically, the smc v2 determine accepted chid functio...