flarum/nicknames extension has display name injection in notification emails (autolink & markdown)

Summary When the flarum/nicknames extension is enabled, a registered user can set their nickname to a string that email clients interpret as a hyperlink. The nickname is inserted verbatim into plain-text notification emails, and recipients may be misled into visiting attacker-controlled domains...

Linux drivers/firmware/arm_scmi DoS

The vulnerability of the drivers/firmware/armscmi components of the Linux operating system is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

fastrpc_cb_probe Heap Buffer Overflow DoS

The vulnerability of the fastrpccbprobe function in the drivers/misc/fastrpc.c module of the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

rtl8712 USB Intentional DoS

The vulnerability of the r871xudrvinit function in the drivers/staging/rtl8712/usbintf.c module, which supports additional devices in the Linux operating system, is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause service failures...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-8070-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8070-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005535 advisory. In the Linux kernel, the following vulnerability has been resolved: posix-clock: Fix missing timespec64 check in pcclocksettime As Andrew pointed out, it will make...

USN-8074-2: Linux kernel (Azure FIPS) vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt...

USN-8070-3: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class drivers; - BTRFS file system; - File syste...

USN-8070-3 linux-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class drivers; - BTRFS file system; - File syste...

USN-8070-2 linux-aws, linux-lts-xenial vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class drivers; - BTRFS file system; - File syste...

USN-8070-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class drivers; - BTRFS file system; - File syste...

USN-8070-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class drivers; - BTRFS file system; - File syste...

USN-8070-1 linux, linux-aws, linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - MMC subsystem; - Network drivers; - USB Device Class drivers; - BTRFS file system; - File syste...

USN-8060-6 linux-aws-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - MMC subsystem; CVE-2022-49267, CVE-2025-21780...

USN-8060-6: Linux kernel (AWS FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - MMC subsystem; CVE-2022-49267, CVE-2025-21780...

USN-8060-5 linux-aws, linux-aws-5.15, linux-gcp-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - MMC subsystem; CVE-2022-49267, CVE-2025-21780...

USN-8060-5: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - MMC subsystem; CVE-2022-49267, CVE-2025-21780...

ROS-20260304-73-0014

A vulnerability in the drivers/net/ethernet/stmicro/stmmac/stmmacmain.c and drivers/net/ethernet/stmicro/stmmac/stmmacptp.c modules of the Linux operating system kernel is related to division-by-zero errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

net.snowflake:spark-snowflake_2.11 (2.9.1-spark_2.4), net.snowflake:spark-snowflake_2.12 (>=2.9.1-spark_2.4, <=2.9.1-spark_3.1) +3 more potentially affected by CVE-2026-3293 via net.snowflake:snowflake-jdbc (3.13.6)

net.snowflake:snowflake-jdbc MAVEN version 3.13.6 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:spark-snowflake2.11 2.9.1-spark2.4 - net.snowflake:spark-snowflake2.12 =2.9.1-spark2.4,...

com.snowflake:snowpark (>=0.9.0, <=0.10.0), us.fatehi:schemacrawler-examplecode (>=16.15.5, <=16.15.6) +2 more potentially affected by CVE-2026-3293 via net.snowflake:snowflake-jdbc (3.13.7)

net.snowflake:snowflake-jdbc MAVEN version 3.13.7 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.snowflake:snowpark =0.9.0, =16.15.5, =16.15.5, =16.15.5, =16.15.6 Source cves: CVE-2026-3293 Sourc...