CVE-2026-80988

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

CVE-2026-80988

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

CVE-2026-80988

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

CVE-2026-80988 NTB: ntb_transport: Fail TX enqueue when the QP link is down

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

EUVD-2026-76311

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

CVE-2026-80987

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Reject oversized TX buffers ntbprocesstx handles an oversized buffer by calling txhandler with a NULL data pointer and returning success. ntbnetdev therefore neither frees the skb in its completion callback nor...

PT-2026-96448

In the Linux kernel, the following vulnerability has been resolved: sunrpc: route to a populated pool in svc pool for cpu svc set num threads spreads the requested threads evenly across the service's pools base = nrservs / sv nrpools. When a service runs fewer threads than it has pools -- e.g. an...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: hciuart: added a missing NULL check in h5enqueue. Syzbot encountered a general protection fault in pmruntimeresume. The problem was due to a missing NULL check. hu-serdev can be NULL, and we should not blindly pass...

CVE-2026-72299

In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tracepoints tipcskenqueue runs with sk-sklock.slock held while the socket is owned by user context. The spinlock protects the backlog queue in this path, but it does not serialize...

CVE-2026-72299

In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tracepoints tipcskenqueue runs with sk-sklock.slock held while the socket is owned by user context. The spinlock protects the backlog queue in this path, but it does not serialize...

EUVD-2026-59198

In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tracepoints tipcskenqueue runs with sk-sklock.slock held while the socket is owned by user context. The spinlock protects the backlog queue in this path, but it does not serialize...

CVE-2026-72299

CVE-2026-72299 affects the Linux kernel's TIPC code path. The issue arises when tipc_sk_enqueue() runs with sk_lock held in user context and the TIPC_DUMP_ALL tracepoints dump sk_receive_queue, risking dereferencing skbs that the socket owner has already dequeued or freed. The fix limits the unsa...

CVE-2026-72299: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tracepoints tipcskenqueue runs with sk-sklock.slock held while the socket is owned by user context. The spinlock protects the backlog queue in this path, but it does not serialize...

CVE-2026-68421 sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx()

In the Linux kernel, the following vulnerability has been resolved: schedext: Don't warn on core-sched forced idle in putprevtaskscx putprevtaskscx warns when a runnable task drops to a lower schedclass without SCXOPSENQLAST, on the assumption that balanceone would have kept it running. Core...

CVE-2026-66733

Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The...

EUVD-2026-53876

Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The...

CVE-2026-66733 Sonic 3 A.I.R. Unbounded Memory Allocation DoS via ReceivedPacketCache

Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The...

CVE-2025-9266

The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enqueuescripts function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to instal...

CVE-2025-9266

CVE-2025-9266 affects the WordPress Accelerate theme up to version 1.5.3. The root cause is a missing capability check in enqueue_scripts(), enabling authenticated users with Subscriber-level access and above to install and activate the ThemeGrill Demo Importer plugin. The impact is unauthorized ...

CVE-2025-9266 Accelerate <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation

The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enqueuescripts function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to instal...