CVE-2026-72033 orangefs: keep the readdir entry size 64-bit in fill_from_part()

In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fillfrompart fillfrompart computes the size of a directory entry in sizet but stores it in a u32. An entry length near U32MAX wraps it to a small value, bypasses the bounds check, a...

CVE-2026-72033 orangefs: keep the readdir entry size 64-bit in fill_from_part()

In the Linux kernel, the following vulnerability has been resolved: orangefs: keep the readdir entry size 64-bit in fillfrompart fillfrompart computes the size of a directory entry in sizet but stores it in a u32. An entry length near U32MAX wraps it to a small value, bypasses the bounds check, a...

CVE-2026-72006 net/mlx5: free mlx5_st_idx_data on final dealloc

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: free mlx5stidxdata on final dealloc Workloads that repeatedly allocate and release mkeys carrying TPH steering-tag hints e.g. churning RDMA MRs leak one struct mlx5stidxdata per cycle; kmemleak flags it as unreferenced...

MINI-4QHX-3798-843W

Bulletin has no description...

MINI-5GH9-Q7PP-FQX7

Bulletin has no description...

PT-2026-72389

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NTFS driver where index entries were not validated immediately after being read from the disk. This lack of early validation required repeated checks during lookup...

CVE-2026-74439: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry devicepasidtableteardown zeroes the 128-bit scalable-mode context entry with contextclearentry while the Present bit is still set. This creates a windo...

PT-2026-72222

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the orangefs component. The fill from part function calculates the size of a directory entry using size t but stores the result in a u32 variable. If an...

PT-2026-72875

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iommu/vt-d component where the device pasid table teardown function zeroes a 128-bit scalable-mode context entry using context clear entry while the Present bit...

PT-2026-72368

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the change non present huge pmd function rewrites a writable device-private PMD swap entry into a readable one without preserving the pmd swp uffd wp state. This...

CVE-2026-72138: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: fix error handling in ioctl When gntdevioctlmapgrantref fails to copy the operation result back to userspace after successfully adding the mapping to the list, the error path returns -EFAULT without releasing the...

Linux Distros Unpatched Vulnerability : CVE-2026-74337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix NMI/tracepoint re-entry deadlock on lru locks NMI and tracepoint BPF programs can re-enter the per-CPU or global LRU lock that bpflrupopfree/pushfree...

PT-2026-72361

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pagemap pmd range thp function where the system triggers a warning if a non-present Page Middle Directory PMD is not a migration entry. This assertion became...

CGA-7Q54-8FV4-VR56

Bulletin has no description...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the addimpliedinclude function when processing a crafted files-from entry containing both an interior and trailing backslash. An attacker can cause a write of one attacker-controlled byte past the end of a heap...

CVE-2026-73532

creationtimestamp| type| source ---|---|--- 2026-08-13 17:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msy6aydsu62e 2026-08-14 18:00:21+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/080da246-3d59-4f1f-826f-e9a2d3b99076...

CVE-2026-66453

creationtimestamp| type| source ---|---|--- 2026-08-13 16:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxzryihv42e...

Malicious Package

Overview @easy-entry/routes is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @easy-entry/landing-routes is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

AZL-95765 CVE-2026-70461 affecting package rsync for versions less than 3.5.0-1

rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of a heap allocation by supplying a crafted files-from entry. Attackers can trigger the vulnerability against a read-only rsyn...