PT-2026-90136

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ipmi add smi function where sysfs files are not fully removed upon registration failure. Specifically, the function creates nr users and nr msgs files before...

PT-2026-96367

In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes ata scsi write same xlat translates a SCSI WRITE SAME command with the UNMAP bit set into an ATA DATA SET MANAGEMENT TRIM command. The TRIM descriptor is buil...

CVE-2026-89586: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes atascsiwritesamexlat translates a SCSI WRITE SAME command with the UNMAP bit set into an ATA DATA SET MANAGEMENT TRIM command. The TRIM descriptor is built by...

PT-2026-96399

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared zerocopy state in skb tx error skb tx error completes the zerocopy uarg and clears SKBFL ALL ZEROCOPY, and skb zcopy downgrade managed clears SKBFL MANAGED FRAG REFS. Both live in skb shinfo, which...

PT-2026-90215

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ring-buffer page swap mechanism where the swap reader page callback may return -EBUSY if the writer moves the head before the remote reader catches it, which is...

CVE-2026-89502: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Free cpubuffer::freepage with subbuforder When sub-buffers use an order greater than 0, cpubuffer-freepage is allocated with subbuforder. Use the correct order for cpubuffer-freepage...

ROS-20260911-73-0221

The vulnerability of Google Chrome and Microsoft Edge is related to a data source confirmation error during the processing of DOM objects. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...

ROS-20260911-73-0194

The vulnerability in Chromium is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2026-89801

WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attackers on the same network can spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection with the...

PT-2026-90293

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dm-io interface where non-retryable error codes BLK STS NOTSUPP and BLK STS INVAL could incorrectly cause leg failure on dm-raid1. This leads to misbehavior when...

PT-2026-96509

In the Linux kernel, the following vulnerability has been resolved: mm/mglru: fix and remove redundant unevictable folio handling sort folio has a shortcut for moving folios that are no longer evictable but are still sitting on a generation list. However, this shortcut is buggy. It does not follo...

PT-2026-90170

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the PCI plda component where the plda init interrupts function fails to unwind IRQ domains and IRQ mappings when a subsequent step in the initialization process fails...

CVE-2026-89145: Improper Neutralization of Input During Web Page Generation

Flextype CMS versions 0.9.9 through 1.0.0-alpha.3 fail to HTML-escape plugin directory names in the dependency error page rendered by getValidPluginsDependencies. Attackers with write access to the plugins directory can create a plugin with HTML characters in its name to execute arbitrary scripts...

PT-2026-90306

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rocket job run function where error path handling is incorrect after a fence reference is taken for job-done fence via dma fence get. This leads to three specific...

PT-2026-90238

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the staging/ipu7 media component. The isys register devices function registers the V4L2 async notifier using isys notifier init. If a subsequent probe...

PT-2026-90274

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the md/raid10 component where the still degraded variable is incorrectly inverted within the raid10 sync request function. This occurred after a conversion from an...

PT-2026-90122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ravb network component where the system may dereference a NULL pointer when querying the index of a PTP Precision Time Protocol clock before the first open...

PT-2026-90123

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the phylink inband caps function where the PCS returned by mac select pcs is only checked for NULL values. Because mac select pcs can also return an error pointer, the...

PT-2026-90409

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the nfsd component, the nfsd4 create function fails to properly handle the return value of the nfsd4 acl to attr function. The return value is stored in the status variable, but a...

PT-2026-90071

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the rtw88 wifi driver. The issue occurs within the rtw txq push skb function, where the error path fails to free the socket buffer skb before returning. This lead...