The vulnerability of the xdma_probe() function in the drivers/dma/xilinx/xdma.c driver module of the Linux operating system’s DMA engine allows a hacker to cause a service failure.

The vulnerability of the xdmaprobe function in the drivers/dma/xilinx/xdma.c file of the Linux kernel’s DMA driver module is related to errors in error handling. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the btintelHW_error() function in the drivers/bluetooth/btintel.c module of the Linux Bluetooth device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the btintelHWerror function in the drivers/bluetooth/btintel.c module of the Linux Bluetooth device driver is related to synchronization errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the lbs_free_adapter() function in the drivers/net/wireless/marvell/libertas/main.c module of the Marvell Linux kernel, which allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the lbsfreeadapter function in the drivers/net/wireless/marvell/libertas/main.c module of the Marvell Linux kernel operating system is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, an...

The vulnerability of the cdc_ncm_rx_verify_ndp32() function in the drivers/net/usb/cdc_ncm.c module of the Linux kernel’s network adapter driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cdcncmrxverifyndp32 function in the drivers/net/usb/cdcncm.c module of the Linux kernel’s network adapter driver is related to errors in calculating the data buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the setup_lass() function in the arch/x86/kernel/cpu/common.c module, which is part of the Linux operating system’s x86 kernel support, allows a hacker to trigger a service failure.

The vulnerability of the setuplass function in the arch/x86/kernel/cpu/common.c module, which is part of the Linux operating system’s x86 kernel support, is related to errors in system configuration or settings. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of the functions remove_unready_flow() and mlx5e_tc_del_fdb_flow() in the driver/net/ethernet/mellanox/mlx5/core/en_tc.c file of the Mellanox Ethernet network adapter driver for the Linux operating system, which allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions removeunreadyflow and mlx5etcdelfdbflow in the driver/net/ethernet/mellanox/mlx5/core/entc.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this...

The vulnerability of the function ieee80211_parse_adv_t2l() in the module net/mac80211/mlme.c of the mac80211 stack in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function ieee80211parseadvt2l in the net/mac80211/mlme.c module of the mac80211 stack in the Linux operating system is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability could allow a remote attacker to compromise...

CVE-2026-55532: Origin Validation Error

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.58, MCP HTTP Stream validateorigin uses requestorigin.startswithallowed, allowing the attacker-controlled localhost.attacker.com HTTP origin to satisfy the localhost allowlist. A webpage can send Content-Type: text/plain requests...

CVE-2026-79406: Undefined Security Weakness

A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors. The attack may be initiated remotely. The vendor...

The vulnerability of the ESS protocol analyzer in Wireshark allows a hacker to cause a service failure.

The vulnerability of the ESS protocol analyzer used by Wireshark for analyzing computer network traffic is related to errors during initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the nci_close_device() function in the net/nfc/nci/core.c module, which is part of the NFC NCI support for Linux operating systems, allows a hacker to cause a service failure.

The vulnerability of the nciclosedevice function in the net/nfc/nci/core.c module, which is part of the NFC NCI support in Linux operating systems, is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the blk_alloc_ext_minor() function in the block/genhd.c module, which supports the block-level kernel in the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the blkallocextminor function in the block/genhd.c module, which supports the block-level kernel in the Linux operating system, is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sev_es_sync_vmsa() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to cause a service failure.

The vulnerability of the sevessyncvmsa function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the bcm2835_asb_control() function in the drivers/pmdomain/bcm/bcm2835-power.c kernel module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bcm2835asbcontrol function in the drivers/pmdomain/bcm/bcm2835-power.c file of the Linux kernel is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the smbdirect_socket_init() function in the fs/smb/common/smbdirect/smbdirect_socket.h module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the smbdirectsocketinit function in the fs/smb/common/smbdirect/smbdirectsocket.h module of the Linux kernel is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

UBUNTU-CVE-2026-76098

Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering creates deeply nested emphasis tokens from consecutive asterisk characters, and recursive rendering in HTMLRenderer.rendertoken can excee...

CVE-2026-72703

CVE-2026-72703 is a soundness flaw in the guard checker of Rocq Prover (introduced in Coq 8.20). The function find_uniform_parameters in kernel/inductive.ml inspects only self-recursive calls when determining parameter uniformity for nested mutual fixpoints. When no body calls itself, it incorrec...

SUSE-SU-2026:23311-1 Security update for xmlrpc-c

This update for xmlrpc-c fixes the following issue - CVE-2026-15928: Xreflected cross-site scripting XSS vulnerability in the error page component bsc1272769...

OPENSUSE-SU-2026:21633-1 Security update for xmlrpc-c

This update for xmlrpc-c fixes the following issue - CVE-2026-15928: Xreflected cross-site scripting XSS vulnerability in the error page component bsc1272769...

SUSE-SU-2026:23308-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issue: - CVE-2026-52718: byte count instead of a bit count in gstav1parserparsetilelistobu can cause parser desynchronization and an application crash bsc1268394...