CVE-2026-93284

A vulnerability exists in the Linux kernel within the drm/pagemap component. The issue stems from drm_pagemap_migrate_unmap_pages() relying on a pages array to identify pages for DMA unmapping; however, drm_pagemap_migration_unlock_put_pages() clears this array during cleanup, potentially leaving...

CVE-2026-93284 drm/pagemap: dma-unmap pages before handling migration errors

In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: dma-unmap pages before handling migration errors drmpagemapmigrateunmappages relies on the pages array to determine which pages require DMA unmapping. However, drmpagemapmigrationunlockputpages clears the array as pa...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability that stems from the cancellation of suspended commits before GPU recovery is completed. This could lead to BO being released and causing GPU page errors...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions from 5.10.265 up to and including 5.11, from 5.15.216 up to and including 5.16, from 6.1.183 up to and including 6.2, from 6.6.148 up to and including 6.7, from 6.12.101 up to and including 6.13, from 6.18.42 up to and including 6.19, from...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.15 contains a security vulnerability. This vulnerability stems from the silent acceptance of truncated ACEs by parsedacl, which leads to failed assignments. As a result, setinfosec continues to process incomplete ACL transformations. This may allow format-errors in...

EUVD-2026-86160

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the POST /credentials/:id/deploy-to-host endpoint resolves credential and target-host records from attacker-controlled credentialId and targetHostId integer values...

CVE-2026-93223

In the Linux kernel, the following vulnerability has been resolved: staging: media: tegra-video: fix ofnodeput on VIP parse errors tegravipchannelofparse initializes np from dev-ofnode without taking a reference, but its error paths drop one through the errnodeput label. This underflows the...

Astra Linux – Vulnerability in Chromium

UI representation errors in passwords in Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to spoof UI elements through a crafted HTML page. Chromium security severity: Medium...

Malicious Package

Overview webp-https-errors is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

PT-2026-98116

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdkfd component where the allocate sdma queue function fails to perform bounds-checking on the restore sdma id variable. This variable, which allows the...

Linux Distros Unpatched Vulnerability : CVE-2026-93284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/pagemap: dma-unmap pages before handling migration errors drmpagemapmigrateunmappages...

PT-2026-98136

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nl80211 wireless configuration interface where the system fails to properly validate the size of the High Efficiency HE operation element in beacons. Specifically,...

ROS-20260924-73-0067

The vulnerability of the i40e component in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

MAL-2026-16459 Malicious code in webp-https-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 447aba02eddd7913b1520b8d21892e996cecbdf100ba2a772cbff3cb14fa74f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in webp-https-errors

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in webp-https-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 447aba02eddd7913b1520b8d21892e996cecbdf100ba2a772cbff3cb14fa74f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ROS-20260923-73-0090

The vulnerability of the Linux operating system’s kernel arises from synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Gamepad DoS

The vulnerability of the Gamepad components in Google Chrome and Microsoft Edge browsers is related to errors during initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Malicious Package

Overview webp-https-errors is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

jboss-remoting: jboss-remoting: integer overflow in MessageReader leads to pre-authentication denial of service

A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 or :9990, or :4447 and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service...