CVE-2026-80996

A flaw was found in the Linux kernel's L2TP Layer 2 Tunneling Protocol networking component. Specifically, the netlink handlers responsible for creating and modifying L2TP tunnels and sessions may fail to propagate multicast notification errors. This can lead to calling applications retrying...

CVE-2026-89577

In the Linux kernel, the following vulnerability has been resolved: dm-io: report non-retryable errors separatedly The error codes BLKSTSNOTSUPP and BLKSTSINVAL should not cause leg failure on dm-raid1. This patch changes the interface to dm-io, so that it reports two error bitmaps - errorbits an...

CVE-2026-89577

CVE-2026-89577 affects the Linux kernel device-mapper subsystem, specifically dm-io and dm-raid1 . The root cause is that the error codes BLK_STS_NOTSUPP and BLK_STS_INVAL were incorrectly treated as retryable errors, causing a leg failure on dm-raid1 when they should not. The fix introduces two ...

PT-2026-90178

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Functions max17040 get vcell and max17040 get soc fail to handle errors returned by regmap read. If an I2C transfer fails, an uninitialized register value is processed and reported to...

CVE-2026-89462: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: propagate register read errors max17040getvcell and max17040getsoc ignore errors returned by regmapread. When an I2C transfer fails, the uninitialized register value is converted and reported to userspace...

PT-2026-90126

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Netlink handlers for tunnel create, tunnel modify, session create, and session modify send multicast notifications via helpers. These helpers may fail during message allocation, encoding...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that in NFSv3, the SETATTR and creation operations do not validate the nseconds field provided by the client for atime/mtime. As a result, unnormalized time values can corrupt disk metadata, potentially causing...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the improper handling of non-evacuable folios in the sortfolio function of mm/mglru. The mlockcount was not set correctly, and the order of operations for the LRU flag was incorrect, which may lead to counting errors and...

PT-2026-89718

Several functions in cstruct may use wrong data, leading to unexpected exceptions and return corrupted data. Impact - Cstruct.filter map writes retained bytes at their original input positions, producing corrupted output when earlier bytes are dropped. - Cstruct.tail rev:true removes two bytes...

ROS-20260910-73-0079

The vulnerability of the GamepadAPI component in Google Chrome and Microsoft Edge browsers is related to errors during initialization. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Linux kernel Network Buffer Overflow DoS

The vulnerability in the batadvttpreparetvlvlocaldata function within the net/batman-adv/translation-table.c module of the Linux kernel’s network functions is related to synchronization errors when using a shared resource “race condition”. Exploitation of this vulnerability enables a remote...

PT-2026-109392

Уязвимость службы MIDI Service операционных систем Windows связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

CVE-2026-82060: Improper Neutralization of Special Elements in Data Query Logic

In MongoDB, insufficient validation of shard key values during document insertion allowed authenticated users to store documents with specially crafted, operator-shaped objects as shard key values in sharded collections. When change stream events for such documents were processed with the...

Towards Standardized Evaluation of GPU Memory Safety with GMSBench

As GPUs become increasingly integral to high-performance computing and machine learning, ensuring memory safety in GPU programs has become crucial for reliable and secure execution. However, evaluating GPU memory safety techniques remains challenging due to the lack of comprehensive and...

phpstan v2.2.13

PHPStan - PHP Static Analysis Tool PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves PHP closer to compiled languages in the sense that the correctness of each line of the code can be...

Exim Unauthenticated Access Disclosure

The vulnerability of the Exim mail server is related to errors in representing certain functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260904-73-0008

The vulnerability in Kubernetes is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

EUVD-2026-54577

Kirby: System path exposure from error messages in the REST API...

GHSA-RF2P-VH74-7VVH Kirby: System path exposure from error messages in the REST API

TL;DR This vulnerability affects all Kirby sites that have not disabled the REST API with the 'api' = false option. It was possible to trigger a PHP error in the API backend that would expose the full filesystem path of the Kirby installation on the server. This could be used to guess the default...

Linux Distros Unpatched Vulnerability : CVE-2026-59281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument...