Red Hat: CVE-2026-93536: xorg-x11-server: xorg-x11-server: Denial of Service via use-after-free in gesture event handling

A use after free caused by missing lifecycle management of gesture sprites in GestureBuildSprite in X.Org X Server before 21.1.25 and XWayland before 24.1.14 could be used by authenticated X clients to crash the X server or potentially execute code...

JFrog Artifactory < 7.133.21 / 7.146.x < 7.146.8 Privilege Escalation

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is prior to 7.133.21, or 7.146.x prior to 7.146.8. It is, therefore, affected by a privilege escalation vulnerability in event-handling. An authenticated, remote attacker can exploit this ...

Astra Linux - vulnerability in linux

An issue was found in the Linux kernel up to version 5.9.1, which is used with Xen versions up to 4.14.x. In drivers/xen/events/eventsbase.c, it is possible to remove event channels during the event-handling loop a race condition. This can lead to use-after-free or NULL pointer dereferencing, as...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Fixed recursive pcilockrescanremove locking in EEH event handling. The recent commit 1010b4c012b0 “powerpc/eeh: Making the EEH driver’s device hotplug safe” restructured the EEH driver to improve synchronization with...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Tracing: A race condition has been fixed, where eprobes can be called before the event occurs. The flag that instructs the event to call its triggers after reading the event is set for eprobes after they are enabled. This leads t...

EUVD-2026-69087

Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

SUSE CVE-2026-72480

In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling amseventtochannel may return a pointer past the end of dev-channels when no matching scanindex is found. This can lead to invalid memory access in...

Linux kernel security vulnerabilities

Security vulnerabilities exist in Linux kernel versions prior to 6.6.145, from 6.12.96 up to 6.12.108, from 6.18.39 up to 6.18.46, and from 7.1.4 up to 7.1.10. These vulnerabilities stem from improper rejection of events with an EXIT state as group leaders in perf event handling, leading to...

PT-2026-76710

Name of the Vulnerable Software and Affected Versions WNC-M14A2A LTE-M modem driver affected versions not specified Description The driver mishandles unsolicited %NOTIFYEV: events within the on cmd socknotifyev function located in drivers/modem/vendor standalone/wncm14a2a.c. The issue occurs when...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099989)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099989 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid recursive nvmet-wq flush in nvmetctrlfree nvmettcpreleasequeuework runs on nvmet-wq...

CVE-2026-72480

In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling amseventtochannel may return a pointer past the end of dev-channels when no matching scanindex is found. This can lead to invalid memory access in...

CVE-2026-72480

In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling amseventtochannel may return a pointer past the end of dev-channels when no matching scanindex is found. This can lead to invalid memory access in...

UBUNTU-CVE-2026-72480

In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling amseventtochannel may return a pointer past the end of dev-channels when no matching scanindex is found. This can lead to invalid memory access in...

CVE-2026-72395

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus Fix passing events to regulator core Sashiko reports: Commit 754bd2b4a084 "hwmon: pmbus/core Protect regulator operations with mutex" introduced a worker to batch regulator events over time using atomicor. The delaye...

CVE-2026-72480 iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling

In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling amseventtochannel may return a pointer past the end of dev-channels when no matching scanindex is found. This can lead to invalid memory access in...

CVE-2026-72480 iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling

In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling amseventtochannel may return a pointer past the end of dev-channels when no matching scanindex is found. This can lead to invalid memory access in...

EUVD-2026-59379

In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling amseventtochannel may return a pointer past the end of dev-channels when no matching scanindex is found. This can lead to invalid memory access in...

CVE-2026-72480

CVE-2026-72480 : In the Linux kernel, the iio: adc: xilinx-ams component had an out-of-bounds channel lookup in event handling. The function ams_event_to_channel() could return a pointer past the end of dev-&gt;channels when no matching scan_index was found, risking invalid memory access in ams_h...

EUVD-2026-59294

In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus Fix passing events to regulator core Sashiko reports: Commit 754bd2b4a084 "hwmon: pmbus/core Protect regulator operations with mutex" introduced a worker to batch regulator events over time using atomicor. The delaye...

CVE-2026-68339

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: validate Realtek vendor event length btusbrecveventrealtek reads the event code at data0 and the Realtek subevent code at data2 before deciding whether to consume a vendor event as a coredump. For example, the...