PT-2026-38996

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net: ipa component where the event ring index was not correctly programmed for IPA v5.0+. The event ring index field moved from 'CH C CNTXT 0' to 'CH C CNTXT 1', b...

PT-2026-39129

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs between the devlink lock and esw-work queue. The esw-work queue executes esw functions changed event handler which calls esw vfs changed event handler and acquires the...

PT-2026-39241

Name of the Vulnerable Software and Affected Versions eventsource-encoder versions prior to 1.0.2 Description The software fails to sanitize the event and id fields of an EventSourceMessage before serialization in the encodeMessage function. An attacker who controls these fields can inject...

PT-2026-39034

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel within the NCSI RX and AEN handlers. Specifically, the ncsi aen handler function returns on invalid AEN packets without consuming the socket buff...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the usb gadget fncm driver. When the connection is disconnected, the network device’s lifecycle...

CVE-2026-42321

creationtimestamp| type| source ---|---|--- 2026-05-07 16:00:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlblk4t3e52k 2026-06-02 13:45:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mncq4nolce2y...

CVE-2026-5791

creationtimestamp| type| source ---|---|--- 2026-05-07 15:21:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbjeviuvr2o 2026-05-07 19:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbvlxsvwh2q 2026-05-07 19:22:38+00:00| seen|...

CVE-2026-41142

creationtimestamp| type| source ---|---|--- 2026-05-07 05:56:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlajs6pnt62k 2026-05-11 00:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mljy5j5qef2p...

CVE-2026-41672

creationtimestamp| type| source ---|---|--- 2026-05-07 05:30:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlaidg35ij2i...

CVE-2026-39807

creationtimestamp| type| source ---|---|--- 2026-05-07 04:40:29+00:00| seen| https://gist.github.com/alon710/4ff6ed1a1dcb2ad425666d3faacd2bcb...

SUSE CVE-2026-43116

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ensure safe access to master conntrack Holding reference on the expectation is not sufficient, the master conntrack object can just go away, making exp-master invalid. To access exp-master safely: - Grab the...

SUSE CVE-2026-43206

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset The kfdeventpageset function writes KFDSIGNALEVENTLIMIT 8 bytes via memset without checking the buffer size parameter. This allows unprivileged userspace to trigger an out-of...

SUSE CVE-2026-43210

In the Linux kernel, the following vulnerability has been resolved: tracing: ring-buffer: Fix to check event length before using Check the event length before adding it for accessing next index in rbreaddatabuffer. Since this function is used for validating possibly broken ring buffers, the lengt...

Linux Distros Unpatched Vulnerability : CVE-2026-43265

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86: Ignore -EBUSY when checking nested events from vcpublock Ignore -EBUSY when checking nested events after exiting a blocking state while L2 is active, ...

MetInfo weixinreply command injection

Added: 05/07/2026 Background MetInfo is an open-source content management system CMS written in PHP and MySQL developed in China. Problem A vulnerability in the weixinreply class allows remote attackers to execute arbitrary commands by sending an API request with specially crafted EventKey and...

CVE-2026-41900

creationtimestamp| type| source ---|---|--- 2026-05-06 23:00:13+00:00| seen| Telegram/msQTanSLkX-OxkjOrr400lcWfFt4y0eZWCcTmXgDmxd3Ek4 2026-05-07 03:00:06+00:00| seen| Telegram/N1Jo8qZWaWReiLt-N5l6uzcgIVKcO6O8PdoiYgN9aP0HPY 2026-05-08 04:36:45+00:00| seen|...

CVE-2026-44111

creationtimestamp| type| source ---|---|--- 2026-05-06 21:56:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7oxqlthw2p...

CVE-2026-43206

A flaw was found in the Linux kernel's drm/amdkfd component. An unprivileged local user can exploit an out-of-bounds write vulnerability in the kfdeventpageset function. This occurs because the function writes data without properly validating the buffer size, allowing a small buffer to trigger a...

CVE-2026-44109

creationtimestamp| type| source ---|---|--- 2026-05-06 20:42:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml7kuqcrbd2r 2026-05-06 22:19:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7qbd6xes2c 2026-05-07 03:00:12+00:00| seen|...

CVE-2026-3298

The method "sockrecvfrominto" of "asyncio.ProacterEventLoop" Windows only was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected...