The vulnerability of the Systemd service initialization and management subsystem, related to insecure privilege management, allows a attacker to trigger a service failure.

The vulnerability in the Systemd service initialization and management subsystem is related to insecure handling of privileges. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-70294

Name of the Vulnerable Software and Affected Versions LLM Scaler software affected versions not specified Description A protection mechanism failure within Ring 3 the least privileged level of the CPU architecture where user applications run may allow an escalation of privilege. A local,...

PT-2026-70284

Name of the Vulnerable Software and Affected Versions Intel Extension for TensorFlow versions prior to 2.15.0.3 Description A protection mechanism failure within Ring 3 User Applications may allow a local adversary with privileged user access to escalate privileges. This issue requires passive us...

PT-2026-70328

Protection mechanism failure for some IntelR oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. Th...

The vulnerability of the nspawn component of the initialization and service management subsystem of Systemd allows a hacker to trigger a service failure.

The vulnerability of the nspawn component in the Systemd service initialization and management subsystem is related to the use of an unreliable source. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `pam_passkey_child_read_data()` function in the `src/responder/pam/pamsrv_passkey.c` file of the access control service for remote directories and the SSSD authentication mechanism allows a hacker to cause a service failure.

The vulnerability of the pampasskeychildreaddata function in the src/responder/pam/pamsrvpasskey.c file of the access control service for remote directories and the SSSD authentication mechanism is related to a buffer overflow. Exploiting this vulnerability could allow an attacker to cause a...

Intel® Extension for TensorFlow Software Advisory

Summary: A potential security vulnerability in some Intel® Extension for TensorFlow software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20728 Description: Protection mechanism failure for...

Intel® AI Reference Models Software Advisory

Summary: A potential security vulnerability for some Intel® AI Reference Models software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-21400 Description: Protection mechanism failure for some...

CVE-2026-11811 Socket file-descriptor leak in UpdateHub OTA client start_coap_client() leading to resource-exhaustion DoS

The UpdateHub over-the-air update client's startcoapclient in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The shared error: cleanup gated socket closing on a ret 0 flag, but ret was set to -1 immediately after the socket was...

Exploit for Protection Mechanism Failure in Microsoft

cve-id Donate Support the maintenance of this project wit...

CVE-2026-68379

In the Linux kernel, the following vulnerability has been resolved: tcp: fix TIMEWAIT socket reference leak on PSP policy failure Release the TIMEWAIT socket reference and jump to discardit upon PSP policy failure in both IPv4 and IPv6 receive paths. This prevents a memory leak of tcptwbucket...

CVE-2026-68375

In the Linux kernel, the following vulnerability has been resolved: bnxten: Handle partially initialized auxiliary devices bnxtauxdevicesinit calls auxiliarydeviceinit before all fields used by bnxtauxdevrelease are initialized. After auxiliarydeviceinit succeeds, later errors must unwind with...

CVE-2026-68372

In the Linux kernel, the following vulnerability has been resolved: usb: core: port: Deattach Type-C connector on component unbind connectorunbind is the mirror of connectorbind, but it is missing the symmetric call to typecdeattach that connectorbind makes via: if portdev-child...

CVE-2026-68358

In the Linux kernel, the following vulnerability has been resolved: hwmon: nzxt-kraken3 Stop device IO before calling hidhwstop Calling hidhwstop does not stop the device IO. This results in a race condition between hidinputreport and the point immediately following the execution of...

CVE-2026-68362

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL pointer dereference in ath11khalsrngaccessbegin In ATH11KQMIEVENTFWREADY, ATH11KFLAGREGISTERED is set unconditionally even when ath11kcoreqmifirmwareready fails. This leaves the driver in an inconsistent...

CVE-2026-68328

In the Linux kernel, the following vulnerability has been resolved: nfp: Check resource mutex allocation nfpcppresourcefind allocates a CPP mutex handle for the matching resource-table entry and then reports success. nfpresourcetryacquire immediately passes that handle to nfpcppmutextrylock...

AZL-94953 CVE-2026-68312 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths In cifsclosedeferredfile, cifsclosealldeferredfiles, and cifsclosedeferredfileunderdentry, when a pending deferred close is cancelled via...

CVE-2026-68312

In the Linux kernel, the following vulnerability has been resolved: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths In cifsclosedeferredfile, cifsclosealldeferredfiles, and cifsclosedeferredfileunderdentry, when a pending deferred close is cancelled via...

CVE-2026-68291

In the Linux kernel, the following vulnerability has been resolved: idpf: fix maxvport related crash on allocation error during init Set adapter-maxvports only after successful allocation of vports, netdevs and vportconfig buffers. This fixes possible crashes on reset or rmmod, following failed...

AZL-95201 CVE-2026-68242 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix NULL deref on schedengine alloc failure Avoid using intelcontextput before intelcontextinit in execlistscreatevirtual as the krefput inside would lead to NULL deref on the IOCTL path when schedengine allocation...