CVE-2026-43192

A flaw was found in the Linux kernel's device-mapper multipath dm mpath subsystem. A missing cleanup operation occurs when the system fails to retrieve a SCSI device handler name due to memory allocation issues. This oversight can lead to a resource leak, where references to path devices are not...

CVE-2026-43183

A flaw was found in the Linux kernel's cx25821 media driver. This vulnerability occurs when the ioremap function fails during device setup, and the allocated memory region is not properly released. A local attacker could exploit this resource leak to exhaust system memory, potentially leading to ...

Incorrect Authorization

Overview phpmyfaq/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Incorrect Authorization in the userHasPermission process. An attacker can gain unauthorized access to sensitive administrative data by sending requests ...

CVE-2026-7990

Insufficient validation of untrusted input in Updater in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: Medium...

CVE-2026-43148

A flaw was found in the Linux kernel. This vulnerability occurs in the powerpc/smp component due to a missing check for memory allocation failure. Specifically, if the kcalloc function fails to allocate memory within parsethreadgroups, a subsequent operation can attempt to use a NULL pointer. Thi...

CVE-2026-43146

A flaw was found in the Linux kernel's iris media driver. When creating internal buffers, a buffer was added to a list before its Direct Memory Access DMA allocation was successfully completed. If the DMA allocation failed, a partially initialized buffer remained in the list. This could lead to a...

CVE-2026-43144

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. When the probe of an SDIO Secure Digital Input/Output brcmfmac device fails, for example due to missing firmware, an invalid bus pointer can be set. This incorrect state can lead to a kernel oops, which is a type of system crash, when...

CVE-2026-43128

A flaw was found in the Linux kernel's RDMA/umem subsystem. A memory management error, specifically a double unpin of a dmabuf, can occur in a failure path during dmabuf pinning operations. This vulnerability could lead to system instability or a crash, resulting in a Denial of Service DoS...

CVE-2026-43124

A flaw was found in the Linux kernel's pstore ramcore component. A local attacker could exploit a vulnerability where the persistentrambuffermap function incorrectly returns success even when the underlying vmap memory mapping operation fails. This occurs if a non-zero offset is used, leading to...

CVE-2025-71287

A flaw was found in the Linux kernel's mtk-smi driver. This vulnerability occurs due to a failure to properly drop a reference to the SMI device during larb probe on late probe failure or driver unbind. An attacker could potentially exploit this memory leak to cause resource exhaustion, leading t...

CVE-2025-71288

A flaw was found in the Linux kernel's mtk-smi memory driver. This vulnerability arises from the driver's failure to release device references during certain probe failures or when the driver unbinds. This oversight can lead to resource exhaustion, potentially resulting in a Denial of Service DoS...

sudo: Sudo: Privilege escalation due to failure in privilege drop calls

A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system...

CVE-2025-71272

A flaw was found in the Linux kernel, specifically within the 'most: core' module. The mostregisterinterface function does not correctly release allocated resources when it encounters an early failure. This resource leak can be triggered by a local attacker, potentially leading to memory exhausti...

CVE-2026-43118

A flaw was found in the Linux kernel's Btrfs filesystem. When a file is truncated to zero size and then a hardlink is created, a power failure followed by log replay can cause the file to incorrectly retain its original size instead of being zero. This data integrity issue may lead to unexpected...

EUVD-2026-27803

In the Linux kernel, the following vulnerability has been resolved: soc: ti: k3-socinfo: Fix regmap leak on probe failure The mmio regmap allocated during probe is never freed. Switch to using the device managed allocator so that the regmap is released on probe failures e.g. probe deferral and on...

EUVD-2026-27786

In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix URB leak in pvr2sendrequestex When pvr2sendrequestex submits a write URB successfully but fails to submit the read URB e.g. returns -ENOMEM, it returns immediately without waiting for the write URB to complete...

EUVD-2026-27784

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix memory leak on failure path cfg80211informbssframe may return NULL on failure. In that case, the allocated buffer 'buf' is not freed and the function returns early, leading to potential memory leak. Fix th...

EUVD-2026-27785

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix sgtable leak on mapping failures In an unlikely case when iopopulateareadma fails, which could only happen on a PAGEPOOL32BITARCHWITH64BITDMA machine, iozcrxmaparea will have an initialised and not freed table. ...

EUVD-2026-27773

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pcislottrylock error handling Commit a4e772898f8b "PCI: Add missing bridge lock to pcibuslock" delegates the bridge device's pcidevtrylock to pcibustrylock in pcislottrylock, but it forgets to remove the corresponding...

EUVD-2026-27745

In the Linux kernel, the following vulnerability has been resolved: media: cx25821: Fix a resource leak in cx25821devsetup Add releasememregion if ioremap fails to release the memory region obtained by cx25821getresources...