UBUNTU-CVE-2026-23555

Any guest issuing a Xenstore command accessing a node using the illegal node path "/local/domain/", will crash xenstored due to a clobbered error indicator in xenstored when verifying the node path. Note that the crash is forced via a failing assert statement in xenstored. In case xenstored is...

CVE-2026-23555

Any guest issuing a Xenstore command accessing a node using the illegal node path "/local/domain/", will crash xenstored due to a clobbered error indicator in xenstored when verifying the node path. Note that the crash is forced via a failing assert statement in xenstored. In case xenstored is...

CVE-2026-23555 Xenstored DoS by unprivileged domain

Any guest issuing a Xenstore command accessing a node using the illegal node path "/local/domain/", will crash xenstored due to a clobbered error indicator in xenstored when verifying the node path. Note that the crash is forced via a failing assert statement in xenstored. In case xenstored is...

CVE-2025-10679

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More WordPress plugin (up to v2.2.12) is vulnerable due to insufficient input validation in the bulkTenReviews function, allowing user-controlled data to be passed to a variable function call ...

golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS

A flaw in golang.org/x/crypto/ssh/agent causes the SSH agent client to panic when a peer responds with the generic SSHAGENTSUCCESS 0x06 message to requests expecting typed replies e.g., List, Sign. The unmarshal layer produces an unexpected message type, which the client code does not handle,...

The vulnerability of the ReadTIMImage function in the TIM image analyzer software (PSX TIM), a console-based image editing tool from ImageMagick, allows a hacker to cause a service failure.

The vulnerability of the ReadTIMImage function in the TIM image analyzer and the ImageMagick console-based graphics editor involves the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the ndisc_router_discovery() function in the net/ipv6/ndisc.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ndiscrouterdiscovery function in the net/ipv6/ndisc.c module of the IPv6 protocol implementation in the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cifs_readahead() function in the fs/cifs/file.c module of the Linux kernel file system allows a hacker to cause a service failure.

The vulnerability of the cifsreadahead function in the fs/cifs/file.c module of the Linux kernel file system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the max77620_initialise_fps() function in the drivers/mfd/max77620.c module of the controller multifunctional devices (MFD) driver for the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the max77620initialisefps function in the drivers/mfd/max77620.c file of the MFD controller driver for the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nft_set_elem_expr_clone() function in the net/netfilter/nf_tables_api.c module of the netfilter kernel of the Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the nftsetelemexprclone function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the handle_cap_grant() function in the fs/ceph/caps.c module of the Ceph distributed file system support module for Linux operating systems allows a attacker to cause a service failure.

The vulnerability of the handlecapgrant function in the fs/ceph/caps.c module of the Ceph distributed file system support module for Linux operating systems is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to trigger a service failure...

Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2025-38400)

In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfsfsprocnetinit fails. syzbot reported a warning below 1 following a fault injection in nfsfsprocnetinit. 0 When nfsfsprocnetinit fails, /proc/net/rpc/nfs is not removed. Later, rpcprocexit...

Siemens SIMATIC S7-1500 NULL Pointer Dereference(CVE-2025-38214)

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbsetvar to prevent null-ptr-deref in fbvideomodetovar If fbaddvideomode in fbsetvar fails to allocate memory for fbvideomode, later it may lead to a null-ptr dereference in fbvideomodetovar, as the fbinfo is registere...

(Pwn2Own) Samsung Galaxy S25 Smart Touch Call Application Protection Mechanism Failure Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Samsung Galaxy S25. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

The vulnerability of the setup_nic_devices() function in the drivers/net/ethernet/cavium/liquidio/lio_main.c file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the setupnicdevices function in the drivers/net/ethernet/cavium/liquidio/liomain.c file of the Linux kernel is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the functions mt6359_accdet_parse_dt() and mt6359_parse_dt() in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mt6359accdetparsedt and mt6359parsedt functions in the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/nvme/host/fc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/nvme/host/fc.c module of the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the clcdfb_of_init_display() function in the drivers/video/fbdev/amba-clcd.c driver for kernel-based graphics devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the clcdfbofinitdisplay function in the drivers/video/fbdev/amba-clcd.c driver for kernel-based graphics devices in the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2025-38280)

In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid bpfprogret0warn when jit fails syzkaller reported an issue: WARNING: CPU: 3 PID: 217 at kernel/bpf/core.c:2357 bpfprogret0warn+0xa/0x20 kernel/bpf/core.c:2357 Modules linked in: CPU: 3 UID: 0 PID: 217 Comm: kworker/u32...

PT-2026-31699

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 9.0.83 through 9.0.115 Apache Tomcat versions 10.1.0-M7 through 10.1.52 Apache Tomcat versions 11.0.0-M1 through 11.0.18 Apache Tomcat Native versions 1.1.23 through 1.1.34 Apache Tomcat Native versions 1.2.0 through...