The vulnerability of the sk_stream_kill_queues() function in the net/core/stream.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the skstreamkillqueues function in the net/core/stream.c module of the Linux kernel’s networking functions is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

PUB-A-438245439

In dhdtcpdatainfoget of dhdip.c, there is a possible Denial of Service due to a precondition check failure. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

GHSA-945P-3JHM-6RCP malcontent: Nested archive extraction failure can drop content from scan inputs

Previously, malcontent would remove nested archives which failed to extract which could potentially leave malicious content. A better approach is to preserve these archives so that malcontent can attempt a best-effort scan of the archive bytes. Fix:...

malcontent: Nested archive extraction failure can drop content from scan inputs

Previously, malcontent would remove nested archives which failed to extract which could potentially leave malicious content. A better approach is to preserve these archives so that malcontent can attempt a best-effort scan of the archive bytes. Fix:...

CVE-2026-27767

WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...

CVE-2026-28407 malcontent's nested archive extraction failure can drop content from scan inputs

malcontent is software for discovering supply-chain compromises through context, differential analysis, and YARA. Prior to version 1.21.0, malcontent would remove nested archives which failed to extract which could potentially leave malicious content. A better approach is to preserve these archiv...

CVE-2026-28270

Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks configuration allows uploading of arbitrary files without proper validation. Malicious administrators could exploit this to upload unauthorized file types to the system. Version 9.2.0 contains a patch fo...

Security update for glibc

This update for glibc fixes the following issues: CVE-2026-0915: resolv: Fix NSS DNS backend for getnetbyaddr bsc1256822, BZ 33802 CVE-2025-15281: posix: Reset wordexpt fields with WRDEREUSE bsc1257005, BZ 33814 CVE-2025-8058: posix: Fix double-free after allocation failure in regcomp bsc1246965,...

PT-2026-36466

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the logitech-hidpp module during the probing of the Logitech G920 Driving Force Racing Wheel for Xbox One. If force feedback initialisation fails, an...

The vulnerability of the sk_stream_wait_memory() function in the net/core/stream.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the skstreamwaitmemory function in the net/core/stream.c module, which is part of the Linux kernel’s networking functions, relates to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the amdgpu_bo_validate_size() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_object.c source file of the AMD GPU kernel for Linux’ Direct Rendering Infrastructure (DRI) driver architecture allows a attacker to cause a system failure.

The vulnerability of the amdgpubovalidatesize function in the drivers/gpu/drm/amd/amdgpu/amdgpuobject.c source file of the AMD GPU kernel for Linux Direct Rendering Infrastructure DRI driver architecture is related to the access to an uninitialized pointer. Exploiting this vulnerability could all...

The vulnerabilities of the functions cnl_ipc4_irq_thread() and cnl_ipc_irq_thread() in the sound/soc/sof/intel/cnl.c module, which are part of the Linux SoC audio support, allow a malicious actor to cause system failures.

The vulnerability of the functions cnlipc4irqthread and cnlipcirqthread in the sound/soc/sof/intel/cnl.c module, which is part of the Linux SoC audio support, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the rtas_os_term() function in the arch/powerpc/kernel/rtas.c module of the PowerPC platform’s Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtasosterm function in the arch/powerpc/kernel/rtas.c module of the PowerPC platform support for the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the nbd_start_device_ioctl() function in the drivers/block/nbd.c module of the Linux kernel’s block devices driver allows a attacker to cause a service failure.

The vulnerability of the nbdstartdeviceioctl function in the drivers/block/nbd.c module of the Linux kernel’s block devices driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the vmx_init() function in the arch/x86/kvm/vmx/vmx.c file of the virtualization subsystem on the x86 kernel-based Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vmxinit function in the arch/x86/kvm/vmx/vmx.c file of the virtualization subsystem on the x86 kernel of the Linux operating system is related to the pointer swapping mechanism. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ext4_resize_fs() function in the fs/ext4/resize.c file of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ext4resizefs function in the fs/ext4/resize.c file of the Ext4 file system in the Linux operating system is related to the execution of a loop without sufficient limitation on its execution count. Exploiting this vulnerability could allow an attacker to cause a service...

PT-2026-22425

Name of the Vulnerable Software and Affected Versions openDCIM version 23.04 through commit 4467e9c4 Description The installer and upgrade handler expose LDAP configuration functionality without enforcing application role checks. This allows any authenticated user to access the functionality...

The vulnerability of the mlx5e_priv module’s structure in the drivers/net/ethernet/mellanox/mlx5/core/en.h file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mlx5epriv module’s drivers/net/ethernet/mellanox/mlx5/core/en.h file in the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerabilities of the functions sg_read() and sg_get_rq_mark() in the drivers/scsi/sg.c module of the Linux operating system’s SCSI device driver, which allow a hacker to cause a service failure.

The vulnerabilities of the functions sgread and sggetrqmark in the drivers/scsi/sg.c module of the Linux SCSI device driver are related to premature release of resources during their operation. Exploiting these vulnerabilities could allow an attacker to cause service failures...

The vulnerability of the hidraw_release() function in the drivers/hid/hidraw.c module of the Linux kernel’s device subsystem allows a hacker to trigger a service failure.

The vulnerability of the hidrawrelease function in the drivers/hid/hidraw.c module of the Linux kernel’s device subsystem driver involves improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...