PT-2026-90256

In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssp lock before publishing proc entry create use gss proxy proc entry publishes /proc/net/rpc/use-gss-proxy via proc create data before init gssp clnt runs mutex init on sn-gssp lock. Once the dentry is linked under...

PT-2026-90307

In the Linux kernel, the following vulnerability has been resolved: accel/rocket: initialize job domain before cleanup paths rocket ioctl submit job releases rjob through rocket job put on allocation error paths. rocket job cleanup unconditionally calls rocket iommu domain putjob-domain, but...

PT-2026-90312

In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix off-by-one when saving/restoring non-PCI config space nv suspend and nv resume walk the non-PCI configuration space with for i = 0; i register size/sizeofu32; i++ which runs one iteration too many. saved config spa...

The vulnerability of the gf_opus_parse_packet_header() function in the media_tools/av_parsers.c file of the multimedia platform GPAC allows a hacker to cause a service failure.

The vulnerability of the gfopusparsepacketheader function in the mediatools/avparsers.c file of the multimedia platform GPAC is related to incorrect numerical calculations when processing values with a comma-separated format. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the spell_soundfold_sal() function in the Vim text editor’s src/spell.c file allows a hacker to trigger a denial-of-service attack.

The vulnerability of the spellsoundfoldsal function in the src/spell.c file of the Vim text editor is related to the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability could allow a attacker to cause a system failure...

The vulnerability of the NetrwLocalRmFile() function in the runtime/pack/dist/opt/netrw/autoload/netrw.vim text editor allows a hacker to execute arbitrary commands.

The vulnerability of the NetrwLocalRmFile function in the runtime/pack/dist/opt/netrw/autoload/netrw.vim file of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the dump_prefixes() function in the src/spell.c file of the Vim text editor allows a hacker to trigger a denial-of-service attack.

The vulnerability of the dumpprefixes function in the src/spell.c file of the Vim text editor is related to the escape of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a system failure...

The vulnerability of the tree_count_words() function in the src/spellfile.c file of the Vim text editor allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the treecountwords function in the src/spellfile.c file of the Vim text editor is related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/bgp.go file of the AIGP Attribute Parser component of the GoBGP border gateway protocol allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/bgp.go file of the AIGP Attribute Parser component of the GoBGP border gateway protocol is related to the operation of pushing data out of the buffer into memory. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/bgp.go file of the BGP Header Handler component of the GoBGP border gateway protocol allows a attacker to increase their privileges.

The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/bgp.go file of the BGP Header Handler component of the GoBGP border gateway protocol is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the gf_isom_copy_sample_info() function in the isomedia/isom_write.c file of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfisomcopysampleinfo function in the isomedia/isomwrite.c file of the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gf_odf_vvc_cfg_write_bs() function in the odf/descriptors.c file of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfodfvvccfgwritebs function in the odf/descriptors.c file of the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the smooth_parse_stream_index() function in the src/media_tools/mpd.c file of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the smoothparsestreamindex function in the src/mediatools/mpd.c file of the GPAC multimedia platform is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the filein_process() function in the in_file.c file of the GPAC multimedia platform allows a attacker to cause a service failure.

The vulnerability of the fileinprocess function in the infile.c file of the GPAC multimedia platform is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerabilities of the functions um_goto_line() and get_text_props() in the src/textprop.c file of the Vim text editor allow a hacker to induce a service failure.

The vulnerability of the umgotoline and gettextprops functions in the src/textprop.c file of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the VimCrypt file decoding mechanism in Vim’s text editor, located in the src/crypt.c file, allows a hacker to cause a service failure.

The vulnerability of the VimCrypt file decoding mechanism in the src/crypt.c file of the Vim text editor lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Vulnerability of the vms_fixfilename() function in the Vim text editor’s vim/src/os_vms.c file, allowing an attacker to execute arbitrary code.

The vulnerability of the vmsfixfilename function in the Vim/src/osvms.c file of the Vim text editor is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the parseRibEntry() function in the pkg/packet/mrt/mrt.go file of the GoBGP edge router protocol allows a attacker to cause a service failure.

The vulnerability of the parseRibEntry function in the pkg/packet/mrt/mrt.go file of the GoBGP firewall protocol is related to the possibility of integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/prefix_sid.go file of the SRv6 L3 Service protocol for the border gateway GoBGP allows a attacker to cause a service failure.

The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/prefixsid.go file of the SRv6 L3 Service protocol for the GoBGP edge gateway is related to improper resource cleanup or release. Exploiting this vulnerability could allow a malicious actor to cause service failure...

The vulnerability of the UpdatePathAttrs4ByteAs() function in the GoBGP edge gateway protocol’s internal/pkg/table/message.go file allows a attacker to cause a service failure.

The vulnerability of the UpdatePathAttrs4ByteAs function in the GoBGP edge gateway protocol’s internal/pkg/table/message.go file is related to unvalidated array indexing. Exploiting this vulnerability could allow a malicious actor to cause service failures...