Use-after-free in interned values and cached function results

When an application reads an interned value's fields or uses that value as an input to a tracked function, Salsa must ensure that reusable storage has been validated for the current database revision. This prevents the value's fields and associated cached function results from being freed while i...

EUVD-2026-85790

Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...

CVE-2026-97155

Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...

CVE-2026-93815: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: au1000: move freeirq out of the close-time spinlocked section au1000close calls freeirq while aup-lock is still held with spinlockirqsave. freeirq can sleep because it takes the IRQ descriptor request mutex, so it does not...

PT-2026-98140

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the gfs2 module where the gfs2 quota init function checks for duplicate quota change IDs while holding the qd lock and the quota hash bucket bitlock. This process...

CVE-2026-93815

In the Linux kernel, the following vulnerability has been resolved: net: au1000: move freeirq out of the close-time spinlocked section au1000close calls freeirq while aup-lock is still held with spinlockirqsave. freeirq can sleep because it takes the IRQ descriptor request mutex, so it does not...

RockyLinux 9 : rsyslog (RLSA-2026:69540)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:69540 advisory. rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace function CVE-2026-78002 Tenable has extracted the preceding description bloc...

CVE-2026-97521

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix quota init duplicate scan gfs2quotainit checks for duplicate quotachange IDs while holding qdlock and the quota hash bucket bitlock. That path used gfs2qdsearchbucket, which takes a lockref reference via...

PT-2026-104984

In the Linux kernel, the following vulnerability has been resolved: perf/ftrace: Fix WARNING in unregister ftrace function perf ftrace function unregister unconditionally calls unregister ftrace function without checking whether the ftrace ops was ever successfully registered. This triggers a WAR...

PT-2026-104862

In the Linux kernel, the following vulnerability has been resolved: net: au1000: move free irq out of the close-time spinlocked section au1000 close calls free irq while aup-lock is still held with spin lock irqsave. free irq can sleep because it takes the IRQ descriptor request mutex, so it does...

CVE-2026-88383

libical 4.0.6 contains an incompatible function pointer in icalparameterstringtokind. When parsing iCalendar data containing a parameterized property, the function passes icalparametercomparekindmap to bsearch through an incompatible comparator function pointer type. bsearch invokes the callback...

Linux Distros Unpatched Vulnerability : CVE-2026-97521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gfs2: fix quota init duplicate scan gfs2quotainit checks for duplicate quotachange IDs while holding qdlock and the quota hash bucket bitlock. That path used...

PT-2026-97825

Name of the Vulnerable Software and Affected Versions geelen mcp-remote versions 0.1.16 through 0.1.38 Description A remote attacker can execute arbitrary code through the open function. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2026-51997

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open functions...

PT-2026-104916

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix quota init duplicate scan gfs2 quota init checks for duplicate quota change IDs while holding qd lock and the quota hash bucket bitlock. That path used gfs2 qd search bucket, which takes a lockref reference via lockref...

PT-2026-98077

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where perf ftrace function unregister calls unregister ftrace function without verifying if the ftrace ops was successfully registered. This leads to a warning in...

EUVD-2026-86316

libical 4.0.6 contains an incompatible function pointer in icalparameterstringtokind. When parsing iCalendar data containing a parameterized property, the function passes icalparametercomparekindmap to bsearch through an incompatible comparator function pointer type. bsearch invokes the callback...

CVE-2026-97521: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix quota init duplicate scan gfs2quotainit checks for duplicate quotachange IDs while holding qdlock and the quota hash bucket bitlock. That path used gfs2qdsearchbucket, which takes a lockref reference via...

Linux Distros Unpatched Vulnerability : CVE-2026-93815

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: au1000: move freeirq out of the close-time spinlocked section au1000close calls freeirq while aup-lock is still held with spinlockirqsave. freeirq can slee...

CVE-2026-88383

The libical 4.0.6 library is vulnerable to a denial of service due to an incompatible function pointer in icalparameter_string_to_kind() . When parsing iCalendar data with a parameterized property, the function incorrectly passes icalparameter_compare_kind_map() to bsearch() through a mismatched ...