CVE-2026-64270 Input: mms114 - reject an oversized device packet size

In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packet size mms114interrupt reads a packet of touch data from the device into a fixed-size on-stack buffer struct mms114touch touchMMS114MAXTOUCH; which holds MMS114MAXTOUCH 10 events of...

php:php-fuzz-tracing-jit: Heap-use-after-free in zend_std_read_property

Detailed Report: https://oss-fuzz.com/testcase?key=6753130298277888 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-tracing-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x78061c2f56ec Crash State: zendstdreadproperty...

SUSE CVE-2026-64230

In the Linux kernel, the following vulnerability has been resolved: regulator: tps65219: fix irqdata.rdev not being assigned Commit 64a6b577490c "regulator: tps65219: Remove debugging helper function" removed the tps65219getrdevbyname helper along with the irqdata.rdev assignment that depended on...

SUSE CVE-2026-64241

In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: teardown bugs and resource leaks Address several teardown issues and resource leaks in the driver's remove path and error handling: 1. Debounce clock reference leak: The debounce clock bank-dbclk is obtained using...

Linux Distros Unpatched Vulnerability : CVE-2026-64289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommufd: Set upper bounds on cache invalidation entrynum and entrylen iommufdhwptinvalidate takes a user-controlled entrynum and entrylen, each bounded only by...

Linux Distros Unpatched Vulnerability : CVE-2026-64241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: rockchip: teardown bugs and resource leaks Address several teardown issues and resource leaks in the driver's remove path and error handling: 1. Debounce...

PT-2026-64698

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access occurs in the x86 architecture when offlining a CPU on systems with Sub-NUMA Clustering SNC enabled. The issue arises when a monitoring domain is being taken...

PT-2026-64683

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Resource leaks occur in the PCI altera driver during probe failure. The chained IRQ handler is established during the probe process but is typically only removed during driver removal. I...

Linux Distros Unpatched Vulnerability : CVE-2026-64462

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: altera: Fix resource leaks on probe failure The chained IRQ handler is set during probe, but is only removed during the driver remove. If pcihostprobe fail...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.5.3), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.5.3) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.5.3)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.5...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.12), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.12) +2 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.12)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.openam:embedded.opendj (>=14.6.1.1, <=14.6.1.2), org.openidentityplatform.openam:openam-slf4j (14.6.1) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.9)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:embedded.opendj...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.5.1), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.5.1) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.5.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.5...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.13), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.13) +2 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.13)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.5.7), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.5.7) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.5.7)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.5...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.14), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.14) +2 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.14)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.0), org.openidentityplatform.opendj:opendj-embedded (4.9.0) +4 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.0)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.9...

org.openidentityplatform.openam:openam-slf4j (>=16.0.1, <=16.1.1), org.openidentityplatform.opendj:opendj-dsml-servlet (>=5.0.1, <=5.1.1) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (>=5.0.1, <=5.1.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =5.0.1, =16.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.1.1 Source cves: CVE-2026-73644 Source advisory: OSV:GHSA-P279-2CQP-84JG...

org.openidentityplatform.openam:openam-slf4j (15.1.1), org.openidentityplatform.opendj:opendj-dsml-servlet (4.8.1) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.8.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.1.1 -...

org.openidentityplatform.openam:openam-slf4j (>=15.1.2, <=15.1.3), org.openidentityplatform.opendj:opendj-dsml-servlet (4.8.2) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.8.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j =15.1.2,...