334671 matches found
CVE-2026-89491 ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin()
In the Linux kernel, the following vulnerability has been resolved: ocfs2: cluster: don't sleep while holding o2hblivelock in o2hbregionpin Patch series "ocfs2: cluster: o2hbregionpin fixes", v2. This series fixes three related issues in o2hbregionpin, all are from the original implementation in...
CVE-2026-89491
CVE-2026-89491 affects the OCFS2 cluster subsystem in the Linux kernel. The o2hb_region_pin() function is called while holding the o2hb_live_lock spinlock, yet it invokes configfs_depend_item(), which sleeps by taking the configfs root inode rwsem and pinning the filesystem. Under CONFIG_DEBUG_AT...
CVE-2026-89491
In the Linux kernel, the following vulnerability has been resolved: ocfs2: cluster: don't sleep while holding o2hblivelock in o2hbregionpin Patch series "ocfs2: cluster: o2hbregionpin fixes", v2. This series fixes three related issues in o2hbregionpin, all are from the original implementation in...
CVE-2026-89476
CVE-2026-89476 affects the Linux kernel's SCTP (Stream Control Transmission Protocol) implementation. A cached RECONF chunk may contain multiple request parameters, so a duplicate response can re-process the same ADD_OUT request while another parameter is still outstanding, rolling back stream-&g...
CVE-2026-89476 sctp: fix stream->outcnt underflow on duplicate RECONF responses
In the Linux kernel, the following vulnerability has been resolved: sctp: fix stream-outcnt underflow on duplicate RECONF responses A cached RECONF chunk may contain more than one request parameter. A duplicate response can therefore find and process the same ADDOUT request again while another...
CVE-2026-89476 sctp: fix stream->outcnt underflow on duplicate RECONF responses
In the Linux kernel, the following vulnerability has been resolved: sctp: fix stream-outcnt underflow on duplicate RECONF responses A cached RECONF chunk may contain more than one request parameter. A duplicate response can therefore find and process the same ADDOUT request again while another...
EUVD-2026-76382
In the Linux kernel, the following vulnerability has been resolved: sctp: fix stream-outcnt underflow on duplicate RECONF responses A cached RECONF chunk may contain more than one request parameter. A duplicate response can therefore find and process the same ADDOUT request again while another...
CVE-2026-89476
In the Linux kernel, the following vulnerability has been resolved: sctp: fix stream-outcnt underflow on duplicate RECONF responses A cached RECONF chunk may contain more than one request parameter. A duplicate response can therefore find and process the same ADDOUT request again while another...
CVE-2026-89445 iommufd: Fix UAF in selftest IOPF reporting
In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix UAF in selftest IOPF reporting IOMMUFD selftest TRIGGERIOPF borrows an attach handle from group-pasidarray without synchronizing against PASID detach, then a concurrent iommureportdevicefault can dereference that...
CVE-2026-89445
CVE-2026-89445 is a Use-After-Free in the Linux kernel 's iommufd selftest component. The TRIGGER_IOPF selftest borrows an attach handle from group->pasid_array without synchronizing against PASID detach, allowing a concurrent iommu_report_device_fault() to dereference a freed struct iommufd_a...
CVE-2026-89445 iommufd: Fix UAF in selftest IOPF reporting
In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix UAF in selftest IOPF reporting IOMMUFD selftest TRIGGERIOPF borrows an attach handle from group-pasidarray without synchronizing against PASID detach, then a concurrent iommureportdevicefault can dereference that...
EUVD-2026-76351
In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix UAF in selftest IOPF reporting IOMMUFD selftest TRIGGERIOPF borrows an attach handle from group-pasidarray without synchronizing against PASID detach, then a concurrent iommureportdevicefault can dereference that...
CVE-2026-89445
In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix UAF in selftest IOPF reporting IOMMUFD selftest TRIGGERIOPF borrows an attach handle from group-pasidarray without synchronizing against PASID detach, then a concurrent iommureportdevicefault can dereference that...
Security Bulletin: IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities
Summary There are vulnerabilities in multiple Open Source Software OSS components consumed by IBM Cognos Analytics application versions 12.0.4 and 12.1.3. This Security Bulletin addresses the affected versions and the rememdiation fixes. Please note that certain CVEs are applicable only for versi...
CVE-2026-81913 Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter.
Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter. An attacker can craft a single link on the site's own domain that sends a user to an arbitrary external site immediately after authentication, facilitating phishing and credential theft. The same...
CVE-2026-81913
Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to an Open Redirect via the rcURL parameter . An attacker can craft a link on the site's own domain that redirects a user to an arbitrary external site immediately after authentication, facilitating phishing and credential theft . The same ...
CVE-2026-81913 Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter.
Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter. An attacker can craft a single link on the site's own domain that sends a user to an arbitrary external site immediately after authentication, facilitating phishing and credential theft. The same...
EUVD-2026-76245
Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter. An attacker can craft a single link on the site's own domain that sends a user to an arbitrary external site immediately after authentication, facilitating phishing and credential theft. The same...
CVE-2026-81913 Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter.
Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter. An attacker can craft a single link on the site's own domain that sends a user to an arbitrary external site immediately after authentication, facilitating phishing and credential theft. The same...
