EUVD-2026-59412

In the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALIDQUEUEID managdcreatemanawqcq leaves queue-id as 0 from kzallocobj until manacreatewqobj assigns the firmware-returned id. If creation fails before that, cleanup calls managddestroycq...

CVE-2026-74265 net: mana: initialize gdma queue id to INVALID_QUEUE_ID

In the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALIDQUEUEID managdcreatemanawqcq leaves queue-id as 0 from kzallocobj until manacreatewqobj assigns the firmware-returned id. If creation fails before that, cleanup calls managddestroycq...

CVE-2026-72246

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

EUVD-2026-58905

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without driver data dwedmapcieprobe treats the PCI device ID driverdata as the template for the controller layout and copies it unconditionally. A device bound dynamically via sysfs can mat...

EUVD-2026-59094

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate EHT MLE before MLD ID read cfg80211gennewie copies ML probe response elements from the parent frame when the parent EHT multi-link element has an MLD ID matching the nontransmitted BSSID index. The code...

CVE-2026-68472

In CVE-2026-68472, Linux kernel code path for wifi cfg80211 is vulnerable when processing MBSSID EHT MLE data. The issue arises in cfg80211_gen_new_ie() which copies ML probe response elements from the parent frame and may read beyond the IE boundary to obtain the MLD ID via ieee80211_mle_get_mld...

CVE-2026-68472 wifi: cfg80211: validate EHT MLE before MLD ID read

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate EHT MLE before MLD ID read cfg80211gennewie copies ML probe response elements from the parent frame when the parent EHT multi-link element has an MLD ID matching the nontransmitted BSSID index. The code...

CVE-2026-68467

The CVE-2026-68467 issue affects the Linux kernel mtd: mchp23k256 driver. The driver stored chip capacity in both the OF match table and the SPI id table, and probe used of_device_get_match_data(), which caused an id-table-only match to fallback to mchp23k256_caps. The fix switches to spi_get_dev...

EUVD-2026-59089

In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in both the OF match table and the SPI id table. Probe currently uses ofdevicegetmatchdata, so a non-OF SPI modalias match falls back t...

MINI-XPP2-W8J3-6CR8

Bulletin has no description...

EUVD-2026-58822

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to...

PT-2026-73025

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE arm vsmmu vsid to sid maps a guest's vSID to a single physical Stream ID taken from master-streams0, assuming a device has exactly one stream. A device with...

PT-2026-72184

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate EHT MLE before MLD ID read cfg80211 gen new ie copies ML probe response elements from the parent frame when the parent EHT multi-link element has an MLD ID matching the nontransmitted BSSID index. The cod...

PT-2026-72701

In the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALID QUEUE ID mana gd create mana wq cq leaves queue-id as 0 from kzalloc obj until mana create wq obj assigns the firmware-returned id. If creation fails before that, cleanup calls mana ...

PT-2026-72845

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: add bounds check on firmware mac id in link lookup The mac id field in RX descriptors is 8 bits wide 0-255, but assoc link on macid has only RTW89 MAX MAC ID NUM 128 entries. While the driver currently assigns mac id...

PT-2026-72140

Name of the Vulnerable Software and Affected Versions Online Booking & Scheduling Calendar for WordPress by vcita versions prior to 4.6.1 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a technique where...

PT-2026-72752

In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4 drop revoked stid nfsd4 drop revoked stid has no SC TYPE LAYOUT case, so when a client sends FREE STATEID for an admin-revoked layout stid, the default branch releases cl lock and returns without...

PT-2026-72974

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in close file table ids A ksmbd file can remain alive after logical close while another session holds a temporary reference obtained through ksmbd lookup fd inode. ksmbd close fd currently marks the file...

CVE-2026-74245

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to...

CVE-2026-74245

Red Hat Quay 's exported logs feature contains an authorization flaw that allows an unauthenticated attacker with a valid file ID to download exported action logs. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks . The impact is information disclosure ...