obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes

Summary createentity, linkentities, renameentity, unlinkentities and deleteentity regenerate a memory note's body from SQLite at the computed memory//.md path. When a note already existed at that path and was not owned by the entity being written a hand-authored note, or an orphan left by a...

CVE-2026-115478 obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.31.4, createentity, linkentities, renameentity, unlinkentities and deleteentity regenerate memory notes from SQLite at the computed memory//.md path without reliably preserving note...

CVE-2026-115478

The obsidian-tc Model Context Protocol server (versions 1.0.1 through 1.31.4 ) contains a memory-lifecycle flaw where the create_entity, link_entities, rename_entity, unlink_entities, and delete_entity tools can overwrite unowned vault notes. This occurs because the software regenerates notes fro...

EUVD-2026-108866

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on copytouser failure If kfddbgtrapenable fails while copying runtimeinfo to userspace, it had already activated the trap, set debugtrapenabled, taken an extra process reference, and opened th...

CVE-2026-98910

The Linux kernel contains a vulnerability in the drm/amdkfd component. When the kfd_dbg_trap_enable() function fails during a copy_to_user operation while copying runtime_info , it fails to unwind several state changes. Specifically, it leaves the trap activated, sets debug_trap_enabled , retains...

Linux Distros Unpatched Vulnerability : CVE-2026-98910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Unwind debug trap enable on copytouser failure If kfddbgtrapenable fails while copying runtimeinfo to userspace, it had already activated the trap,...

SUSE CVE-2026-98634

In the Linux kernel, the following vulnerability has been resolved: scsi: sdzbc: Reject disks with too many zones sdzbcreadzones computes the number of zones with 64-bit arithmetic and stores the result in the unsigned int nrzones field of struct zoneddiskinfo, silently truncating counts that...

CVE-2026-93229

A flaw was found in the Linux kernel's Network File System daemon nfsd. A local user can cause a Denial of Service DoS or observe inconsistent kernel data on systems with weakly-ordered processor architectures. This issue occurs due to a missing read memory barrier in the Remote Procedure Call RP...

CVE-2026-98634

In the Linux kernel, the following vulnerability has been resolved: scsi: sdzbc: Reject disks with too many zones sdzbcreadzones computes the number of zones with 64-bit arithmetic and stores the result in the unsigned int nrzones field of struct zoneddiskinfo, silently truncating counts that...

UBUNTU-CVE-2026-98634

In the Linux kernel, the following vulnerability has been resolved: scsi: sdzbc: Reject disks with too many zones sdzbcreadzones computes the number of zones with 64-bit arithmetic and stores the result in the unsigned int nrzones field of struct zoneddiskinfo, silently truncating counts that...

DEBIAN-CVE-2026-98474

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing device lock in zpcireportstatus When pdev is non-NULL, zpcireportstatus accesses the device's driver. To get a consistent state matching the recovery, the device lock needs to be held. Do so by expanding the...

DEBIAN-CVE-2026-98634

In the Linux kernel, the following vulnerability has been resolved: scsi: sdzbc: Reject disks with too many zones sdzbcreadzones computes the number of zones with 64-bit arithmetic and stores the result in the unsigned int nrzones field of struct zoneddiskinfo, silently truncating counts that...

CVE-2026-98634

The Linux kernel contains a vulnerability in the scsi: sd_zbc component where sd_zbc_read_zones() uses 64-bit arithmetic to compute zone counts but stores them in an unsigned int field. This results in silent truncation for counts exceeding 32 bits, causing the system to use incorrect values for ...

CVE-2026-98634 scsi: sd_zbc: Reject disks with too many zones

In the Linux kernel, the following vulnerability has been resolved: scsi: sdzbc: Reject disks with too many zones sdzbcreadzones computes the number of zones with 64-bit arithmetic and stores the result in the unsigned int nrzones field of struct zoneddiskinfo, silently truncating counts that...

EUVD-2026-103548

In the Linux kernel, the following vulnerability has been resolved: scsi: sdzbc: Reject disks with too many zones sdzbcreadzones computes the number of zones with 64-bit arithmetic and stores the result in the unsigned int nrzones field of struct zoneddiskinfo, silently truncating counts that...

CVE-2026-98634: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: scsi: sdzbc: Reject disks with too many zones sdzbcreadzones computes the number of zones with 64-bit arithmetic and stores the result in the unsigned int nrzones field of struct zoneddiskinfo, silently truncating counts that...

PT-2026-116693

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing device lock in zpci report status When pdev is non-NULL, zpci report status accesses the device's driver. To get a consistent state matching the recovery, the device lock needs to be held. Do so by expanding...

Linux Distros Unpatched Vulnerability : CVE-2026-98634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: sdzbc: Reject disks with too many zones sdzbcreadzones computes the number of zones with 64-bit arithmetic and stores the result in the unsigned int nrzon...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.14 contains a security vulnerability. This vulnerability arises from the failure to cancel the PS delivery process promptly when deleting an AP or mesh station. The function stadeliverpsframes only checks sta-dead before delivery. As a result, delayed work threads may...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.14 contains security vulnerabilities. These vulnerabilities stem from the zpcireportstatus function in the s390/pci framework, which accesses device drivers without acquiring a device lock when pdev is not NULL. This can lead to inconsistent states...