PT-2026-90100

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the ALSA FCP component where the fcp ioctl init function allocates a response buffer using kmalloc but fails to clear it before copying the entire buffer back to userspace...

CVE-2026-80952: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix info leak and UAF in device unregister path i3cmasterunregisteri3cdevs clears i3cdev-dev-desc before calling deviceunregister. During deviceunregister, devicedel emits a KOBJREMOVE uevent and unbinds the driver...

PT-2026-90030

Subscriber Broken Access Control in Masteriyo - LMS = 3.4.0 versions...

PT-2026-90028

Contributor Insecure Direct Object References IDOR in Slim SEO = 4.10.0 versions...

CVE-2026-89553: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nouveau/gem: reserve the bo in the info ioctl around the vma lookup In the non-uvmm path, there could be a race between the info lookup finding the vma, and the gem close path closing the vma leading to a use-after-free. Spotted...

CVE-2026-81007: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmbwrite read message fields before validating the length byte. A zero or short write can read uninitialized stack bytes. A length smaller than the SMBus header underflows the block writ...

CVE-2026-89616: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in nireadframe nireadframe decompresses an LZNT $DATA frame into the vmapped target pages and then trusts decompresslznt's return value: uncsize = decompresslzntframeondisk,...

PT-2026-90269

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the non-uvmm path of the nouveau/gem component. This occurs between the info lookup process finding the vma and the gem close path closing the vma, which can...

The vulnerability of the gf_isom_copy_sample_info() function in the isomedia/isom_write.c file of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfisomcopysampleinfo function in the isomedia/isomwrite.c file of the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

openSUSE 16 Security Update : trivy (openSUSE-SU-2026:21801-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21801-1 advisory. - CVE-2026-24122: github.com/sigstore/cosign/v2/pkg/cosign: improper validation of certificates that outlive expired CA certificates bsc1258543....

PT-2026-90082

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak and use-after-free UAF issue exists in the i3c master device unregister path. The function i3c master unregister i3c devs clears the i3cdev-dev-desc before calling...

PT-2026-90481

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description On native sparc64, the kernel old timeval structure contains a four-byte hole after tv usec because tv sec is 64-bit while kernel suseconds t is 32-bit. The put itimerval function fills...

PT-2026-90229

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the RISC-V KVM implementation. The SBI PMU EVENT GET INFO stores the product of a guest-controlled num events variable and the size of the event info...

PT-2026-96518

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompress in ni read frame ni read frame decompresses an LZNT $DATA frame into the vmapped target pages and then trusts decompress lznt's return value: unc size = decompress lzntframe...

PT-2026-96461

In the Linux kernel, the following vulnerability has been resolved: nouveau/gem: reserve the bo in the info ioctl around the vma lookup In the non-uvmm path, there could be a race between the info lookup finding the vma, and the gem close path closing the vma leading to a use-after-free. Spotted...

CVE-2026-11813

creationtimestamp| type| source ---|---|--- 2026-09-10 23:04:43+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mv75z5ono52o...

CVE-2026-76059

creationtimestamp| type| source ---|---|--- 2026-09-10 22:46:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dcbzvj6ko6ppl 2026-09-17 17:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvq6xs7amh2b...

CVE-2026-81268

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute flows and obtain sensitive information due to insufficient session expiration of API keys after user deactivation...

CVE-2026-79723

IBM Langflow OSS versions 1.0.0 through 1.11.5 allow a remote authenticated attacker to perform server-side request forgery (SSRF) via several connectors that skip the platform's shared SSRF validation guard. Affected components include the MCP server configuration URL field, the DataStax Astra D...

CVE-2026-82092 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability...