CVE-2026-78807

creationtimestamp| type| source ---|---|--- 2026-09-16 12:02:51+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mvn3t6pdsg2f...

CVE-2026-73955

creationtimestamp| type| source ---|---|--- 2026-09-16 12:00:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvn3oxlzd32u 2026-09-23 09:50:36+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...

CVE-2026-83070

creationtimestamp| type| source ---|---|--- 2026-09-16 12:00:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvn3oxlzd32u 2026-09-23 09:47:47+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...

CVE-2026-83018

creationtimestamp| type| source ---|---|--- 2026-09-16 12:00:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvn3oxlzd32u 2026-09-23 09:49:26+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...

CVE-2026-83015

creationtimestamp| type| source ---|---|--- 2026-09-16 12:00:30+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvn3oxlzd32u 2026-09-23 09:49:32+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...

CVE-2026-79994

creationtimestamp| type| source ---|---|--- 2026-09-16 12:00:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvn3onh6id2r 2026-09-17 02:33:19+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mvomhofmxe2o 2026-09-17 19:50:31+00:00| seen|...

CVE-2026-92247

creationtimestamp| type| source ---|---|--- 2026-09-16 12:00:04+00:00| seen| https://t.me/GithubRedTeam/102453 2026-09-17 01:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102453...

AZL-101535 CVE-2026-89921 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Zero initialize data structures for injectpfaulttoken kvminjectpfaulttoken only sets .type and .u.ext.extparams2 of the on-stack struct kvms390irq but the full ext substructure is copied into the cpu local variable on...

AZL-101418 CVE-2026-89865 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers The FRU and I2C bsg handlers stage their transfer in a DMAPOOLSIZE 256-byte bounce buffer obtained from dmapoolalloc, which does not zero the allocation. They initialize...

CVE-2026-89859

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak qla2x00dodportdiagnostics allocates the qladportdiag response buffer with kmallocobj non-zeroing and, on success, copies the full sizeofdd back to user space via...

AZL-101171 CVE-2026-89859 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak qla2x00dodportdiagnostics allocates the qladportdiag response buffer with kmallocobj non-zeroing and, on success, copies the full sizeofdd back to user space via...

DEBIAN-CVE-2026-89859

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak qla2x00dodportdiagnostics allocates the qladportdiag response buffer with kmallocobj non-zeroing and, on success, copies the full sizeofdd back to user space via...

AZL-101573 CVE-2026-89852 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero mailbox struct in qla2x00getfirmwarestate The mbxcmdt is allocated on the stack but left uninitialized. qla2x00mailboxcommand has several early-return paths PCI permanent failure, device failed, EEH busy, ISP...

DEBIAN-CVE-2026-89852

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero mailbox struct in qla2x00getfirmwarestate The mbxcmdt is allocated on the stack but left uninitialized. qla2x00mailboxcommand has several early-return paths PCI permanent failure, device failed, EEH busy, ISP...

DEBIAN-CVE-2026-89843

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak Several bsg handlers stage their request/reply in an uninitialized 256-byte on-stack buffer uint8t bsgDMAPOOLSIZE and fill it via sgcopytobuffer, which only copies as...

AZL-101598 CVE-2026-89843 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak Several bsg handlers stage their request/reply in an uninitialized 256-byte on-stack buffer uint8t bsgDMAPOOLSIZE and fill it via sgcopytobuffer, which only copies as...

CVE-2026-89843

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak Several bsg handlers stage their request/reply in an uninitialized 256-byte on-stack buffer uint8t bsgDMAPOOLSIZE and fill it via sgcopytobuffer, which only copies as...

CVE-2026-86106

creationtimestamp| type| source ---|---|--- 2026-09-16 11:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmyuslcf224 2026-09-16 11:11:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/43buss76asevk...

CVE-2026-90000

The Linux kernel hid-rmi driver allocates its report buffers based solely on the device-supplied report descriptor, with no minimum size bound. A device declaring undersized reports (as small as 1 byte each) causes out-of-bounds reads and writes past the allocation into adjacent slab objects at p...

CVE-2026-89971

CVE-2026-89971 affects the Linux kernel NVMe subsystem . The root cause is an insufficient error check in nvme_update_ns_info_block(): it only handles negative errno returns from nvme_query_zone_info(), missing positive NVMe status codes. This causes setup to proceed with zero-initialized zone li...