CVE-2026-23261 nvme-fc: release admin tagset if init fails

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: release admin tagset if init fails nvmefabrics creates an NVMe/FC controller in following path: nvmfdevwrite - nvmfcreatectrl - nvmefccreatectrl - nvmefcinitctrl nvmefcinitctrl allocates the admin blk-mq resources right...

CVE-2026-23261 nvme-fc: release admin tagset if init fails

In the Linux kernel, the following vulnerability has been resolved: nvme-fc: release admin tagset if init fails nvmefabrics creates an NVMe/FC controller in following path: nvmfdevwrite - nvmfcreatectrl - nvmefccreatectrl - nvmefcinitctrl nvmefcinitctrl allocates the admin blk-mq resources right...

CVE-2026-23258 net: liquidio: Initialize netdev pointer before queue setup

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Initialize netdev pointer before queue setup In setupnicdevices, the netdev is allocated using allocetherdevmq. However, the pointer to this structure is stored in oct-propsi.netdev only after the calls to...

CVE-2026-23258 net: liquidio: Initialize netdev pointer before queue setup

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Initialize netdev pointer before queue setup In setupnicdevices, the netdev is allocated using allocetherdevmq. However, the pointer to this structure is stored in oct-propsi.netdev only after the calls to...

CVE-2026-2559 Post SMTP <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Office 365 OAuth Configuration Overwrite

The Post SMTP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handleoffice365oauthredirect function in all versions up to, and including, 3.8.0. This is due to the function being hooked to admininit without any currentusercan check ...

CVE-2026-32691 Timing ownership claim attack on new external back-end secrets

A race condition in the secrets management subsystem of Juju versions 3.0.0 through 3.6.18 allows an authenticated unit agent to claim ownership of a newly initialized secret. Between generating a Juju Secret ID and creating the secret's first revision, an attacker authenticated as another unit...

PT-2026-26069

The Post SMTP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle office365 oauth redirect function in all versions up to, and including, 3.8.0. This is due to the function being hooked to admin init without any current user can...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an improper initialization order of netdev pointers, potentially leading to memory leaks...

The vulnerability of the __mptcp_alloc_tx_skb() function in the net/mptcp/protocol.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mptcpalloctxskb function in the net/mptcp/protocol.c module of the Linux kernel is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `fb_deferred_io_init()` function in the drivers/video/fbdev/core/fb_defio.c file of the Linux kernel’s graphics buffer device support driver allows a attacker to cause a service failure.

The vulnerability of the fbdeferredioinit function in the drivers/video/fbdev/core/fbdefio.c file of the Linux kernel’s graphics device support driver module is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure to release the admin tagset during initialization, potentially leading to memory leak...

The vulnerability of the perf_event_unthrottle() function, located in the kernel/events/core.c module responsible for handling kernel events in Linux operating systems, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the perfeventunthrottle function, located in the kernel/events/core.c module responsible for handling kernel events in Linux operating systems, stems from accessing memory beyond the permissible buffer data size during initialization of a variable with a default non-universal...

Linux Distros Unpatched Vulnerability : CVE-2026-23258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: liquidio: Initialize netdev pointer before queue setup In setupnicdevices, the netdev is allocated using allocetherdevmq. However, the pointer to this...

ROS-20260317-73-0015

A vulnerability in the kzalloc function of the irqsim component of the Linux kernel is related to incorrect resource initialization. Exploitation of the vulnerability may allow an intruder to affect confidentiality, integrity and availability of protected information...

GL-iNet Comet 安全漏洞

GL-iNet Comet is a portable, multi-functional network device developed by GL-iNet Corporation in China. There is a security vulnerability in GL-iNet Comet, which stems from the lack of certificate verification during the initialization process when connecting to the GL-iNet site. This vulnerabili...

ROS-20260317-73-0012

A vulnerability in the inodeaddref function of the Linux kernel is related to incorrect resource initialization. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerability of the `brcmfmac/pcie.c` function in the `driver/net/wireless/broadcom/brcm80211/brcmfmac` module of the Broadcom wireless adapter driver for Linux operating systems allows a hacker to cause a system failure.

The vulnerability of the brcmfpcieinitRingbuffers function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/pcie.c file of the Broadcom wireless adapter driver in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an...

The vulnerability of the an30259a_probe() function in the drivers/leds/leds-an30259a.c file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the an30259aprobe function in the drivers/leds/leds-an30259a.c file of the Linux kernel is related to incorrect initialization. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability in the driver module drivers/isdn/hardware/mISDN/hfcpci.c, which supports mISDN hardware, allows a hacker to cause a service failure.

The vulnerability in the drivers/isdn/hardware/mISDN/hfcpci.c module, related to mISDN hardware support in the Linux operating system, is associated with incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

EulerOS Virtualization 2.12.1 : gnutls (EulerOS-SA-2026-1428)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization...