CVE-2026-74602

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rballocatecpubuffer In rballocatecpubuffer, bpage-order was omitted, leaving it as 0. This is an issue for a ring-buffer with subbufs bigger than PAGESIZE if when freed: freebufferpage...

CVE-2026-74617 dibs: initialise dibs->lock in dibs_dev_alloc()

In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs-lock in dibsdevalloc dibs-lock is initialised by dibsdevadd, but a dibs device can already take interrupts before that call: ismprobe runs ismdevinit, and hence requestirq, before it calls dibsdevadd. No...

CVE-2026-74602 ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rballocatecpubuffer In rballocatecpubuffer, bpage-order was omitted, leaving it as 0. This is an issue for a ring-buffer with subbufs bigger than PAGESIZE if when freed: freebufferpage...

CVE-2026-74617: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs-lock in dibsdevalloc dibs-lock is initialised by dibsdevadd, but a dibs device can already take interrupts before that call: ismprobe runs ismdevinit, and hence requestirq, before it calls dibsdevadd. No...

ROS-20260821-73-0001

The vulnerability of the virtnetopen function in the virtionet component of the Linux operating system is related to incorrect initialization of the resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260821-73-0067

The vulnerability in the drivers/infiniband/core/cma.c module of the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260821-73-0010

The vulnerability of the ioringexitwork function in the iouring/iouring.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2026-62743

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causin...

CVE-2026-18871 Power System Buffer Overflow

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causin...

CVE-2026-74472

A flaw was found in the Linux kernel's ublk driver. This vulnerability arises from improper initialization of kernel-owned device information fields when a new ublk device is added. A local attacker could exploit this by providing malformed device information, which may lead to a kernel panic,...

CVE-2026-74399

A flaw was found in the Linux kernel's Extended Verification Module EVM. The evmreadxattrs function, when processing extended attributes, fails to properly initialize a buffer. This can lead to an out-of-bounds read when no extended attributes are configured, potentially allowing an attacker to...

CVE-2026-72265

A flaw was found in the Linux kernel's NVIDIA framebuffer driver. During the initialization process within the nvidiafbprobe function, if certain error conditions occur, memory allocated for internal data structures is not properly released. This can lead to a memory leak, potentially affecting...

CVE-2026-76222: Improper Limitation of a Pathname to a Restricted Directory

GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths outside the intended clone directory. Attackers can craft malicious repositories with traversal sequences in submodule names that GitPython...

CVE-2026-76222: Improper Limitation of a Pathname to a Restricted Directory

GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths outside the intended clone directory. Attackers can craft malicious repositories with traversal sequences in submodule names that GitPython...

CVE-2026-74442

A flaw was found in the Linux kernel's drm/vmwgfx driver. This vulnerability occurs when the vmwvkmsinit function fails to initialize a workqueue, leaving a pointer as NULL. During module unload, the vmwvkmscleanup function attempts to destroy this NULL workqueue, leading to a kernel panic. A loc...

The vulnerability of the rsi_mac80211_config() function in the drivers/net/wireless/rsi/rsi_91x_mac80211.c driver module of the Redpine Signals wireless communication adapter driver for Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the rsimac80211config function in the drivers/net/wireless/rsi/rsi91xmac80211.c driver of the wireless adapter driver from Redpine Signals in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker ...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099982)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099982 advisory. In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be initialize first. There can be a condition where i...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a hacker to induce a system failure.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to incorrect resource initialization. Exploiting this vulnerability could allow an attacker to cause a system failure...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-101141)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101141 advisory. A memory initialization issue was addressed with improved memory handling. This issue is fixed in Safari 26.2, iOS 26.2 and iPadOS 26.2, macOS Tahoe 26.2, tvOS 26.2,...

The vulnerability of the octeontx2-af module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the octeontx2-af module in the Linux operating system is related to the lack of initialization for resources. Exploiting this vulnerability can allow an attacker to cause a service failure...