The vulnerability of the SIMATIC S7 PLC web server, related to insecure resource initialization, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the web server in the SIMATIC S7 PLC is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

ROS-20260907-73-0074

The vulnerability of the OutOfBandXML module in Intel UEFI microprogramming systems is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053399)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053399 advisory. In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize iuid/igid Always initialize iuid/igid inside the sysfs core so...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053218)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053218 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Handle SRCU initialization failure during page track init Check the return of...

AZL-99437 CVE-2026-80883 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered The host1xclientregister function is called just prior to register map initialization loop, making the device available to userspace. This m...

CVE-2026-80883 drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered The host1xclientregister function is called just prior to register map initialization loop, making the device available to userspace. This m...

CVE-2026-80883

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered The host1xclientregister function is called just prior to register map initialization loop, making the device available to userspace. This m...

EUVD-2026-71513

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered The host1xclientregister function is called just prior to register map initialization loop, making the device available to userspace. This m...

CVE-2026-80883

CVE-2026-80883 affects the Linux kernel 's drm/tegra subsystem, specifically the gr2d and gr3d drivers. The root cause is a race condition : the host1x_client_register() function is called before the address register map initialization loop completes, making the device available to userspace prem...

CVE-2026-80815

In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Use a private URB for the notification endpoint scarlett2initnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the UAC2 status interrupt endpoint and mixer.c manages. On a device with that...

CVE-2026-80815 ALSA: scarlett2: Use a private URB for the notification endpoint

In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Use a private URB for the notification endpoint scarlett2initnotify used mixer-urb, which sndusbmixerstatuscreate allocates for the UAC2 status interrupt endpoint and mixer.c manages. On a device with that...

PT-2026-85728

In the Linux kernel, the following vulnerability has been resolved: tcp: fix AO info use-after-free in tcp ao connect init tcp v4 connect adds a SYN-SENT socket to the ehash before calling tcp connect. If TCP-AO is configured, tcp connect first verifies that a key matches the peer and the bound...

Linux Distros Unpatched Vulnerability : CVE-2026-80883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered The host1xclientregister function is called just prior to register map...

The vulnerability of the __destroy_component_cfg() function in the drivers/resctrl/mpam_devices.c module of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the destroycomponentcfg function in the drivers/resctrl/mpamdevices.c module of the Linux kernel is related to the lack of initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tap_ioctl() function in the drivers/net/tap.c module of the Linux kernel network device driver allows a attacker to cause a service failure.

The vulnerability of the tapioctl function in the drivers/net/tap.c module of the Linux kernel network device driver is related to the lack of resource initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tunPutUser() function in the drivers/net/tun.c file of the Linux kernel’s network device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tunPutUser function in the drivers/net/tun.c file of the Linux kernel network device driver is related to the lack of resource initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

ROS-20260904-73-0002

The vulnerability of the Branch Prediction Unit BPU in Intel Core Ultra microprogramming devices is related to incorrect initialization of resources. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of the vti6_init_net() function in the net/ipv6/ip6_vti.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vti6initnet function in the net/ipv6/ip6vti.c module of the Linux kernel’s IPv6 implementation is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

org.mongodb/mongodb-driver: MongoDB Driver: Credential disclosure via cleartext logging during client initialization

A flaw was found in org.mongodb/mongodb-driver. During routine client initialization, sensitive configuration information, including credentials for outbound network connectivity, is written to application log output in cleartext. A local attacker with the ability to read the affected application...

CVE-2026-85221 MISP CurlClient TLS Peer Verification Disabled by Default Enables Man-in-the-Middle Attacks

MISP contains an improper TLS certificate validation vulnerability in CurlClient. The CurlClient::$verifyPeer property was not explicitly initialized and therefore defaulted to null. When passed to cURL, this value effectively disabled TLS peer verification unless the calling code explicitly...