PT-2026-64510

In the Linux kernel, the following vulnerability has been resolved: iommufd: Set upper bounds on cache invalidation entry num and entry len iommufd hwpt invalidate takes a user-controlled entry num and entry len, each bounded only by U32 MAX. An entry len beyond the kernel's struct size makes the...

CVE-2026-64229

The CVE-2026-64229 entry concerns the Linux kernel issue in x86 memory management: when PCID is disabled, broadcast TLB flush can remain enabled if INVLPGB is present, leading to a mismatch between global ASID handling and PCID state. The vulnerable flow toggles about three CPUs, with mm_global_a...

CVE-2026-15614 IdP-initiated SAML sessions not reliably invalidated (replay)

Logto silently fails to delete IdP-initiated SAML sessions, enabling session replay and reuse within the session’s validity window...

EUVD-2026-47782

Question2Answer through 1.8.8 contains a session invalidation vulnerability that allows attackers with a previously obtained remember-me cookie to retain authenticated access by exploiting the forgot-password reset flow's failure to clear the sessioncode field in qa-include/app/users-edit.php...

SUSE CVE-2026-63875

In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tables When hugepmdunshare is called to unshare a PMD table, the tlbunsharepmdptdesc function sets tlb-unsharedtables=true but the aarch64 tlbflush only checked tlb-freedtables to...

SUSE CVE-2026-64157

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfsinvalidatefolio, if the region of a partial invalidation overlaps the front but not all of a dirty write cached in a streaming write page dirty, but not uptodate,...

PT-2026-63285

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description An issue exists in the Remember-Me token validation logic where the system fails to invalidate all active sessions when a compromised token is detected. Gitea uses a split token design consisti...

CVE-2026-64157

A flaw was found in the Linux kernel's network file system netfs component. This vulnerability allows for incorrect handling of data during partial invalidation operations on streaming-write pages. An attacker could potentially exploit this to cause data corruption or unexpected system behavior,...

CVE-2026-64157

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfsinvalidatefolio, if the region of a partial invalidation overlaps the front but not all of a dirty write cached in a streaming write page dirty, but not uptodate,...

EUVD-2026-45842

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfsinvalidatefolio, if the region of a partial invalidation overlaps the front but not all of a dirty write cached in a streaming write page dirty, but not uptodate,...

CVE-2026-64157 netfs: Fix partial invalidation of streaming-write folio

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfsinvalidatefolio, if the region of a partial invalidation overlaps the front but not all of a dirty write cached in a streaming write page dirty, but not uptodate,...

CVE-2026-64157 netfs: Fix partial invalidation of streaming-write folio

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfsinvalidatefolio, if the region of a partial invalidation overlaps the front but not all of a dirty write cached in a streaming write page dirty, but not uptodate,...

CVE-2026-64157

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfsinvalidatefolio, if the region of a partial invalidation overlaps the front but not all of a dirty write cached in a streaming write page dirty, but not uptodate,...

CVE-2026-64157

The CVE pertains to the Linux kernel netfs subsystem, specifically a bug in netfs_invalidate_folio() that mishandled partial invalidations of streaming-write folios. When the invalidation region overlapped the front of a dirty, not-up-to-date write page tracked by netfs_folio, the code moved the ...

CVE-2026-64157

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfsinvalidatefolio, if the region of a partial invalidation overlaps the front but not all of a dirty write cached in a streaming write page dirty, but not uptodate,...

CVE-2026-63875 arm64: tlb: Flush walk cache when unsharing PMD tables

In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tables When hugepmdunshare is called to unshare a PMD table, the tlbunsharepmdptdesc function sets tlb-unsharedtables=true but the aarch64 tlbflush only checked tlb-freedtables to...

CVE-2026-63875 arm64: tlb: Flush walk cache when unsharing PMD tables

In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tables When hugepmdunshare is called to unshare a PMD table, the tlbunsharepmdptdesc function sets tlb-unsharedtables=true but the aarch64 tlbflush only checked tlb-freedtables to...

CVE-2026-63875

In the Linux kernel, the following vulnerability has been resolved: arm64: tlb: Flush walk cache when unsharing PMD tables When hugepmdunshare is called to unshare a PMD table, the tlbunsharepmdptdesc function sets tlb-unsharedtables=true but the aarch64 tlbflush only checked tlb-freedtables to...

PT-2026-61192

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm64 architecture where the tlb flush function failed to properly invalidate the walk cache when unsharing PMD tables. Specifically, the function only checked...

PT-2026-61474

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs invalidate folio function where partial invalidation of a streaming-write folio is handled incorrectly. When a partial invalidation region overlaps the front...