CVE-2026-80946

This Linux kernel vulnerability affects the FUSE-io-uring transport. The fuse_request slab cache (fuse_req_cachep) is created without a usercopy whitelist , so directly copying req->in.h to the ring or req->out.h back from the ring trips CONFIG_HARDENED_USERCOPY , triggering a kernel panic ...

CVE-2026-80946 fuse: copy request headers via a stack buffer for io-uring

In the Linux kernel, the following vulnerability has been resolved: fuse: copy request headers via a stack buffer for io-uring The fuse-io-uring transport copies req-in.h out to the ring in fuseuringcopytoring and req-out.h back in fuseuringcommit. Both headers live inside the fuserequest slab...

PT-2026-90438

In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Fix out-of-bounds read in pci write legacy io pci write legacy io loads 4 bytes from the kernfs write buffer regardless of how many bytes userspace wrote: if count != 1 && count != 2 && count != 4 return -EINVAL; retur...

PT-2026-90294

In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying its biovec For DM IO BIO requests, do region built each destination bio by walking the source bio's biovec and re-adding the pages one at a time, tracking the remaining transfer in...

PT-2026-90076

In the Linux kernel, the following vulnerability has been resolved: fuse: copy request headers via a stack buffer for io-uring The fuse-io-uring transport copies req-in.h out to the ring in fuse uring copy to ring and req-out.h back in fuse uring commit. Both headers live inside the fuse request...

ROOT-APP-MAVEN-CVE-2025-8885 CVE-2025-8885 in org.bouncycastle:bc-fips - Patched by Root

Root has patched CVE-2025-8885 in the org.bouncycastle:bc-fips package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-48988 CVE-2025-48988 in org.apache.tomcat:tomcat-catalina - Patched by Root

Root has patched CVE-2025-48988 in the org.apache.tomcat:tomcat-catalina package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-42498 CVE-2026-42498 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-42498 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-24734 CVE-2026-24734 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root

Root has patched CVE-2026-24734 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...

Copy-Fail-CVE-2026-31431-modernized

Copy-Fail-CVE-2026-31431-modernized A modernized version of Copy Fail PE How to use it: Just clone the repository and run the Poc.py : Educational purpose This proof of concept is only for educational purpose Inspired by : Main Exploit by theori-io...

DEBIAN-CVE-2026-79602

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

CVE-2026-79602

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

CVE-2026-79602

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

EUVD-2026-72720

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

CVE-2026-79602 x86: improper handling of HVM emulation return codes

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

CVE-2026-79602

CVE-2026-79602 is a vulnerability in the Xen hypervisor (x86) caused by improper handling of HVM emulation return codes. A guest with a PCI device assigned that has at least a BAR mapped to the I/O port space can trigger a BUG() in Xen, leading to a denial of service where the host becomes unresp...

UBUNTU-CVE-2026-79602

improper handling of HVM emulation return codes: A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen. A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen. Xen versions 4.6 and later are...

CVE-2026-79602

improper handling of HVM emulation return codes: A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen. A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen. Xen versions 4.6 and later are...

x86: improper handling of HVM emulation return codes

ISSUE DESCRIPTION A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen. IMPACT Passing through a PCI device with at least one BAR in IO address space to unprivileged HVM guests can result in a Denial of Service DoS affecting the entire host...

CVE-2026-48962

Summary An eval injection vulnerability in File::GlobMapper::getFiles allows any attacker who can control the output fileglob argument passed to IO::Compress::Gzip::gzip, IO::Compress::Zip::zip, or any sibling function to execute arbitrary Perl code in the context of the running process. No...