CVE-2026-89584

In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extraction The bio-based drivers don't necessarily check the alignment split, and stacking block drivers don't always handle a misalignment detected after submitting the bio. Validate use...

CVE-2026-89584 block: validate user space vectors during extraction

In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extraction The bio-based drivers don't necessarily check the alignment split, and stacking block drivers don't always handle a misalignment detected after submitting the bio. Validate use...

CVE-2026-89584 block: validate user space vectors during extraction

In the Linux kernel, the following vulnerability has been resolved: block: validate user space vectors during extraction The bio-based drivers don't necessarily check the alignment split, and stacking block drivers don't always handle a misalignment detected after submitting the bio. Validate use...

CVE-2026-89458

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Do not complete a failed ESE read as successful dasdinthandler completes an NRF read of an unallocated ESE track by calling eseread and unconditionally marking the request DASDCQRSUCCESS. dasdeckdeseread can return an...

CVE-2026-89099

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

CVE-2026-89099

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

UBUNTU-CVE-2026-89099

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

CVE-2026-89099 Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

EUVD-2026-76165

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

CVE-2026-89099 Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

CVE-2026-89099 Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

CVE-2026-89099

A race condition in the document value layer of MongoDB Server allows concurrent server threads to operate on the same internal memory without proper synchronization, leading to memory corruption . An authenticated user holding ordinary read-write privileges can trigger this over the normal clien...

Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

CVE-2026-89099

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

BadEngram: Backdoor Attack on Gated Memory Components in LLMs

To expand open-weight models' capacity without proportionally increasing computation, recent language models incorporate gated parametric memories that retrieve learned values and inject them into intermediate representations. Despite these efficiency benefits, such modules create a distinct atta...

CVE-2026-47773: Incorrect Calculation of Buffer Size

ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler that allows a remote, unauthenticated BLE client to corrupt memory in the ATTClass global object. Devices running ArduinoBL...

PT-2026-90503

ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler that allows a remote, unauthenticated BLE client to corrupt memory in the ATTClass global object. Devices running ArduinoBL...

PT-2026-96559

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Do not complete a failed ESE read as successful dasd int handler completes an NRF read of an unallocated ESE track by calling ese read and unconditionally marking the request DASD CQR SUCCESS. dasd eckd ese read can...

PT-2026-90007

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description A race condition in the document value layer allows concurrent server threads to operate on the same internal memory without synchronization, causing memory corruption. An authenticate...

CVE-2026-89099: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...