UBUNTU-CVE-2026-80589

In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a never added disk diskrelease undoes blkmqinitallocatedqueue for a disk whose probe failed before adddisk, but it only calls blkmqexitqueue. Nothing there stops q-timeout, and that...

CVE-2026-80589 block: stop the timeout timer when releasing a never added disk

In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a never added disk diskrelease undoes blkmqinitallocatedqueue for a disk whose probe failed before adddisk, but it only calls blkmqexitqueue. Nothing there stops q-timeout, and that...

CVE-2026-80589

This Linux kernel vulnerability is a slab-use-after-free in the block layer triggered during NVMe device probe failure. When a disk's probe fails before add_disk(), disk_release() calls blk_mq_exit_queue() but fails to stop the q->timeout timer, leaving a dangling entry in the timer wheel afte...

CVE-2026-79019

A flaw was found in ANGLE, a graphics abstraction layer used in Chromium-based browsers. A remote attacker could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside...

CVE-2026-80589: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a never added disk diskrelease undoes blkmqinitallocatedqueue for a disk whose probe failed before adddisk, but it only calls blkmqexitqueue. Nothing there stops q-timeout, and that...

packetfence v15.2.0

PacketFence What is PacketFence? PacketFence is a fully supported, trusted, Free and Open Source network access control NAC system. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, 802.1X support, layer-2...

EUVD-2026-65705

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13, the PyOpenEXR Python bindings return stale heap data when reading a crafted deep scanline EXR that uses...

CVE-2026-71360 CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue...

Security-Aware Pinching-Antenna Systems (PASS): Physical-Layer Security Transmission

This paper investigates heterogeneous secure multi-user transmission in pinching-antenna systems PASS, where dynamically adjustable pinching antennas reshape both guided-wave and free-space propagation to improve communication and confidentiality performance. Unlike conventional physical-layer...

PT-2026-89505

Name of the Vulnerable Software and Affected Versions Tesseract versions 5.5.3 and earlier Description A heap out-of-bounds write occurs during the first recognition step on the default LSTM engine when processing a crafted NT LSTM layer. This happens because NetworkIO::WriteTimeStepPart and...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: l2tp: The correct message length must be passed to ip6.AppendData. l2tpip6sendmsg needs to avoid accounting for the transport header twice when splicing more data into an already partially-occupied skbuff. To address this issu...

The vulnerability of the do_layer_surface() function in the src/IMG_xcf.c component of the Simple DirectMedia Layer library allows a hacker to induce a service failure.

The vulnerability of the dolayersurface function in the src/IMGxcf.c component of the Simple DirectMedia Layer library is related to reading data beyond the acceptable buffer limits. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created .xcf...

PhiShark2026: A Multi-Layer Active-Web Raw-Evidence Dataset for Phishing Website Research

Phishing websites are short-lived and rapidly changing, yet many phishing datasets reduce observations to URLs or precomputed features, constraining researchers to predefined representations and discarding the underlying evidence needed to derive alternative features, apply new extraction methods...

A Study of Bluetooth Access Control Based on NFT Soft Pairing

This paper proposes a Non-Fungible Token NFT soft pairing framework for Bluetooth service access control. Unlike conventional Bluetooth systems where pairing implicitly grants persistent service access, the proposed approach decouples native Bluetooth pairing from authorization without modifying...

MARL-Based Sequential RIS Auctions: A Physical-Layer Security Analysis

Reconfigurable intelligent surfaces RISs hold great potential to enhance coverage, spectral efficiency, and communication security by intelligently configuring their reflecting elements. When owned by a neutral RIS operator, these elements can be offered as resources for which legitimate receiver...

ROS-20260821-73-0058

The vulnerability of the blockwritefullpage function in the Linux operating system is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-79499

Name of the Vulnerable Software and Affected Versions Arc Enterprise versions prior to 26.06.1 Description The cluster replication receiver at internal/cluster/replication/receiver.go validates only the wire-format envelope of inbound messages. The MsgReplicateSync payload is accepted without...

CVE-2026-74343

A flaw was found in the Linux kernel's kernfs component. Multiple superblocks with different namespaces can share the same kernfsnode, leading to a race condition during extended attribute xattr operations. The Virtual File System VFS layer's per-inode locks are insufficient to serialize concurre...

CVE-2026-72852

hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int arithmetic. In src-lib/convolutionallayer.cpp, l.nweights is computed as c / groups n size size and l.outputs as l.outh l.outw l.outc, an...

EUVD-2026-63536

hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int arithmetic. In src-lib/convolutionallayer.cpp, l.nweights is computed as c / groups n size size and l.outputs as l.outh l.outw l.outc, an...