CVE-2026-71092

Vulnerability in the PeopleSoft Enterprise FIN Lease Administration product of Oracle PeopleSoft component: Lease Administration. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft...

EUVD-2026-62036

Vulnerability in the PeopleSoft Enterprise FIN Lease Administration product of Oracle PeopleSoft component: Lease Administration. The supported version that is affected is 9.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft...

BIT-OPENBAO-2026-45808 OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. A tenant who intentionally leaks lease identifiers can have their lease and underlying credential revoked or renewed by a user in another tenant via th...

CVE-2026-74285 net: Stop leased rxq before uninstalling its memory provider

In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory provider netifrxqcleanupunlease tears down the memory provider that was installed on a physical RX queue through a netkit queue lease. It currently revokes the provider's DMA...

EUVD-2026-59391

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in sameclienthaslease sameclienthaslease returns an opinfo pointer from ci-moplist after dropping ci-mlock without taking a reference. smbgrantoplock then dereferences that pointer in copylease and when...

CVE-2026-72492

The CVE-2026-72492 issue concerns ksmbd (Linux kernel) where same_client_has_lease() returns an opinfo pointer from ci->m_op_list after dropping ci->m_lock without holding a reference. smb_grant_oplock() later dereferences this pointer in copy_lease() and while checking breaking_cnt, riskin...

PT-2026-72680

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in same client has lease same client has lease returns an opinfo pointer from ci-m op list after dropping ci-m lock without taking a reference. smb grant oplock then dereferences that pointer in copy lea...

PT-2026-72721

In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory provider netif rxq cleanup unlease tears down the memory provider that was installed on a physical RX queue through a netkit queue lease. It currently revokes the provider's DMA...

Malicious code in resource-lease-pool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731d4ed32c1947117f9e7243c0179f5076213414505bf38176e660653df025f1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14008 Malicious code in resource-lease-pool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731d4ed32c1947117f9e7243c0179f5076213414505bf38176e660653df025f1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-68381

In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notification smb2oplockbreaknoti and smb2leasebreaknoti store a ksmbdconn pointer in an async ksmbdwork and then queue that work on ksmbd-io. The work only increments conn-rcount, which...

UBUNTU-CVE-2026-68381

In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notification smb2oplockbreaknoti and smb2leasebreaknoti store a ksmbdconn pointer in an async ksmbdwork and then queue that work on ksmbd-io. The work only increments conn-rcount, which...

CVE-2026-68381

In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notification smb2oplockbreaknoti and smb2leasebreaknoti store a ksmbdconn pointer in an async ksmbdwork and then queue that work on ksmbd-io. The work only increments conn-rcount, which...

CVE-2026-68381 ksmbd: pin conn during async oplock break notification

In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notification smb2oplockbreaknoti and smb2leasebreaknoti store a ksmbdconn pointer in an async ksmbdwork and then queue that work on ksmbd-io. The work only increments conn-rcount, which...

CVE-2026-68381

CVE-2026-68381 affects the Linux kernel ksmbd (SMB server) and describes a race between connection teardown and asynchronous oplock/lease break notifications. The vulnerability occurs when a ksmbd_conn pointer is stored in an async work item and queued on ksmbd-io; the work only increments conn-&...

EUVD-2026-55567

In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notification smb2oplockbreaknoti and smb2leasebreaknoti store a ksmbdconn pointer in an async ksmbdwork and then queue that work on ksmbd-io. The work only increments conn-rcount, which...

CVE-2026-68381 ksmbd: pin conn during async oplock break notification

In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notification smb2oplockbreaknoti and smb2leasebreaknoti store a ksmbdconn pointer in an async ksmbdwork and then queue that work on ksmbd-io. The work only increments conn-rcount, which...

CVE-2026-45808

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. A tenant who intentionally leaks lease identifiers can have their lease and underlying credential revoked or renewed by a user in another tenant via th...

CVE-2026-45808

CVE-2026-45808 affects OpenBao before version 2.5.4 , where cross-namespace lease revocation can be triggered by a tenant in another tenant via legacy undocumented endpoints sys/revoke and sys/renew , bypassing namespace ACLs. Root cause: insufficient access control for lease operations across te...

CVE-2026-45808

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. A tenant who intentionally leaks lease identifiers can have their lease and underlying credential revoked or renewed by a user in another tenant via th...