CVE-2026-75038 Predictable temporary file in /tmp allows symlink attack in LACT

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

SUSE CVE-2026-75038

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

PT-2026-81895

Name of the Vulnerable Software and Affected Versions BlueZ version 5.86 Description A type confusion issue exists in sdp-xml.c via the RegisterProfileServiceRecord function. A crafted nested ServiceRecord can corrupt the SDP XML parser stack, causing scalar union data to be treated as a sequence...

CVE-2026-80185: Access of Resource Using Incompatible Type

BlueZ sdp-xml.c type confusion via RegisterProfileServiceRecord can crash bluetoothd local DoS: a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd...

kernel: gfs2: Fix use-after-free in iomap inline data write path

A flaw was found in the Linux kernel's GFS2 filesystem. This memory corruption vulnerability, a use-after-free, occurs in the iomap inline data write path. The issue arises because a data buffer is released prematurely while still being referenced, leading to a write to freed memory. This could...

kernel: gfs2: Fix use-after-free in iomap inline data write path

A flaw was found in the Linux kernel's GFS2 filesystem. This memory corruption vulnerability, a use-after-free, occurs in the iomap inline data write path. The issue arises because a data buffer is released prematurely while still being referenced, leading to a write to freed memory. This could...

kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...

kernel: gfs2: Fix use-after-free in iomap inline data write path

A flaw was found in the Linux kernel's GFS2 filesystem. This memory corruption vulnerability, a use-after-free, occurs in the iomap inline data write path. The issue arises because a data buffer is released prematurely while still being referenced, leading to a write to freed memory. This could...

kernel: gfs2: Fix use-after-free in iomap inline data write path

A flaw was found in the Linux kernel's GFS2 filesystem. This memory corruption vulnerability, a use-after-free, occurs in the iomap inline data write path. The issue arises because a data buffer is released prematurely while still being referenced, leading to a write to freed memory. This could...

CVE-2026-59566 Local denial-of-service

A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...

CVE-2026-59566 Local denial-of-service

A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...

EUVD-2026-64882

A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS...

CVE-2026-74605

A flaw was found in the Linux kernel's eventfs component. This vulnerability allows a local attacker to cause a system crash or other unpredictable behavior due to a race condition during the freeing of an eventfs inode. The issue stems from improper synchronization when iterating over a specific...

CVE-2026-74590

A flaw was found in the Linux kernel's fsverity subsystem. A local attacker could exploit a race condition in the bpfgetfsveritydigest function by concurrently modifying its digestsize argument. This could lead to a system crash, resulting in a denial of service...

CVE-2026-74593

A flaw was found in the Linux kernel's schedext component. An incorrect locking order within the scxcgrouplock function can lead to a deadlock. This occurs when certain cgroup operations, such as enabling/disabling scx or removing a cgroup, happen concurrently with cpu.weight writes. A local...

PT-2026-80885

Name of the Vulnerable Software and Affected Versions Zscaler Client Connector on Android and ChromeOS affected versions not specified Description A locally exploitable buffer overflow bug allows a local attacker to cause a denial-of-service attack. A buffer overflow occurs when a program writes...

SUSE CVE-2026-74716

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix locally exploitable BUGON in amdxdnainsertpages In amdxdnainsertpages, vmflagsmod sets VMMIXEDMAP and clears VMPFNMAP. If an unprivileged userspace process mmaps a non-imported GEM object and then calls...

CVE-2026-74716

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix locally exploitable BUGON in amdxdnainsertpages In amdxdnainsertpages, vmflagsmod sets VMMIXEDMAP and clears VMPFNMAP. If an unprivileged userspace process mmaps a non-imported GEM object and then calls...

EUVD-2026-64403

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix locally exploitable BUGON in amdxdnainsertpages In amdxdnainsertpages, vmflagsmod sets VMMIXEDMAP and clears VMPFNMAP. If an unprivileged userspace process mmaps a non-imported GEM object and then calls...

CVE-2026-74716

This vulnerability affects the Linux kernel in the accel/amdxdna driver. The root cause is in amdxdna_insert_pages(), where vm_flags_mod() sets VM_MIXEDMAP and clears VM_PFNMAP. An unprivileged local user can mmap a non-imported GEM object, call madvise(MADV_DONTNEED) to clear PTEs, then trigger ...