CVE-2026-72144

A flaw was found in the Linux kernel's Dell laptop driver. During the initialization process, if an error occurs with LED or backlight registration, the system fails to properly clean up all allocated resources. This oversight can lead to resources, such as notifiers and debugfs directories,...

CVE-2026-72264

A flaw was found in the fbdev: tridentfb component of the Linux kernel. A memory leak occurs in the tridentpciprobe function because memory allocated for the modelist is not properly freed in certain error paths. This could allow a local attacker to exhaust available memory resources, leading to ...

CVE-2026-72290

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for s390 PCI. During the setup of guest interrupt forwarding, a reference count refcount to the Guest Interrupt Service Call GISC may not be properly released if subsequent setup steps fail. This resource leak can lead to...

EUVD-2026-60543

Mattermost Desktop App versions =6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the...

EUVD-2026-60547

An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution...

CVE-2026-75587

Mattermost Desktop App versions =6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the...

CVE-2026-67961

An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution...

CVE-2026-75587

Mattermost Desktop App versions

CVE-2026-75587

Mattermost Desktop App versions =6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the...

CVE-2026-72097

A flaw was found in the Linux kernel's dm-verity component. A possible NULL pointer dereference can occur in the dmverityloadpinisbdevtrusted function if a device lacks a table. This vulnerability could allow a local attacker to cause a system crash, leading to a Denial of Service DoS...

CVE-2026-72080

A flaw was found in the Linux kernel's resctrl filesystem. During the unmount process, a timing issue can occur where a concurrent reader of an event file attempts to access memory that has already been released. This 'use-after-free' vulnerability allows a local attacker to dereference invalid...

CVE-2026-72075

A flaw was found in the Linux kernel's ims-pcu input driver. A race condition occurs when the imspcuresetdevice function is called without proper synchronization, allowing concurrent operations to corrupt a shared command buffer. This vulnerability could be exploited by a local attacker to cause...

CVE-2026-72028

A flaw was found in the Linux kernel's kretprobe kernel return probe functionality on RISC-V architectures. A local attacker can trigger a kernel crash by attempting to read from the stack within a kretprobe. This occurs because the archrethooktrampoline does not correctly save the original stack...

kernel: drm/amdgpu: zero-initialize GART table on allocation

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. When allocating a Graphics Address Remapping Table GART, the memory was not properly initialized. This could allow a local attacker to potentially access uninitialized memory, leading to information disclosure or unexpected system...

CVE-2026-73283

A flaw was found in OpenSSH's sshd component. The restrict keyword, designed to limit tunnel forwarding within the authorizedkeys file, was not correctly enforced for tunnel forwarding. This issue could allow a local attacker to bypass intended security restrictions, potentially leading to...

CVE-2026-72472

A flaw was found in the Network File System NFS component of the Linux kernel. Inadequate synchronization during the traversal of the file lock list can lead to a use-after-free UAF vulnerability. This occurs when certain functions release file locks prematurely while iterating, potentially...

kernel: drm/amdgpu: zero-initialize GART table on allocation

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. When allocating a Graphics Address Remapping Table GART, the memory was not properly initialized. This could allow a local attacker to potentially access uninitialized memory, leading to information disclosure or unexpected system...

CVE-2026-74565

A flaw was found in the Linux kernel's netfilter subsystem. The global nature of the nftobject rhltable allows a local attacker to access objects that are being deallocated by other network namespaces. This can lead to a use-after-free vulnerability, potentially resulting in memory corruption or...

CVE-2026-74538

A flaw was found in the Linux kernel's Bluetooth ISO Isochronous Stream subsystem. A missing lock when accessing socket connection information within the isoconnectind function could lead to a null pointer dereference. This vulnerability could allow a local attacker to cause a system crash,...

CVE-2026-74445

A flaw was found in the Linux kernel's drm/vmwgfx component. A local attacker can trigger a null pointer dereference by sending a specially crafted command to the vmwcmddxbindquery function. This can lead to a kernel crash, resulting in a Denial of Service DoS for the affected system...