PT-2026-94455

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the net/smc module when the smc llc flow stop function resets a flow structure using a blind memset. If the flow-qentry variable is non-NULL, the pointer is...

CVE-2026-77281: Improper Control of Generation of Code

Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, three configuration-dependent weaknesses affect the handler and placeholder layer. In modules/caddyhttp/rewrite/rewrite.go, Rewrite.Rewrite can pass attacker-controlled replacement bytes through...

PT-2026-94414

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ftrace-direct-multi-modify sample where the ftrace direct multi init function assigns the return value of kthread run to the simple tsk variable without performing...

CVE-2026-92914: Improper Authentication

AVideo LoginControl contains an authentication bypass vulnerability in the PGP second factor verification that compares challenge responses using loose equality against an uninitialized session variable. Attackers with a victim's password can bypass the second factor by sending a parameter-less G...

CVE-2026-92963: Undefined Security Weakness

vm2 versions before 3.11.2 fail to properly restrict access to the VM2INTERNALSTATEDONOTUSEORPROGRAMWILLFAIL global variable. Attackers can access this internal state object through globalThis to retrieve sensitive sandbox internals...

PT-2026-94419

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sch teql scheduler where the teql master xmit function sets the skb-dev variable to a slave device before calling ndo start xmit, but fails to restore it if the...

Fedora 43 : roundcubemail (2026-821349f438)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-821349f438 advisory. Release 1.6.19 - Fix PHP Warning: Undefined variable $tmpcommand in .../plugins/markasjunk/drivers/cmdlearn.php 10294 - Security: Fix CSS declaration smuggli...

CVE-2026-86862: Improper Neutralization of Argument Delimiters in a Command

pgAdmin 4's Restore and Maintenance tools passed the client-supplied 'database' field directly as the value of the --dbname option given to pgrestore and psql. libpq expands a database name containing an equals sign into a full connection string, and connection keywords embedded in that value tak...

CVE-2026-86864: Improper Neutralization of Argument Delimiters in a Command

pgAdmin 4's Backup tool appended the client-supplied 'database' field from the /backup/job/ /object request to the pgdump argument vector as a bare trailing positional argument, without validation. Because pgdump parses its options with getoptlong, which permutes arguments, a value beginning with...

PT-2026-94621

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the coresight etm4x component during the perf enable path. The system fails to call the cscfg csdev disable active config function in specific error scenarios, such as...

PT-2026-94568

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA sequencer where the bounce error event function leaks a kernel memory address to userspace. When a queued variable-length event fails, the data.ext.ptr variab...

Empirical Analysis of Randomness Quality in Differential Privacy Mechanisms

Differential Privacy DP relies on carefully calibrated random noise to protect individual privacy in statistical analyses. While theoretical work has analyzed DP under weakened randomness assumptions, the practical consequences of entropy degradation remain poorly understood. We present a...

CVE-2026-90120: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Check getlogicalindex return value in MADT IAFFID parsing In gicacpiparseiaffid a given MADT GICC entry might not correspond to a logical cpu recognized by the kernel, resulting in the cpu variable initialization ...

CVE-2026-90220: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Don't leak the extension cell pointer in the bounce payload The bounceerrorevent embeds the failed event in the bounce payload by pointing data.ext.ptr at it. When that event is a queued variable-length event, its own...

PT-2026-94522

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-out-of-bounds read exists in the ksmbd alloc user function. The issue occurs because the function uses the hash sz variable, provided by a mountd IPC login response, to determine...

PT-2026-94599

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth MSFT implementation where the read supported features function fails to properly validate the evt prefix len variable against the actual response length...

PT-2026-94670

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the OCFS2 cluster component where the o2nm node local store function fails to clear the cl has local variable when handling local=0. This creates a stale state that...

PT-2026-94518

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd component where the ipc validate msg function computes the expected message size by reading length fields from a response buffer supplied by the userspace...

PT-2026-94556

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Samsung PWM timer used as a clock source on legacy systems. When PREEMPT RT a real-time patch for the Linux kernel is enabled on ARM architectures, regular spinloc...

CVE-2026-86863: Authentication Bypass by Spoofing

pgAdmin 4's Webserver authentication source is intended to accept an identity asserted by the web server or reverse proxy in front of pgAdmin, delivered through the WSGI/CGI environment. WebserverAuthentication.getuser read config.WEBSERVERREMOTEUSER from request.environ and, when that returned...