CVE-2026-89955: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix NULL deref in statusshow during queue probe When vfioapmdevprobequeue creates the sysfs attribute group, the queue's driver data has not yet been set. A concurrent read of the 'status' attribute can therefore ca...

PT-2026-93517

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow can occur when the variable exp equals zero. This leads to undefined behavior during the shift operation 1 exp - 1. Recommendations At the moment, there is no...

PT-2026-93567

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM s390 architecture within the import wp info function. The len field of the kvm hw breakpoint structure, which is controlled by user space, is assigned to an...

PT-2026-93596

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the s390/vfio-ap component during queue probe. When the vfio ap mdev probe queue function creates the sysfs attribute group, the driver data for the...

PT-2026-94131

Summary The XSS blueprint validator Security::detectXss runs on the raw page content before Twig processing. An attacker can use Twig's string concatenation operator to dynamically construct an event handler name at render time. The validator sees "on" "error" - a harmless Twig expression - and...

PT-2026-93512

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the video-i2c media component where the kthread run function returns an ERR PTR an error pointer upon failure instead of NULL. When the start streaming function fails,...

CVE-2026-92591: Not Failing Securely

Craft CMS 5.0.0 through 5.10.12 treats a database connection failure as meaning that Craft is not installed, which makes anonymous installer actions — including install/validate-site — reachable on an installed production site whenever PHP remains available but the configured MySQL endpoint does...

PT-2026-93566

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the KVM s390 guest debug handling. The bp data variable is only freed during error cases via the kfreebp data function, causing bp data to leak during every...

CVE-2026-90018: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read / stack overflow in rtwgetwpsattr rtwgetwpsattr walks WPS attributes inside a WPS IE taken from a wireless management frame. For each candidate attribute it only checks that the fixed 4-byte...

PT-2026-93561

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue in the KVM s390 component allows memory corruption due to the reinjection of CK machine checks. Channel-subsystem damage machine checks are intended for the host channel...

CVE-2026-89910: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc Variable vector is declared on stack in function dmsintcinjectirq and sometimes it is used without initialized. Here fix this issue...

PT-2026-93494

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the qla2xxx SCSI driver. The function qla2x00 free fce trace frees and clears the ha-fce variable while holding only the fce mutex. However, the...

PT-2026-93541

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Consumer Electronics Control CEC core of the media subsystem. The issue stems from a missing call to the rc free device function. Specifically, a previous...

CVE-2026-89876: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: media: tda18250: fix possible integer overflow Integer overflow may occur, when variable exp equals to zero. Result of shift 1 exp - 1 may then leads to undefined behavior...

CVE-2026-89921: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Zero initialize data structures for injectpfaulttoken kvminjectpfaulttoken only sets .type and .u.ext.extparams2 of the on-stack struct kvms390irq but the full ext substructure is copied into the cpu local variable on...

PT-2026-94090

Name of the Vulnerable Software and Affected Versions rmcp versions prior to 2.1.0 Description The StreamableHttpClientTransport in the rmcp crate fails to mark caller-supplied custom HTTP headers as sensitive and uses a default HTTP client with an automatic redirect policy. When a compromised or...

PT-2026-93593

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nand flash detect ext param page function where the system allocates memory based on the length declared by the ONFI parameter page. The function treats the data a...

PT-2026-93595

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The AFS v2 parser fails to validate the footer offset and the region count variable, both of which are retrieved from flash contents. The parser uses the footer offset to locate the imag...

PT-2026-93486

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference occurs in the qla2x00 error entry function due to a double-read of ha-req q mapque. The function reads the map slot once for a NULL check and a second time when...

PT-2026-93529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ov02a10 check hwcfg function. The function calls fwnode handle putep immediately after allocating and parsing the endpoint, but then attempts to use...