PT-2026-93520

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s2255 fillbuff function where the memcpy operation uses the vc-jpg size variable to copy captured JPEG/MJPEG frames into the vb2 plane. The vc-jpg size value is...

PT-2026-93640

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the HID wacom driver. The function wacom intuos pro2 bt irq receives a wire report length in the len variable but fails to validate it before parsing. A...

PT-2026-93561

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue in the KVM s390 component allows memory corruption due to the reinjection of CK machine checks. Channel-subsystem damage machine checks are intended for the host channel...

PT-2026-93403

CVE-2026-97636 - Apache Airflow HashiCorp provider: HashiCorp Vault secrets backend: team-scope guard bypass via user-controlled key CVE ID :CVE-2026-97636 Published : Sept. 24, 2026, 10:17 p.m. | 1 hour, 6 minutes ago Description :Apache Airflow HashiCorp provider: the HashiCorp Vault secrets...

PT-2026-93735

Name of the Vulnerable Software and Affected Versions zlt2000 microservices-platform versions prior to 6.0.0 Description An authorization bypass exists in the file-center module. The 'DELETE /files/id' endpoint fails to perform ownership validation, allowing authenticated attackers to delete file...

PT-2026-93449

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdkfd component where the driver allocates device pages even when the migration virtual memory range is a hole on the CPU side specifically when MIGRATE PFN...

PT-2026-93837

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.24.0 Description An issue exists in the audio handling path for the /v1/chat/completions endpoint where the input audio content is processed without a duration limit. Specifically, the AudioMediaIO.load bytes and...

PT-2026-94124

Name of the Vulnerable Software and Affected Versions djust versions prior to 1.0.7 Description djust allows an unauthenticated WebSocket or SSE client to trigger the import and execution of the top-level code of any importable Python module. This occurs because the live transport resolves the...

CVE-2026-89792: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

CVE-2026-89910: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc Variable vector is declared on stack in function dmsintcinjectirq and sometimes it is used without initialized. Here fix this issue...

PT-2026-93450

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs when reading the /sys/kernel/debug/kfd/mqds endpoint while a process holds an active KFD queue. This happens because the for loop calling the debugfs sh...

PT-2026-93459

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the drm/amdgpu/vcn component during the dec msg buffer count check. When the num buffers variable is set to 0x3FFFFFFF, the calculation 6 + num buffers 4...

PT-2026-93664

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference exists in the fsg common set num buffers function within the usb gadget mass storage module. This occurs when the kstrtou8 function returns a value of 0 or 1 f...

PT-2026-93822

Name of the Vulnerable Software and Affected Versions djust versions prior to 1.0.7 Description The SSE client-to-server POST endpoints are marked as @csrf exempt and the SSE GET stream endpoint lacks an Origin check. This allows a cross-origin page to manipulate a session authenticated by victim...

PT-2026-93918

Name of the Vulnerable Software and Affected Versions Skipper versions prior to 0.27.37 Description Skipper is an HTTP router and reverse proxy for service composition. The opaAuthorizeRequestWithBody filter can authorize oversized requests by incorrectly signaling the truncation state to the Ope...

PT-2026-93437

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the DAMON Data Access Monitoring component where the kdamond merge regions function can enter an infinite internal loop. This occurs when the number of DAMON regions...

PT-2026-93551

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the LoongArch KVM implementation where the vector variable is declared on the stack within the dmsintc inject irq function and may be used without being initialized...

PT-2026-94090

Name of the Vulnerable Software and Affected Versions rmcp versions prior to 2.1.0 Description The StreamableHttpClientTransport in the rmcp crate fails to mark caller-supplied custom HTTP headers as sensitive and uses a default HTTP client with an automatic redirect policy. When a compromised or...

Linux Distros Unpatched Vulnerability : CVE-2026-89921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: Zero initialize data structures for injectpfaulttoken kvminjectpfaulttoken only sets .type and .u.ext.extparams2 of the on-stack struct kvms390irq bu...

PT-2026-93422

Name of the Vulnerable Software and Affected Versions Apache Airflow Apache Kafka provider versions 1.15.0 through 1.9.9 Description The software resolves dotted-path strings found in a Kafka connection's extra field into Python callables using the import string function without an allowlist. The...