CVE-2026-89792: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the pat...

CVE-2026-89910: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc Variable vector is declared on stack in function dmsintcinjectirq and sometimes it is used without initialized. Here fix this issue...

PT-2026-93450

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs when reading the /sys/kernel/debug/kfd/mqds endpoint while a process holds an active KFD queue. This happens because the for loop calling the debugfs sh...

PT-2026-93459

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the drm/amdgpu/vcn component during the dec msg buffer count check. When the num buffers variable is set to 0x3FFFFFFF, the calculation 6 + num buffers 4...

PT-2026-93822

Name of the Vulnerable Software and Affected Versions djust versions prior to 1.0.7 Description The SSE client-to-server POST endpoints are marked as @csrf exempt and the SSE GET stream endpoint lacks an Origin check. This allows a cross-origin page to manipulate a session authenticated by victim...

PT-2026-93918

Name of the Vulnerable Software and Affected Versions Skipper versions prior to 0.27.37 Description Skipper is an HTTP router and reverse proxy for service composition. The opaAuthorizeRequestWithBody filter can authorize oversized requests by incorrectly signaling the truncation state to the Ope...

PT-2026-93551

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the LoongArch KVM implementation where the vector variable is declared on the stack within the dmsintc inject irq function and may be used without being initialized...

PT-2026-94090

Name of the Vulnerable Software and Affected Versions rmcp versions prior to 2.1.0 Description The StreamableHttpClientTransport in the rmcp crate fails to mark caller-supplied custom HTTP headers as sensitive and uses a default HTTP client with an automatic redirect policy. When a compromised or...

PT-2026-93422

Name of the Vulnerable Software and Affected Versions Apache Airflow Apache Kafka provider versions 1.15.0 through 1.9.9 Description The software resolves dotted-path strings found in a Kafka connection's extra field into Python callables using the import string function without an allowlist. The...

CVE-2026-86465: Authorization Bypass Through User-Controlled Key

Apache Airflow Akeyless provider: the Akeyless secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scoped to one team can supply a Variable key containing a path separator that causes the backend to resolve a secret belonging to ...

PT-2026-93505

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the scsi qla2xxx driver where the qla2x00 write i2c and qla2x00 read i2c functions fail to perform bounds checks on the user-supplied length variable within the qla i2...

PT-2026-93558

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the KVM arm64 component between VNCR TLB invalidation and the vcpu put function during VNCR page unmapping. The issue arises because TLB invalidation occurs...

Linux Distros Unpatched Vulnerability : CVE-2026-89955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfio-ap: Fix NULL deref in statusshow during queue probe When vfioapmdevprobequeue creates the sysfs attribute group, the queue's driver data has not yet...

Linux Distros Unpatched Vulnerability : CVE-2026-89910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc Variable vector is...

Fedora 43 : python-configargparse (2026-2e605e01a6)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2e605e01a6 advisory. Update to 1.7.7. Version 1.7.6 is a security fix for GHSA-6m27-337c-jcgf. Config file or environment variable can trigger writing out a config file,...

Linux Distros Unpatched Vulnerability : CVE-2026-89920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: Fix memory corruption by not reinjecting CK machine checks Channel-subsystem damage machine checks are for the host channel subsystem. The guest...

Linux Distros Unpatched Vulnerability : CVE-2026-89876

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: tda18250: fix possible integer overflow Integer overflow may occur, when variable exp equals to zero. Result of shift 1 exp - 1 may then leads to undefin...

Linux Distros Unpatched Vulnerability : CVE-2026-89947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - clk: meson: align gxbb32kclksel number of parents with actual count The following out-of-bounds read has been observed by Christian on a GXBB WeTek Hub:...

PT-2026-93338

Name of the Vulnerable Software and Affected Versions Grafana OSS affected versions not specified Grafana Enterprise affected versions not specified Description An issue exists where symbolic links are not safely resolved during the extraction of plugin archives. A specially crafted archive can u...

PT-2026-93517

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow can occur when the variable exp equals zero. This leads to undefined behavior during the shift operation 1 exp - 1. Recommendations At the moment, there is no...