PT-2026-90173

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description Several sysfs show/store handlers call a discipline callback that dereferences the device-private variable, either directly or through the DASD DEFINE ATTR macro. During the execution of the...

PT-2026-90192

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SCTP Stream Control Transmission Protocol implementation where a cached RECONF chunk containing multiple request parameters can lead to an underflow of the outcnt...

PT-2026-90151

Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 9.5.3 Description An object-level authorization failure occurs when updating a Page Type. The Types::submit dashboard controller processes the ptID variable provided by the user to load and save a Page Type witho...

PT-2026-90363

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A busy loop occurs in the Ceph component of the Linux kernel when ceph cap reclaim work repeatedly re-queues itself because ceph trim dentries returns -EAGAIN. This happens when a lease...

PT-2026-90339

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the HID mcp2221 driver. The problem occurs because incoming HID reports can race with hardware teardown during device removal or probe failure. This is...

PT-2026-90287

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the CXL features of the Linux kernel where the cxlctl fw rpc callback fails to validate the user-controlled op size variable against the input buffer length in len. In...

PT-2026-90462

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the tracing component when two histogram triggers on different events are registered using the same name= parameter. The system incorrectly reuses the...

PT-2026-90364

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel's Ceph implementation where the ceph parse deleg inos function fails to validate the value of the len variable when decoding interval sets of delegate...

PT-2026-90357

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the CIFS component. When the cifs file set size function finds a writable file handle via find writable file, it borrows tcon and server from the handle'...

PT-2026-90065

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An out-of-bounds write issue exists in the mt7996 mcu get eeprom function. The function determines the destination for the EFUSE/EXT block copy using the address provided in the MCU response...

PT-2026-90250

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the svcrdma component. When the svc rdma listen handler function processes an RDMA CM EVENT ADDR CHANGE event, it attempts to create a replacement listen...

PT-2026-90387

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel, the nfsd3 proc setacl function calls set posix acl unconditionally for both ACL TYPE ACCESS and ACL TYPE DEFAULT. Because the NFSv3 ACL decoder only populates the ac...

PT-2026-90319

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists where a seccomp filter can be bypassed after a ptrace stop. If a thread is stopped in the syscall trace enter function for ptrace, another thread can install a...

PT-2026-90422

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nfsd component where the write verifier is not rotated when an asynchronous COPY writeback fails. During an async COPY operation, the system captures the...

PT-2026-96342

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Check svc pool percpu counter allocation svc create initializes three per-pool percpu counter stats and ignores every return value. On SMP, percpu counter init fails when alloc percpu gfp cannot satisfy the allocation,...

PT-2026-90265

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sunrpc component where connections can hang indefinitely. This occurs when a service, such as nfsd running in pernode or percpu mode, is configured with fewer...

openSUSE 16: tomcat10 / tomcat10-admin-webapps / tomcat10-el-5_0-api / etc (openSUSE-SU-2026:21810-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21810-1 advisory. - CVE-2026-65182: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Doma...

PT-2026-90229

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the RISC-V KVM implementation. The SBI PMU EVENT GET INFO stores the product of a guest-controlled num events variable and the size of the event info...

PT-2026-90432

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the zram module where user-supplied deflate parameters are not properly validated. Specifically, the winbits variable is passed to the zlib deflate workspacesize...

PT-2026-90335

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow exists in the intel-thc-hid driver within the intel-quickspi component. The function quickspi hid raw request receives a buffer length via the len variable, but this...