CVE-2026-85649: Not Failing Securely

Holloway Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops of Shell/debian-minbase-install.sh. The installer invokes mkpasswd to generate yescrypt password hashes but does not check the command's...

PT-2026-85524

Holloway Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops of Shell/debian-minbase-install.sh. The installer invokes mkpasswd to generate yescrypt password hashes but does not check the command's...

PT-2026-85785

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A busy-wait loop exists in the tipc exit net function used to wait for pending UDP bearer cleanup works to complete. This loop relies on cond resched, which may act as a NOP no operation...

PT-2026-86194

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Linux kernel when the xe oa emit oa config function fails during fence allocation, config buffer allocation, or batch submission. In these failure scenarios,...

PT-2026-85791

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ALSA tas2781 driver. The TAS2781 HDA I2C and SPI queue RCA firmware loading during component bind using the request firmware nowait function. While t...

PT-2026-85604

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where the Command Complete dispatch only validates the fixed portion of the LE Set CIG Parameters response. The function hci cc le set cig para...

PT-2026-85623

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the magicmouse driver where the magicmouse input mapping function caches the first hid input's input dev in the msc-input variable during report descriptor parsing. If...

PT-2026-85635

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFC NCI handlers where nci rf discover ntf packet and nci rf intf activated ntf packet parse notifications into uninitialized on-stack structures nci rf discover n...

PT-2026-85638

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description A memory leak occurs in the PN533 NFC driver when a device is removed while transmit fragments are still queued. The pn53x common clean function purges the resp q but fails to release the...

PT-2026-85601

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description An issue exists in the Bluetooth MGMT component where the mgmt hci cmd sync function fails to enforce an upper bound on the params len variable. While params len is defined as a 16-bit...

PT-2026-86222

Name of the Vulnerable Software and Affected Versions Nango versions prior to 0.71.6 Description The runner tRPC server contains a missing authentication flaw that allows unauthenticated attackers with network access to the runner port to execute arbitrary JavaScript code. This is achieved by...

PT-2026-86195

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net/tls component where the tls sw splice read function fails to check for errors after a failed asynchronous decryption. While tls sw recvmsg and tls sw read sock...

PT-2026-85609

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the HID ft260 driver during I2C read operations. The function ft260 i2c read assigns dev-read buf to a caller-supplied buffer, typically an on-stack variable...

CVE-2026-9317: Missing Authentication for Critical Function

Nango before 0.71.6 contains a missing authentication vulnerability in the runner tRPC server that allows unauthenticated attackers to execute arbitrary JavaScript code by invoking the exposed start procedure without credentials. Attackers with network access to the runner port can send requests ...

PT-2026-91362

In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after-return write in I2C read race ft260 i2c read points dev-read buf at a caller-supplied buffer often an on-stack variable, arms a completion and waits up to five seconds for the device to return the...

PT-2026-85799

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IB/mlx5 component regarding implicit On-Demand Paging ODP handling. In implicit ODP configurations, the presence of child mkeys prevents in-place changes to the...

PT-2026-89159

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.0 through 0.11.0 Description An issue exists in the calendar event model within backend/open webui/models/calendar.py where the meta.alert minutes value is stored without type validation. Because the shared upcoming-eve...

PT-2026-85650

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel panic occurs when using the lsetxattr function to set a large extended attribute xattr value on a fragmented filesystem where the file already possesses an external xattr block...

PT-2026-85656

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description An issue exists in the ALSA scarlett2 component where the scarlett2 init notify function incorrectly uses mixer-urb, which is allocated by snd usb mixer status create for the UAC2 status...

PT-2026-85657

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description An issue exists in the ALSA FCP component where the fcp init notify function incorrectly uses mixer-urb, which is allocated for the optional UAC2 status interrupt endpoint. On devices with...