PT-2026-91362

In the Linux kernel, the following vulnerability has been resolved: HID: ft260: fix stack-use-after-return write in I2C read race ft260 i2c read points dev-read buf at a caller-supplied buffer often an on-stack variable, arms a completion and waits up to five seconds for the device to return the...

PT-2026-85799

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IB/mlx5 component regarding implicit On-Demand Paging ODP handling. In implicit ODP configurations, the presence of child mkeys prevents in-place changes to the...

PT-2026-89159

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.0 through 0.11.0 Description An issue exists in the calendar event model within backend/open webui/models/calendar.py where the meta.alert minutes value is stored without type validation. Because the shared upcoming-eve...

PT-2026-85739

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the xHCI USB driver where the xhci gen setup function fails to properly handle inaccessible controllers. When a controller is dead or disconnected from the bus, readin...

Linux Distros Unpatched Vulnerability : CVE-2026-80768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: ft260: fix stack-use-after-return write in I2C read race ft260i2cread points dev-readbuf at a caller-supplied buffer often an on-stack variable, arms a...

Linux Distros Unpatched Vulnerability : CVE-2026-80794

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: nci: fix uninit-value in the RF discover/activated NTF handlers ncirfdiscoverntfpacket and ncirfintfactivatedntfpacket each parse a notification into an...

PT-2026-85609

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the HID ft260 driver during I2C read operations. The function ft260 i2c read assigns dev-read buf to a caller-supplied buffer, typically an on-stack variable...

Linux Distros Unpatched Vulnerability : CVE-2026-80731

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: remove CAPSYSRAWIO zero-padding in devvalidateheader devvalidateheader reads dev-hardheaderlen directly when zero-padding short link layer headers for...

PT-2026-85623

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the magicmouse driver where the magicmouse input mapping function caches the first hid input's input dev in the msc-input variable during report descriptor parsing. If...

PT-2026-85638

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description A memory leak occurs in the PN533 NFC driver when a device is removed while transmit fragments are still queued. The pn53x common clean function purges the resp q but fails to release the...

PT-2026-85601

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.5-1.1 Description An issue exists in the Bluetooth MGMT component where the mgmt hci cmd sync function fails to enforce an upper bound on the params len variable. While params len is defined as a 16-bit...

PT-2026-85604

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where the Command Complete dispatch only validates the fixed portion of the LE Set CIG Parameters response. The function hci cc le set cig para...

PT-2026-85635

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFC NCI handlers where nci rf discover ntf packet and nci rf intf activated ntf packet parse notifications into uninitialized on-stack structures nci rf discover n...

PT-2026-85636

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the nci target auto activated function. The function appends a target to the fixed-size array ndev-targetsNCI MAX DISCOVERED TARGETS and increments the...

RHEL 9 : Satellite 6.19.4 Async Update (Important) (RHSA-2026:63385)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63385 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity t...

Unbreakable Enterprise kernel security update

6.12.0-206.104.3.3 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974840 CVE-2026-80590 6.12.0-206.104.3.2 - KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs Weiming Shi Orabug: 39931938 CVE-2026-74517 - tcp: challenge ACK for non-exact...

Unbreakable Enterprise kernel security update

5.15.0-324.217.5.2 - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974835 CVE-2026-80590 5.15.0-324.217.5.1 - crypto: qat: restore misc workqueue lifecycle Manjunath Patil Orabug: 39937535 - LTS version: v5.15.217 Vijayendra Suman - ring-buffer: Use...

MAL-2026-15908 Malicious code in 0nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54eee258f343282c30f3efc6b5effc8aac283b7b02421433c14dee3e14f27aa3 Package name 0nestjs targets developers mistyping nestjs. On npm install, the postinstall hook node index.js executes automatically and performs two...

Malicious code in 0nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54eee258f343282c30f3efc6b5effc8aac283b7b02421433c14dee3e14f27aa3 Package name 0nestjs targets developers mistyping nestjs. On npm install, the postinstall hook node index.js executes automatically and performs two...

CVE-2026-85453

MOOS core-moos through 10.4.0 fails to escape database contents when rendering MOOSDB HTTP pages, allowing attackers to inject malicious scripts. Any MOOS publisher can set variable values containing script payloads that execute in the browser of operators viewing the web interface...