PT-2026-79598

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur in the sched ext component when scx cgroup lock acquires a write-lock on scx cgroup ops rwsem before taking the cgroup lock. This sequence creates a circular...

CVE-2026-74646: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: take fl-lock when moving mmaps on interrupted invoke When an invoke is interrupted by a signal, waitforcompletioninterruptible returns -ERESTARTSYS and fastrpcinternalinvoke moves every buffer from fl-mmaps onto...

PT-2026-79622

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where dibs-lock is initialized by dibs dev add, but a device may trigger interrupts before this call occurs. Specifically, ism probe executes ism dev init and request irq...

PT-2026-79614

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Transparent Inter-Process Communication TIPC implementation. The function tipc node link down caches a link pointer before acquiring the node lock. I...

PT-2026-79661

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the fib nhc update mtu function. The function iterates through the nexthop exception table under RTNL, but RTNL does not serialize this process with PMTU...

Linux Distros Unpatched Vulnerability : CVE-2026-74624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntrack: defer invalid log until after unlock TCP and SCTP conntrack paths can emit invalid-packet logs while ct-lock is still held. When invalid...

Linux Distros Unpatched Vulnerability : CVE-2026-74617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dibs: initialise dibs-lock in dibsdevalloc dibs-lock is initialised by dibsdevadd, but a dibs device can already take interrupts before that call: ismprobe runs...

Linux Distros Unpatched Vulnerability : CVE-2026-74593

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schedext: Take cgrouplock first in scxcgrouplock scxcgrouplock write-locks scxcgroupopsrwsem and then takes cgrouplock, which can deadlock through kernfs: scx...

Linux Distros Unpatched Vulnerability : CVE-2026-74607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SVM: Serialize accesses to the owner and mirror list with separate lock Interaction between KVMCAPVMMOVEENCCONTEXTFROM and KVMCAPVMCOPYENCCONTEXTFROM can...

CVE-2026-74617: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs-lock in dibsdevalloc dibs-lock is initialised by dibsdevadd, but a dibs device can already take interrupts before that call: ismprobe runs ismdevinit, and hence requestirq, before it calls dibsdevadd. No...

PT-2026-79738

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pca953x GPIO driver where the pca953x irq bus sync unlock function fails to hold the i2c lock during regmap operations. Because locking is disabled in the regmap...

PT-2026-79651

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the fastrpc component of the Linux kernel. When an invoke operation is interrupted by a signal, the wait for completion interruptible function returns...

PT-2026-79629

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur in the netfilter nf conntrack component when TCP and SCTP conntrack paths emit invalid-packet logs while the ct-lock is still held. If invalid logging is routed to...

PT-2026-79705

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Linux kernel within the tc new tfilter function. This occurs when two threads attempt to create filters such as a u32 filter and a flower filter in the sam...

PT-2026-79612

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM SVM component where the interaction between KVM CAP VM MOVE ENC CONTEXT FROM and KVM CAP VM COPY ENC CONTEXT FROM can lead to two problems. First, in the sev...

Linux Distros Unpatched Vulnerability : CVE-2026-74646

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - misc: fastrpc: take fl-lock when moving mmaps on interrupted invoke When an invoke is interrupted by a signal, waitforcompletioninterruptible returns -ERESTARTS...

CVE-2026-33047

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, an object can be locked by a user who is not assigned write permissions. This issue has been fixed in version 3.2.3...

EUVD-2026-64174

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, an object can be locked by a user who is not assigned write permissions. This issue has been fixed in version 3.2.3...

CVE-2026-33047

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, an object can be locked by a user who is not assigned write permissions. This issue has been fixed in version 3.2.3...

CVE-2026-33047 Combodo iTop: Object can be locked by a user without write permissions

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, an object can be locked by a user who is not assigned write permissions. This issue has been fixed in version 3.2.3...