CVE-2026-63889 scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32

In the Linux kernel, the following vulnerability has been resolved: scsi: scsitransportfc: Widen FPIN pname walker counter to u32 An adjacent Fibre Channel fabric actor that can deliver an FPIN ELS frame to an lpfc or qla2xxx Linux initiator can trigger a non-return in the generic FC transport...

CVE-2026-63889 scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32

In the Linux kernel, the following vulnerability has been resolved: scsi: scsitransportfc: Widen FPIN pname walker counter to u32 An adjacent Fibre Channel fabric actor that can deliver an FPIN ELS frame to an lpfc or qla2xxx Linux initiator can trigger a non-return in the generic FC transport...

EUVD-2026-45662

In the Linux kernel, the following vulnerability has been resolved: scsi: scsitransportfc: Widen FPIN pname walker counter to u32 An adjacent Fibre Channel fabric actor that can deliver an FPIN ELS frame to an lpfc or qla2xxx Linux initiator can trigger a non-return in the generic FC transport...

EUVD-2026-45541

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Do not read uninitialized fragment address in airohadevxmit The transmit loop in airohadevxmit reads fragment address and length during its final iteration, when the loop index equals skbshinfoskb-nrfrags, at which...

CVE-2026-63827

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix use-after-free in rawdata dedup loop aareplaceprofiles walks ns-rawdatalist to dedup the incoming policy blob against entries already attached to existing profiles. Per the kernel-doc on struct aaloaddata, list...

CVE-2026-53394 nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race

In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race When findorallocopenstateowner encounters an unconfirmed owner, it calls releaseopenowner and sets oo = NULL. Control then falls through past the if oo guard -...

PT-2026-61294

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the zl3073x component of the DPLL Digital Phase Locked Loop subsystem. The issue occurs during device teardown when change work could be re-scheduled after...

Linux Distros Unpatched Vulnerability : CVE-2026-63827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fix use-after-free in rawdata dedup loop aareplaceprofiles walks ns-rawdatalist to dedup the incoming policy blob against entries already attached to...

PT-2026-61299

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A loop detection failure exists in the network scheduler when using mirred redirects. Specifically, when a packet is redirected to ingress from either ingress or egress, the loop state...

PT-2026-61285

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the IPv6 implementation where an infinite loop can occur within the fib6 select path function. This happens because writers holding the tb6 lock may execute list del rcu...

PT-2026-61206

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An adjacent Fibre Channel fabric actor, such as a compromised switch, fabric controller, or a same-zone N Port capable of source spoofing, can trigger a non-return state in the generic F...

PT-2026-61371

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the network shaper component where the net shaper nl group doit function fails to deduplicate NET SHAPER A LEAVES entries. If a user provides the same leaf handle multip...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3089-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3089-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: -...

CVE-2026-45785

OpenMcdf is a fully .NET / C library to manipulate Compound File Binary File Format files, also known as Structured Storage. In 3.1.3 and earlier, the BST name-lookup loop in DirectoryTree.TryGetDirectoryEntry OpenMcdf/DirectoryTree.cs:35-46 walks directory entries by repeatedly calling...

CVE-2026-45785 OpenMcdf: Uncatchable infinite loop in DirectoryTree.TryGetDirectoryEntry on crafted CFB directory cycle

OpenMcdf is a fully .NET / C library to manipulate Compound File Binary File Format files, also known as Structured Storage. In 3.1.3 and earlier, the BST name-lookup loop in DirectoryTree.TryGetDirectoryEntry OpenMcdf/DirectoryTree.cs:35-46 walks directory entries by repeatedly calling...

CVE-2026-45785

OpenMcdf- CVE-2026-45785 is a denial-of-service bug in the BST name-lookup loop used by DirectoryTree.TryGetDirectoryEntry. A crafted CFB with cyclic Left/Right sibling links can cause the while (child is not null) loop to run forever, since there is no cycle detection in TryGetDirectoryEntry (ro...

CVE-2026-45785 OpenMcdf: Uncatchable infinite loop in DirectoryTree.TryGetDirectoryEntry on crafted CFB directory cycle

OpenMcdf is a fully .NET / C library to manipulate Compound File Binary File Format files, also known as Structured Storage. In 3.1.3 and earlier, the BST name-lookup loop in DirectoryTree.TryGetDirectoryEntry OpenMcdf/DirectoryTree.cs:35-46 walks directory entries by repeatedly calling...

CVE-2026-21762

HCL DevOps Loop is affected by missing HTTP security headers. Missing security headers may reduce browser protections against common web-based attacks such as clickjacking, MIME-type sniffing, and cross-site scripting...

CVE-2026-21764

HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted. This may result in unintended application behavior under certain conditions...

CVE-2026-21760

HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality Forced Browsing vulnerability. Improper authorization checks may allow unauthorized users to access restricted administrative functionality by directly accessing protected application endpoints...