CVE-2026-76925: Time-of-check Time-of-use (TOCTOU) Race Condition

A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...

The vulnerability of the agp_amd64_probe() function in the drivers/char/agp/amd64-agp.c file of the Linux kernel driver module allows a hacker to cause a system failure.

The vulnerability of the agpamd64probe function in the drivers/char/agp/amd64-agp.c file of the Linux kernel driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the ipu6pci_probe() function in the drivers/media/pci/intel/ipu6/ipu6.c file of the Linux kernel’s multimedia device driver module allows a attacker to cause a service failure.

The vulnerability of the ipu6pciprobe function in the drivers/media/pci/intel/ipu6/ipu6.c file of the Linux multimedia device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `trace_event_raw_event_smc_msg_event()` function in the `net/smc/smcTracePoint.h` header file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the traceeventraweventsmcmsgevent function in the net/smc/smcTracePoint.h header file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the EXPORT_SYMBOL_GPL() function in the net/netfilter/nfnetlink.osf.c module of the Linux kernel’s netfilter component, which allows a hacker to cause a service failure.

The vulnerability of the EXPORTSYMBOLGPL function in the net/netfilter/nfnetlink.osf.c module of the netfilter kernel of the Linux operating system is related to pointer manipulation. Exploitation of this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the map_kptr_match_type() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in the Linux operating system’s kernel, allows a hacker to trigger a service failure.

The vulnerability of the mapkptrmatchtype function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a system failure...

The vulnerability of the fw_classify() function in the net/sched/cls_fw.c module of the network scheduling subsystem of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the fwclassify function in the net/sched/clsfw.c file of the network scheduling subsystem in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xdp_master_redirect() function in the net/core/filter.c module exposes network functions of the Linux kernel, allowing a hacker to cause a service failure.

The vulnerability of the xdpmasterredirect function in the net/core/filter.c module, which supports networking functions in Linux kernels, is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the pvr_fwTraceDebugfsInit() function in the drivers/gpu/drm/imagination/pvr_fwTrace.c driver, a part of the Direct Rendering Infrastructure (DRI) kernel driver for Linux operating systems. This vulnerability allows an attacker to cause a service failure.

The vulnerability of the pvrfwTraceDebugfsInit function in the drivers/gpu/drm/imagination/pvrfwTrace.c file of the Direct Rendering Infrastructure DRI driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the rds_ib_send_unmap_op() function in the net/rds/ib_send.c module, which is part of the networking functions of the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the rdsibsendunmapop function in the net/rds/ibsend.c module, which is part of the networking functions in the Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sun4i_backend_atomic_check() function in the drivers/gpu/drm/sun4i/sun4i_backend.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the sun4ibackendatomiccheck function in the drivers/gpu/drm/sun4i/sun4ibackend.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service...

The vulnerability of the stratix10_rsu_probe() function in the drivers/firmware/stratix10-rsu.c driver file of the Linux kernel operating system allows a hacker to cause a service failure.

The vulnerability of the stratix10rsuprobe function in the drivers/firmware/stratix10-rsu.c file of the Linux kernel firmware driver is related to the pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the cleanup_prefix_route() function in the net/ipv6/addrconf.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the cleanupprefixroute function in the net/ipv6/addrconf.c module of the IPv6 protocol implementation in the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

The vulnerability of the mbox_controller_register() function in the drivers/mailbox/mailbox.c file of the Linux kernel-based mailbox driver module allows a hacker to cause a service failure.

The vulnerability of the mboxcontrollerregister function in the drivers/mailbox/mailbox.c file of the Linux kernel-based mailbox driver module is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the eip93_hmac_setkey() function in the drivers/crypto/inside-secure/eip93/eip93-common.c file of the Linux kernel cryptographic accelerator driver allows a hacker to cause a service failure.

The vulnerability of the eip93hmacsetkey function in the drivers/crypto/inside-secure/eip93/eip93-common.c file of the Linux kernel cryptographic accelerator driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

Prototype Pollution

Overview csv-parse is a parser converting CSV text input into arrays or objects. Affected versions of this package are vulnerable to Prototype Pollution in its duplicate-column handling, which assigns an array to obj'proto' when a header contains duplicate proto entries, triggering the proto sett...

EUVD-2026-70657

Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...

CVE-2026-78583 Incorrect Authorization in Kibana Leading to Privilege Escalation

Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...

CVE-2026-78583 Incorrect Authorization in Kibana Leading to Privilege Escalation

Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...

CVE-2026-84647

A flaw was found in Stapler, a web framework included in Jenkins. This vulnerability allows an attacker with 'Overall/Read' permission to instantiate objects related to configuration through form data binding. The system does not properly restrict the types of objects that can be created, enablin...