CLEANSTART-2026-NC34833 PHP has various global state that temporarily points into request memory

Security vulnerability affects the php package. PHP has various global state that temporarily points into request memory...

CLEANSTART-2026-LE11033 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request

Security vulnerability affects the php package. PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request...

CVE-2026-98726

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express multipath subsystem. A malicious NVMe device can provide crafted Asymmetric Namespace Access ANA log data that triggers an integer underflow during buffer bounds validation. This failure leads to an out-of-bounds memory read,...

CVE-2026-98729

A flaw was found in the Linux kernel. On systems utilizing specific AMD processors, improper virtual address alignment for huge page memory mappings can allow a local user to cause a Denial of Service DoS. When unmapping these misaligned memory ranges during teardown, the kernel encounters an...

CVE-2026-115391

A flaw was found in Wasmtime. A malicious guest can cause a Denial of Service DoS on the host by submitting excessively large data buffers to file or HTTP write streams within the WebAssembly System Interface WASI. Because incoming guest writes are buffered in host memory without size limits, thi...

CVE-2026-115383

A flaw was found in Wasmtime. This vulnerability allows an untrusted guest module to cause a Denial of Service DoS by triggering a host application crash. When the WebAssembly exceptions feature is enabled, Wasmtime improperly validates imported tags that use subtypes of expected types. A malicio...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP Sentinel A reverse proxy that protects PHP applications f...

PT-2026-121910

In the Linux kernel, the following vulnerability has been resolved: rust: irq: pass RegistrationInner as cookie to request irq With commit ba268514ea14 "rust: devres: fix race condition due to nesting", Devres::new returns Result by value instead of initializing in-place via PinInit. Because...

Linux Distros Unpatched Vulnerability : CVE-2026-99019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: ch: Do not keep references to data transfer element devices chreadconfig looks up the scsidevice of every data transfer element whose SCSI id the changer...

Linux Distros Unpatched Vulnerability : CVE-2026-75508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.2.3 until 3.2.12 and 3.3.0rc1, the parser's maxtokens limit in...

PT-2026-122052

In the Linux kernel, the following vulnerability has been resolved: rust binder: reschedule node refcount update on thread exit When a thread exits via BINDER THREAD EXIT, its pending work items are cancelled. If a thread exits while holding a pending node refcount increment e.g. pushed as deferr...

PT-2026-122221

Name of the Vulnerable Software and Affected Versions Twisted versions prior to 26.10.0rc1 Description An unauthenticated remote peer can cause memory exhaustion leading to a denial of service. The issue occurs in the twisted.conch.telnet.Telnet.dataReceived function, which appends bytes received...

PHP 7.0.33 PHP2Shell Patch

PHP version 7.0.33 for CentOS 7 contains remote code execution issues involving out-of-memory state corruption and stale global state. This provides patches and a script to build a remedial Remi source RPM...

PT-2026-121876

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: restore RX state on reload failure lan966x fdma reload backs up rx-page pool and rx-fdma before reallocating the RX resources for the new MTU. If the allocation fails, the restore path puts these fields back before...

Linux Distros Unpatched Vulnerability : CVE-2026-113679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HarfBuzz 8.0.0 through 14.6.0 contains an out-of-bounds write vulnerability in the experimental WebAssembly shaper because the fontglyphtostring import has a...

Linux Distros Unpatched Vulnerability : CVE-2026-90797

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unlimited gzip decompression routine in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any remote client to cause a denial of service via...

UBUNTU-CVE-2026-110752

Text::CSVXS versions before 1.65 for Perl allow memory exhaustion by...

PT-2026-121914

In the Linux kernel, the following vulnerability has been resolved: sched ext: Build the cid tables privately and publish them with RCU The cid tables are visible to the cid kfuncs while being modified: the first enable publishes the global pointers before filling them, ops.init cids overrides...

PT-2026-121966

In the Linux kernel, the following vulnerability has been resolved: namespace: check a recursive bind mount for mount namespace loops do loopback refuses to bind mount the file of a mount namespace that is as old as the caller's or older because a mount namespace that holds a mount of its own fil...

PT-2026-122060

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix heap out-of-bounds write in krb5 authenticate In krb5 authenticate, out len is calculated to determine available headroom in response buf for the incoming Kerberos AP-REP token. However, when SMB2 SESSION SETUP is...