DEBIAN-CVE-2026-89988

In the Linux kernel, the following vulnerability has been resolved: kprobes: Protect kprobeblacklist with RCU withinkprobeblacklist traverses kprobeblacklist without holding kprobemutex. When a module is unloaded, kproberemoveareablacklist removes blacklist entries and immediately frees them with...

CVE-2026-89988

This Linux kernel vulnerability affects the kprobes subsystem, specifically the kprobe_blacklist list. The root cause is a use-after-free : __within_kprobe_blacklist() traverses the blacklist without holding kprobe_mutex, so when a module is unloaded and kprobe_remove_area_blacklist() frees entri...

CVE-2026-89988 kprobes: Protect kprobe_blacklist with RCU

In the Linux kernel, the following vulnerability has been resolved: kprobes: Protect kprobeblacklist with RCU withinkprobeblacklist traverses kprobeblacklist without holding kprobemutex. When a module is unloaded, kproberemoveareablacklist removes blacklist entries and immediately frees them with...

[SECURITY] [DSA 6496-2] nginx regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-6496-2 [email protected] https://www.debian.org/security/ Aron Xu September 16, 2026 https://www.debian.org/security/faq -...

GHSA-J374-979J-MCX7 vulnerabilities

Vulnerabilities for packages: strongswan...

kernel: crypto: qat - validate RSA CRT component lengths

A flaw was found in the Linux kernel's QAT QuickAssist Technology crypto module. This vulnerability occurs in the RSA key parser when handling CRT Chinese Remainder Theorem components. An underflow can happen during a memory copy operation if an RSA CRT component is larger than its allocated...

kernel: crypto: qat - validate RSA CRT component lengths

A flaw was found in the Linux kernel's QAT QuickAssist Technology crypto module. This vulnerability occurs in the RSA key parser when handling CRT Chinese Remainder Theorem components. An underflow can happen during a memory copy operation if an RSA CRT component is larger than its allocated...

SUSE CVE-2026-82049

In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose...

Huawei HarmonyOS Permission Control Vulnerability (CNVD-2026-37868)

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei HarmonyOS has a permission control vulnerability, which stems from a flaw in the event notification module’s permission management. Currently, no detailed details about thi...

CVE-2026-92398: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in Ruijie RG-EW3000GX EW3.01B11P380. Affected by this issue is some unknown functionality of the file /etc/rgconfig/admin of the component userlistnote Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the...

OpenSSL CMP DoS

The vulnerability of the CMP module in the OpenSSL library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

OpenSSL CMP DoS

The vulnerability of the CMP module in the OpenSSL library is related to deficiencies in the formatting string processing mechanism. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Huawei HarmonyOS/EMUI Permission Control Vulnerability (CNVD-2026-37866)

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei EMUI is an emotional operating system developed by Huawei based on Android. There is a permission control vulnerability in Huawei HarmonyOS/EMUI. This vulnerability stems...

PT-2026-94124

Name of the Vulnerable Software and Affected Versions djust versions prior to 1.0.7 Description djust allows an unauthenticated WebSocket or SSE client to trigger the import and execution of the top-level code of any importable Python module. This occurs because the live transport resolves the...

Linux Distros Unpatched Vulnerability : CVE-2026-89909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LoongArch: KVM: Free init resources if kvminit fails kvmloongarchinit calls kvmloongarchenvinit to allocate the per-CPU kvmcontext vmcs and kvmloongarchops and ...

PT-2026-94021

A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function of the file /module/leave/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used...

PT-2026-93855

A vulnerability was found in Ruijie RG-EW3000GX EW 3.01B11P380. Affected by this issue is some unknown functionality of the file /etc/rg config/admin of the component user list note Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate...

Huawei HarmonyOS out-of-bounds read vulnerability

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei HarmonyOS has a out-of-bounds read vulnerability. This vulnerability stems from an issue with out-of-bounds reading in the graphics module. Attackers can exploit this...

OpenSSL CMP DoS

The vulnerability of the CMP module in the OpenSSL library is related to the pointer manipulation during the processing of the protectionAlg parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Huawei HarmonyOS Permission Control Vulnerability (CNVD-2026-37862)

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei HarmonyOS has a permission control vulnerability. This vulnerability stems from a flaw in the window module’s permission management. Attackers can exploit this vulnerabilit...