CVE-2026-73250 Notepad++: Install-time PowerShell command injection through installation path

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory $INSTDIR from PowerEditor/installer/nppSetup.nsi into a PowerShell -Command string used by RegisterMSIX to invoke...

CVE-2026-64457

The CVE-2026-64457 issue affects the Linux kernel’s virtio_pci subsystem. When unbinding a virtio balloon device (e.g., echo virtio0 > /sys/bus/virtio/drivers/virtio_balloon/unbind), a NULL pointer dereference can occur due to a mismatch between sparse queue indices and dense queue indices (ho...

CVE-2026-64457 virtio_pci: fix vq info pointer lookup via wrong index

In the Linux kernel, the following vulnerability has been resolved: virtiopci: fix vq info pointer lookup via wrong index Unbinding a virtio balloon device: echo virtio0 /sys/bus/virtio/drivers/virtioballoon/unbind triggers a NULL pointer dereference. The dmesg says: BUG: kernel NULL pointer...

CVE-2026-46141

The CVE-2026-46141 entry concerns a Linux kernel kmemleak memory leak in the powerpc/xive interrupt controller. When MSI‑X vectors are allocated for NVMe devices, the kernel stores per‑irq data in irq_data->chip_data. After a commit that untangled XIVE from child interrupt controllers, xive_ir...

UBUNTU-CVE-2026-46060

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix IRQ cleanup on 6xxx probe failure When adfdevup partially completes and then fails, the IRQ handlers registered during adfisrresourcealloc are not detached before the MSI-X vectors are released. Since the device...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: gve: Added NULL pointer checks when freeing irqs. When freeing notification blocks, we index priv-msixvectors. If we fail to allocate priv-msixvectors see abortwithmsixvectors, this could lead to a NULL pointer dereferencing if t...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: irqchip/alpine-msi: The refcount leak in alpinemsixinitdomains has been fixed. The function ofirqfindparent returns a node pointer with the refcount incremented. We should use ofnodeput on it when it is no longer needed. Add...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010677)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010677 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: clear MSIX permission entry on shutdown Add disabling/clearing of MSIX permissio...

CVE-2026-23361

CVE-2026-23361 affects the Linux kernel PCIe design (dwc: ep) where a posted MSI-X write may race with ATU unmapping, potentially corrupting host memory or triggering IOMMU errors. The mitigation described in the public description is to flush the write by performing a readl() on the same address...

CVE-2026-23361

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dwpcieepraisemsixirq to raise an MSI-X interrupt to the host using a writel, which generates a PCI posted write transaction. There's no completio...

Linux Distros Unpatched Vulnerability : CVE-2026-23361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dwpcieepraisemsixirq to raise an MSI-X interrupt to the host using a writel,...

Microsoft Windows App Installer 数据伪造问题漏洞

The Microsoft Windows App Installer is a tool provided by Microsoft Corporation for use with the Windows 10 and Windows 11 operating systems. It allows users to easily install applications by double-clicking .msix or .msixbundle files. This tool supports installation from websites, optional...

The vulnerability of the niu_try_msix() function in the drivers/net/ethernet/sun/niu.c module of the Linux kernel’s Ethernet network adapter support driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the niutrymsix function in the drivers/net/ethernet/sun/niu.c module of the Linux kernel’s Ethernet adapter support driver is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux Distros Unpatched Vulnerability : CVE-2026-23013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: octeonepvf: fix freeirq devid mismatch in IRQ rollback octepvfrequestirqs requests MSI-X queue IRQs with devid set to ioqvector. If requestirq fails...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: i40e: fixed the issue of freeing IRQs in the i40evsirequestirqmsix error path. If requestirq in i40evsirequestirqmsix fails in an iteration later than the first one, the error path attempts to free the IRQs that have been request...

PT-2026-27726

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the PCI subsystem, specifically within the dwc endpoint driver. The issue relates to a race condition when handling MSI-X interrupts. Endpoint drivers...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993056)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993056 advisory. In the Linux kernel, the following vulnerability has been resolved: irqchip/alpine-msi: Fix refcount leak in alpinemsixinitdomains ofirqfindparent returns a node...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992366 advisory. In the Linux kernel, the following vulnerability has been resolved: irqchip/alpine-msi: Fix refcount leak in alpinemsixinitdomains ofirqfindparent returns a node...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992186)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992186 advisory. In the Linux kernel, the following vulnerability has been resolved: irqchip/alpine-msi: Fix refcount leak in alpinemsixinitdomains ofirqfindparent returns a node...

CVE-2023-53811

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Cap MSIX used to online CPUs + 1 The irdma driver can use a maximum number of msix vectors equal to numonlinecpus + 1 and the kernel warning stack below is shown if that number is exceeded. The kernel throws a warning...