SUSE CVE-2026-93231

In the Linux kernel, the following vulnerability has been resolved: lockd: fix swapped arguments in nlmsvcmatchip When releasing locks by server IP address via /proc/fs/nfsd/unlockip, nlmsvcunlockallbyip calls nlmtraversefiles with the server sockaddr as the opaque @data argument:...

CVE-2026-93231

The Linux kernel contains a vulnerability in the lockd component where the nlmsvc_match_ip() function uses swapped arguments. When releasing locks by server IP address via /proc/fs/nfsd/unlock_ip , the function incorrectly compares a struct sockaddr as a struct nlm_host, leading it to read garbag...

CVE-2026-93231

In the Linux kernel, the following vulnerability has been resolved: lockd: fix swapped arguments in nlmsvcmatchip When releasing locks by server IP address via /proc/fs/nfsd/unlockip, nlmsvcunlockallbyip calls nlmtraversefiles with the server sockaddr as the opaque @data argument:...

CVE-2026-93136 bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation mhiepcreatedevice takes one device reference for the UL channel and another for the DL channel after allocating the transfer device. These references...

CVE-2026-90215 mtd: ubi: Release device reference on busy detach

In the Linux kernel, the following vulnerability has been resolved: mtd: ubi: Release device reference on busy detach ubidetachmtddev obtains a device reference through ubigetdevice before checking whether the UBI device is busy. The busy return path drops ubi-refcount but leaves the device...

The vulnerability of the ttm_bo_evict() function in the drivers/gpu/drm/ttm/ttm_bo.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ttmboevict function in the drivers/gpu/drm/ttm/ttmbo.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability...

UBUNTU-CVE-2026-80687

In the Linux kernel, the following vulnerability has been resolved: iommufd/viommu: Release the igroup lock on the vdevicesize error path iommufdvdeviceallocioctl takes idev-igroup-lock, then validates the driver's vdevicesize against the core structure size with a WARNONONCE. On failure that gua...

CVE-2026-80687 iommufd/viommu: Release the igroup lock on the vdevice_size error path

In the Linux kernel, the following vulnerability has been resolved: iommufd/viommu: Release the igroup lock on the vdevicesize error path iommufdvdeviceallocioctl takes idev-igroup-lock, then validates the driver's vdevicesize against the core structure size with a WARNONONCE. On failure that gua...

SUSE CVE-2026-72128

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix refcount leak in nvmetsqcreate In nvmetsqcreate, a reference on the ctrl is taken via krefgetunlesszero before calling nvmetchecksqid. If nvmetchecksqid fails, the function returns the error directly without releasing...

ROS-20260825-73-0011

The vulnerability in the kernel-lt is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mlx5/std_types.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mlx5/stdtypes.c component in the Linux operating system is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability can allow an attacker to cause service failures...

EUVD-2026-51201

MaxKB is an open-source AI assistant for enterprise. In versions 2.0.0 through 2.10.4-lts, UpdateStoreTool.updatetool passes caller-supplied downloadurl and downloadcallbackurl values to requests.get without equivalent trusted-host and redirect validation, allowing an authenticated workspace user...

CVE-2026-64870 MaxKB: UpdateStoreTool fetches caller-supplied app-store URLs without host validation

MaxKB is an open-source AI assistant for enterprise. In versions 2.0.0 through 2.10.4-lts, UpdateStoreTool.updatetool passes caller-supplied downloadurl and downloadcallbackurl values to requests.get without equivalent trusted-host and redirect validation, allowing an authenticated workspace user...

Improper Validation of Certificate with Host Mismatch

Overview Affected versions of this package are vulnerable to Improper Validation of Certificate with Host Mismatch in the TLS client implementation due to missing hostname verification. An attacker can intercept or manipulate encrypted communications by presenting a certificate for a different...

CVE-2026-47482

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause missing release of memory after effective lifetime. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-53296

A flaw was found in the Linux kernel, specifically within the mailbox-test component. This vulnerability occurs when channels are not correctly released during a probe error, leading to a memory leak and a Use-After-Free UAF condition. A Use-After-Free UAF is a memory corruption vulnerability tha...

ROS-20260616-73-0038

The vulnerability in ImageMagick 7 is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...

SQL Injection

Overview agno is an Agno: a lightweight library for building Multi-Agent Systems Affected versions of this package are vulnerable to SQL Injection via the deletebymetadata function in the clickhouse backend. An attacker can execute unintended SQL commands by supplying malicious metadata keys and...

CVE-2026-46046

A flaw was found in the Linux kernel's ext4 filesystem. A reference count refcount leak occurs in the ext4xattrinodedecrefall function. This issue arises because the iloc.bh buffer head, acquired by ext4getinodeloc, is not properly released with brelse. This can lead to resource exhaustion or...

CVE-2026-43151 Revert "media: iris: Add sanity check for stop streaming"

In the Linux kernel, the following vulnerability has been resolved: Revert "media: iris: Add sanity check for stop streaming" This reverts commit ad699fa78b59241c9d71a8cafb51525f3dab04d4. Revert the check that skipped stopstreaming when the instance was in IRISINSTERROR, as it caused multiple...