PT-2026-64503

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't leak PFN when kvm translate vncr races MMU notifier In the case that kvm translate vncr races with an MMU notifier the early return does not release a reference on the faulted in PFN. Add the necessary call to k...

PT-2026-64516

In the Linux kernel, the following vulnerability has been resolved: mm: page ext: add count limit to page ext iter next to prevent invalid PFN access The page ext iteration API does not validate if the PFN still belongs to a valid section while advancing the iterator. When dynamically adding memo...

PT-2026-64510

In the Linux kernel, the following vulnerability has been resolved: iommufd: Set upper bounds on cache invalidation entry num and entry len iommufd hwpt invalidate takes a user-controlled entry num and entry len, each bounded only by U32 MAX. An entry len beyond the kernel's struct size makes the...

Linux Distros Unpatched Vulnerability : CVE-2026-64289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommufd: Set upper bounds on cache invalidation entrynum and entrylen iommufdhwptinvalidate takes a user-controlled entrynum and entrylen, each bounded only by...

Linux Distros Unpatched Vulnerability : CVE-2026-64282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Don't leak PFN when kvmtranslatevncr races MMU notifier In the case that kvmtranslatevncr races with an MMU notifier the early return does not relea...

Linux Distros Unpatched Vulnerability : CVE-2026-64306

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: drbg - Fix returning success on failure in CTRDRBG drbgctrgenerate sometimes returns success when it fails, leaving the output buffer uninitialized. Fix...

CVE-2026-53402

creationtimestamp| type| source ---|---|--- 2026-07-24 13:25:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrfhb3ikw42o 2026-08-06 04:46:30+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...

MINI-HMFV-RJC2-G79R

Bulletin has no description...

CVE-2026-61065

creationtimestamp| type| source ---|---|--- 2026-07-23 17:51:39+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-24 14:48:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrfluwqcun2v 2026-07-28 05:07:08+00:00| seen|...

CVE-2026-61062

creationtimestamp| type| source ---|---|--- 2026-07-23 17:51:35+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

ECHO-19A1-5004-FD77

Bulletin has no description...

MINI-9379-Q95F-3862

Bulletin has no description...

MINI-QPC7-9W62-8459

Bulletin has no description...

PYSEC-2026-3489 netlicensing-mcp: REST Path Traversal Bypasses Token Redaction

REST Path Traversal Bypasses Token Redaction in netlicensing-mcp Summary The netlicensinggetproduct MCP tool in netlicensing-mcp interpolates a caller-controlled productnumber argument directly into a REST URL path without any validation. Passing ../token as the product number causes httpx to...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fixed a issue where shadow paging use-after-free occurred due to an unexpected role. Commit 0cb2af2ea66ad “KVM: x86: Fixed a issue where shadow paging use-after-free occurred due to an unexpected GFN” corrected a mismat...

CVE-2026-63265

creationtimestamp| type| source ---|---|--- 2026-07-22 22:17:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrbe2dsjny24...

CVE-2026-44883

creationtimestamp| type| source ---|---|--- 2026-07-22 20:53:03+00:00| seen| https://bsky.app/profile/smit-artem.bsky.social/post/3mrb7dnrzgs2m...

CVE-2026-61235

creationtimestamp| type| source ---|---|--- 2026-07-22 20:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrb6bs2urd2a 2026-07-23 18:18:09+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-16615 Librest: weak random number generation in pkce implementation

A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand function from the GLib API, a cryptographically insecure pseudo-random number generator. Because the generated "code verifier" lacks sufficient cryptographic entropy, a malicious actor can reverse-engineer...

CVE-2026-16615

A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand function from the GLib API, a cryptographically insecure pseudo-random number generator. Because the generated "code verifier" lacks sufficient cryptographic entropy, a malicious actor can reverse-engineer...