23866 matches found
GHSA-Q86P-QVCQ-MV9C vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-53327
In the Linux kernel, the following vulnerability has been resolved: debugobjects: Do not fillpool if piblockedon On RT enabled kernels, fillpool ends up calling rtlocklock, which asserts if current::piblockedon is set, because a task can obviously only block on one lock as otherwise the priority...
CVE-2026-7928 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-53327
In the Linux kernel, the following vulnerability has been resolved: debugobjects: Do not fillpool if piblockedon On RT enabled kernels, fillpool ends up calling rtlocklock, which asserts if current::piblockedon is set, because a task can obviously only block on one lock as otherwise the priority...
UBUNTU-CVE-2026-53348
In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: fix NULL pointer dereference in sdcadevunregisterfunctions sdcadevunregisterfunctions iterates over all SDCA function descriptors and calls sdcadevunregister on each funcdev without checking for NULL. When a function...
UBUNTU-CVE-2026-53327
In the Linux kernel, the following vulnerability has been resolved: debugobjects: Do not fillpool if piblockedon On RT enabled kernels, fillpool ends up calling rtlocklock, which asserts if current::piblockedon is set, because a task can obviously only block on one lock as otherwise the priority...
CVE-2026-13602
The CVE-2026-13602 issue describes a session‑takeover chain affecting multiple payment integration plugins (Stripe, pretix-mollie, pretix-oppwa, pretix-bitpay, pretix-payone, pretix-secuconnect, pretix-sofort, pretix-saferpay) and core features. A code path transports session parameters via URL b...
CVE-2026-13602
We found a chain of combining multiple weaknesses in the product that could allow an attacker to become any user in the backend and access any data: The payment integration plugins Stripe included in the core system, pretix-mollie, pretix-oppwa, pretix-bitpay, pretix-payone, pretix-secuconnect,...
CVE-2026-53350 ASoC: wm_adsp: Fix NULL dereference when removing firmware controls
In the Linux kernel, the following vulnerability has been resolved: ASoC: wmadsp: Fix NULL dereference when removing firmware controls In wmadspcontrolremove check that the priv pointer is not NULL before attempting to cleanup what it points to. When csdsp creates a control it calls...
CVE-2026-53348 ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions
In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: fix NULL pointer dereference in sdcadevunregisterfunctions sdcadevunregisterfunctions iterates over all SDCA function descriptors and calls sdcadevunregister on each funcdev without checking for NULL. When a function...
CVE-2026-53348
CVE-2026-53348 affects the Linux kernel ASoC SDCA component. The root cause is a NULL pointer dereference in sdca_dev_unregister_functions where func_dev entries may be NULL if a registration failed early or a deferral race occurs during cleanup, leading to a kernel oops (device_del). The issue i...
EUVD-2026-40982
In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: fix NULL pointer dereference in sdcadevunregisterfunctions sdcadevunregisterfunctions iterates over all SDCA function descriptors and calls sdcadevunregister on each funcdev without checking for NULL. When a function...
CVE-2026-53327
In the Linux kernel, the following vulnerability has been resolved: debugobjects: Do not fillpool if piblockedon On RT enabled kernels, fillpool ends up calling rtlocklock, which asserts if current::piblockedon is set, because a task can obviously only block on one lock as otherwise the priority...
EUVD-2026-40961
In the Linux kernel, the following vulnerability has been resolved: debugobjects: Do not fillpool if piblockedon On RT enabled kernels, fillpool ends up calling rtlocklock, which asserts if current::piblockedon is set, because a task can obviously only block on one lock as otherwise the priority...
CVE-2026-53327 debugobjects: Do not fill_pool() if pi_blocked_on
In the Linux kernel, the following vulnerability has been resolved: debugobjects: Do not fillpool if piblockedon On RT enabled kernels, fillpool ends up calling rtlocklock, which asserts if current::piblockedon is set, because a task can obviously only block on one lock as otherwise the priority...
CVE-2026-53327
Summary: CVE-2026-53327 affects the Linux kernel in the debugobjects path where fill_pool() may interact with rtlock_lock() if current::pi_blocked_on is set on RT-enabled kernels. The connected records confirm concrete remediation across several distributions via patched kernel packages or rootio...
CVE-2026-20460
creationtimestamp| type| source ---|---|--- 2026-07-01 12:45:33+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplkcmy35i2t 2026-07-02 06:21:35+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnfcxif2527 2026-07-07 16:45:12+00:00| seen|...
CVE-2026-11562
creationtimestamp| type| source ---|---|--- 2026-07-01 09:56:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplau54uab2k...
Researcher Analyzes 3,000 Live ClickFix Payloads, Exposing API-Driven Malware Delivery
ClickFix , the trick that fools people into running malware by hand, has quietly grown a back office. New research shows the malicious commands behind its fake "prove you're human" pages are now handed out by API-driven servers that give each visitor the same malware in a different disguise. The...
CVE-2026-54901
creationtimestamp| type| source ---|---|--- 2026-07-01 02:20:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhef2ete2k 2026-07-02 01:15:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu7rxux22y...