12852 matches found
PT-2026-79817
A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...
PT-2026-79836
Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model...
CVE-2026-78182: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System up to 300R004C00B300. The affected element is the function PlanController.getImmediatePlans of the file /xbreport/api/v1/plamange/plansImmediate. The manipulation of the argumen...
SUSE CVE-2026-74602
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rballocatecpubuffer In rballocatecpubuffer, bpage-order was omitted, leaving it as 0. This is an issue for a ring-buffer with subbufs bigger than PAGESIZE if when freed: freebufferpage...
SUSE CVE-2026-74634
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when resizing is disabled Because ringbuffersubbuforderset frees buffer pages, we can't allow it when resizing is disabled. A non-consuming reader is at risk of use-after-free rbadvanceite...
CVE-2026-74634
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when resizing is disabled Because ringbuffersubbuforderset frees buffer pages, we can't allow it when resizing is disabled. A non-consuming reader is at risk of use-after-free rbadvanceite...
CVE-2026-74602
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rballocatecpubuffer In rballocatecpubuffer, bpage-order was omitted, leaving it as 0. This is an issue for a ring-buffer with subbufs bigger than PAGESIZE if when freed: freebufferpage...
UBUNTU-CVE-2026-74634
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when resizing is disabled Because ringbuffersubbuforderset frees buffer pages, we can't allow it when resizing is disabled. A non-consuming reader is at risk of use-after-free rbadvanceite...
CVE-2026-74691
CVE-2026-74691 is a teardown ordering bug in the Linux kernel Thunderbolt network driver (net: thunderbolt / tbnet). The driver stops its DMA rings and frees frame buffers before deactivating the high-speed DMA paths, but the setup path was previously fixed to enable paths last. Teardown was neve...
EUVD-2026-64571
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when resizing is disabled Because ringbuffersubbuforderset frees buffer pages, we can't allow it when resizing is disabled. A non-consuming reader is at risk of use-after-free rbadvanceite...
CVE-2026-74634
This vulnerability affects the Linux kernel ring-buffer subsystem. The root cause is that ring_buffer_subbuf_order_set() frees buffer pages even when resizing is disabled, leaving a non-consuming reader exposed to a use-after-free in rb_advance_iter(). The fix returns -EBUSY on resize_disabled, m...
CVE-2026-74634 ring-buffer: Prevent subbuf order change when resizing is disabled
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when resizing is disabled Because ringbuffersubbuforderset frees buffer pages, we can't allow it when resizing is disabled. A non-consuming reader is at risk of use-after-free rbadvanceite...
CVE-2026-74634 ring-buffer: Prevent subbuf order change when resizing is disabled
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when resizing is disabled Because ringbuffersubbuforderset frees buffer pages, we can't allow it when resizing is disabled. A non-consuming reader is at risk of use-after-free rbadvanceite...
CVE-2026-74617 dibs: initialise dibs->lock in dibs_dev_alloc()
In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs-lock in dibsdevalloc dibs-lock is initialised by dibsdevadd, but a dibs device can already take interrupts before that call: ismprobe runs ismdevinit, and hence requestirq, before it calls dibsdevadd. No...
CVE-2026-74602 ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rballocatecpubuffer In rballocatecpubuffer, bpage-order was omitted, leaving it as 0. This is an issue for a ring-buffer with subbufs bigger than PAGESIZE if when freed: freebufferpage...
CVE-2026-74602
CVE-2026-74602 is a Linux kernel vulnerability in the ring-buffer subsystem. In rb_allocate_cpu_buffer(), the field bpage->order was left uninitialized (defaulting to 0). This becomes a problem when a ring-buffer uses subbuffers larger than PAGE_SIZE, because free_buffer_page() relies on the c...
CVE-2026-74602 ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rballocatecpubuffer In rballocatecpubuffer, bpage-order was omitted, leaving it as 0. This is an issue for a ring-buffer with subbufs bigger than PAGESIZE if when freed: freebufferpage...
EUVD-2026-64539
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rballocatecpubuffer In rballocatecpubuffer, bpage-order was omitted, leaving it as 0. This is an issue for a ring-buffer with subbufs bigger than PAGESIZE if when freed: freebufferpage...
CVE-2026-74593
This CVE affects the Linux kernel 's sched_ext subsystem. The root cause is a lock ordering bug in scx_cgroup_lock(), which acquires scx_cgroup_ops_rwsem (write) before cgroup_lock(). This ordering can create a deadlock through kernfs when concurrent operations on cgroup rmdir and cpu.weight writ...