CVE-2026-97426: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/pm: fix SmartShift bias sysfs store PM refcount on parse error Return the parse error before acquiring PM access...

Ubuntu 20.04 LTS / 26.04 LTS : SQL parse vulnerabilities (USN-8808-1)

The remote Ubuntu 20.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8808-1 advisory. It was discovered that SQL parse contained multiple algorithmic complexity flaws when parsing SQL statements with deeply nested parentheses,...

PT-2026-98060

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/pm component where the SmartShift bias sysfs store fails to handle the PM refcount correctly during a parse error. The system should return the parse...

PT-2026-98090

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the ACPICA component due to an incorrect condition check for AML ELSE OP within the acpi ps parse loop function. Recommendations At the moment,...

PT-2026-98299

Name of the Vulnerable Software and Affected Versions LibRaw version 0.22.0 Description An incorrect numeric conversion occurs in the parse tiff ifd function when processing the TIFF tag 0x00fe NewSubfileType. A specially crafted RAW, TIFF, or DNG file can provide a NewSubfileType value that...

USN-8808-1: SQL parse vulnerabilities

It was discovered that SQL parse contained multiple algorithmic complexity flaws when parsing SQL statements with deeply nested parentheses, comments, or dollar-quoted string literals. An attacker could use this issue to cause SQL parse to consume excessive CPU resources, resulting in a denial of...

PT-2026-97562

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 3.13.15 RabbitMQ versions prior to 4.0.20 RabbitMQ versions prior to 4.1.11 RabbitMQ versions prior to 4.2.6 Description An unauthenticated network attacker can crash a RabbitMQ node with the AMQP 1.0 listener enable...

OPENSUSE-SU-2026:11863-1 perl-XS-Parse-Keyword-0.500.0-1.1 on GA media

These are all security issues fixed in the perl-XS-Parse-Keyword-0.500.0-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-98334

Name of the Vulnerable Software and Affected Versions XS::Parse::Infix versions 0.40 through 0.49 Description A flaw exists in the wrapper function generated for list-associative infix operators. The function uses SvRV instead of SvROK to check if arguments are array references. Because SvRV read...

PT-2026-97150

Name of the Vulnerable Software and Affected Versions JusticeRage Manalyze version 1.0.0 Description A security flaw exists in the PE Parser component within the file manape/pe.cpp. A local attacker can cause an integer underflow—a condition where a subtraction results in a value smaller than the...

github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending oversized or invalid baggage headers. The Parse function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when...

github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service DoS by sending oversized or invalid baggage headers. The Parse function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when...

PT-2026-96140

Name of the Vulnerable Software and Affected Versions Conda versions prior to 26.5.2 Description The parse entry point def function in conda/common/path/python.py accepts unvalidated entry-point commands from the info/link.json metadata of noarch:python packages. The CreatePythonEntryPointAction ...

PT-2026-96128

Name of the Vulnerable Software and Affected Versions CuteNews version 2.1.2 Description Deserialization of untrusted data occurs within the cn parse url function. A remote attacker can inject arbitrary values into internal request variables, such as referer, by submitting a crafted base64-encode...

PT-2026-96244

A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI Small Computer System Interface Vital Product Data VPD page 0x80 data. This malformed data, specifically an untrusted page length field, can lead to a stack...

PT-2026-95829

Name of the Vulnerable Software and Affected Versions mint versions 0.1.0 through 1.10.0 Description An inconsistent interpretation of HTTP requests, known as HTTP Request/Response Smuggling, allows a malicious HTTP/1 server to desynchronize a strict intermediary and the Mint client on a pooled...

PT-2026-95790

Name of the Vulnerable Software and Affected Versions WP Optimizer versions prior to 2.5.1 Description Authenticated attackers with administrator-level access can perform SQL Injection through the 's' parameter. The issue occurs in the parse key compare field function of the Query class, where a...

PT-2026-102433

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=562985572 Crash type: Heap-buffer-overflow READ 1 Crash state: sas7bdat parse all pages pass2 readstat parse sas7bdat fuzz format sas7bdat.c...

Linux Distros Unpatched Vulnerability : CVE-2026-90150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pnfs/blocklayout: Fix device leaks on parse failure blparseconcat and blparsestripe allocate a child device array and then parse each child in turn. If parsing ...

AZL-102081 CVE-2026-90150 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: pnfs/blocklayout: Fix device leaks on parse failure blparseconcat and blparsestripe allocate a child device array and then parse each child in turn. If parsing a child fails, the failed child is not counted in nrchildren and the...