CVE-2026-72453 regcache: Do not overwrite error code when finalizing cache after error

In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, and if cache operations include an exit callback, the error code from...

PT-2026-72832

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA mlx5 component where the mlx5r umr update xlt function allocates and DMA maps an XLT buffer using mlx5r umr create xlt. When mlx5 odp populate xlt fails, the...

CVE-2026-72453: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cacheops-populate callback, and if cache operations include an exit callback, the error code from...

CVE-2026-68418 RDMA/irdma: Prevent user-triggered null deref on QP create

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent user-triggered null deref on QP create Previously, the user QP creation path would only attempt to populate iwqp-iwpbl if the user-provided req.userwqebufs field was non-zero. The problem is that iwqp-iwpbl is...

ROS-20260806-73-0002

The vulnerability of the populatesectionmemmap function in the Linux operating system is related to improper cleanup or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

PoD: Don't try to reclaim special pages

ISSUE DESCRIPTION A guest started with Populated on Demand enabled PoD can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen. IMPACT A buggy or malicious guest can cause corruption of Xen's state, leading to crashes or other...

CVE-2026-64239

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in regionsrmdirs DAMON sysfs maintains the DAMOS tried region directory objects via a linked list. When the user requests refresh of the directories, DAMON sysfs removes all the region...

CVE-2026-64239 mm/damon/sysfs-schemes: delete tried region in regions_rmdirs()

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in regionsrmdirs DAMON sysfs maintains the DAMOS tried region directory objects via a linked list. When the user requests refresh of the directories, DAMON sysfs removes all the region...

SUSE CVE-2026-63873

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix mmstruct reference leak in aie2populaterange aie2populaterange jumps back to the again label without calling mmputmm, leaking a reference to the mmstruct. Add the missing mmput before jumping to again...

CVE-2026-63873

A flaw was found in the Linux kernel's accel/amdxdna driver. The aie2populaterange function, responsible for managing memory structures, fails to properly release a reference to a memory structure mmstruct. This oversight leads to a memory leak, which over time could result in resource exhaustion...

CVE-2026-63873

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix mmstruct reference leak in aie2populaterange aie2populaterange jumps back to the again label without calling mmputmm, leaking a reference to the mmstruct. Add the missing mmput before jumping to again...

CVE-2026-63873 accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range()

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix mmstruct reference leak in aie2populaterange aie2populaterange jumps back to the again label without calling mmputmm, leaking a reference to the mmstruct. Add the missing mmput before jumping to again...

CVE-2026-63873

In the Linux kernel advisory, the bug is in accel/amdxdna handling inside aie2_populate_range, where a missing mmput(mm) before jumping to the again label leaks an mm_struct reference. The issue affects the kernel component implementing the aie2_populate_range path; the root cause is a reference ...

EUVD-2026-45558

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix mmstruct reference leak in aie2populaterange aie2populaterange jumps back to the again label without calling mmputmm, leaking a reference to the mmstruct. Add the missing mmput before jumping to again...

CVE-2026-63873 accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range()

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix mmstruct reference leak in aie2populaterange aie2populaterange jumps back to the again label without calling mmputmm, leaking a reference to the mmstruct. Add the missing mmput before jumping to again...

PT-2026-61190

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the aie2 populate range function within the accel/amdxdna component. The function jumps back to the again label without calling mmputmm, which results in a lea...

Vertx Websocket Component SSRF Information Disclosure

The vulnerability of the VertxWebsocketConsumer.populateExchangeHeaders method in the Vertx WebSocket component from the Java framework Apache Camel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to disclose sensitive information and...

SUSE CVE-2026-53344

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Initialize mcp-dev and mcp-addr before regmap init Regmap initialization triggers regcachemaplepopulate which attempts SPI read to populate cache. SPI read requires mcp-dev and mcp-addr to be set, without them,...

Server-side Request Forgery (SSRF)

Overview ghost is a publishing platform Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the populateImageSizes process in ghost/core/core/server/lib/mobiledoc.js. An authenticated staff user can trigger the server to make outbound requests to attacker-chos...

burl (1.0.0), cegon-set1 (1.0.0) +7 more potentially affected by CVE-2026-48587 via django (2.1.7)

django PYPI version 2.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - burl 1.0.0 - cegon-set1 1.0.0 - cegon-set2 1.0.0 - django-inteliger =0.0.4, =0.3.0, =1.0.0, =6.5.3, =1.0.0b2, =1.0.0b3 - teste-marinonigrande 0.0.1...