EUVD-2026-71517

undici vulnerable to response truncation via oversized chunked responses in the dump interceptor...

PoC-CVE-2018-15473

PoC-CVE-2018-15473 OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. CVE: CVE-2018-1547...

Linux Distros Unpatched Vulnerability : CVE-2026-93181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/x86/intel/uncore: Fix uncorebox ref/unref ordering In uncoreeventcpuonline, uncoreboxref was called before uncorechangecontext. uncoreboxref gates on box-c...

DEBIAN-CVE-2026-93181

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix uncorebox ref/unref ordering In uncoreeventcpuonline, uncoreboxref was called before uncorechangecontext. uncoreboxref gates on box-cpu = 0, but box-cpu is still -1 at that point because...

CVE-2026-93181 perf/x86/intel/uncore: Fix uncore_box ref/unref ordering

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix uncorebox ref/unref ordering In uncoreeventcpuonline, uncoreboxref was called before uncorechangecontext. uncoreboxref gates on box-cpu = 0, but box-cpu is still -1 at that point because...

CVE-2026-93181 perf/x86/intel/uncore: Fix uncore_box ref/unref ordering

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix uncorebox ref/unref ordering In uncoreeventcpuonline, uncoreboxref was called before uncorechangecontext. uncoreboxref gates on box-cpu = 0, but box-cpu is still -1 at that point because...

CVE-2026-93105

This Linux kernel vulnerability affects the IPsec ESP subsystem, specifically the esp_ssg_unref() function. The function unconditionally drops page references on skb frag pages after an AEAD transform, but fails to account for managed frags (SKBFL_MANAGED_FRAG_REFS)—pages owned by a zerocopy ubuf...

CVE-2026-90430

CVE-2026-90430 is a race condition in the Linux kernel's Tegra241 IOMMU command queue virtualization (iommu/tegra241-cmdqv) driver. The function tegra241_vintf_init_lvcmdq() stored a freshly allocated vcmdq pointer into the vintf->lvcmdqs[] array before the underlying arm_smmu_cmdq was fully b...

AZL-101661 CVE-2026-89801 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: fix premature region free on failed OPUNMAPSPARSE In nouveauuvmmbindjobsubmit's OPUNMAPSPARSE arm, op-reg is set from nouveauuvmaregionfind, which only looks the region up and takes no reference; a region's sole...

DEBIAN-CVE-2026-89801

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: fix premature region free on failed OPUNMAPSPARSE In nouveauuvmmbindjobsubmit's OPUNMAPSPARSE arm, op-reg is set from nouveauuvmaregionfind, which only looks the region up and takes no reference; a region's sole...

CVE-2026-89801

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: fix premature region free on failed OPUNMAPSPARSE In nouveauuvmmbindjobsubmit's OPUNMAPSPARSE arm, op-reg is set from nouveauuvmaregionfind, which only looks the region up and takes no reference; a region's sole...

CVE-2026-89801 drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: fix premature region free on failed OPUNMAPSPARSE In nouveauuvmmbindjobsubmit's OPUNMAPSPARSE arm, op-reg is set from nouveauuvmaregionfind, which only looks the region up and takes no reference; a region's sole...

CVE-2026-89801

CVE-2026-89801 is a vulnerability in the Linux kernel 's drm/nouveau/uvmm subsystem. The root cause is in nouveau_uvmm_bind_job_submit()'s OP_UNMAP_SPARSE handling: two failure paths (a -ENOENT busy-region check and a drm_gpuvm_sm_unmap_ops_create() failure) leave op->reg set, violating the do...

CVE-2026-68533

Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imported files into the file manager before evaluating the "Add Message Attachments" permission, which was only checked after the file had been stored. A user denied that permission, or an unauthenticated visitor on a guest-postin...

CVE-2026-68533

Concrete CMS versions below 9.5.3 have a missing authorization flaw in the conversation attachment upload endpoint. The endpoint imported files into the file manager before checking the "Add Message Attachments" permission, meaning a user lacking that permission—or an unauthenticated visitor on a...

CVE-2026-68533 Missing Authorization in Concrete CMS versions below 9.5.3 Conversation File Upload Allows File Import Without the Add Message Attachments Permission

Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imported files into the file manager before evaluating the "Add Message Attachments" permission, which was only checked after the file had been stored. A user denied that permission, or an unauthenticated visitor on a guest-postin...

CVE-2026-91957

FreeRDP before 3.31.0 contains a use-after-free vulnerability in the smartcard RDPDR device handler when worker thread creation fails after device registration. Attackers can trigger thread creation failure during channel setup to cause device pointer deallocation while devman retains a reference...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: locking/wwmutex/test: Fixed potential corruption of the workqueue. In some cases, when running with the test-wwmutex code, I observed unusual behaviors where, sometimes, flushworkqueue seemed to return before all work threads had...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drm/shmem-helper: The erroneous “put” operation has been removed from the error path. The drmgemshmemmmap function does not have a reference in the error code path, resulting in the dma-buf shmem GEM object being freed...

CVE-2026-89545

A flaw was found in the Linux kernel. This vulnerability exists within the sunrpc component, where memory associated with rqargp and rqresp is freed prematurely. Specifically, the svcrqstfree function frees these structures synchronously, while the main request structure rqstp is freed later via...