EUVD-2026-48812

In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binderfreetransaction In binderfreetransaction, the t-toproc is read under the t-lock. However, once the t-lock is dropped, the toproc can die in parallel. This leads to a use-after-free error when we attempt t...

CVE-2026-64468

CVE-2026-64468 (binder UAF) affects the Linux kernel Binder subsystem. The vulnerability occurs in binder_free_transaction() where t->to_proc is read while holding t->lock; after releasing the lock, to_proc can die in parallel, leading to a use-after-free when acquiring its inner lock. Advi...

CVE-2026-64468 binder: fix UAF in binder_free_transaction()

In the Linux kernel, the following vulnerability has been resolved: binder: fix UAF in binderfreetransaction In binderfreetransaction, the t-toproc is read under the t-lock. However, once the t-lock is dropped, the toproc can die in parallel. This leads to a use-after-free error when we attempt t...

CVE-2026-64450

CVE-2026-64450: In Linux kernel TIPC, a broadcast Gap ACK blocks record could be read out-of-bounds due to a missing check that the record fits in the message data area. The bug occurs when tipc_get_gap_ack_blks() validates the len against ugack/bgack counts but not msg_data_sz(), allowing a reco...

CVE-2026-64416

CVE-2026-64416 is a NULL pointer dereference in the Linux kernel's mm: swap_cgroup subsystem. lookup_swap_cgroup_id() passes swap_cgroup_ctrl[type].map to __swap_cgroup_id_lookup() without verifying the swap type was registered; on a swapless host , every ctrl->map is NULL, causing a crash. Th...

CVE-2026-64370 posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Fix pid refcount leak in docpunanosleep error path In docpunanosleep, posixcputimercreate takes a pid reference via getpid and stores it in timer.it.cpu.pid. If the subsequent posixcputimerset call fails, the...

CVE-2026-64371

In the Linux kernel, the following vulnerability has been resolved: proc: protect ptracemayaccess with execupdatelock part 1 Fix the easy cases where procfs currently calls ptracemayaccess without execupdatelock protection, where the fix is to simply add the extra lock or use mmaccess: -...

CVE-2026-64371

CVE-2026-64371 is a race condition in the Linux kernel procfs subsystem where several functions call ptrace_may_access() without exec_update_lock protection. The affected functions include do_task_stat(), proc_pid_wchan(), proc_map_files_lookup(), proc_map_files_readdir(), proc_ns_get_link(), and...

CVE-2026-64281

CVE-2026-64281 affects the Linux kernel svcrdma transport (svc_rdma) where threads parked in svc_rdma_sq_wait() could hang indefinitely during transport teardown due to missing wakeups on close. The fixed flow adds svc_rdma_xprt_deferred_close(), which calls svc_xprt_deferred_close() and then wak...

aquaman v0.14.0

🔱 Aquaman 🔱 The only independent credential proxy for AI agents: bring-your-own-vault isolation & least-privilege request policies. Your keys stay where you already keep them, never in the agent's memory. Compatible with 1Password, keychain, keepassxc and many others. You set up Claude Code,...

SUSE CVE-2026-64229

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86FEATUREPCID and keeps CR4.PCIDE from being set to one. On AMD CPUs that support INVLPGB, broadcast TLB flushing remains enabled. There are...

SUSE CVE-2026-64253

In the Linux kernel, the following vulnerability has been resolved: kernel/fork: clear PFBLOCKTS in copyprocess PFBLOCKTS is only set in blktimegetns when current-plug is non-NULL, and blkfinishplug clears it via blkflushplug before NULLing the plug pointer. copyprocess breaks the invariant by...

Linux Distros Unpatched Vulnerability : CVE-2026-16445

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a...

Linux Distros Unpatched Vulnerability : CVE-2026-64363

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: appleir: fix UAF on pending keyuptimer in remove appleirremove runs hidhwstop before timerdeletesync. hidhwstop synchronously unregisters the HID input...

openSUSE 16 Security Update : perl-DBI (openSUSE-SU-2026:21412-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21412-1 advisory. - CVE-2026-15392: failure to validate symbolic links during table path resolution could allow unauthorized file reads and writes outside the...

brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash

Summary expand bounds the number of results it produces the max option, 100000 by default but not their length. By chaining many brace groups, an attacker keeps the result count under max while making every result grow with the number of groups. Building max long results — plus the intermediate...

GHSA-MH99-V99M-4GVG brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash

Summary expand bounds the number of results it produces the max option, 100000 by default but not their length. By chaining many brace groups, an attacker keeps the result count under max while making every result grow with the number of groups. Building max long results — plus the intermediate...

Incorrect Authorization

Overview vantage6 is a vantage6 command line interface Affected versions of this package are vulnerable to Incorrect Authorization due to missing ownership checks in the edit process. An attacker can modify another developer's algorithm metadata, such as updating the image or image tag, by...

SQL Injection

Overview @budibase/server is a Budibase Web Server Affected versions of this package are vulnerable to SQL Injection via the DESCRIBE process. An attacker can execute arbitrary SQL commands by creating a table with a specially crafted name containing backticks and semicolons, which are not proper...

nodejs: Node.js: Permission Model bypass via `process.report.writeReport()` path misvalidation

A flaw was found in Node.js. This vulnerability allows a bypass of the Permission Model enforcement due to path misvalidation within the process.report.writeReport function. An attacker could exploit this to bypass intended security boundaries, potentially leading to unauthorized access to...