CVE-2026-80981 net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free of the LLC qentry in smcllcsrvaddlink smcllcsrvaddlink keeps addllc pointing into the queue entry: addllc = &qentry-msg.addlink; smcllc.c:1482 ... smcllcsaveaddlinkinfolinknew, addllc; smcllc.c:1494...

CVE-2026-80981

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free of the LLC qentry in smcllcsrvaddlink smcllcsrvaddlink keeps addllc pointing into the queue entry: addllc = &qentry-msg.addlink; smcllc.c:1482 ... smcllcsaveaddlinkinfolinknew, addllc; smcllc.c:1494...

CVE-2026-72710

SPIP before 4.4.18 contains a mass assignment vulnerability in the editerobjet action that allows unauthenticated attackers to write arbitrary rows to any SQL table lacking a champseditables allowlist by supplying an attacker-controlled arg parameter resolving to internal database tables. Attacke...

CVE-2026-72710

SPIP versions before 4.4.18 contain a critical remote code execution vulnerability in the editer_objet action. The arg parameter resolves SQL table names without enforcing an editable-columns allowlist, allowing an attacker with a valid nonce to supply arg=job/0 with crafted fonction and args val...

CVE-2026-72710 SPIP < 4.4.18 RCE via editer_objet.php Job Queue Injection

SPIP before 4.4.18 contains a mass assignment vulnerability in the editerobjet action that allows unauthenticated attackers to write arbitrary rows to any SQL table lacking a champseditables allowlist by supplying an attacker-controlled arg parameter resolving to internal database tables. Attacke...

CVE-2026-72710 SPIP < 4.4.18 RCE via editer_objet.php Job Queue Injection

SPIP before 4.4.18 contains a mass assignment vulnerability in the editerobjet action that allows unauthenticated attackers to write arbitrary rows to any SQL table lacking a champseditables allowlist by supplying an attacker-controlled arg parameter resolving to internal database tables. Attacke...

CVE-2026-85677

The Gutenverse News WordPress plugin before 3.3.3 does not restrict the extra HTML it adds to WordPress's allowed elements to the context it is meant for, applying the same relaxed list to every sanitisation context including untrusted comments, allowing unauthenticated users to store JavaScript...

CVE-2026-80998: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: bnxt: ring the doorbell when SW USO exits early When a burst of packets is handed down to the driver, the driver defers the doorbell to the end by setting txr-kickpending = 1. The normal TX path handles this, but the SW USO...

PT-2026-89783

The Gutenverse News WordPress plugin before 3.3.3 does not restrict the extra HTML it adds to WordPress's allowed elements to the context it is meant for, applying the same relaxed list to every sanitisation context including untrusted comments, allowing unauthenticated users to store JavaScript...

PT-2026-90453

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the USB Type-C Thunderbolt implementation where the tbt altmode remove function drops plug and cable references without draining tbt-work. Because the work function...

Apache Artemis 1.0.0 < 2.45.0 / 2.50.0 < 2.57.0 Multiple Vulnerabilities

The version of Apache Artemis formerly Apache ActiveMQ Artemis installed on the remote host is affected by multiple vulnerabilities: - An unauthenticated remote attacker can craft a CORE protocol SESSIONREATTACH packet to steal an existing session and assume ongoing execution of the previously...

PT-2026-90127

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the network interface of the IPA modem during runtime resume. The ipa start xmit function stops the transmit TX queue before calling pm runtime get, expecting...

PT-2026-90128

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt driver where the TX queue can stall. This occurs when a burst of packets is processed and the driver defers the doorbell by setting txr-kick pending to 1. If...

PT-2026-90226

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the RDMA/cxgb4 component. The c4iw remove function can free the ctx-dev object while registration work is still pending or running. This allows the c4iw...

PT-2026-90180

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the twl4030 charger power supply component where the bci structure is allocated via devm. Two workers, bci-work and bci-current worker, dereference this structure. The...

PT-2026-89913

Name of the Vulnerable Software and Affected Versions SPIP versions prior to 4.4.18 Description A mass assignment issue exists in the editer objet action. Unauthenticated attackers can write arbitrary rows to any SQL table that does not have a champs editables allowlist by providing a controlled...

CVE-2026-85677: Improper Neutralization of Input During Web Page Generation

The Gutenverse News WordPress plugin before 3.3.3 does not restrict the extra HTML it adds to WordPress's allowed elements to the context it is meant for, applying the same relaxed list to every sanitisation context including untrusted comments, allowing unauthenticated users to store JavaScript...

PT-2026-90184

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the lp8788-charger component. The lp8788 charger remove function flushes charger work before unregistering IRQs, which allows an IRQ thread to queue...

PT-2026-90325

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ecryptfs component. The function ecryptfs exorcise daemon drops queued messages from a dying daemon without holding the ecryptfs msg ctx lists mux lock...

CVE-2026-80997: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix stalled modem TX queue after runtime resume ipastartxmit unconditionally stops the TX queue before calling pmruntimeget, relying on the wake scheduled by runtime resume ipamodemwakequeuework to restart it once power...