CVE-2026-73317: Incorrect Authorization

XenForo before 2.3.13 contains a missing authorization vulnerability in the ACP cache-rebuild dispatcher that allows limited administrators with only the rebuildCache permission to perform unauthorized approval queue actions by supplying an arbitrary job class and actor user ID in the POST body...

CVE-2026-72932: Buffer Over-read

Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network...

CVE-2026-68887: Out-of-bounds Read

Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to deny service over a network...

Security update for nghttp2

This update for nghttp2 fixes the following issue: CVE-2026-58055: HTTP/1.1 Upgrade request can lead to HTTP request smuggling and cross-client response-queue poisoning bsc1269489. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate...

SUSE-SU-2026:4029-1 Security update for nghttp2

This update for nghttp2 fixes the following issue: - CVE-2026-58055: HTTP/1.1 Upgrade request can lead to HTTP request smuggling and cross-client response-queue poisoning bsc1269489...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053233)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053233 advisory. In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: free queued packets when closing socket As reported by syzbot 1, there is a memory...

SUSE CVE-2026-80779

In the Linux kernel, the following vulnerability has been resolved: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ The dedicated hardware timestamp RX queue is allocated with q-index equal to lif-ionic-nrxqsperlif. The normal txqcqs array only contains the regular queue pairs, so using th...

CVE-2026-17469

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD queue name parser...

EUVD-2026-71470

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD queue name parser...

CVE-2026-17469

IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to denial of service caused by an off-by-one write (CWE-787: Out-of-bounds Write) in the Line Printer Daemon (LPD) queue name parser . A local authenticated attacker can trigger the out-of-bounds write, resulting in a service disruption with a ...

CVE-2026-17469 IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD queue name parser...

CVE-2026-17469 IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD queue name parser...

CVE-2026-80821

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: put CQ ref on createcq mapping failure nvmetpciepfcreatecq calls nvmetcqcreate, which takes a reference on the controller and installs the completion queue. If the subsequent PCI address-space mapping fails or...

CVE-2026-80779

In the Linux kernel, the following vulnerability has been resolved: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ The dedicated hardware timestamp RX queue is allocated with q-index equal to lif-ionic-nrxqsperlif. The normal txqcqs array only contains the regular queue pairs, so using th...

CVE-2026-80848 xfrm: espintcp: fix UAF during close

In the Linux kernel, the following vulnerability has been resolved: xfrm: espintcp: fix UAF during close ZDI reported and analyzed a race condition during close for espintcp sockets: espintcpclose frees emsg-skb via kfreeskb without holding any socket lock. Concurrently, the xfrmtransreinject wor...

CVE-2026-80821

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: put CQ ref on createcq mapping failure nvmetpciepfcreatecq calls nvmetcqcreate, which takes a reference on the controller and installs the completion queue. If the subsequent PCI address-space mapping fails or...

CVE-2026-80821

CVE-2026-80821 affects the Linux kernel 's nvmet pci-epf driver (NVM Express over Fabrics Target, PCIe Endpoint Function). The vulnerability is a reference leak in nvmet_pci_epf_create_cq(): when PCI address-space mapping fails or returns a too-small partial mapping after nvmet_cq_create() succee...

CVE-2026-80779

CVE-2026-80779 is a Linux kernel vulnerability in the net/ionic network driver. The dedicated hardware timestamp RX queue is allocated with an index equal to nrxqs_per_lif , but the txqcqs array only holds regular queue pairs. Using that out-of-bounds index to set rxq->partner can read one ent...

CVE-2026-80779 net/ionic: avoid OOB TX partner lookup for hwstamp RXQ

In the Linux kernel, the following vulnerability has been resolved: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ The dedicated hardware timestamp RX queue is allocated with q-index equal to lif-ionic-nrxqsperlif. The normal txqcqs array only contains the regular queue pairs, so using th...

CVE-2026-80779 net/ionic: avoid OOB TX partner lookup for hwstamp RXQ

In the Linux kernel, the following vulnerability has been resolved: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ The dedicated hardware timestamp RX queue is allocated with q-index equal to lif-ionic-nrxqsperlif. The normal txqcqs array only contains the regular queue pairs, so using th...