CVE-2026-80556 mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition

In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: Fix use-after-free in atmciremove due to race condition In atmciprobe, &host-bhwork is bound with atmciworkfunc, and atmciinterrupt, atmcitimeouttimer and atmcidmacomplete can all queue this work on systembhwq. If...

CVE-2026-80556

CVE-2026-80556 is a use-after-free bug in the Linux kernel's atmel-mci MMC driver. The root cause is a race condition in atmci_remove: when the module is removed, the host structure (allocated via devm_kzalloc) is freed after the remove callback returns, but &host->bh_work—which can be queued ...

CVE-2026-74742

Linux kernel veth has a bug where veth_poll() derives the peer TX queue index from rq->xdp_rxq.queue_index, a field only populated when an XDP program is attached. On the plain GRO/NAPI path the value stays 0 for every queue. In a multi-queue setup with GRO enabled and no XDP, all NAPI pollers...

CVE-2026-74742 veth: fix queue index used to wake the peer txq in veth_poll

In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is only initialized by xdprxqinforeg in vethenablexdprange, which runs only...

CVE-2026-74742 veth: fix queue index used to wake the peer txq in veth_poll

In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is only initialized by xdprxqinforeg in vethenablexdprange, which runs only...

CVE-2026-14216

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.7 does not require authentication before processing its pending notification queue, allowing an unauthenticated user to force the dispatch of queued notifications and integration callbacks...

CVE-2026-14216 Amelia < 2.4.7 - Unauthenticated Notification Queue Dispatch

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.7 does not require authentication before processing its pending notification queue, allowing an unauthenticated user to force the dispatch of queued notifications and integration callbacks...

CVE-2026-14216 Amelia < 2.4.7 - Unauthenticated Notification Queue Dispatch

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.7 does not require authentication before processing its pending notification queue, allowing an unauthenticated user to force the dispatch of queued notifications and integration callbacks...

EUVD-2026-66269

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.7 does not require authentication before processing its pending notification queue, allowing an unauthenticated user to force the dispatch of queued notifications and integration callbacks...

CVE-2026-14216

The Booking for Appointments and Events Calendar (also known as Amelia ) WordPress plugin, in versions before 2.4.7 , is vulnerable to an improper authentication flaw. The plugin fails to require authentication when processing its pending notification queue . This allows an unauthenticated user t...

WordPress Booking for Appointments and Events Calendar plugin < 2.4.7 - Unauthenticated Notification Queue Dispatch vulnerability

Unauthenticated Notification Queue Dispatch vulnerability discovered by Manuel Martínez Casasola in WordPress Plugin Amelia versions 2.4.7...

SUSE CVE-2026-74285

In the Linux kernel, the following vulnerability has been resolved: net: Stop leased rxq before uninstalling its memory provider netifrxqcleanupunlease tears down the memory provider that was installed on a physical RX queue through a netkit queue lease. It currently revokes the provider's DMA...

CVE-2026-74742: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is only initialized by xdprxqinforeg in vethenablexdprange, which runs only...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098871)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098871 advisory. In the Linux kernel, the following vulnerability has been resolved: schhfsc: Fix qlen accounting bug when using peek in hfscenqueue When enqueuing the first packet t...

PT-2026-82183

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the synaptics-rmi4 driver where the rmi f54 buffer queue function fails to verify the success of the worker thread. When the worker fails due to register read failures...

PT-2026-81946

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.7 does not require authentication before processing its pending notification queue, allowing an unauthenticated user to force the dispatch of queued notifications and integration callbacks...

CVE-2026-14216: Improper Authentication

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.7 does not require authentication before processing its pending notification queue, allowing an unauthenticated user to force the dispatch of queued notifications and integration callbacks...

Linux Distros Unpatched Vulnerability : CVE-2026-80567

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue Previously, rmif54bufferqueue waited for the worker thread to finish but ignored whether it...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098834)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098834 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized TC...

CVE-2026-74742: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is only initialized by xdprxqinforeg in vethenablexdprange, which runs only...