SUSE CVE-2026-80872

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/tas2781: Cancel async firmware request at unbind TAS2781 HDA I2C and SPI queue RCA firmware loading from component bind with requestfirmwarenowait. The firmware loader keeps the callback module pinned and holds a device...

SUSE CVE-2026-80880

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Properly support implicit ODP reregmr Due to all the child mkeys in the implicit ODP configuration we cannot change anything in place for the parent mkey. Instead the whole thing needs to be rebuilt if any change is...

SUSE CVE-2026-80886

In the Linux kernel, the following vulnerability has been resolved: serial: msm: Disable DMA for kernel console UART At the moment, concurrent writes from userspace and the kernel to the console can trigger a race condition that results in an infinite loop of the same messages printed over and ov...

SUSE CVE-2026-80889

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and txgen ordering This patch is a follow-up to commit cf070fe33bfb "can: isotp: serialize TX state transitions under so-rxlock" which addresses following sashiko-bot findings: -...

SUSE CVE-2026-80895

In the Linux kernel, the following vulnerability has been resolved: mshv: Order ptvparray publish against irqfd assertion path mshvpartitionioctlcreatevp initialises a VP struct allocations, mutexinit, initwaitqueuehead, page mappings and then publishes the pointer into partition-ptvparray. Sever...

SUSE CVE-2026-80896

In the Linux kernel, the following vulnerability has been resolved: mshv: Fix race in mshvirqfddeassign mshvirqfddeactivate and the hlist traversal of ptirqfdslist require pt-ptirqfdslock to be held, but mshvirqfddeassign omits it. This races with the EPOLLHUP path in mshvirqfdwakeup, which does...

CVE-2026-86096

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration::start due to a race condition between task spawning and object deletion. Attackers can trigger the calibration process via shell commands to write to freed heap memory, corrupting unrelated objects or...

CVE-2026-86096

PX4 Autopilot through version 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration::start() within the temperature_compensation module. The root cause is a race condition between task spawning and object deletion, allowing an attacker on an adjacent network to trigger the cali...

CVE-2026-86096 PX4 Autopilot through 1.17.0 Use-After-Free via Temperature Calibration Task Startup

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration::start due to a race condition between task spawning and object deletion. Attackers can trigger the calibration process via shell commands to write to freed heap memory, corrupting unrelated objects or...

CVE-2026-86096 PX4 Autopilot through 1.17.0 Use-After-Free via Temperature Calibration Task Startup

PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in TemperatureCalibration::start due to a race condition between task spawning and object deletion. Attackers can trigger the calibration process via shell commands to write to freed heap memory, corrupting unrelated objects or...

CVE-2026-76925

A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...

EUVD-2026-58064

vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts...

CVE-2026-85704

A security flaw has been discovered in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function getJailbreak of the file server/config.py of the component Jailbreak Mode. The manipulation results in race condition. It is possible to launch the...

CVE-2026-76925 Flatpak: flatpak: toctou race condition allows symlink redirection

A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...

CVE-2026-76925

CVE-2026-76925 is a TOCTOU race condition in Flatpak's org.freedesktop.Flatpak.SystemHelper component. The root cause is that a privileged chmod operation executes before OSTree repository validation within the Deploy() function, creating a timing window an attacker can exploit to redirect symlin...

CVE-2026-85704 ramon-victor freegpt-webui Jailbreak Mode config.py getJailbreak race condition

A security flaw has been discovered in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function getJailbreak of the file server/config.py of the component Jailbreak Mode. The manipulation results in race condition. It is possible to launch the...

EUVD-2026-71754

A security flaw has been discovered in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1c35dc. This issue affects the function getJailbreak of the file server/config.py of the component Jailbreak Mode. The manipulation results in race condition. It is possible to launch the...

CVE-2026-85704

A race condition in the getJailbreak function of server/config.py within the Jailbreak Mode component of ramon-victor freegpt-webui (affects builds up to commit 098db3dfeb41555c2ca9269df0f13e10ec1c35dc) allows a remote, unauthenticated attacker to cause a low availability impact . The attack requ...

CVE-2026-85639

A security vulnerability has been detected in jofpin trape 2.0. This vulnerability affects unknown code of the file core/user.py of the component Telemetry Endpoint. Such manipulation of the argument vId leads to race condition. The attack can be executed remotely. Attacks of this nature are high...

EUVD-2026-71693

A security vulnerability has been detected in jofpin trape 2.0. This vulnerability affects unknown code of the file core/user.py of the component Telemetry Endpoint. Such manipulation of the argument vId leads to race condition. The attack can be executed remotely. Attacks of this nature are high...