CVE-2026-89962

CVE-2026-89962 affects the Linux kernel 's powerpc/kexec_file subsystem. The __merge_memory_ranges() function contains two logic flaws: it compares the current range's start address against the previous element (i-1) instead of the running merged index (idx), and it unconditionally overwrites ran...

CVE-2026-89911 KVM: arm64: Correctly cap TLBI Range to the architural limit

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap TLBI Range to the architural limit TLB Invalidation by Range has a fairly powerful way of encoding pretty large ranges in a small number of bits. This range can be based on an arbitrary VA, which means i...

CVE-2026-89911 KVM: arm64: Correctly cap TLBI Range to the architural limit

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap TLBI Range to the architural limit TLB Invalidation by Range has a fairly powerful way of encoding pretty large ranges in a small number of bits. This range can be based on an arbitrary VA, which means i...

EUVD-2026-80511

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap TLBI Range to the architural limit TLB Invalidation by Range has a fairly powerful way of encoding pretty large ranges in a small number of bits. This range can be based on an arbitrary VA, which means i...

CVE-2026-89911

CVE-2026-89911 affects the KVM arm64 subsystem of the Linux kernel. The root cause is an integer overflow in the handling of TLB Invalidation by Range (TLBI) : because the TLBI range can be encoded with a large value based on an arbitrary virtual address, a guest can trigger an overflow if the hy...

CVE-2026-89911: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap TLBI Range to the architural limit TLB Invalidation by Range has a fairly powerful way of encoding pretty large ranges in a small number of bits. This range can be based on an arbitrary VA, which means i...

CVE-2026-92475: Out-of-bounds Read

A weakness has been identified in GPAC 26.08-DEV. This impacts the function waitforheaderandparse of the file src/utils/downloader.c. This manipulation of the argument Content-Range causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and...

PT-2026-93481

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs file system where the F2FS IOC MOVE RANGE operation fails to validate the destination end before updating the i size the size of the inode. This occurs becaus...

PT-2026-93475

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the f2fs filesystem within the free segment range function. The curseg evacuation loop only iterates up to NR CURSEG PERSIST TYPE, which fails to include non-persisten...

PT-2026-93552

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the KVM arm64 implementation, a flaw exists in how TLB Invalidation by Range is handled. Because the range can be based on an arbitrary Virtual Address VA, a guest could potentially...

PT-2026-93944

Name of the Vulnerable Software and Affected Versions GPAC version 26.08-DEV Description An out-of-bounds read occurs in the wait for header and parse function within the src/utils/downloader.c file. This issue is triggered by the manipulation of the Content-Range argument and requires local acce...

PT-2026-93608

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write occurs in the migrate device range and migrate device pfns functions. This happens when a compound folio extends beyond the end of the range provided by the caller...

PT-2026-93555

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 component where the decode range tlbi function failed to perform the required sign extension for Virtual Address VA during range-based Translation...

Linux Distros Unpatched Vulnerability : CVE-2026-89911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Correctly cap TLBI Range to the architural limit TLB Invalidation by Range has a fairly powerful way of encoding pretty large ranges in a small numb...

PT-2026-93619

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the SYNC BO operation does not constrain its size, allowing a request for zero bytes to reach the drm clflush virt range function. This function performs an...

CVE-2026-86885

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

CVE-2026-86885

This vulnerability affects iOS and iPadOS due to an input validation issue . An attacker within radio range can exploit this flaw to cause unexpected system termination . The issue has been resolved in iOS 27 and iPadOS 27 . No specific exploit details or links are provided in the documents.

EUVD-2026-77925

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

CVE-2026-86885

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

CVE-2026-86885

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...