Linux Distros Unpatched Vulnerability : CVE-2026-90124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/renesas-rzg2l: Fix loss of interrupt rzg2lclearirqint and rzg2lcleartintint perform a read-modify-write on the ISCR/TSCR status registers to clear the b...

EUVD-2026-81717

In the Linux kernel, the following vulnerability has been resolved: irqchip/renesas-rzg2l: Fix loss of interrupt rzg2lclearirqint and rzg2lcleartintint perform a read-modify-write on the ISCR/TSCR status registers to clear the bit for the interrupt just handled. Since these registers are...

CVE-2026-90124

This vulnerability affects the Linux kernel 's irqchip/renesas-rzg2l driver. The functions rzg2l_clear_irq_int() and rzg2l_clear_tint_int() perform a racy read-modify-write on the ISCR/TSCR status registers, which are write-0-to-clear per bit. If another interrupt's status bit is set between the ...

CVE-2026-90124 irqchip/renesas-rzg2l: Fix loss of interrupt

In the Linux kernel, the following vulnerability has been resolved: irqchip/renesas-rzg2l: Fix loss of interrupt rzg2lclearirqint and rzg2lcleartintint perform a read-modify-write on the ISCR/TSCR status registers to clear the bit for the interrupt just handled. Since these registers are...

CVE-2026-92776

Wiki.js through 2.5.314 fails to require path separators when matching START and END page rules, allowing attackers to access pages sharing a prefix with authorized folders. Users granted access to a folder can read and modify unrelated pages with matching prefixes, bypassing intended access...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid using the bitfield RMW for control flags related to claims/retunes. Move the control flags related to claims and retunes out of the bitfield to avoid unrelated side effects of RMW in asynchronous contexts. The...

Linux Distros Unpatched Vulnerability : CVE-2026-80980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: stop killed, freed and outofsync sharing a byte The three connection state flags are single-bit bitfields, so they occupy one byte of struct...

CVE-2026-80980

In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and outofsync sharing a byte The three connection state flags are single-bit bitfields, so they occupy one byte of struct smcconnection and every store to one is a read-modify-write of the other two: u...

DEBIAN-CVE-2026-80980

In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and outofsync sharing a byte The three connection state flags are single-bit bitfields, so they occupy one byte of struct smcconnection and every store to one is a read-modify-write of the other two: u...

UBUNTU-CVE-2026-80980

In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and outofsync sharing a byte The three connection state flags are single-bit bitfields, so they occupy one byte of struct smcconnection and every store to one is a read-modify-write of the other two: u...

CVE-2026-80980

In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and outofsync sharing a byte The three connection state flags are single-bit bitfields, so they occupy one byte of struct smcconnection and every store to one is a read-modify-write of the other two: u...

EUVD-2026-76303

In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and outofsync sharing a byte The three connection state flags are single-bit bitfields, so they occupy one byte of struct smcconnection and every store to one is a read-modify-write of the other two: u...

CVE-2026-80980 net/smc: stop killed, freed and out_of_sync sharing a byte

In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and outofsync sharing a byte The three connection state flags are single-bit bitfields, so they occupy one byte of struct smcconnection and every store to one is a read-modify-write of the other two: u...

CVE-2026-80980

CVE-2026-80980 is a race condition in the Linux kernel's SMC (Server Message Block over Remote Direct Memory Access) protocol. Three single-bit flags (killed, freed, out_of_sync) in struct smc_connection share a single byte and are written from concurrent contexts—smc_cdc_msg_validate() from a re...

PT-2026-90110

In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and out of sync sharing a byte The three connection state flags are single-bit bitfields, so they occupy one byte of struct smc connection and every store to one is a read-modify-write of the other two...

Astra Linux – Vulnerability in Firefox and Thunderbird

It was possible for a web extension with minimal permissions to create a StreamFilter, which could be used to read and modify the response body of requests on any site. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird 115.14...

CVE-2026-73881

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

UBUNTU-CVE-2026-72062

In the Linux kernel, the following vulnerability has been resolved: gpio: mt7621: avoid corruption of shared interrupt trigger state The bank-shared fields like 'rising' and 'falling' are modified using non-atomic read-modify-write operations. Since every gpio chip instance represents an entire...

CVE-2026-72062

CVE-2026-72062 affects the Linux kernel GPIO path for mt7621, where bank-wide interrupt-trig state (rising/falling) could be corrupted by non-atomic read-modify-write updates when multiple IRQs on the same bank run concurrently. The issue arises because each gpio chip instance represents a 32-pin...

CVE-2026-72853 Budibase before 3.40.0 SQL Injection via Oracle connector

Budibase before 3.40.0 contains a SQL injection vulnerability in the Oracle datasource connector's post-write row lookup that fails to escape table names in identifiers. Attackers with write permission on a table with a double-quote in its name can inject SQL that executes as the datasource's...