CLSA-2026-1792496623 TuxCare security update for @babel/helper-function-name (1 CVE)

TuxCare rebuilt @babel/helper-function-name to address 1 CVE. Fixed in 7.16.7-tuxcare.3...

CLSA-2026-1792496621 TuxCare security update for @babel/helper-function-name (2 CVEs)

TuxCare rebuilt @babel/helper-function-name to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792496622 TuxCare security update for @babel/helper-function-name (1 CVE)

TuxCare rebuilt @babel/helper-function-name to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792496620 TuxCare security update for @babel/helper-function-name (1 CVE)

TuxCare rebuilt @babel/helper-function-name to address 1 CVE. Fixed in 7.23.0-tuxcare.3...

CLSA-2026-1792496617 TuxCare security update for @babel/helper-function-name (2 CVEs)

TuxCare rebuilt @babel/helper-function-name to address 2 CVEs. Fixed in 7.23.0-tuxcare.1...

CLSA-2026-1792496616 TuxCare security update for @babel/helper-function-name (2 CVEs)

TuxCare rebuilt @babel/helper-function-name to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...

CLSA-2026-1792496613 TuxCare security update for @babel/helper-function-name (1 CVE)

TuxCare rebuilt @babel/helper-function-name to address 1 CVE. Fixed in 7.12.18-tuxcare.2...

CLSA-2026-1792496612 TuxCare security update for @babel/helper-function-name (1 CVE)

TuxCare rebuilt @babel/helper-function-name to address 1 CVE. Fixed in 7.18.9-tuxcare.2...

CLSA-2026-1792496615 TuxCare security update for @babel/helper-function-name (1 CVE)

TuxCare rebuilt @babel/helper-function-name to address 1 CVE. Fixed in 7.21.0-tuxcare.4...

CLSA-2026-1792496614 TuxCare security update for @babel/helper-function-name (1 CVE)

TuxCare rebuilt @babel/helper-function-name to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CVE-2026-92515

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. This vulnerability occurs because the btffindstructfield function incorrectly initializes a fresh 'seen mask' during recursive descent, allowing duplicate fields in nested structures. A local attacker can exploit this by...

CVE-2026-92505

A flaw was found in the Linux kernel's iommu/amd component, specifically within the devidwrite debugfs function. When the foreachpcisegment loop fails to find a matching segment, a pointer can reference an invalid memory location. Accessing this invalid memory can lead to undefined behavior,...

CVE-2026-90391

A flaw was found in the Linux kernel. A local user could exploit a vulnerability in the dmirrorfault function. When a mirrored memory management mm structure has exited, dmirrorfault incorrectly returns a success code, causing the caller to enter an infinite retry loop. This can lead to a Denial ...

CVE-2026-90387

A flaw was found in the swiotlb component of the Linux kernel. When CONFIGDMADIRECTREMAP is enabled, the swiotlbinitiotlbpool function incorrectly reconstructs the virtual address for dynamic memory pools. This error causes swiotlbfreetlb to fail in recognizing allocated memory chunks, potentiall...

CVE-2026-98483

A flaw was found in the Linux kernel's Near Field Communication NFC subsystem. A reference counting error in the nfcgetlocalgeneralbytes function causes memory to be freed prematurely while callers still access the returned pointer. A local attacker could exploit this use-after-free vulnerability...

CVE-2026-93047

A flaw was found in the drm/v3d component of the Linux kernel. An implicit synchronization issue in the v3dsubmitlockreservations function could lead to a job reading a Buffer Object BO while another process is still writing to it. This could result in data corruption. A local attacker could...

CVE-2026-93046

A flaw was found in the Linux kernel's software node component. A local attacker could exploit a failing bounds check in the softwarenodegetreferenceargs function when an index of UINTMAX is passed. This could lead to an out-of-bounds access in the property array, potentially resulting in memory...

CVE-2026-93045

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF arena component. The bpfarenafreepages function incorrectly handles scalar arena addresses. When a scalar value is below the arena base, it can lead to an out-of-range memory offset. This issue could allow a local attacker to reuse...

CVE-2026-93041

A flaw was found in the Linux kernel's dw-edma component. A race condition exists where the dwedmaabortinterrupt function prematurely releases a lock, allowing the issuepending function to access outdated Direct Memory Access DMA channel status information. This can lead to new DMA descriptors...

CVE-2025-55752

🚨🚨 CVE-2025-55752 — Apache Tomcat: Directory-protection bypass via Rewrite Valve → PUT-based RCE🚨🚨 Summary CVE-2025-55752 is a security regression in Apache Tomcat introduced while fixing bug 60013. When the Rewrite Valve is used, Tomcat applies path normalization before URL decoding. This...