net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

A flaw was found in the Linux kernel's CIFS Common Internet File System client. When the cifssanitizeprepath function processes specially crafted input, such as an empty string or a string containing only delimiters, it can attempt to read data beyond its allocated memory buffer. This out-of-boun...

PT-2026-82188

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the byd disconnect function. The function uses timer delete before freeing the driver's private data, which fails to wait for a running byd clear touch callbac...

PT-2026-82360

A security flaw has been discovered in ddfourtwo sentry-selfhosted-mcp 0.4.0. The affected element is an unknown function of the component raw sentry api. The manipulation of the argument endpoint results in server-side request forgery. It is possible to launch the attack remotely. The exploit ha...

PT-2026-82327

Name of the Vulnerable Software and Affected Versions itsourcecode Payroll System version 1.0 Description A flaw in the CRUD Operation Handler component allows remote attackers to bypass authentication. The issue exists within the create/read/update/delete function of the ajax.php file. By...

PT-2026-82194

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fb io read function where a pointer desynchronization occurs if copy to user performs a partial copy, such as when a user buffer is faulty. In this scenario, the...

PT-2026-82333

Name of the Vulnerable Software and Affected Versions KubePi versions prior to 2.0.0 Description SSO configuration API endpoints are exposed on the same public routing boundary as the SSO login and callback endpoints, allowing SSO, OIDC, and SAML management operations to be accessed without...

The vulnerability of the reset_add gpio_aux_device() function in the drivers/reset/core.c file of the Linux kernel-based universal reset controller driver allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the resetadd gpioauxdevice function in the drivers/reset/core.c file of the Linux kernel-based universal reset controller driver relates to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the rxrpc_preparse_xdr_yfs_rxgk() function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, allows a attacker to cause a service failure.

The vulnerability of the rxrpcpreparsexdryfsrxgk function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, involves the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an...

The vulnerability of the st_lsm6dsx_fifo_setup() function in the drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c driver module allows attackers to compromise the confidentiality, integrity, and accessibility of protected information in various types of embedded sensors integrated into the Linux operating system.

The vulnerability of the stlsm6dsxfifosetup function in the drivers/iio/imu/stlsm6dsx/stlsm6dsxbuffer.c module of various types of embedded sensors in the Linux operating system is related to reading beyond the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to compromi...

The vulnerability of the evws_new_session() function in the Libevent asynchronous event notification library allows a hacker to trigger a service failure.

The vulnerability of the evwsnewsession function in the Libevent asynchronous event notification library is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the formcreateFileName() function in the /goform/formcreateFileName file of the Tenda CH22 router’s microprogramming system allows a attacker to execute arbitrary commands.

The vulnerability of the formcreateFileName function in the /goform/formcreateFileName file of the Tenda CH22 router microprogramming system is related to the failure to take measures to eliminate special elements in the output data. Exploiting this vulnerability may allow a remote attacker to...

The vulnerability of the rz_mtu3_count_enable_write() function in the drivers/counter/rz-mtu3-cnt.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rzmtu3countenablewrite function in the drivers/counter/rz-mtu3-cnt.c module of the Linux kernel is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the do_become_nonbusy() function in the drivers/comedi/comedi_fops.c module of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the dobecomenonbusy function in the drivers/comedi/comedifops.c module of the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability can allow a remote attacker to cause service failure...

The vulnerability of the qla24xx_els_dcmd_iocb() function in the drivers/scsi/qla2xxx/qla_iocb.c driver for SCSI devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qla24xxelsdcmdiocb function in the drivers/scsi/qla2xxx/qlaiocb.c driver for Linux SCSI device drivers is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098764)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098764 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits Since commit...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098840)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098840 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix missing bounds check on DEFAULT table in verifydfa The verifydfa function only chec...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098939)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098939 advisory. In the Linux kernel, the following vulnerability has been resolved: hfs: validate record offset in hfsplusbmapalloc hfsplusbmapalloc can trigger a crash if a record...

SUSE SLES12 Security Update : vim (SUSE-SU-2026:3677-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3677-1 advisory. - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. - CVE-2026-73071: use-after-free in JSON...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098727)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098727 advisory. In the Linux kernel, the following vulnerability has been resolved: iio: light: opt3001: fix deadlock due to concurrent flag access The threaded IRQ function in this...