The vulnerability of the __kvm_at_swap_desc() function in the arch/arm64/kvm/at.c module of the virtualization subsystem on the 64-bit ARM-based Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kvmatswapdesc function in the arch/arm64/kvm/at.c module of the virtualization subsystem on the ARM 64-bit kernel of the Linux operating system is related to errors during pointer scaling. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the kvm_get_vcuBy_cpuid() function in the arch/loongarch/kvm/vcu.c module, which is part of the LoongArch architecture support for the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kvmgetvcpubycpuid function in the arch/loongarch/kvm/vpu.c module, which is part of the LoongArch architecture support for the Linux operating system, relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker...

The vulnerability of the kvm_eiointc regs_access() function in the arch/loongarch/kvm/intc/eiointc.c module, which is part of the LoongArch architecture support for the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the kvmeiointc regsaccess function in the arch/loongarch/kvm/intc/eiointc.c module of the LoongArch architecture support for the Linux operating system is related to incorrect conversion of numerical value types. Exploiting this vulnerability could allow an attacker to cause ...

The vulnerability of the hackrf_probe() function in the drivers/media/usb/hackrf/hackrf.c driver for multimedia devices connected to the Linux operating system’s USB ports allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hackrfprobe function in the drivers/media/usb/hackrf/hackrf.c driver for Linux multimedia devices is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the em28xx_v4l2_open() function in the drivers/media/usb/em28xx/em28xx-video.c driver for multimedia devices of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the em28xxv4l2open function in the drivers/media/usb/em28xx/em28xx-video.c driver for multimedia devices of the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the parse_dacl() function in the fs/smb/server/smbacl.c file of the Smb file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the parsedacl function in the fs/smb/server/smbacl.c file of the Smb file system in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the dlfb_ops_check_var() function in the drivers/video/fbdev/udlfb.c module of the Linux kernel’s frame buffer device driver allows a attacker to cause a system failure.

The vulnerability of the dlfbopscheckvar function in the drivers/video/fbdev/udlfb.c module of the Linux kernel’s frame buffer device driver is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the function batadv_tt_prepare_tvlv_global_data() in the module net/batman-adv/translation-table.c, which is part of the networking functions of the Linux operating system’s kernel, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function batadvttpreparetvlvglobaldata in the module net/batman-adv/translation-table.c, which is part of the networking functions of the Linux kernel, is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow an attacker to compromise th...

The vulnerability of the nft_ct_timeout_objdestroy() function in the net/netfilter/nft_ct.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nftcttimeoutobjdestroy function in the net/netfilter/nftct.c module of the netfilter component of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the lookup_extent_data_ref() function in the fs/btrfs/extent-tree.c file of the Btrfs file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lookupextentdataref function in the fs/btrfs/extent-tree.c file of the Btrfs file system in the Linux operating system is related to the return of incorrect code states. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the sk_diag_dump_name() function in the net/unix/diag.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the skdiagdumpname function in the net/unix/diag.c module, which is part of the Linux kernel’s networking functions, stems from the lack of protection for service data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the validate_set() function in the net_openvswitch/flow_netlink.c module, which supports Open vSwitch routers in Linux operating systems, allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the validateset function in the netopenvswitch/flownetlink.c module, which supports Open vSwitch routers in Linux operating systems, relates to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the cgwb_release_workfn() function in the mm/backing-dev.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cgwbreleaseworkfn function in the mm/backing-dev.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260825-73-0016

The vulnerability of the nfsd4decodecompound function in the fs/nfsd/nfs4xdr.c module, which supports the NFS network file system in Linux kernels, is related to the occurrence of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2026-81118

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.1.0 through 3.2.10 OpenEXR versions 3.3.0 through 3.3.12 OpenEXR versions 3.4.0 through 3.4.13 Description An integer overflow occurs during an int32 t multiplication within the unpack sample table function of OpenEXRCore wh...

CVE-2026-75421

aria2 =1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine function...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count CVE-2026-53392 In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors CVE-2026-53393 In th...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2026-113 (ALASKERNEL-5.15-2026-113)

The version of kernel installed on the remote host is prior to 5.15.213-150.251. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-113 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero...

PT-2026-81166

The InfusedWoo Pro plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.1.17. This is due to a missing capability check in the ajax iwar preview email function, which uses is admin as its only authorization check and allows...

EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2026-3216)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : USB: core: Limit the length of unkillable synchronous timeoutsCVE-2026-43428 usb: typec: ucsi: validate connector number in...