EUVD-2026-86951

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix subreq ref leak Fix a subrequest ref leak in netfsunbufferedwrite in the event that subreq-ioiter ends up zero length during preparation...

CVE-2026-98120 netfs: Fix subreq ref leak

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix subreq ref leak Fix a subrequest ref leak in netfsunbufferedwrite in the event that subreq-ioiter ends up zero length during preparation...

PT-2026-98678

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the mlx5 eswitch termtbl put function. The problem occurs when the zero-ref cleanup check reads the ref count variable after the termtbl mutex has been...

CVE-2026-98120

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix subreq ref leak Fix a subrequest ref leak in netfsunbufferedwrite in the event that subreq-ioiter ends up zero length during preparation...

CVE-2026-98120: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix subreq ref leak Fix a subrequest ref leak in netfsunbufferedwrite in the event that subreq-ioiter ends up zero length during preparation...

PT-2026-98782

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the netfs unbuffered write function when the subreq-io iter variable results in zero length during the preparation phase. Recommendations At the moment, there ...

Linux Distros Unpatched Vulnerability : CVE-2026-98120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix subreq ref leak Fix a subrequest ref leak in netfsunbufferedwrite in the event that subreq-ioiter ends up zero length during preparation...

PT-2026-104976

In the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate names in ROOT REF and ROOT BACKREF ROOT REF and ROOT BACKREF items contain a struct btrfs root ref followed by the subvolume name. Several readers assume that this layout is already valid and then us...

PT-2026-97995

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the blk-cgroup component where a failure in the radix tree insert function within blkg create leads to two problems. First, the online variable of the blkg structure i...

PT-2026-104972

In the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate INODE REF's namelen BUG A crafted btrfs image can trigger the following crash: BUG: unable to handle page fault for address: ffffd1dc42884000 PF: supervisor write access in kernel mode PF: error...

SUSE CVE-2026-72812

SiYuan versions before v3.7.4 contain a missing authorization vulnerability in the /api/ref/refreshBacklink endpoint that allows anonymous readers to trigger persistent server-side writes. Attackers can invoke the endpoint with an attacker-controlled block ID to flush transaction queues, scan all...

CVE-2026-93181

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix uncorebox ref/unref ordering In uncoreeventcpuonline, uncoreboxref was called before uncorechangecontext. uncoreboxref gates on box-cpu = 0, but box-cpu is still -1 at that point because...

DEBIAN-CVE-2026-93181

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix uncorebox ref/unref ordering In uncoreeventcpuonline, uncoreboxref was called before uncorechangecontext. uncoreboxref gates on box-cpu = 0, but box-cpu is still -1 at that point because...

CVE-2026-93181 perf/x86/intel/uncore: Fix uncore_box ref/unref ordering

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix uncorebox ref/unref ordering In uncoreeventcpuonline, uncoreboxref was called before uncorechangecontext. uncoreboxref gates on box-cpu = 0, but box-cpu is still -1 at that point because...

CVE-2026-93181 perf/x86/intel/uncore: Fix uncore_box ref/unref ordering

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix uncorebox ref/unref ordering In uncoreeventcpuonline, uncoreboxref was called before uncorechangecontext. uncoreboxref gates on box-cpu = 0, but box-cpu is still -1 at that point because...

PT-2026-94483

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free crash occurs when attempting to read the /sys/kernel/debug/ref tracker/ directory. This issue happens within the alloc netdev mqs function if either alloc percpu or dev...

CVE-2026-59973

FrontMCP is a TypeScript-first framework for the Model Context Protocol MCP. From mcp-from-openapi 2.3.0 until 2.5.0 and from frontmcp and @frontmcp/adapters 1.2.1 until 1.5.0, libs/adapters/src/openapi/openapi.adapter.ts loadOpenAPISpec forwards untrusted OpenAPI url and spec inputs and...

CVE-2026-59973 mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi

FrontMCP is a TypeScript-first framework for the Model Context Protocol MCP. From mcp-from-openapi 2.3.0 until 2.5.0 and from frontmcp and @frontmcp/adapters 1.2.1 until 1.5.0, libs/adapters/src/openapi/openapi.adapter.ts loadOpenAPISpec forwards untrusted OpenAPI url and spec inputs and...

CVE-2026-59973

CVE-2026-59973 is a bypass of a prior SSRF fix in FrontMCP 's OpenAPI adapter. The affected packages are mcp-from-openapi (2.3.0–2.5.0) and frontmcp / @frontmcp/adapters (1.2.1–1.5.0). The loadOpenAPISpec() function forwards untrusted OpenAPI URLs to OpenAPIToolGenerator.fromURL() / fromJSON(), w...

CVE-2026-59973 mcp-from-openapi: Bypass of OpenAPI external $ref SSRF fix in latest FrontMCP and mcp-from-openapi

FrontMCP is a TypeScript-first framework for the Model Context Protocol MCP. From mcp-from-openapi 2.3.0 until 2.5.0 and from frontmcp and @frontmcp/adapters 1.2.1 until 1.5.0, libs/adapters/src/openapi/openapi.adapter.ts loadOpenAPISpec forwards untrusted OpenAPI url and spec inputs and...