CVE-2026-74721

A flaw was found in the Linux kernel's accel/amxdna component. Specifically, an error in the amdxdnainsertpages function causes system resources to be released too early. This premature release can lead to a critical error when the system later attempts to free the same resources, resulting in a...

CVE-2026-74630

A flaw was found in the Linux kernel's IPv6 subsystem. The in6devget function can incorrectly increment the reference count of an inet6dev object after it has been freed, leading to a use-after-free vulnerability. A local attacker could exploit this to cause memory corruption, potentially resulti...

CVE-2026-74631

A flaw was found in the Linux kernel's smcrxsplice function within the net: smc component. This vulnerability arises from an imbalance in the lifetime management of splice entries, where page references are not properly handled before being passed to splicetopipe. This can lead to a reference cou...

EUVD-2026-64785

Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78278 WordPress Fluent Boards Pro plugin <= 2.0.11 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78278

Fluent Boards Pro is a WordPress plugin affected by a Subscriber-level Insecure Direct Object Reference (IDOR) vulnerability in versions ≤ 2.0.11 . The flaw is reachable over the network with no privileges required and low attack complexity , allowing an unauthenticated attacker to access objects...

CVE-2026-74695

A flaw was found in the Linux kernel's netfilter flow table. When processing network packets, a reference count leak can occur if a packet already has a destination entry and skbdstsetnoref is called. This issue can lead to a kernel warning, potentially causing system instability or a denial of...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: ipa: Hash tables are only reset when supported. Last year, the code that manages GSI channel transactions switched from using spinlock-protected linked lists to using indexes in the ring buffer used for a channel. Recently,...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Tracing: Ensure that traceeventfile has a ref counter. The following actions can cause the kernel to crash: cd /sys/kernel/tracing echo 'p:sched schedule' kprobeevents exec 5events/kprobes/sched/enable kprobeevents exec 5&- Th...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: rpmsg: Fixed a possible refcount leak in rpmsgregisterdeviceoverride. rpmsgregisterdeviceoverride must call putdevice to free the vch when driversetoverride fails. This issue was fixed by adding a call to putdevice in the erro...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: usb: phy: isp1301: fix non-OF device reference imbalance A recent change to fix a device reference leak in a UDC driver introduced a potential use-after-free in the non-OF case. The isp1301getclient helper only increments the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: GPU: host1x – Allow entries in BO caches to be freed When a buffer object is pinned using host1xbopin, along with a cache, the resulting mapping is kept in the cache so it can be reused in subsequent pinnings. Each mapping holds ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fixed a leak that occurred when a group was evicted before the tiler OOM work was processed. The reference to a group is tied to the pending tileroomwork; therefore, we need to release it if the cancellation was...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: KVM: s390: pci: Fixed a GISC reference count leak when enabling AIF. The kvms390giscregister function registers the guest ISC before pinning the guest interrupt forwarding pages and allocating the AISB bit. If any of the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fixed the reference count leak in iipmirequest. When a caller provides a suppliedrecv message to iipmirequest, the function increments the user’s nrmsgs reference count. If an error occurs later, the cleanup process for...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192 – Check runtime resume during probe. The MT8192 AFE probe enables runtime PM temporarily while reinitializing the regmap cache from hardware. However, it uses pmruntimegetsync without checking the return...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: AppArmor: Resource release for the exe file was performed after a path resolution failure. The getcurrentexepath function takes a reference to the exefile and a path reference before resolving the path name. If the aapathname...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: fixed the issue where a new block group that becomes unused after creation could lead to a use-after-free condition. If a task creates a new block group and that block group becomes unused before it is fully created, durin...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dlm: fixed the addition of a message handling mechanism in sendqueue. In a benchmark scenario where many requests are triggered, which results in a large number of DLM messages being sent across the network, it is possible that...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: md/raid1: Fixed issues with writepending references and reference leaks during write failures. In raid1makerequest, a reference to writePending is acquired before mdwritestart is called, and then raid1writerequest is called...