24089 matches found
PT-2026-61189
In the Linux kernel, the following vulnerability has been resolved: esp: fix page frag reference leak on skb to sgvec failure In esp output tail, when esp-inplace is false, the old skb page frags are replaced with a new page from the xfrm page frag cache. The source scatterlist sg is built from t...
PT-2026-61345
In the Linux kernel, the following vulnerability has been resolved: tracing: Avoid NULL return from hist field name on truncation hist field name returns "" everywhere except the fully-qualified VAR REF/EXPR case, where snprintf truncation returns NULL early and bypasses the bottom NULL-"" guard...
PT-2026-61409
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp meter: fix tp vars reference leak in receiver shutdown The receiver shutdown timer handler, batadv tp receiver shutdown, is responsible for releasing the tp vars reference it holds. However, the existing logic for...
PT-2026-61111
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the 9p filesystem implementation where the p9 client walk function incorrectly handles file identifiers fids during error paths. When the function is called with the...
PT-2026-61223
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the omap2430 probe function. The of node putnp function is called prematurely before the final access to the np variable, which can lead to a...
PT-2026-61296
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the net/handshake component. The handshake req next function removes a request from the pending list and releases the hn lock before handshake nl accept doit...
PT-2026-61139
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel during the handling of request key auth payloads. The problem occurs during a concurrency scenario involving the request key function an...
ECHO-FAC5-2977-3A4E
Bulletin has no description...
ECHO-9AB7-5D26-2A8B
Bulletin has no description...
MINI-64FM-GRJV-2PG4
Bulletin has no description...
MINI-QVXG-F5FH-VJMM
Bulletin has no description...
MINI-C548-5FF4-CCFQ
Bulletin has no description...
MINI-38XQ-X7XG-F6HP
Bulletin has no description...
MINI-PVXV-H53R-8RX2
Bulletin has no description...
MINI-JC7F-8QMV-7HVH
Bulletin has no description...
ECHO-41DA-7BD5-F915
Bulletin has no description...
MINI-84FJ-8743-RR99
Bulletin has no description...
CVE-2026-54244
creationtimestamp| type| source ---|---|--- 2026-07-17 23:48:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquwsujrnt22...
Prompty: Arbitrary file read via file reference expansion
Summary Prompty loaders expanded $file:... references in .prompty frontmatter without enforcing that the resolved path stayed within an authorized directory. An attacker-controlled prompt file could use path traversal or an absolute path to cause the host application to read files accessible to t...
GHSA-WXHM-2MQ7-7697 Prompty: Arbitrary file read via file reference expansion
Summary Prompty loaders expanded $file:... references in .prompty frontmatter without enforcing that the resolved path stayed within an authorized directory. An attacker-controlled prompt file could use path traversal or an absolute path to cause the host application to read files accessible to t...