EUVD-2026-108733

In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: fix localroot reference leak in scrubprintwarninginode When pathsfrominode fails, scrubprintwarninginode jumps to err without dropping the reference taken by btrfsgetfsroot, leaking a reference to the root every tim...

CVE-2026-99067

The Linux kernel contains a vulnerability in the btrfs filesystem related to the scrub functionality. Specifically, the scrub_print_warning_inode() function fails to drop the reference taken by btrfs_get_fs_root() when paths_from_inode() fails, causing a reference leak to the root every time path...

CVE-2026-99067 btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()

In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: fix localroot reference leak in scrubprintwarninginode When pathsfrominode fails, scrubprintwarninginode jumps to err without dropping the reference taken by btrfsgetfsroot, leaking a reference to the root every tim...

CVE-2026-98983 unshare: don't drop active namespace references that were never taken

In the Linux kernel, the following vulnerability has been resolved: unshare: don't drop active namespace references that were never taken Active references on the namespaces of an nsproxy are taken when the nsproxy is installed into a task in switchtasknamespaces and copynamespaces and dropped...

CVE-2026-98953

In the Linux kernel, the following vulnerability has been resolved: devlink: fix devlinkrel reference leak when notify work is pending devlinkrelnestedinnotifyworkschedule takes a reference on the devlinkrel for the notify work and then queues the work, ignoring the return value of...

CVE-2026-98953 devlink: fix devlink_rel reference leak when notify work is pending

In the Linux kernel, the following vulnerability has been resolved: devlink: fix devlinkrel reference leak when notify work is pending devlinkrelnestedinnotifyworkschedule takes a reference on the devlinkrel for the notify work and then queues the work, ignoring the return value of...

EUVD-2026-108927

In the Linux kernel, the following vulnerability has been resolved: devlink: fix devlinkrel reference leak when notify work is pending devlinkrelnestedinnotifyworkschedule takes a reference on the devlinkrel for the notify work and then queues the work, ignoring the return value of...

CVE-2026-98953

The Linux kernel contains a reference leak vulnerability within the devlink component. The issue occurs in devlink_rel_nested_in_notify_work_schedule() and the reschedule path of devlink_rel_nested_in_notify_work(), where the system takes a reference on the devlink_rel but fails to drop it if the...

CVE-2026-98949

The Linux kernel contains a vulnerability in the drm/imagination driver within the pvr_vm_gpuva_remap() function. When a map overlaps an existing mapping, the function incorrectly splits the mapping and fails to handle references and vm_bo links correctly. Specifically, it leaks one GEM reference...

EUVD-2026-108923

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix reference and vmbo handling in remap When a map overlaps part of an existing mapping, pvrvmgpuvaremap splits the mapping into prev/next parts covering what the request did not take, instead of creating...

CVE-2026-98949 drm/imagination: Fix reference and vm_bo handling in remap()

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix reference and vmbo handling in remap When a map overlaps part of an existing mapping, pvrvmgpuvaremap splits the mapping into prev/next parts covering what the request did not take, instead of creating...

CVE-2026-98913

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvfprobe caviumptpget acquires a reference to the PTP PCI device through pcigetdevice. If any initialization step fails after caviumptpget, the PTP PCI device reference is leaked. Add a...

EUVD-2026-108869

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvfprobe caviumptpget acquires a reference to the PTP PCI device through pcigetdevice. If any initialization step fails after caviumptpget, the PTP PCI device reference is leaked. Add a...

CVE-2026-98913 net: thunderx: fix PTP device ref leak in nicvf_probe()

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvfprobe caviumptpget acquires a reference to the PTP PCI device through pcigetdevice. If any initialization step fails after caviumptpget, the PTP PCI device reference is leaked. Add a...

CVE-2026-98913 net: thunderx: fix PTP device ref leak in nicvf_probe()

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvfprobe caviumptpget acquires a reference to the PTP PCI device through pcigetdevice. If any initialization step fails after caviumptpget, the PTP PCI device reference is leaked. Add a...

CVE-2026-98913

The Linux kernel contains a PTP device reference leak within the nicvf_probe() function of the thunderx driver. The issue occurs because cavium_ptp_get() acquires a reference to the PTP PCI device via pci_get_device(), but fails to release this reference if subsequent initialization steps fail. T...

CVE-2026-4952

The VertiGIS WebOrderSystem (specifically version 7.0.8.6 and potentially others) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists in the "ASMobile" web interface of the "GIS Portal" package, where authenticated users can input JavaScript into a business reference field. While...

a2sv

1. A2SV? Auto Scanning to SSL Vulnerability. HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc A. Support Vulnerability - CVE-2007-1858 Anonymous Cipher - CVE-2012-4929 CRIMESPDY - CVE-2014-0160 CCS Injection - CVE-2014-0224 HeartBleed - CVE-2014-3566 SSLv3 POODLE - CVE-2015-0204 FREAK Attack...

PT-2026-122206

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.21.2 Description An incomplete remediation for repeated malformed cross-reference entries allows a crafted PDF to trigger a complete PDF stream reload during each recovery attempt, even when a recovery cache is presen...

PT-2026-122205

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.21.2 Description An attacker can craft a PDF file with a standard cross-reference table where the declared entry count exceeds the actual capacity of the file. When such a file is opened, it leads to excessive...