EUVD-2026-64785

Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-78278

Fluent Boards Pro is a WordPress plugin affected by a Subscriber-level Insecure Direct Object Reference (IDOR) vulnerability in versions ≤ 2.0.11 . The flaw is reachable over the network with no privileges required and low attack complexity , allowing an unauthenticated attacker to access objects...

CVE-2026-78278 WordPress Fluent Boards Pro plugin <= 2.0.11 - Insecure Direct Object References (IDOR) vulnerability

Subscriber Insecure Direct Object References IDOR in Fluent Boards Pro = 2.0.11 versions...

CVE-2026-74695

A flaw was found in the Linux kernel's netfilter flow table. When processing network packets, a reference count leak can occur if a packet already has a destination entry and skbdstsetnoref is called. This issue can lead to a kernel warning, potentially causing system instability or a denial of...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ipmi: Fixed the reference count leak in iipmirequest. When a caller provides a suppliedrecv message to iipmirequest, the function increments the user’s nrmsgs reference count. If an error occurs later, the cleanup process for...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: KVM: s390: pci: Fixed a GISC reference count leak when enabling AIF. The kvms390giscregister function registers the guest ISC before pinning the guest interrupt forwarding pages and allocating the AISB bit. If any of the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dlm: fixed the addition of a message handling mechanism in sendqueue. In a benchmark scenario where many requests are triggered, which results in a large number of DLM messages being sent across the network, it is possible that...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: GPU: host1x – Allow entries in BO caches to be freed When a buffer object is pinned using host1xbopin, along with a cache, the resulting mapping is kept in the cache so it can be reused in subsequent pinnings. Each mapping holds ...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: ipa: Hash tables are only reset when supported. Last year, the code that manages GSI channel transactions switched from using spinlock-protected linked lists to using indexes in the ring buffer used for a channel. Recently,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/syncobj: A memory leak was fixed in drmsyncobjfindfence. The commit 18226ba52159 “drm/syncobj: rejecting invalid flags in drmsyncobjfindfence” forgot to consider the fact that drmsyncobjfind takes a reference to syncobj and...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fixed a leak that occurred when a group was evicted before the tiler OOM work was processed. The reference to a group is tied to the pending tileroomwork; therefore, we need to release it if the cancellation was...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: liveupdate: Fixed issues in luofileunpreservefiles and luofilefinish. In luofileunpreservefiles and luofilefinish, the calls to moduleput and xaerase were reordered to ensure that the file handling module remains pinned while...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: - md/raid10: Fixed the issue of a “writesPending” reference being retained after write request failures. - In raid10makerequest, the “writesPending” reference is acquired with mdwritestart before dispatching write requests...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: - In md/raid10, issues with writepending references and barrier reference leaks during discard failures were addressed. - In raid10makerequest, a reference to writepending is acquired before mdwritestart is called, and then...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192 – Check runtime resume during probe. The MT8192 AFE probe enables runtime PM temporarily while reinitializing the regmap cache from hardware. However, it uses pmruntimegetsync without checking the return...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: vlan: fixed an underflow issue related to the realdev refcnt. An error is injected before devholdrealdev in registervlandev, and the following testcase is executed: bash ip link add dev dummy1 type dummy ip link add name...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Implement a reference counter for SRB The timeout handler and the done function are competing with each other. When qla2x00asynciocbtimeout starts to execute, it may be preempted by the normal response path via the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: fixed the issue where a new block group that becomes unused after creation could lead to a use-after-free condition. If a task creates a new block group and that block group becomes unused before it is fully created, durin...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: rpmsg: Fixed a possible refcount leak in rpmsgregisterdeviceoverride. rpmsgregisterdeviceoverride must call putdevice to free the vch when driversetoverride fails. This issue was fixed by adding a call to putdevice in the erro...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: In the ISO section, there was a issue where references to the socket would leak after the socket is released. The function isosockkill checks whether !sockflagsk, SOCKZAPPED is true, and also checks whether...