CVE-2026-72005

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work setup in probe rt2x00libprobedev uses the full rt2x00libremovedev teardown for all probe failures. However, drvdata allocation and workqueue allocation can fail before intfwork,...

CVE-2026-68466

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: lpc32xxslc: fail DMA transfer on completion timeout lpc32xxxmitdma waits for the DMA completion callback but ignores waitforcompletiontimeout. A timed out DMA transfer is therefore unmapped and reported as successfu...

GHSA-C974-W86C-VPFW vulnerabilities

Vulnerabilities for packages: kratos, verticadb-operator, secrets-store-csi-driver-provider-aws, kyverno-policy-reporter, rabbitmq-messaging-topology-operator, envconsul, slsa-verifier, crossplane-provider-aws-firehose, kine, kubernetes, kubeflow-pipelines, pulumi-kubernetes-operator, vault-env,...

CVE-2026-72169: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: kho: make sure scratch size is always aligned by CMAMINALIGNMENTBYTES When using scratchscale, the scratch sizes are rounded up to CMAMINALIGNMENTBYTES since they will be released as MIGRATECMA. This is not done when using fixed...

CVE-2026-74347: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount Add a refcount for struct nfcttimeout which is used by ct extension to set the custom ct timeout policy, this tells us that the ct timeout is being used...

CVE-2026-72356: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifsissueread Fix missing release of credits in the failure path in cifsissueread lest retrying the subreq just overwrites the credits value...

PT-2026-72434

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use correct direction to set up tunnel route The layer 2 encapsulation and layer 3 tunnel information in the xmit path is taken from the other tuple, because the tunnel information that is included in the...

PT-2026-72408

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double-free or use-after-free issue exists in the sunrpc component. The svc release rqst function executes a callback within rqstp-rq procinfo-pc release. If a worker thread processes ...

PT-2026-76445

These are all security issues fixed in the kubeshark-cli-53.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 43 : php-pear-PHP-CodeSniffer (2026-fdc77dd5f5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fdc77dd5f5 advisory. Version 4.0.4 - 2026-08-06 This is a security release and all users are advised to update their installs as soon as possible. The security issue only affects...

CVE-2026-72281: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: account pKVM reclaim against the VM mm Protected guest faults charge long term pins to the VM's mm. Teardown can run later from file release, where current-mm may be unrelated. Drop the charge from kvm-mm instead...

PT-2026-72315

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ISO-TP implementation of the CAN protocol. The isotp notify function unregisters CAN filters via can rx unregister and clears the so-bound variable without...

PT-2026-72544

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the CIFS Common Internet File System component where credits are not properly released during a failure path within the cifs issue read function. This failure to relea...

PT-2026-72650

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the AppArmor module during unix socket mediation when peer path is used. The issue occurs because holding a reference to the peer sk does not guarantee access ...

PT-2026-72558

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iomap component where pages are not properly released during an atomic direct I/O dio size mismatch. When bio iov iter get pages or the bounce helper succeeds but...

PT-2026-72664

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the dmaengine component. In the dma release channel function, the system checks chan-device-privatecnt after calling dma chan put. Because dma chan put...

PT-2026-72948

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the fou create function. The function publishes struct fou via sk user data before adding the new FOU port to the per-netns list. If the fou add to port...

PT-2026-72672

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the video registration process within the staging area. The function comp register videodev allocates a video device using video device alloc and attempts t...

Fedora 44 : php-pear-PHP-CodeSniffer (2026-d536e7004b)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d536e7004b advisory. Version 4.0.4 - 2026-08-06 This is a security release and all users are advised to update their installs as soon as possible. The security issue only affects...

CVE-2026-19765

A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5. This vulnerability affects the function loadSource of the file src/utils/swagger-parser.ts of the component fetchswagger. Performing a manipulation results in server-side request forgery...