CVE-2026-110311 Gitea draft release creation disclosing attachment metadata

Creating a draft release through the API returned an assets list that was built from a release without an ID, which matched every attachment that was not linked to a release. A user who could create a draft release in a repository therefore received the metadata file name, UUID, upload time, size...

CVE-2026-110311 Gitea draft release creation disclosing attachment metadata

Creating a draft release through the API returned an assets list that was built from a release without an ID, which matched every attachment that was not linked to a release. A user who could create a draft release in a repository therefore received the metadata file name, UUID, upload time, size...

CVE-2026-110311

The Gitea platform is vulnerable to an information disclosure flaw when creating a draft release via the API. The application returns an assets list built from a release lacking a unique ID, causing it to match every attachment not linked to a release. Consequently, an attacker with permissions t...

DEBIAN-CVE-2026-98774

In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...

CVE-2026-98774

In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...

CVE-2026-98859

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: stop the release timer from being rearmed on remove mtremove quiesces the sticky-finger timer before stopping the hardware: timerdeletesync&td-releasetimer; sysfsremovegroup&hdev-dev.kobj, &mtattributegroup;...

CVE-2026-98774 rust_binder: cancel deferred work items in thread exit

In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...

EUVD-2026-103859

In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...

CVE-2026-98774

The Linux kernel contains a vulnerability in rust_binder where deferred work items on a thread's todo list are not properly cleaned up during the Thread::release() method. This occurs specifically when a thread terminates while maintaining an active outgoing transaction. The issue has been addres...

CVE-2026-98774 rust_binder: cancel deferred work items in thread exit

In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...

CVE-2026-98701

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: release mesh path quota on failed additions Repeated failed or duplicate mesh path additions can exhaust MESHMAXMPATHS while the path table holds fewer paths, which stops new paths to reachable destinations from...

ROOT-OS-DEBIAN-12-CVE-2023-52485 CVE-2023-52485 in linux - Patched by Root

Root has patched CVE-2023-52485 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-31570 CVE-2026-31570 in linux - Patched by Root

Root has patched CVE-2026-31570 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2023-53857 CVE-2023-53857 in linux - Patched by Root

Root has patched CVE-2023-53857 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-39750 CVE-2025-39750 in linux - Patched by Root

Root has patched CVE-2025-39750 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-46225 CVE-2026-46225 in linux - Patched by Root

Root has patched CVE-2026-46225 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-68814 CVE-2025-68814 in linux - Patched by Root

Root has patched CVE-2025-68814 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-68371 CVE-2025-68371 in linux - Patched by Root

Root has patched CVE-2025-68371 in the linux package for Root:Debian:12. Multiple fixed versions available...

PT-2026-117153

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Creating a draft release through the API returns an assets list generated from a release lacking an ID. This causes the system to match every attachment not link...

CVE-2026-98774: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: rustbinder: cancel deferred work items in thread exit If there are deferred work items on the thread todo list, then they are not cleaned up in the Thread::release method. Thus, update the code to clean up the work items even if...