PT-2026-72544

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the CIFS Common Internet File System component where credits are not properly released during a failure path within the cifs issue read function. This failure to relea...

PT-2026-72650

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the AppArmor module during unix socket mediation when peer path is used. The issue occurs because holding a reference to the peer sk does not guarantee access ...

PT-2026-72558

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iomap component where pages are not properly released during an atomic direct I/O dio size mismatch. When bio iov iter get pages or the bounce helper succeeds but...

PT-2026-72948

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the fou create function. The function publishes struct fou via sk user data before adding the new FOU port to the per-netns list. If the fou add to port...

PT-2026-72672

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the video registration process within the staging area. The function comp register videodev allocates a video device using video device alloc and attempts t...

Fedora 43 : php-pear-PHP-CodeSniffer (2026-fdc77dd5f5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fdc77dd5f5 advisory. Version 4.0.4 - 2026-08-06 This is a security release and all users are advised to update their installs as soon as possible. The security issue only affects...

CVE-2026-19765

A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5. This vulnerability affects the function loadSource of the file src/utils/swagger-parser.ts of the component fetchswagger. Performing a manipulation results in server-side request forgery...

EUVD-2026-58545

A flaw has been found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82. The affected element is the function axios.get of the file src/index.ts of the component parse-csv tool. This manipulation of the argument csvUrl causes server-side request forgery. The attack...

The vulnerability of the hyperv.netvsc_drv.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the hyperv.netvscdrv.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the can/usb/ems_usb.c component in the Linux operating system’s kernel, allowing a hacker to cause a service failure

The vulnerability in the can/usb/emsusb.c component of the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xen/xen-scsiback.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the xen/xen-scsiback.c component in the Linux operating system is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the driver/platform/x86/toshiba_haps.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/platform/x86/toshibahaps.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the component drm/panel/panel-simple.c of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drm/panel/panel-simple.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-71939

Name of the Vulnerable Software and Affected Versions eyaushev swagger-testcase-mcp affected versions not specified Description A flaw in the fetch swagger component allows for remote server-side request forgery SSRF, a condition where an attacker can induce the server to make requests to an...

The vulnerability of the hwtracing/intel_th/core.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the hwtracing/intelth/core.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the sound/soc/amd/renoir/acp3x-pdm-dma.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sound/soc/amd/renoir/acp3x-pdm-dma.c component of the Linux operating system’s kernel is related to the improper release of memory before removing the last reference to it. Exploiting this vulnerability can allow an attacker to cause a service failure...

bulk_extractor v2.2.0beta2

bulkextractor is a high-performance digital forensics exploitation tool. It is a "get evidence" button that rapidly scans any kind of input disk images, files, directories of files, etc and extracts structured information such as email addresses, credit card numbers, JPEGs and JSON snippets witho...

CVE-2026-19751

A flaw has been found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82. The affected element is the function axios.get of the file src/index.ts of the component parse-csv tool. This manipulation of the argument csvUrl causes server-side request forgery. The attack...

Malicious code in eslint-generate-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4478598213eba844460a99bf323ef024e2fb906c918736cc7e593745029e16b4 [email protected] is a hollow package whose index.js exports an empty object and whose only effect on install is dependency resolution...

Malicious code in eslint-publish-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3befb9fa08cae88e2ebcfb7877a33453bc0b95e0876fb5f76d55b011c8c9869 [email protected] is a hollow package index.js is an empty stub, no lifecycle scripts whose only effect on install is dependency...