CVE-2026-80884 ntb: Store original DMA address for future release

In the Linux kernel, the following vulnerability has been resolved: ntb: Store original DMA address for future release The DMA API requires that dmafreeattrs receive the exact dmahandle originally returned by the allocation function. Do not modify it...

authelia v4.39.22

!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...

CVE-2026-80858

In the Linux kernel, the following vulnerability has been resolved: fuse: publish io-uring queues with release semantics fuseuringcreatequeue initializes a fuseringqueue and then publishes the pointer into ring-queuesqid with WRITEONCE under the fch-lock. There are several readers that may...

CVE-2026-80858

In the Linux kernel, the following vulnerability has been resolved: fuse: publish io-uring queues with release semantics fuseuringcreatequeue initializes a fuseringqueue and then publishes the pointer into ring-queuesqid with WRITEONCE under the fch-lock. There are several readers that may...

CVE-2026-80858 fuse: publish io-uring queues with release semantics

In the Linux kernel, the following vulnerability has been resolved: fuse: publish io-uring queues with release semantics fuseuringcreatequeue initializes a fuseringqueue and then publishes the pointer into ring-queuesqid with WRITEONCE under the fch-lock. There are several readers that may...

CVE-2026-80858

CVE-2026-80858 is a memory-ordering bug in the Linux kernel's FUSE (Filesystem in Userspace) io-uring path. The function fuse_uring_create_queue() publishes a newly initialized fuse_ring_queue pointer into ring->queues[qid] using WRITE_ONCE(), which does not guarantee that the queue's fields a...

CVE-2026-80858 fuse: publish io-uring queues with release semantics

In the Linux kernel, the following vulnerability has been resolved: fuse: publish io-uring queues with release semantics fuseuringcreatequeue initializes a fuseringqueue and then publishes the pointer into ring-queuesqid with WRITEONCE under the fch-lock. There are several readers that may...

Security Bulletin: IBM App Connect Enterprise is vulnerable to Missing Release of Resource after Effective Lifetime and Improper Certificate Validation due to HttpClient (CVE-2026-64607 & CVE-2026-71290)

Summary IBM App Connect Enterprise runtime is vulnerable to Missing Release of Resource after Effective Lifetime and Improper Certificate Validation due to HttpClient. Vulnerability Details CVEID:CVE-2026-64607 DESCRIPTION: HttpClient based on the classic i/o model fails to correctly release the...

EUVD-2026-70986

Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10...

CVE-2026-13148 Memory leak in scan method

Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10...

SUSE-SU-2026:3974-1 Security update for podman

This update for podman rebuilds it against the current go security release...

kernel: nfsd: release layout stid on setlease failure

A flaw was found in the Linux kernel's Network File System Daemon nfsd. When a setlease operation fails, the system prematurely releases a layout state identifier. An attacker could exploit this by triggering the failure, leading to a use-after-free vulnerability. This could result in a system...

PT-2026-91330

In the Linux kernel, the following vulnerability has been resolved: usb: usbfs: fix use-after-free of usb device in usbdev release usbdev release drops its reference to the struct usb device before draining the list of completed async URBs, but that drain path reads back through the same object:...

PT-2026-85447

Missing release of memory after effective lifetime vulnerability in Softing smartLink allows resource leak exposure. This issue affects smartLink HW-PN: from 1.04 before 1.10...

PT-2026-85736

In the Linux kernel, the following vulnerability has been resolved: fuse: publish io-uring queues with release semantics fuse uring create queue initializes a fuse ring queue and then publishes the pointer into ring-queuesqid with WRITE ONCE under the fch-lock. There are several readers that may...

Fedora 43 : freeipa (2026-3a48220f1f)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3a48220f1f advisory. Upstream security release FreeIPA 4.13.3 Release notes: https://www.freeipa.org/release-notes/4-13-3.html Tenable has extracted the preceding...

The vulnerability of the hsr_addr_is_self() function in the net/hsr/hsr_framereg.c module, which allows a hacker to cause a service failure.

The vulnerability of the hsraddrisself function in the net/hsr/hsrframereg.c module, which is part of the Linux kernel’s networking functions, involves premature release of resources during their lifetime. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the free_hotplug_page_range() function in the arch/arm64/mm/mmu.c module of the ARM 64-bit kernel support for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the freehotplugpagerange function in the arch/arm64/mm/mmu.c module of the ARM 64-bit kernel support for the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the copy_context_work_handler() function in the drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the copycontextworkhandler function in the drivers/gpu/drm/amd/amdkfd/kfddevicequeuemanager.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to improper resource release. Exploiting this vulnerability could...

The vulnerability of the ethosu_gem_cmdstream_copy_and_validate() function in the drivers/accel/ethosu/ethosu_gem.c driver for Linux kernel acceleration devices allows a hacker to cause a system failure.

The vulnerability of the ethosugemcmdstreamcopyandvalidate function in the drivers/accel/ethosu/ethosugem.c driver for Linux computing devices involves improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...