The vulnerability of the __input_process_payload() function in the net/xfrm/xfrm_iptfs.c module, which is part of the networking functions of the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the inputprocesspayload function in the net/xfrm/xfrmiptfs.c module, which is part of the networking functions in the Linux kernel, is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a remote attacker to...

The vulnerability of the iris_vb2_stop_streaming() function in the drivers/media/platform/qcom/iris/iris_vb2.c file of the Linux kernel-based multimedia device driver module allows a malicious actor to cause a service failure.

The vulnerability of the irisvb2stopstreaming function in the drivers/media/platform/qcom/iris/irisvb2.c driver for multimedia devices in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...

The vulnerability of the pipapo Drop() function in the net/netfilter/nft_set_pipapo.c module of the netfilter component in the Linux operating system’s kernel allows a hacker to induce a service failure.

The vulnerability of the pipapo Drop function in the net/netfilter/nftsetpipapo.c module of the netfilter component in the Linux operating system’s kernel is related to insufficient protection of service data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `dp_sdp_messagedebugfs_write()` function in the `drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dmdebugfs.c` file of the Direct Rendering Infrastructure (DRI) driver for AMD graphics cards in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the dpsdpmessagedebugfswrite function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the copying of buffers without checking the size of the...

The vulnerability of the hsr_addr_is_self() function in the net/hsr/hsr_framereg.c module, which allows a hacker to cause a service failure.

The vulnerability of the hsraddrisself function in the net/hsr/hsrframereg.c module, which is part of the Linux kernel’s networking functions, involves premature release of resources during their lifetime. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the free_hotplug_page_range() function in the arch/arm64/mm/mmu.c module of the ARM 64-bit kernel support for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the freehotplugpagerange function in the arch/arm64/mm/mmu.c module of the ARM 64-bit kernel support for the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ps883x_retimer_probe() function in the drivers/usb/typec/mux/ps883x.c file of the Linux operating system’s USB TypeC driver allows a hacker to cause a service failure.

The vulnerability of the ps883xretimerprobe function in the drivers/usb/typec/mux/ps883x.c file of the Linux USB TypeC driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cc1352_bootloader_rx() function in the drivers/greybus/gb-beagleplay.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cc1352bootloaderrx function in the drivers/greybus/gb-beagleplay.c module of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the tun_xdp_one() function in the drivers/net/tun.c module of the Linux kernel’s network device driver allows a attacker to cause a service failure.

The vulnerability of the tunxdpone function in the drivers/net/tun.c file of the Linux kernel’s network device driver module is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the xhci_disableSlot() function in the driver module drivers/usb/host/xhci.c of the Linux operating system’s USB device drivers allows a malicious actor to cause a service failure.

The vulnerability of the xhcidisableSlot function in the drivers/usb/host/xhci.c module of the Linux device driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2026-85317

A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This affects the function ChapterModel::searchChapter of the file App/Home/Controller/ChapterController.class.php of the component Query Builder. The manipulatio...

PT-2026-85521

A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assert user is admin if user query param is provided of the file st2api/st2api/controllers/v1/actionexecutions.py of the component NoOp RBAC backend. This manipulation of the argument User causes imprope...

PT-2026-85402

Name of the Vulnerable Software and Affected Versions FreeIPMI versions prior to 1.6.19 Description A stack-based buffer overflow exists in the ipmi-oem tool. This issue occurs within the output dell system info cmc ipv6 info function located in ipmi-oem/ipmi-oem-dell.c, specifically when using t...

PT-2026-85400

Name of the Vulnerable Software and Affected Versions FreeIPMI versions prior to 1.6.19 Description A stack-based buffer overflow exists in the ipmi-oem component. The issue occurs within the get dell system info idrac info function located in ipmi-oem/ipmi-oem-dell.c, which is triggered when usi...

PT-2026-85396

Name of the Vulnerable Software and Affected Versions FreeIPMI versions prior to 1.6.19 Description A stack-based buffer overflow exists in the ipmi sel oem fujitsu get sel entry long text function within the libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c file. This issue is triggered when...

The vulnerability of the __iommu_group_set_domain_internal() function in the drivers/iommu/iommu.c file of the Linux operating system’s IOMMU driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iommugroupsetdomaininternal function in the drivers/iommu/iommu.c file of the Linux operating system’s IOMMU driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2026-86261

A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerability occurs because a privileged chmod operation executes before the OSTree repository validation within the Deploy function. An attacker c...

The vulnerability of the nl80211_calculate_ap_params() function in the net/wireless/nl80211.c module, which supports wireless communication in Linux kernel, allows a hacker to induce a service failure.

The vulnerability of the nl80211calculateapparams function in the net/wireless/nl80211.c module, which supports wireless communication in Linux kernel, is related to error handling flaws. Exploiting this vulnerability can allow attackers to cause system failures...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-106174)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106174 advisory. FFmpeg versions from 0.5 up to, but not including, 9.0 contain an uninitialized heap memory disclosure vulnerability in the native TIFF decoder in libavcodec/tiff.c...

The vulnerability of the get_ext_report() function in the drivers/virt/coco/sev-guest/sev-guest.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the getextreport function in the drivers/virt/coco/sev-guest/sev-guest.c module of the Linux kernel is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...