PT-2026-1149

CVE-2025-22185 - Apache Tomcat HTTP Request Smuggling CVE ID : CVE-2025-22185 Published : Jan. 1, 2026, 1:15 a.m. | 3 hours, 5 minutes ago Description : Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. Severity: 0.0 | NA Visit...

PT-2026-8208

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's IPv6 implementation related to ECMP Equal-Cost Multi-Path routing. Specifically, a mismatch in sibling counts can occur when clearing the RTF ADDRCONF...

SQLite report about CVE-2026-11824

This appears to be a duplicate of CVE-2026-11822...

PT-2026-5525

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the idpf vc core deinit function. The issue involves failing to free hw-lan regs, as reported by kmemleak during reset. This can lead to memory...

PT-2026-26578

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc8+ 33 Description The Linux kernel contains a flaw within the macvlan module. Specifically, a race condition exists in the macvlan common newlink function's error path, potentially leading to a...

PT-2026-6160

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where Slimbus devices, allocated dynamically upon receiving report-present messages, may experience a device reference leak. This occurs because a...

PT-2026-20643

Name of the Vulnerable Software and Affected Versions Open Babel versions prior to 3.1.2 Description A security issue exists in Open Babel up to version 3.1.1. The issue involves an out-of-bounds read within the OpenBabel::transform3d::DescribeAsString function located in the...

PT-2026-27709

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the crypto/ccp module. Specifically, the error path in the sev tsm init locked function dereferences a pointer t after the...

SQLite report about CVE-2026-51296CVE-2026-51297CVE-2026-51300CVE-2026-51302CVE-2026-51303CVE-2026-51304

These are unreproducible. They appear to be AI hallucinations. See the analysis at JFrog.com...

PT-2026-8186

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential buffer overflow issue exists in the i2c hid get report function within the Linux kernel's HID i2c subsystem. The i2c hid xfer function reads data into ihid-rawbuf, and the...

SUSE CVE-2023-54243

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix table blob use-after-free We are not allowed to return an error at this point. Looking at the code it looks like ret is always 0 at this point, but its not. t = findtablelocknet, repl-name, &ret, &ebtmute...

SUSE CVE-2023-54302

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix data race on CQP completion stats CQP completion statistics is read lockesly in irdmawaitevent and irdmacheckcqpprogress while it can be updated in the completion thread irdmascccqgetcqeinfo on another CPU as KCSA...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993288)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993288 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: init quota for 'old.inode' in 'ext4rename' Syzbot found the following issue: ext4parseparam...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992947)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992947 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize getbytesperelement's default to 1 Variables, used as denominators and...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992834)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992834 advisory. In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix NULL pointer dereference in isftracetrampoline when ftrace is dead ftracestartup does...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993088)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993088 advisory. In the Linux kernel, the following vulnerability has been resolved: mptcp: always handle address removal under msk socket lock Syzkaller reported a lockdep splat in...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992923)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992923 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: steam: Prevent NULL pointer dereference in steamrecv,sendreport It is possible for a malicio...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993213)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993213 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix task hung in ext4xattrdeleteinode Syzbot reported a hung task problem:...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992842)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992842 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: cougar: fix slab-out-of-bounds Read in cougarreportfixup reportfixup for the Cougar 500k...

WordPress Post Grid Gutenberg Blocks for News, Magazines, Blog Websites - PostX plugin <= 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability

WordPress Post Grid Gutenberg Blocks for News, Magazines, Blog Websites - PostX plugin = 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability discovered by Marcin Dudek dudekmar - CERT.PL in WordPress Plugin PostX versions = 5.0.3...