PT-2026-64728

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the x86 architecture implementation where hardening against JIT spraying is required when Spectre-v2 mitigations are active. JIT spraying is a technique used to bypass...

Fedora 43 : dotnet10.0 (2026-d9817786d6)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-d9817786d6 advisory. Update to .NET SDK 10.0.110 and Runtime 10.0.10 Fixes:...

PT-2026-64714

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A runtime Power Management PM leak occurs in the mpl115 read raw function. The function acquires a runtime PM reference using pm runtime get sync before reading pressure or temperature...

Linux Distros Unpatched Vulnerability : CVE-2026-64494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002readraw calls pmruntimegetsy...

Fedora 44 : dotnet10.0 (2026-f738966fc9)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f738966fc9 advisory. Update to .NET SDK 10.0.110 and Runtime 10.0.10 Fixes:...

Linux Distros Unpatched Vulnerability : CVE-2026-64493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mpl115: fix runtime PM leak on read error mpl115readraw takes a runtime PM...

CVE-2026-64499: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix PM reference leak in buffer preenable ads1119triggeredbufferpreenable resumes the device with pmruntimeresumeandget before starting a conversion. If i2csmbuswritebyte fails, the function returns the erro...

PT-2026-64724

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the kxsd9 write raw function where a runtime Power Management PM reference is acquired using pm runtime get sync but is not released when a scale with a non-zero integ...

PT-2026-64693

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vfio/mlx5 component where bitfield operations are not atomic, utilizing a read-modify-write pattern. This can lead to race conditions when bitfields that are...

Linux Distros Unpatched Vulnerability : CVE-2026-64503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: accel: kxsd9: fix runtime PM imbalance on writeraw error kxsd9writeraw takes a runtime PM reference with pmruntimegetsync but returns -EINVAL directly when...

CVE-2026-64503: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on writeraw error kxsd9writeraw takes a runtime PM reference with pmruntimegetsync but returns -EINVAL directly when a scale with a non-zero integer part is requested, skipping the...

PT-2026-64697

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vfio-pci component where the disable idle d3 module parameter was handled as a global variable. When the vfio-pci module is loaded, unloaded, or reloaded with...

CVE-2026-64493: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mpl115: fix runtime PM leak on read error mpl115readraw takes a runtime PM reference with pmruntimegetsync before reading the processed pressure or raw temperature, but on the read error path it returns without...

PT-2026-64715

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A runtime Power Management PM leak occurs in the gp2ap002 read raw function. The function invokes pm runtime get sync to manage power before reading the lux value; however, if the gp2ap0...

Linux Distros Unpatched Vulnerability : CVE-2026-64499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix PM reference leak in buffer preenable...

Smithy-RS: Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service

Summary Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service implementations. An issue exists where, under certain circumstances, allocation of resources without limits...

GHSA-GM3R-Q2WP-HW87 Shescape: Quadratic-time denial of service in the flag-protection

Impact This impacts users of Shescape that have flag protection enabled, which is on by default, regardless of the API being used. An attacker can cause a runtime quadratic in the input size, causing denial of service for large inputs. javascript import Shescape from "shescape"; // 1. Prerequisit...

sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock

Summary sm-crypto npm package 0.4.0, the latest release, published 2026-01-20 generates SM2 private keys and signing ephemeral scalars from a single module-wide RNG instance src/sm2/utils.js: const rng = new SecureRandom. SecureRandom is jsbn's PRNG, which seeds an ARC4 stream from...

speakeasy v2.0.0b4

Speakeasy Speakeasy is a Windows malware emulation framework that executes binaries, drivers, and shellcode in a modeled Windows runtime instead of a full VM. It emulates APIs, process/thread behavior, filesystem, registry, and network activity so samples can keep moving through realistic executi...

prismor v1.34.1

Prismor Runtime security hooks for Claude Code, Codex, and other AI coding agents. Prismor can also be used in observe mode to see agent session activity and dangerous actions in a local self-serve dashboard Website • Onboard with Skill !Trae / Trae CNht...