CVE-2026-72041 espintcp: use sk_msg_free_partial to fix partial send

In the Linux kernel, the following vulnerability has been resolved: espintcp: use skmsgfreepartial to fix partial send skmsgfreepartial ensures consistency of the skmsg at every iteration, without having to manually handle uncharges and offsets. This simplifies the code, and fixes some bugs in...

EUVD-2026-58999

In the Linux kernel, the following vulnerability has been resolved: espintcp: use skmsgfreepartial to fix partial send skmsgfreepartial ensures consistency of the skmsg at every iteration, without having to manually handle uncharges and offsets. This simplifies the code, and fixes some bugs in...

CVE-2026-72041

CVE-2026-72041 affects the Linux kernel espintcp path. The issue is addressed by switching to sk_msg_free_partial to fix partial sends, ensuring skmsg consistency on every iteration and simplifying accounting of uncharges and offsets when not sending full contents. The vulnerability is treated as...

CVE-2026-72041 espintcp: use sk_msg_free_partial to fix partial send

In the Linux kernel, the following vulnerability has been resolved: espintcp: use skmsgfreepartial to fix partial send skmsgfreepartial ensures consistency of the skmsg at every iteration, without having to manually handle uncharges and offsets. This simplifies the code, and fixes some bugs in...

PT-2026-72837

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Distributed Lock Manager DLM where message handles in the node-send queue may not be ordered by the oldest sequence number during high-request benchmark scenarios...

CVE-2026-72041: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: espintcp: use skmsgfreepartial to fix partial send skmsgfreepartial ensures consistency of the skmsg at every iteration, without having to manually handle uncharges and offsets. This simplifies the code, and fixes some bugs in...

PT-2026-72718

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Transparent Inter-Process Communication TIPC protocol where the tipc sk conn proto rcv function subtracts a peer-supplied connection acknowledgment count from the...

PT-2026-72230

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the espintcp component where bugs occur in skmsg accounting during partial send operations. The use of the sk msg free partial function is required to ensure the...

PT-2026-72419

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module where the batadv send tt request function incorrectly handles send buffer allocation failures. The function allocates a tt req node to prevent...

PT-2026-72636

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the octeontx2-pf driver during teardown. The send-queue timestamp ring is allocated using the qmem alloc function when timestamping is enabled, but the otx2 free ...

CVE-2026-73571

An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...

CVE-2026-73571

An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...

CVE-2026-73571

An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...

CVE-2026-73571

CVE-2026-73571 is an authorization bypass in Zimbra Collaboration (ZCS) before 10.1.17 , caused by improper validation in the delegated email-sending functionality. An authenticated attacker can send specially crafted SOAP requests to the SaveDraftRequest handler to impersonate another user and s...

CVE-2026-73571

An authorization bypass vulnerability exists in Zimbra Collaboration ZCS before 10.1.17 due to improper authorization validation in delegated email sending functionality. An authenticated attacker can send specially crafted SOAP requests to impersonate another user and send emails without...

CVE-2026-72766

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings. A crafted non-string value supplied from a workflow expression into the text or HTML body field can be...

CVE-2026-72766 n8n before 1.123.67 Arbitrary File Read via Send Email Node

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings. A crafted non-string value supplied from a workflow expression into the text or HTML body field can be...

CVE-2026-72766

n8n contains a type confusion in the Send Email node that can read arbitrary local files and trigger SSRF. Affected versions: n8n before 1.123.67, n8n 2.x before 2.31.5, and n8n 2.32.x before 2.32.1. The issue arises when non‑string values are fed into the node’s text or HTML body and interpreted...

CVE-2026-72766

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings. A crafted non-string value supplied from a workflow expression into the text or HTML body field can be...

EUVD-2026-56145

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings. A crafted non-string value supplied from a workflow expression into the text or HTML body field can be...