Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: The function ifacefwtocpuaddr only checks that the MCU virtual address provided by the firmware points within the shared section. The returned pointer is later used as a full firmware interface structure; therefore,...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: fix races on the shared Super VCAP block The VCAP instances on a chip are not independent; however, they are locked independently. On sparx5 and lan969x, the IS0 and IS2 instances are backed by the same Supe...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: The PHY layer is now treated as a shared domain for DSI/CSI. The MIPI DSI and CSI domains share control bits related to clock and reset. This can lead to incorrect behavior if one domain disables the...

WordPress Shared Files plugin <= 1.7.69 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Cem Bas in WordPress Plugin Shared Files versions = 1.7.69...

CVE-2026-74584

A flaw was found in the Linux kernel's RDMA/bnxtre component. A local attacker with access to the RDMA device could exploit this vulnerability due to a failure to zero out a shared memory page before exposing it to userspace. This could lead to information disclosure, allowing the attacker to rea...

Malicious Package

Overview @medisend/shared is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview sme-scripts-shared-library-webpack-plugin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview sme-rko-finance-front-shared-entity-groups-models is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Linux kernel TCP SYN recv Data Compromise

The vulnerability of the tcpv6synrecvsock and tcpv4synrecvsock functions in the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux Wave5 VPU DoS

The vulnerability in the drivers/media/platform/chips-media/wave5/wave5-vpu.c component of the Linux kernel is related to insufficient validation of the state of shared resources. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

wave5 kernel module DoS

The vulnerability in the wave5 module of the Linux kernel is related to insufficient validation of the state of a shared resource. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel DoS

The vulnerability in the drivers/md/dm-zone.c component of the Linux kernel is related to insufficient validation of the state of shared resources. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

CVE-2026-78269: Server-Side Request Forgery (SSRF)

Contributor Server Side Request Forgery SSRF in Shared Files = 1.7.69 versions...

PT-2026-80810

Contributor Server Side Request Forgery SSRF in Shared Files = 1.7.69 versions...

CVE-2026-74649

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...

UBUNTU-CVE-2026-74649

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...

CVE-2026-74649

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...

EUVD-2026-64586

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...

CVE-2026-74649

A missing length validation in the Linux kernel rtl8723bs staging driver's WEP shared-key authentication handler (OnAuthClient()) allows a malicious Access Point to send a malformed WLAN_EID_CHALLENGE element with a length up to 255 bytes, which is then copied via memcpy() into a fixed 128-byte c...

CVE-2026-74649 staging: rtl8723bs: fix missing shared-key auth challenge length check

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...