CVE-2026-90316

CVE-2026-90316 affects the drm/omap DSI driver in the Linux kernel. The root cause is a Use-After-Free (UAF) risk: the ISR (interrupt service routine) table was copied to allow unregistration of ISRs, but stack-allocated objects passed to those ISRs may be freed if IRQs are unregistered while sti...

EUVD-2026-81824

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unconfined user namespace restriction forced stack If a task is already confined by a stack the unprivileged transition restriction on unconfined is not correctly, applied. This results in an escape if two transitio...

CVE-2026-90231

CVE-2026-90231 is a flaw in the Linux kernel's AppArmor subsystem. When a task is already confined by a profile stack , the unprivileged user-namespace transition restriction on the unconfined profile is not correctly enforced. This allows a confinement escape if two transitions through an unconf...

CVE-2026-90070 tpm: st33zp24: Return zero on status read failure

In the Linux kernel, the following vulnerability has been resolved: tpm: st33zp24: Return zero on status read failure st33zp24status ignores the result of the transport read and returns data even when no byte was received. The I2C transport, for example, skips i2cmasterrecv when the register-sele...

CVE-2026-90070

CVE-2026-90070 affects the Linux kernel TPM driver for the st33zp24 chip. The st33zp24_status() function ignores the result of the transport read, returning data even when no byte was received. With the I2C transport , for example, the function skips i2c_master_recv() when the register-select wri...

Information Exposure

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Information Exposure via the error stack formatting process. An attacker can obtain absolute host filesystem paths, including those from Node.js...

Duplicate Advisory: vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-x6m4-chr9-cg97. This link is maintained to preserve external references. Original Description vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to sandboxed code through error stack...

GHSA-2VH9-CV26-P97M Duplicate Advisory: vm2: util.getCallSites() bypasses GHSA-v27g host-frame redaction, leaks host call stack

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r273-hxvj-fxhp. This link is maintained to preserve external references. Original Description vm2 is a sandbox for running untrusted Node.js code. In versions = 22.9 this hands sandboxed code util.getCallSites, ...

GHSA-63M2-QQCH-JXV2 Duplicate Advisory: vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-x6m4-chr9-cg97. This link is maintained to preserve external references. Original Description vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to sandboxed code through error stack...

Duplicate Advisory: vm2: util.getCallSites() bypasses GHSA-v27g host-frame redaction, leaks host call stack

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r273-hxvj-fxhp. This link is maintained to preserve external references. Original Description vm2 is a sandbox for running untrusted Node.js code. In versions = 22.9 this hands sandboxed code util.getCallSites, ...

CVE-2026-92933

A flaw was found in vm2. The NodeVM component exposes the host util module, including the util.getCallSites function, to the sandbox as an unfiltered copy. On Node.js versions 22.9 and later, this allows sandboxed code to access util.getCallSites, which can return the host process's full call...

FatPipe software multiple vulnerabilities

RISK EVALUATION FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command injection vulnerability in the xtremed daemon and a stack-based buffer overflow in /usr/sbin/authuserpass. An unauthenticated remote attacker with access to the...

CVE-2026-92936

vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to sandboxed code through error stack formatting. Attacker-supplied code can force the host-realm source transformer to throw a SyntaxError for example by calling eval with malformed source and then read the error's .stack...

CVE-2026-92936 vm2 3.11.0 before 3.11.7 Information Disclosure via Error Stack

vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to sandboxed code through error stack formatting. Attacker-supplied code can force the host-realm source transformer to throw a SyntaxError for example by calling eval with malformed source and then read the error's .stack...

CVE-2026-92936

vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to sandboxed code through error stack formatting . Attacker-supplied code can force the host-realm source transformer to throw a SyntaxError (e.g., via eval with malformed source) and then read the error's .stack property; the...

CVE-2026-92936 vm2 3.11.0 before 3.11.7 Information Disclosure via Error Stack

vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to sandboxed code through error stack formatting. Attacker-supplied code can force the host-realm source transformer to throw a SyntaxError for example by calling eval with malformed source and then read the error's .stack...

CVE-2026-92936 vm2 3.11.0 before 3.11.7 Information Disclosure via Error Stack

vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to sandboxed code through error stack formatting. Attacker-supplied code can force the host-realm source transformer to throw a SyntaxError for example by calling eval with malformed source and then read the error's .stack...

CVE-2026-92933

vm2 (a Node.js sandbox for untrusted code) in versions ≤ 3.11.7 leaks host-process information to sandboxed code. The root cause is that NodeVM exposes the host util module as an unfiltered shallow copy via defaultBuiltinLoaderUtil, and the deprecated sys builtin (an alias of util) through the ge...

CVE-2026-92933

vm2 is a sandbox for running untrusted Node.js code. In versions = 22.9 this hands sandboxed code "util.getCallSites", a programmatic stack-introspection API that returns the host process's full call stack, including absolute file paths, function names, and line numbers for vm2 bridge internals a...

CVE-2026-92933 vm2 before 3.11.8 Information Disclosure via util.getCallSites

vm2 is a sandbox for running untrusted Node.js code. In versions = 22.9 this hands sandboxed code util.getCallSites, a programmatic stack-introspection API that returns the host process's full call stack, including absolute file paths, function names, and line numbers for vm2 bridge internals and...