CVE-2026-98888

A flaw was found in the Linux kernel's arm64 kprobes subsystem. When tracing or performance monitoring tools trigger a secondary probe while an initial probe is executing its single-step instruction, the kernel treats the event as unrecoverable and corrupts interrupt state tracking. A local user...

[SECURITY] [DSA 6574-1] php8.4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6574-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 21, 2026 https://www.debian.org/security/faq -...

Debian dsa-6574 : libapache2-mod-php8.4 - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6574 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6574-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-93254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: arm64: entry: Avoid unnecessary localirqdisable on kernel exit Currently, when exiting to...

SUSE CVE-2026-93254

In the Linux kernel, the following vulnerability has been resolved: arm64: entry: Avoid unnecessary localirqdisable on kernel exit Currently, when exiting to kernel mode, we attempt involuntary preemption. The preemption logic expects IRQs to be disabled, which is why we call localirqdisable befo...

DEBIAN-CVE-2026-93254

In the Linux kernel, the following vulnerability has been resolved: arm64: entry: Avoid unnecessary localirqdisable on kernel exit Currently, when exiting to kernel mode, we attempt involuntary preemption. The preemption logic expects IRQs to be disabled, which is why we call localirqdisable befo...

CVE-2026-93254

In the Linux kernel, the following vulnerability has been resolved: arm64: entry: Avoid unnecessary localirqdisable on kernel exit Currently, when exiting to kernel mode, we attempt involuntary preemption. The preemption logic expects IRQs to be disabled, which is why we call localirqdisable befo...

CVE-2026-93254 arm64: entry: Avoid unnecessary local_irq_disable() on kernel exit

In the Linux kernel, the following vulnerability has been resolved: arm64: entry: Avoid unnecessary localirqdisable on kernel exit Currently, when exiting to kernel mode, we attempt involuntary preemption. The preemption logic expects IRQs to be disabled, which is why we call localirqdisable befo...

CVE-2026-93254

The Linux kernel contains an issue in the arm64 architecture where local_irq_disable() is redundantly called during kernel exit. This unnecessary call occurs in the __el1_irq() path and irqentry_exit_to_kernel_mode_preempt() context, where interrupts are already disabled. This redundancy causes p...

CVE-2026-93254 arm64: entry: Avoid unnecessary local_irq_disable() on kernel exit

In the Linux kernel, the following vulnerability has been resolved: arm64: entry: Avoid unnecessary localirqdisable on kernel exit Currently, when exiting to kernel mode, we attempt involuntary preemption. The preemption logic expects IRQs to be disabled, which is why we call localirqdisable befo...

CVE-2026-93254

In the Linux kernel, the following vulnerability has been resolved: arm64: entry: Avoid unnecessary localirqdisable on kernel exit Currently, when exiting to kernel mode, we attempt involuntary preemption. The preemption logic expects IRQs to be disabled, which is why we call localirqdisable befo...

CVE-2026-92483 liveupdate: Remember FLB retrieve() status

In the Linux kernel, the following vulnerability has been resolved: liveupdate: Remember FLB retrieve status LUO keeps track of successful retrieve attempts on an FLB. It does so to avoid multiple retrievals of the same FLB. Multiple retrievals cause problems because once the FLB is retrieved, th...

Linux Distros Unpatched Vulnerability : CVE-2026-90028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: hd3ss3220: track VBUS enable state per consumer regulatorisenabled reports the aggregate regulator state, not whether this consumer holds an enable...

CVE-2026-80875

In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in TCP state lookup TCP state handling reparses the skb to find the TCP header. For IPv6 it uses sizeofstruct ipv6hdr, while the surrounding IPVS code already parsed the packet with ipvsfilliphsk...

CVE-2026-55858

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The...

CVE-2026-55859 MariaDB Connector/R2DBC: Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output in org.mariadb:r2dbc-mariadb

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mid-session change to charactersetclien...

CVE-2026-55859

MariaDB Connector/R2DBC (org.mariadb:r2dbc-mariadb) is a non-blocking Java client for MariaDB and MySQL. Prior to 1.4.1 , the driver encodes and decodes all character data assuming the connection character set is UTF-8 . A server can announce a mid-session change to character_set_client through t...

CVE-2026-55859 MariaDB Connector/R2DBC: Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output in org.mariadb:r2dbc-mariadb

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mid-session change to charactersetclien...

PT-2026-83375

Name of the Vulnerable Software and Affected Versions MariaDB Connector/R2DBC versions prior to 1.4.1 Description The driver encodes and decodes all character data assuming the connection character set is UTF-8. A server can announce a mid-session change to the character set client variable throu...

CVE-2026-74720

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. When a scalar value is added to a pointer during certain arithmetic operations, the system fails to fully preserve the pointer's state. This inconsistency in how the pointer's origin and properties are tracked can lead t...