EUVD-2026-75921

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATECHILDSA requests are mishandled, there can be an authentication bypass...

EUVD-2026-75876

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the exploration state machine...

PT-2026-90470

In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix stale walk-action escaping walk pmd range If -pmd entry sets walk-action = ACTION AGAIN, the pmd none check is retried. The PMD entry may be cleared at the point of retry. In this case, if walk-ops-install pte is...

PT-2026-90107

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared zerocopy state in skb tx error skb tx error completes the zerocopy uarg and clears SKBFL ALL ZEROCOPY, and skb zcopy downgrade managed clears SKBFL MANAGED FRAG REFS. Both live in skb shinfo, which...

PT-2026-90489

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip Update HDCP Config In Transition State Transition state does not have a valid dm stream ctx that should skip configuring HDCP routine. The routine is valid to go through only when a valid stream is created...

PT-2026-90110

In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, freed and out of sync sharing a byte The three connection state flags are single-bit bitfields, so they occupy one byte of struct smc connection and every store to one is a read-modify-write of the other two...

PT-2026-90237

In the Linux kernel, the following vulnerability has been resolved: sched/core: Handle pick task releasing the rq lock Core scheduling's pick next task breaks when a -pick task implementation can release the rq lock. The selection state derived on entry is only valid while the lock is held...

PT-2026-90472

In the Linux kernel, the following vulnerability has been resolved: mm/migrate: report RCU-tasks quiescent states in migrate pages batch migrate pages batch unmaps each folio before moving it, and every unmap runs the mmu notifier invalidate callbacks. On KVM hosts try to migrate ends up in kvm m...

PT-2026-90376

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin state revocation A stateid holds only a bare pointer to its nfs4 client; a stateid reference does not pin it. The client survives only because destroy client drains its stateids...

PT-2026-89877

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE...

Linux Distros Unpatched Vulnerability : CVE-2026-57222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - suricata - None Ubuntu Linux - ippair: IPv4/IPv6 hash collision can reuse wrong IPPair state CVE-2026-57222 Note that Nessus relies on the presen...

CVE-2026-71646

A denial of service vulnerability exists in RACER (Robotics-STAR-Lab, SYSU STAR Group), specifically in the FastExplorationFSM::optTimerCallback() function within swarm_exploration/exploration_manager/src/fast_exploration_fsm.cpp. The affected version is commit abcdef1234567890. A remote attacker...

PT-2026-90119

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bringing it up fails Every failure path in tbnet connected work undoes its own work and returns without clearing login sent, so the connection still looks established. The next tbne...

checkout-index

checkout-index - Reproductor para CVE-2025-22620 Este es el código de prueba de concepto para RUSTSEC-2025-0001 CVE-2025-22620, GHSA-fqmf-w4xh-33rh. Es el mismo código que en el aviso, pero en forma de un proyecto Rust, con Cargo.toml y Cargo.lock incluidos. Este repositorio fue útil mientras se...

CVE-2026-71645

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial of service via the exploration state machine...

DEBIAN-CVE-2026-45770

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

CVE-2026-45770

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

CVE-2026-45766

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentiall...

CVE-2026-45769

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,IKEv2 parser state could grow without bounds while storing client transforms. Repeated crafted UDP traffic may cause Suricata to consume excessi...

DEBIAN-CVE-2026-45766

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentiall...