The vulnerability of the isotpbind() function in the net/can/isotp.c module of the Linux kernel’s CAN subsystem allows a hacker to cause a service failure.

The vulnerability of the isotpbind function in the net/can/isotp.c module of the CAN subsystem of the Linux kernel is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the find_module_check_fn() function in the kernel/cfi.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the findmodulecheckfn function in the kernel/cfi.c module of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the msm_irq_postinstall() function in the drivers/gpu/drm/msm/msm_drv.c file of the DRI support driver for the Linux operating system’s kernel allows a attacker to cause a service failure.

The vulnerability of the msmirqpostinstall function in the drivers/gpu/drm/msm/msmdrv.c file, a driver for supporting Direct Rendering Infrastructure DRI in the Linux kernel, is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ice_misc_intr() function in the drivers/net/ethernet/intel/ice/ice_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the icemiscintr function in the drivers/net/ethernet/intel/ice/icemain.c file of the Intel Ethernet network adapter driver in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerabilities of the functions rsm_load_state_32() and rsm_load_state_64() in the arch/x86/kvm/emulate.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allow an attacker to gain access to protected information or cause service failures.

The vulnerability of the rsmloadstate32 and rsmloadstate64 functions in the arch/x86/kvm/emulate.c module of the virtualization subsystem on the Linux x86 kernel platform is related to access to memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to gain acce...

The vulnerability of the `cs35l41_get_acpi_mute_state()` function in the sound subsystem of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cs35l41getacpimutestate function in the sound/hda/codecs/side-codecs/cs35l41hda.c module of the Linux kernel sound subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hisi_pcie_pmu_offline_cpu() function in the drivers/perf/hisilicon/hisi_pcie_pmu.c driver, a performance monitoring driver for Linux kernels, allows a hacker to cause a service failure.

The vulnerability of the hisipciepmuofflinecpu function in the drivers/perf/hisilicon/hisipciepmu.c driver for monitoring Linux kernel performance is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the mlx5e_init_rep_tx() function in the drivers/net/ethernet/mellanox/mlx5/core/en_rep.c file of the Mellanox Ethernet network adapter support driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the mlx5einitreptx function in the drivers/net/ethernet/mellanox/mlx5/core/enrep.c file of the Mellanox Ethernet network adapter support driver for the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause...

CVE-2026-27815: Out-of-bounds Write

EVerest is an EV charging software stack. Prior to versions to 2026.02.0, ISO15118chargerImpl::handlesessionsetup copies a variable-length paymentoptions list into a fixed-size array of length 2 without bounds checking. With schema validation disabled by default, oversized MQTT Cmd payloads can...

CVE-2026-29044: Incorrect Authorization

EVerest is an EV charging software stack. Prior to version 2026.02.0, when WithdrawAuthorization is processed before the TransactionStarted event, AuthHandler determines transactionactive=false and only calls withdrawauthorizationcallback. This path ultimately calls Charger::deauthorize, but no...

CVE-2026-3109: Improper Check for Unusual or Exceptional Conditions

Mattermost Plugins versions =11.4 10.11.11.0 fail to validate webhook request timestamps which allows an attacker to corrupt Zoom meeting state in Mattermost via replayed webhook requests. Mattermost Advisory ID: MMSA-2026-00584...

EVerest 安全漏洞

EVerest is an open-source firmware for electric vehicle charging stations developed by EVerest. Versions of EVerest prior to 2026.02.0 contained security vulnerabilities. These vulnerabilities stemmed from the CSMS executing a RemoteStop operation, allowing the EVSE to revert to the PrepareChargi...

PT-2026-28525

Name of the Vulnerable Software and Affected Versions BuildKit versions prior to 0.28.1 Description BuildKit is a toolkit for converting source code to build artifacts. When using a custom BuildKit frontend, a malicious frontend can craft an API message that causes files to be written outside of...

The vulnerability of the nest_imc_event_init() function in the arch/powerpc/perf/imc-pmu.c module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the nestimceventinit function in the arch/powerpc/perf/imc-pmu.c module, which is part of the PowerPC platform support for the Linux operating system, is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2026-15952

n8n Has Authorization Bypass in OAuth Callback via N8NSKIPAUTHONOAUTHCALLBACK...

CVE-2026-33720

n8n is an open source workflow automation platform. Prior to version 2.8.0, when the N8NSKIPAUTHONOAUTHCALLBACK environment variable is set to true, the OAuth callback handler skips ownership verification of the OAuth state parameter. This allows an attacker to trick a victim into completing an...

SUSE CVE-2026-23376

In the Linux kernel, the following vulnerability has been resolved: nvmet-fcloop: Check remoteport portstate before calling done callback In nvmefchandlelsrqstwork, the lsrsp-done callback is only set when remoteport-portstate is FCOBJSTATEONLINE. Otherwise, the nvmefcxmtlsrsp's LLDD call to...

EUVD-2026-15366

In the Linux kernel, the following vulnerability has been resolved: nvmet-fcloop: Check remoteport portstate before calling done callback In nvmefchandlelsrqstwork, the lsrsp-done callback is only set when remoteport-portstate is FCOBJSTATEONLINE. Otherwise, the nvmefcxmtlsrsp's LLDD call to...

CVE-2026-23376

A flaw was found in the Linux kernel's nvmet-fcloop component. This vulnerability occurs due to incorrect handling of resource freeing when the remote port state is not online. Specifically, the fcloopt2hxmtlsrsp routine fails to check the remoteport-portstate before calling a done callback, whic...

The Kill Chain Is Obsolete When Your AI Agent Is the Threat

In September 2025, Anthropic disclosed that a state-sponsored threat actor used an AI coding agent to execute an autonomous cyber espionage campaign against 30 global targets. The AI handled 80-90% of tactical operations on its own, performing reconnaissance, writing exploit code, and attempting...