PT-2026-98052

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ALSA es18xx component, the snd es18xx mixer function creates controls using snd ctl new1. If snd ctl new1 fails and returns NULL, the system attempts to store bookkeeping pointers...

PT-2026-98122

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the genirq/proc component where directory names for /proc/irq// are constructed using char name10 buffers via the sprintf function. When 10-digit interrupt numbers are...

PT-2026-98060

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/pm component where the SmartShift bias sysfs store fails to handle the PM refcount correctly during a parse error. The system should return the parse...

PT-2026-98058

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/ras component where cp ecc error irq is acquired in amdgpu gfx ras late init but released in gfx v9 0 hw fini. This mismatch requires the release site t...

PT-2026-98068

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dpaa2-switch component regarding the handling of NAPI New API, a mechanism for reducing packet processing overhead during the device removal process. NAPI instance...

PT-2026-98063

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF race condition exists in the drm/amdkfd component. The wait on destroy queue function drops locks while waiting for a queue to resume, which allows a concurrent...

PT-2026-98103

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the usbip module within the vhci hcd component. The function status show vhci fails to verify if the hcd pointer returned by platform get drvdata is...

PT-2026-98046

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the pds core component. The pdsc teardown function frees DMA buffers without disabling bus mastering, which allows the device to continue performing Dire...

PT-2026-97996

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi driver within the PCIe component where RX pointers remain non-NULL after being freed. When the iwl pcie tx init function fails following RX initialization,...

PT-2026-97645

Name of the Vulnerable Software and Affected Versions SPON Communications IP Network Audio Device XC-9603 version 1.2.3 20181106 Build 107 Description A remote information disclosure issue exists within the Configuration File Download component. The flaw is located in the loadCfg function when...

PT-2026-105029

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...

ClaimMirage: When Self-Claims in Domain Names Change LLM Threat Judgments

Short claims such as not-phishing or official can change how a large language model LLM judges a domain name, without explicit prompt-injection commands. We study this manipulation as ClaimMirage: a name under inspection claims its own safety or approval. We analyze 622,080 judgments across 64...

PT-2026-98070

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dpaa2-switch component regarding Forwarding Database FDB management during the bridge leave path. The dpaa2 switch port set fdb function always attempts to allocat...

PT-2026-98092

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the intel rapl component of the powercap subsystem. The issue occurs within the rapl add package cpuslocked function when topology physical package id or topology...

CVE-2026-96803: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in java110 MicroCommunity up to 2.0. Affected is the function QueryServiceSMOImpl.fallBack of the file BusinessApi.java of the component fallBack API Endpoint. Such manipulation of the argument fallBackSql leads to sql injection. The attack may be launched remotely...

CVE-2026-96763: Improper Access Control

A security flaw has been discovered in kvcache-ai mooncake up to 0.3.12/0.3.13.post1/0.3.14-rc1. This issue affects the function ScopedSegmentAccess::MountSegment of the file segment.cpp of the component MountSegment Request Processing. Performing a manipulation results in improper access control...

CVE-2026-96749: Integer Overflow or Wraparound

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch...

PT-2026-98055

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/umem component regarding boundary conditions within the ib umem find best pgsz function. This is particularly critical on 32-bit systems where the umem-iova...

PT-2026-98089

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ACPICA component. This occurs within the acpi ds terminate control method function, where references to method locals and arguments are not properly...

PT-2026-98116

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdkfd component where the allocate sdma queue function fails to perform bounds-checking on the restore sdma id variable. This variable, which allows the...