PT-2026-98009

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where pending RCU callbacks are not flushed during module unload. This can lead to a page fault if call rcu callbacks are executed after the...

PT-2026-98130

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the mac80211 wifi component. In Neighbor Awareness Networking NAN, the info-band variable is set to NUM NL80211 BANDS because the transmission ban...

PT-2026-98207

Name of the Vulnerable Software and Affected Versions volotat Anagnorisis versions prior to 0.4.12 Description Cross site scripting occurs in the Media Filename Handler component due to improper handling of the file path argument within the html function of the PlaylistManager.js file. This allow...

PT-2026-98060

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu/pm component where the SmartShift bias sysfs store fails to handle the PM refcount correctly during a parse error. The system should return the parse...

PT-2026-97874

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SUNRPC component where the svcauth gss decode credbody function fails to properly initialize the rpc gss wire cred field. Because the storage svcdata-clcred is...

PT-2026-98125

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference can occur in the crypto: ixp4xx component. The chainup buffers function, which creates a linked list of buffer descriptors for a scatterlist, fails to handle...

PT-2026-98159

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.1.8 Discourse versions prior to 2026.6.3 Discourse versions prior to 2026.7.2 Discourse versions prior to 2026.8.0 Description The video placeholder component allows crafted HTML to cause an attribute breakout...

PT-2026-98086

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ACPICA Advanced Configuration and Power Interface Component Architecture component where invalid references could be added. Specifically, the acpi ut copy simple...

CVE-2026-97324: Improper Authorization

A vulnerability was identified in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected is the function updateDemoOrderPaid of the file yudao-module-pay/src/main/java/cn/iocoder/yudao/module/pay/controller/admin/demo/PayDemoOrderController.java of the component Demo-order Payment Callback...

PT-2026-98067

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvme component where FDP Flexible Data Placement configuration descriptor sizes are not properly validated. When walking the FDP configurations log, a dsze value o...

PT-2026-98021

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the PCI altera component when stopping and removing a root bus. The issue occurs when the pci rescan remove lock lock is not held, allowing concurrent rescan o...

PT-2026-98001

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the smb/client component where the stack-allocated cifs open info data is not zero-initialized. This can result in the structure containing random data, potentially...

PT-2026-98005

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read issue exists in the wifi cfg80211 component. The functions cfg80211 rx mlme mgmt and cfg80211 tx mlme mgmt fail to properly validate the length of frames relative t...

PT-2026-98295

Name of the Vulnerable Software and Affected Versions SANnav affected versions not specified Description An information exposure issue exists in the job scheduling component. When scheduled support save jobs or related operational tasks are executed, sensitive parameters such as external server...

PT-2026-104991

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free on reloc root after error in insert dirty subvol If during relocation we fail in insert dirty subvol because btrfs update reloc root returned an error, we will leave a root's reloc root field pointing to...

CVE-2026-97182: Improper Neutralization

A security vulnerability has been detected in halo-dev Halo up to 2.25.4/2.26.1. Affected is an unknown function of the file application/src/main/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelper.java of the component SpEL Handler. Such manipulation leads to improper...

PT-2026-97975

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the netfilter component where the nfnl log net exit function calls nf log unset, clearing the logger pointer without waiting for an RCU Read-Copy-Update grace period. Th...

PT-2026-98259

Name of the Vulnerable Software and Affected Versions ruoyi-vue-pro versions prior to 2026.09 Description A path traversal issue exists in the File Upload component. This occurs within the getOriginalFilename function located in the...

CVE-2026-97323: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was determined in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. This impacts the function getOriginalFilename of the file yudao-module-mp/src/main/java/cn/iocoder/yudao/module/mp/service/material/MpMaterialServiceImpl.java of the component File Upload. Executing a manipulation...

PT-2026-98089

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the ACPICA component. This occurs within the acpi ds terminate control method function, where references to method locals and arguments are not properly...