CVE-2026-104005

A security issue in MongoDB mongos (sharded cluster router) allows an authenticated user with readWrite privileges to cause a Denial of Service (DoS) . By crafting a specially formed aggregation pipeline, an attacker can trigger an unhandled fatal error in an internal aggregation stage that lacks...

CVE-2026-104005 Incorrect authorization in MongoDB Server router for bulk writes to system namespaces

A security issue was discovered in MongoDB mongos the sharded cluster router where an authenticated user with readWrite privileges could crash the mongos process by crafting a specially formed aggregation pipeline. The issue leverages an internal aggregation stage that lacks proper authorization...

CVE-2026-109523

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results i...

CVE-2026-109522

A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection...

CVE-2026-109525 girishsaraf Online-Appointment-Booking-System submit2 changebookingstatus.php authorization

A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown part of the file changebookingstatus.php of the component submit2 Handler. Such manipulation of the argument username/timestamp/status leads to...

CVE-2026-109525

A vulnerability exists in the girishsaraf Online-Appointment-Booking-System (up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5) involving a missing authorization flaw in the submit2 Handler component, specifically within the changebookingstatus.php file. Attackers can remotely manipulate the ...

CVE-2026-90259

A flaw was found in btrfs qgroup. An incorrect length calculation in the qgroupfreereserveddata function can lead to a much larger length being used than intended. This error in calculation may result in improper data handling, potentially causing system instability or data corruption...

CVE-2026-90256

A flaw was found in the Linux kernel's Bluetooth L2CAP Logical Link Control and Adaptation Protocol component. A use-after-free UAF vulnerability can occur when hciconn::l2capdata is accessed without proper locking during the disconnection indication process. This can lead to a system crash or...

CVE-2026-90245

A flaw was found in the Linux kernel's fbdev kyro driver. This vulnerability arises from the calculation of overlay viewport end coordinates using 32-bit unsigned arithmetic. Large input values can cause these calculations to wrap around, resulting in incorrect coordinates being passed to the...

CVE-2026-90240

A flaw was found in the Linux kernel's IOMMU Input/Output Memory Management Unit / VT-d Virtualization Technology for Directed I/O component. When tearing down Direct Memory Access DMA aliases of a device, the system fails to flush the context cache with the correct Source ID SID. This oversight...

CVE-2026-90235

A flaw was found in the xprtsock component of the Linux kernel's sunrpc implementation. This concurrency vulnerability arises from improper synchronization when updating and reading shared socket callback pointers. As a result, a processor might use an outdated reference to a callback function...

CVE-2026-90234

A flaw was found in the Linux kernel's Network File System NFS client. When an NFS server grants a delegation, the client may fail to record it and not send a DELEGRETURN message. This can lead to a situation where the server believes the client still holds the delegation. If the server then...

USN-8918-1 linux-azure, linux-azure-fde, linux-azure-fips vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8921-1 linux, linux-aws, linux-aws-fips, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-4.15, linux-gcp-fips, linux-hwe, linux-kvm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file...

USN-8920-1 linux-aws-5.4, linux-aws-fips, linux-azure-fips, linux-ibm, linux-ibm-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Network file system NFS server daemon; - Tracing...

USN-8920-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Network file system NFS server daemon; - Tracing...

USN-8923-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SCSI subsystem; - Bluetooth subsystem; CVE-2022-49111, CVE-2022-49114...

USN-8919-1 linux, linux-aws, linux-azure, linux-azure-5.4, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Tracing infrastructure; - iouring subsystem; -...

USN-8919-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Tracing infrastructure; - iouring subsystem; -...

CVE-2026-90323

A flaw was found in the Linux kernel's ublk subsystem. When the automatic buffer registration feature is active, an invalid buffer address can be processed, causing a command to complete while its associated tag remains active. This can lead to a system hang during resource teardown, allowing a...