Linux Distros Unpatched Vulnerability : CVE-2026-90560

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the ZstdDictDecompress constructor because offset and length arguments a...

CVE-2026-90559: Out-of-bounds Write

snappy-java through 1.1.10.8 contains an out-of-bounds write vulnerability in Snappy.uncompressByteBuffer, ByteBuffer because destination buffer capacity is never validated against decompressed size. Attackers can supply valid compressed data that decompresses larger than the destination buffer,...

CVE-2026-90560: Out-of-bounds Read

zstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the ZstdDictDecompress constructor because offset and length arguments are never validated against the dictionary array bounds. Attackers can supply arbitrary offset or length values to read memory past the en...

Linux Distros Unpatched Vulnerability : CVE-2026-89466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: supply: qcombattmgr: terminate the strings from firmware The qcombattmgrsc8280xpstrcpy takes a Pascal-style string when the firmware sends one. Otherwise...

CVE-2026-89466

A flaw was found in the Linux kernel's qcombattmgr component, responsible for power supply management. This vulnerability occurs due to improper string termination when handling firmware-provided strings. A malicious or malformed firmware string that completely fills its buffer can lead to an...

CVE-2026-80979

A flaw was found in the Linux kernel's Shared Memory Communications SMC component. During connection termination, the SMC component may fail to properly unregister a connection before draining its receive tasklet. This can lead to a use-after-free vulnerability, where a freed memory buffer is...

AZL-100347 CVE-2026-89761 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aavecunique null terminates at vecn - dups when VECFLAGTERMINATE is passed. If the components are all distinct no duplicates are dropped, dups is 0 and the...

CVE-2026-89761

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aavecunique null terminates at vecn - dups when VECFLAGTERMINATE is passed. If the components are all distinct no duplicates are dropped, dups is 0 and the...

CVE-2026-89761

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aavecunique null terminates at vecn - dups when VECFLAGTERMINATE is passed. If the components are all distinct no duplicates are dropped, dups is 0 and the...

CVE-2026-89466

In the Linux kernel, the following vulnerability has been resolved: power: supply: qcombattmgr: terminate the strings from firmware The qcombattmgrsc8280xpstrcpy takes a Pascal-style string when the firmware sends one. Otherwise it copies all BATTMGRSTRINGLEN bytes and leaves the destination...

DEBIAN-CVE-2026-89466

In the Linux kernel, the following vulnerability has been resolved: power: supply: qcombattmgr: terminate the strings from firmware The qcombattmgrsc8280xpstrcpy takes a Pascal-style string when the firmware sends one. Otherwise it copies all BATTMGRSTRINGLEN bytes and leaves the destination...

EUVD-2026-76673

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aavecunique null terminates at vecn - dups when VECFLAGTERMINATE is passed. If the components are all distinct no duplicates are dropped, dups is 0 and the...

CVE-2026-89761

CVE-2026-89761 is an out-of-bounds write in the Linux kernel's AppArmor security module. The function aa_vec_unique() writes a null terminator one entry past the end of the label vector because vec_setup() fails to reserve space for it when all label components are distinct. An unprivileged local...

CVE-2026-89761 apparmor: fix out-of-bounds write when null terminating a label vec

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aavecunique null terminates at vecn - dups when VECFLAGTERMINATE is passed. If the components are all distinct no duplicates are dropped, dups is 0 and the...

CVE-2026-89466 power: supply: qcom_battmgr: terminate the strings from firmware

In the Linux kernel, the following vulnerability has been resolved: power: supply: qcombattmgr: terminate the strings from firmware The qcombattmgrsc8280xpstrcpy takes a Pascal-style string when the firmware sends one. Otherwise it copies all BATTMGRSTRINGLEN bytes and leaves the destination...

UBUNTU-CVE-2026-89099

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

CVE-2026-89099

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

CVE-2026-89099 Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

CVE-2026-89099

A race condition in the document value layer of MongoDB Server allows concurrent server threads to operate on the same internal memory without proper synchronization, leading to memory corruption . An authenticated user holding ordinary read-write privileges can trigger this over the normal clien...