UBUNTU-CVE-2026-68398

In the Linux kernel, the following vulnerability has been resolved: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF pppol2tprecv runs in the L2TP UDP-encap softirq RX path: l2tpudpencaprecv - l2tprecvcommon - pppol2tprecv - pppinput&po-chan It runs under rcureadlock holding...

CVE-2026-7270 Local privilege escalation via execve()

An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve2 argument buffers. The bug may be exploitable by an unprivileged user to obtain superuser privileges...

CVE-2026-0122

The Google Pixel smartphone contains a Critical security vulnerability (CVE-2026-0122 ) in the Baseband subcomponent. The flaw is caused by memory corruption leading to an out-of-bounds write , which could allow for remote code execution (RCE) without requiring additional execution privileges or ...

CVE-2026-20402

A vulnerability exists in the Modem component of MediaTek Chipsets due to improper input validation . This flaw can be exploited by an attacker controlling a rogue base station to trigger a system crash, resulting in a remote denial of service (DoS) . The vulnerability can be triggered when a use...

PT-2025-48615

In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...