PT-2026-122028

In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct fsverity info fsverity get info calls rhashtable lookup fast, which just uses rcu read lock and doesn't directly synchronize with fsverity remove info. For the same inode this isn't a...

PT-2026-122012

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the mtk-sd driver of the mmc subsystem. The driver queues req timeout while a request is active, but the msdc request done function uses cancel delayed...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.16. It arises because amt devices’ buffers of skb objects reference the original pointers within their skb-cb fields. When these buffers are released due to a tunnel expiration, subsequent enqueuing operations trigger reuse after release i...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 6.6.158 and prior to 6.18.53. This vulnerability stems from the absence of an SEC2 entry in the GA100 chip table. As a result, when the booter constructor in tu102gsponeinit accesses SEC2 falcon, device-sec2 becomes a null pointer...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions 4.0.2 through 4.1. It arises because pathpivotroot fails to verify whether a mount is within the caller’s mount namespace prior to reading newroot and accessing its parent mount point; this may lead to use-after-free conditions...

ROS-20261023-73-0001

The vulnerability of TLS and SSL OpenSSL tools is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

PT-2026-122016

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free write occurs in the memstick subsystem when wait for completion timeout expires in the memstick alloc card and memstick set rw addr functions. Because the subsystem...

PT-2026-121990

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth ISO implementation where concurrent listener setups for Broadcast Isochronous Streams BIS can lead to a slab-use-after-free. This occurs because iso sock...

No version of Vaadin uses PHP

No version of Vaadin uses PHP. No Vaadin product contains PHP code, and no PHP interpreter takes part in building, running or deploying a Vaadin application. Vaadin is therefore not affected by CVE-2026-109618 or CVE-2026-109619, and no Vaadin release is needed in response to them.This page exist...

PT-2026-121831

A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to cause the client application to crash, affecting availability...

Tokio race condition vulnerability

Version 1.54.0 of Tokio contains a race condition vulnerability. This issue arises from a race condition between tokio::time::Interval::polltick and the time-driven runtime in multi-threaded environments. It may result in internal timer entries being dropped without synchronization with the drive...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions 6.18.6 through 6.18.57 and 6.19. This vulnerability arises because gpiompsseirqenable schedules a work item before adding it to the priv-workers list; however, this work item may be omitted during a disconnection. As a result, after the USB...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 4.7. It stems from an error path in altredaca10deviceadd and altrportbsetup, where dci structures are released prior to freeing the devres group. This allows access to memory that has been freed between releasing the dci and canceling the IR...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because thunderbolt hotplug events may continue processing functions even after their associated domains have been removed from the domain...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.17. It stems from mntchangemountpoint failing to reset the -overmount of an old parent mount, leading to null pointers and use-after-free conditions, which may result in memory corruption...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.0. It stems from the fact that the isosockconnect function in Bluetooth ISO fails to serialize concurrent connect calls. As a result, multiple callers can pass through admission checks and replace socket connections simultaneously, leading...

Linux kernel security vulnerabilities

Security vulnerabilities exist in Linux kernel versions from 4.4.281 up to 4.5, from 4.9.280 up to 4.10, from 4.14.244 up to 4.15, from 4.19.203 up to 4.20, from 5.4.140 up to 5.5, from 5.10.58 up to 5.11, from 5.13.10 up to 5.14, and specifically in version 5.14. The vulnerability arises because...

kernel security, bug fix, and enhancement update

6.12.0-211.68.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

RHEL 9 : php:8.2 (RHSA-2026:88835)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88835 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: OOM bailout during request parsi...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1792750763)

"The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1792750763 advisory. - In the Linux kernel, the following vulnerability has been resolved: RDMA: Fix use-after-free in rxequeuecleanup On error handling...