The vulnerability of the do_trap_ecall_u() function in the arch/riscv/kernel/traps.c module of the module management subsystem for the RISCV-architecture Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dotrapecallu function in the arch/riscv/kernel/traps.c module of the Linux operating system’s RISCV architecture-based device driver management subsystem is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an...

The vulnerability of the eqbr_irq_ack() function in the drivers/pinctrl/pinctrl-equilibrium.c module of the Linux operating system’s GPIO controller driver allows a hacker to cause a service failure.

The vulnerability of the eqbrirqack function in the drivers/pinctrl/pinctrl-equilibrium.c module of the Linux kernel’s GPIO controller driver leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the functions mlx5e_tc_del_fdb_peer_flow() and mlx5e_tc_clean_fdb_peer_flows() in the driver module drivers/net/ethernet/mellanox/mlx5/core/en_tc.c of the Mellanox Ethernet network adapter driver for the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the functions mlx5etcdelfdbpeerflow and mlx5etccleanfdbpeerflows in the driver module drivers/net/ethernet/mellanox/mlx5/core/entc.c of the Mellanox Ethernet network adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability...

PT-2026-73225

Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-73229

Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2026-76895

Name of the Vulnerable Software and Affected Versions Etherpad versions prior to 3.3.0 Description Stored cross-site scripting occurs when the getHTMLFromAtext function in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data...

The vulnerability of the fib6_add_rt2node() function in the net/ipv6/ip6_fib.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fib6addrt2node function in the net/ipv6/ip6fib.c module of the Linux operating system’s IPv6 kernel implementation is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the kernel module of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the kernel network module in the Linux operating system is related to incorrect checking of the amount of data at the input. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the nfsd kernel module in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nfsd kernel module in the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the trace_dma_map_sg() function in the include/trace/events/dma.h module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tracedmamapsg function in the include/trace/events/dma.h module of the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the rxe module in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the rxe module in the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the bpf_crypto_ctx_release() function in the kernel/bpf/crypto.c module, which is part of the Linux operating system’s BPF interpreter support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpfcryptoctxrelease function in the kernel/bpf/crypto.c module, which is part of the Linux operating system’s BPF interpreter support, is related to incorrect type conversion or casting. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the osd_fault() function in the net/ceph/osd_client.c module, which is part of the Linux kernel’s networking functions, allows a hacker to trigger a service failure.

The vulnerability of the osdfault function in the net/ceph/osdclient.c module, which implements kernel networking functions in the Linux operating system, is related to state management errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the nfsd_nl_threads_set_doit() function in the fs/nfsd/nfsctl.c file of the Nfsd kernel module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nfsdnlthreadssetdoit function in the fs/nfsd/nfsctl.c file of the Nfsd kernel module in the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service...

RHEL 8 : 389-ds:1.4 (RHSA-2026:55756)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55756 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

Unity Linux 20.1070a Security Update: compat-openssl10 (UTSA-2026-099551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099551 advisory. Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary:...

Linux Distros Unpatched Vulnerability : CVE-2026-19970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph3DGSMDL7 of the file...

RHEL 8 : 389-ds:1.4 (RHSA-2026:55757)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55757 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

Linux Distros Unpatched Vulnerability : CVE-2026-19969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function...

PT-2026-76735

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, SQL REGEX in sqlparse/keywords.py and the per-position loop in sqlparse/lexer.py repeatedly scan unmatched dollar-quoted literal and multiline-comment delimiters, causing quadratic CPU consumption through sqlparse.parse,...