UBUNTU-CVE-2026-98722

In the Linux kernel, the following vulnerability has been resolved: mtd: block2mtd: Fix divide error when erasesize is zero The erase size is parsed from the "block2mtd" module parameter and can be set to zero. adddevice then evaluates if size % erasesize with a zero divisor, which triggers a...

TencentOS Server 3: idm:DL1 (TSSA-2026:1182)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1182 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

PT-2026-118094

It was discovered that cifs-utils incorrectly handled credentials files used by privileged mount.cifs invocations. A local attacker could possibly use this issue to inject arbitrary mount options into a privileged mount, resulting in a privilege escalation...

PT-2026-117259

在 openGauss-server的 src/common/backend/utils/adt/genfile.cpp 模块中，内置函数 pg read binary file blocks 存在权限校验逻辑缺陷。该函数在入口处仅校验了起始块号（startBlockNum）和块数量（blockCount）的范围，随后直接调用底层文件读取例程 ReadBinaryFileBlocksFirstCall。该底层例程仅执行了路径规范化检查以及针对 .. 路径遍历和数据目录边界的基本检查，缺失了对调用者数据库权限（如 SELECT 权限）的校验。此外，辅助函数 is row data file...

PT-2026-117309

MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settings for API consumption, it drops the redacted and cli only flags that a module declares in its own configuration metadata. As a result: - A module that marks a setting such as a...

PT-2026-117464

docTR through 1.1.0 contains an unsafe deserialization vulnerability in load pretrained params that loads checkpoints with torch.load without weights only=True. Attackers who control a local or URL-supplied checkpoint can embed a malicious pickle payload to execute Python code with the loading...

UBUNTU-CVE-2026-98842

In the Linux kernel, the following vulnerability has been resolved: module: fix lost error code from codetagloadmodule If codetagloadmodule fails, err is not set to reflect the failure and loadmodule returns 0 after the module has been torn down. Also, if the module is a livepatch, mod-klpinfo...

Linux kernel Module Heap Buffer Overflow DoS

The vulnerability of the aareplaceprofiles function in the security/apparmor/policy.c kernel module of the Linux operating system is related to the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the radeonringrestore function in the drivers/gpu/drm/radeon/radeonring.c kernel module of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel module daemonize() Buffer Overflow

The vulnerability of the daemonize function in the tools/power/x86/intel-speed-select/isst-daemon.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility o...

Linux kernel BPF Trace Heap Buffer Overflow DoS

The vulnerability of the copyusersyms function in the kernel/trace/bpftrace.c module of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the devicepasidtableteardown function in the drivers/iommu/intel/pasid.c kernel module of the Linux operating system is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

MAL-2026-18083 Malicious code in tailwind-keyframes (npm)

tailwind-keyframes 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by adriannamrr on 2026-09-28. src/motion.js:5 requires the private scoped package...

MAL-2026-18082 Malicious code in tailwind-fabric (npm)

tailwind-fabric 3.0.1, 3.0.4 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by johnxia1997 on 2026-09-28. src/motion.js:5 requires the private scoped package...

MAL-2026-18076 Malicious code in signalledger-diagnostics (npm)

signalledger-diagnostics 2.0.6 is a Tailwind CSS plugin from the fake job interview campaign behind MAL-2026-17665 and MAL-2026-17666: the same Animate.css integration template, README and description, published by scott-rogers on 2026-09-28. src/motion.js:5 requires the private scoped package...

openSUSE 16 Security Update : bcel (openSUSE-SU-2026:22109-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22109-1 advisory. - CVE-2026-94114: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser bsc1284400. - CVE-2026-105111: Class2HTML...

MiracleLinux 8 : [security - high] nodejs:22 (AXSA:2026-2091:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2091:01 advisory. pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function CVE-2026-9496 undici: undici: Denial of Service via unrequest...

RHEL 8 : gimp:2.8 (RHSA-2026:84744)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84744 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

PT-2026-117223

A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function load word2vec as vocab tensor of the file hanlp/utils/torch util.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Apache HTTP Server vulnerabilities (USN-8931-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8931-1 advisory. discovered that Apache HTTP Server exposed WebDAV property information. A remote...