The vulnerability of the acpi_button_remove() function in the drivers/acpi/button.c driver of the ACPI configuration and power management extended interface for the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the acpibuttonremove function in the drivers/acpi/button.c driver of the Linux ACPI configuration and power management extension framework is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

Security Advisory 0173

Security Advisory 0173 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-73455 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSSv4.0 Base Score: 8.9...

Security Advisory 0182

Security Advisory 0182 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-86109 CVSSv3.1 Base Score: 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVSSv4.0 Base Score: 7.5...

Security Advisory 0151

Security Advisory 0151 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-73451 CVSS:3.1 Base Score: 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0 Base Score: 6.3...

Linux Distros Unpatched Vulnerability : CVE-2026-80914

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: ISO: fix use-after-free of listener socket in isoconnready isoconnready looks up the BIS listener socket with isogetsock, which takes a reference, a...

Security Advisory 0172

Security Advisory 0172 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-73438 CVSSv3.1 Base Score: 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSSv4.0 Base Score: 7.0...

TencentOS Server 4: bouncycastle (TSSA-2026:0647)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0647 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Security Advisory 0150

Security Advisory 0150 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release Description All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with 802.1X authentication and authorization enabled and Access...

PT-2026-89089

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww mutex acquire in amdgpu devcoredump format When dumping IB contents from a hung job, amdgpu devcoredump format acquired the VM root PD's reservation via amdgpu vm lock by pasid and then, for each IB,...

PT-2026-89246

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not properly restrict which signature algorithm may be used to validate a SAML assertion, allowing the algorithm to be influenc...

PT-2026-89158

Summary The OIDC back-channel logout endpoint is unauthenticated by design, because the identity provider calls it without a browser session. Before checking whether the submitted logout token was genuine, the handler fetched the provider's discovery document and its signing keys over the network...

PT-2026-89084

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix use-after-free of listener socket in iso conn ready iso conn ready looks up the BIS listener socket with iso get sock, which takes a reference, and then, without re-checking its state, creates a child socket...

PT-2026-89171

Summary Any member of a channel who can post to it could also replace the text of a message written by a different member. The channel branch of the chat completions endpoint checked that the caller may write to the channel, and that the targeted message belongs to that channel, but never checked...

PT-2026-89173

Summary With the Playwright web loader enabled, Open WebUI checks the address behind a user-submitted URL before allowing the request, then handed the request to the browser to perform. The browser resolved the hostname a second time, on its own, and that answer was never checked. An attacker who...

PT-2026-89172

Summary Any authenticated user with access to a shared terminal server could get script of their choosing to run in the Open WebUI origin itself. The in-app port preview rendered the content of a previewed port in an iframe whose sandbox always granted allow-same-origin alongside allow-scripts, a...

PT-2026-89013

Snipe-IT 8.6.3 and earlier and develop pre-release commits prior to the fix contain a race condition in the asset checkout paths. ApiAssetsController::checkout and AssetsAssetCheckoutController::store call Asset::availableForCheckout outside the mutation path and then invoke Asset::checkOut witho...

PT-2026-89177

Summary Chat histories are stored as an unvalidated JSON object. After a message is deleted, the code that picks the chat's new current message walked down the childrenIds links without recording where it had already been. Any account with the default user role could store a chat whose messages...

Security Advisory 0154

Security Advisory 0154 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-73458 CVSSv3.1 Base Score: 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CVSSv4.0 Base Score: 9.2...

Security Advisory 0157

Security Advisory 0157 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release Description All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with the Virtual Router Redundancy Protocol VRRP enabled. In...

Security Advisory 0171

Security Advisory 0171 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-73435 CVSSv3.1 Base Score: 8.2 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H CVSSv4.0 Base Score: 7.0...