CVE-2026-72425

A flaw was found in the Linux kernel's ice driver. A local user could trigger a resource leak by resetting all Virtual Functions VFs while FDIR Flow Director filters are enabled. This occurs because control VSIs Virtual Station Interfaces are invalidated but not properly freed, leading to a gradu...

CVE-2026-61231

Vulnerability in the Oracle Virtual Directory product of Oracle Fusion Middleware component: Virtual Directory Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise...

EUVD-2026-61340

Vulnerability in the Oracle Virtual Directory product of Oracle Fusion Middleware component: Virtual Directory Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise...

CVE-2026-72286

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM with Secure Encrypted Virtualization SEV and Secure Nested Paging SNP virtual machines. The intra-host migration and mirroring feature is not fully implemented for SEV-SNP VMs. This incomplete implementation means that critic...

PT-2026-77496

Name of the Vulnerable Software and Affected Versions Oracle Virtual Directory versions 12.2.1.4.0 Oracle Virtual Directory versions 14.1.2.0.0 Description A flaw in the Virtual Directory Server component of Oracle Fusion Middleware allows a low privileged attacker with network access via LDAP to...

Linux Distros Unpatched Vulnerability : CVE-2026-72357

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uprobes/x86: Use proper mmstruct in inuprobetrampoline In the unregister path we use inuprobetrampoline check with current-mm for the VMA lookup, which is wrong...

CVE-2026-72045

A flaw was found in the Linux kernel component octeontx2-af. A local attacker with access to a Virtual Function VF could exploit an unsanitized input in the rvumboxhandlerlmtsttblsetup function. This vulnerability allows the VF to read the physical base address of another function's LMTLINE, whic...

BIT-GITLAB-2026-16553 Insufficiently Protected Credentials in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed some sensitive information to be disclosed to an unintended host due to improper handling of upstream requests in...

CVE-2026-74403

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Check for page allocation failure correctly in TIO Sashiko notes: if snpallocfirmwarepages returns NULL under memory pressure, is it safe to pass it directly to pageaddress? On architectures without HASHEDPAGEVIRTUA...

UBUNTU-CVE-2026-72278

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Re-translate VNCR before injecting abort KVM faults in the VNCR page with FOLLWRITE whenever the guest aborts for a write, similar to how a regular stage-2 mapping is handled. It is entirely possible that the gues...

CVE-2026-68468

The CVE affects the Linux kernel MTD virt-concat path. The root cause is that after a virtual concat is already registered, mtd_virt_concat_create_join() builds the same name again and follows the equal-name branch, skipping the cleanup of the newly allocated temporary string. The vulnerability i...

PT-2026-72475

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into "normal" checks Move the off-by-default consistency check for vmcs12.tpr threshold vs. the virtual APIC vTPR into the "normal" controls checks, as waiting until KVM ha...

Linux Distros Unpatched Vulnerability : CVE-2026-72045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF rvumboxhandlerlmtsttblsetup uses req-basepcifunc as a direct index into the LMT map table to read...

PT-2026-72839

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Check for page allocation failure correctly in TIO Sashiko notes: if snp alloc firmware pages returns NULL under memory pressure, is it safe to pass it directly to page address? On architectures without HASHED PAGE...

EUVD-2026-42933

Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket...

UBUNTU-CVE-2026-16033

A path traversal vulnerability in LXD allows an attacker to achieve arbitrary host file read or unconstrained file creation. When processing image metadata templates, LXD fails to properly sanitize or restrict template file paths from escaping the instance templates directory specifically affecti...

CVE-2026-68128

A flaw was found in the Linux kernel's ice driver. A malicious virtual function VF can provide an out-of-range 'ptype' value through the VIRTCHNL interface. This can lead to a write past the end of an allocated memory region, causing a kernel page fault and resulting in a Denial of Service DoS...

CVE-2026-73217

The CVE describes a sandbox-escape flaw in Cursor IDE for macOS prior to 3.1.2. An agent in Auto-Run Sandbox mode can replace a virtual environment’s Python executable with a malicious wrapper that the Microsoft Python extension invokes outside the sandbox, enabling arbitrary host commands with t...

CVE-2026-68101

A flaw was found in the Linux kernel's AMD GPU amdgpu driver. During the allocation or deallocation of a user pointer buffer object, a critical reference to its virtual memory object can become unavailable. This improper handling of memory submissions could lead to system instability or a denial ...

PT-2026-70907

Name of the Vulnerable Software and Affected Versions GMS Command-Line Interface CLI versions prior to 9.5.1 Build 9510.1044 Description An authenticated command injection issue exists in the GMS Virtual Appliance interface. This flaw allows a low-privileged local user to execute system commands...