CVE-2026-53385

CVE-2026-53385 relates to a Linux kernel issue in vc_screen where a race in vcs_write() can yield a stale vc_data after the console_lock is dropped and re-acquired. If the vc has been deallocated in the interim, a subsequent call to vcs_scr_updated() uses a NULL vc, causing a null-pointer derefer...

CVE-2026-53373

In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmapprepare invoked from mmap The mmapprepare hook functionality includes the ability to invoke mmapprepare from the mmap hook of existing 'stacked' drivers, that is ones which are capable of...

CVE-2026-53373

In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmapprepare invoked from mmap The mmapprepare hook functionality includes the ability to invoke mmapprepare from the mmap hook of existing 'stacked' drivers, that is ones which are capable of...

CVE-2026-53373

In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmapprepare invoked from mmap The mmapprepare hook functionality includes the ability to invoke mmapprepare from the mmap hook of existing 'stacked' drivers, that is ones which are capable of...

CVE-2026-53373 mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()

In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmapprepare invoked from mmap The mmapprepare hook functionality includes the ability to invoke mmapprepare from the mmap hook of existing 'stacked' drivers, that is ones which are capable of...

PT-2026-61382

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.0.0-rc1 Description A kernel BUG occurs in the netfs component due to a VM BUG ON FOLIO issue within the netfs write begin function. This issue is triggered when folio unlock is called on a folio that is not locked,...

PT-2026-61422

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 vgic component where private irqs are not freed when initialization fails after allocation. Specifically, the failure path in kvm vgic vcpu init lacks a...

PT-2026-61417

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.0.0 Description A circular locking dependency exists in the drm/msm component of the Linux kernel. When VM reclaim pressure occurs, the kswapd0 process holding the fs reclaim lock calls the MSM shrinker, which subsequent...

PT-2026-61368

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qaic gem object mmap function where the call to remap pfn range is susceptible to mapping beyond the Virtual Memory Area VMA if the Buffer Object BO is too large...

PT-2026-61138

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the ath11k WiFi driver. When a firmware-related initialization error occurs, the buffers dp-tx ringi.tx status are released. These same buffers are released...

PT-2026-61123

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the KVM x86 MMU when recovering hugepages in the shadow MMU. The system fails to verify if the base guest frame number gfn of the shadow page is...

PT-2026-61357

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cachefiles module where the system fails to correctly extract the error code when the vfs mkdir function fails. This results in the mkdir error logic being trigger...

PT-2026-61407

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module where the system could send empty VLAN responses when replying from the global TT state. This occurs because previous checks were only applied to...

PT-2026-61078

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mm/vma component where the mmap prepare function incorrectly attempts to unmap a Virtual Memory Area VMA when invoked from the mmap hook of stacked drivers, such a...

PT-2026-61287

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vsock/virtio component where virtio transport send pkt info allocates or reuses the zerocopy uarg before the send loop, but virtio transport alloc skb fills the sk...

PT-2026-61335

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mana hwc rx event handler function where the rx req idx variable, derived from sge-address in DMA-coherent memory, is used to index the reqs array without a bounds...

PT-2026-61234

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vti6 changelink function where the kernel fails to correctly handle network namespace changes for vti6 devices. When a vti6 tunnel is moved to a different network...

PT-2026-61423

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM arm64 vgic-its component where the vgic its restore dte function fails to validate the Size field of a restored ITS Device Table Entry DTE. This allows userspa...

[SECURITY] Fedora 43 Update: proftpd-1.3.9c-1.fc43

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

GO-2026-5988 Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode in github.com/julien040/anyquery

Anyquery: Server-Side Request Forgery SSRF via Unrestricted SQLite Virtual Table Modules in Server Mode in github.com/julien040/anyquery...