EUVD-2026-48981

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdmawritesg When the server answers an RTRS READ, rdmawritesg builds the source scatter/gather entry for the IBWRRDMAWRITE that returns data to the peer. Its length is taken...

CVE-2026-64269 RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdmawritesg When the server answers an RTRS READ, rdmawritesg builds the source scatter/gather entry for the IBWRRDMAWRITE that returns data to the peer. Its length is taken...

CVE-2026-10818

WPForms Pro (WordPress) is affected by an Arbitrary File Upload vulnerability up to version 1.10.1.1, exploitable via the ajax_chunk_upload_finalize path. The issue arises because file type validation occurs after chunk metadata and file contents are written to disk, and the assembled file isn’t ...

CVE-2026-10818 WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init/Finalize Ordering

The WPForms Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.10.1.1 via the ajaxchunkuploadfinalize function. This is due to the file type validation occurring after chunk metadata and file contents have already been written to disk, and the...

Linux Distros Unpatched Vulnerability : CVE-2026-65704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by supplying a crafted ffconcat file processed...

PT-2026-64490

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/rtrs-srv component where the rdma write sg function fails to validate the length of the RDMA-Write operation against the maximum chunk size. When responding t...

PT-2026-64670

In the Linux kernel, the following vulnerability has been resolved: staging: vme user: bound slave read/write to the kern buf size The SLAVE-path helpers buffer to user and buffer from user copy 'count' bytes into/out of the fixed-size kern buf size buf == PCI BUF SIZE == 0x20000, 128 KiB using...

Linux Distros Unpatched Vulnerability : CVE-2026-64269

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdmawritesg When the server answers an RTRS READ, rdmawritesg builds the source scatter/gather entry fo...

PT-2026-64557

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak exists in the USB serial keyspan pda implementation. The write callback is intended to return the number of characters accepted or a negative errno. However, with wri...

PT-2026-64554

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the digi acceleport USB serial driver where the digi write inb command function fails to correctly handle timeouts. Instead of returning an error when a write URB USB...

PT-2026-64724

In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on write raw error kxsd9 write raw takes a runtime PM reference with pm runtime get sync but returns -EINVAL directly when a scale with a non-zero integer part is requested, skipping th...

Linux Distros Unpatched Vulnerability : CVE-2026-64503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: accel: kxsd9: fix runtime PM imbalance on writeraw error kxsd9writeraw takes a runtime PM reference with pmruntimegetsync but returns -EINVAL directly when...

PT-2026-64620

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the Linux kernel, the smb2 ioctl function fails to perform necessary permission checks when processing the FSCTL DUPLICATE EXTENTS TO FILE control code. Specifically, it uses vfs clon...

PT-2026-64619

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc7 Description An authenticated SMB client can bypass permission checks in the ksmbd module. The smb2 ioctl function fails to perform a per-handle access check when processing FSCTL SET ZERO DATA, relying on...

SUSE SLED15: aom-tools / libSvtAv1Enc1 / libaom-devel / libaom-devel-doc / etc (SUSE-SU-2026:3224-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3224-1 advisory. - CVE-2026-56208: untrusted encoder configuration inputs can lead to a heap-based buffer overflow and a proces...

Linux Distros Unpatched Vulnerability : CVE-2026-65703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulnerability in the TDSC video decoder that allows remote attackers to cause heap corruption b...

Linux Distros Unpatched Vulnerability : CVE-2026-64432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: validate Dirty Page Table capacity in logreplay copylcns In the analysis pass of $LogFile journal replay, logreplay copies LCNs from each action log...

Linux Distros Unpatched Vulnerability : CVE-2026-64402

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coresight: ultrasoc-smb: Fix OOB write in smbsyncperfbuffer When the SMB sink is used as a perf AUX sink, smbupdatebuffer calls smbsyncperfbuffer to copy hardwa...

Linux Distros Unpatched Vulnerability : CVE-2026-64431

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: avoid calling postwritemstfixup for invalid indexblock ntfsicxibsyncwrite calls...

PT-2026-64519

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4 implementation where the nfs open permission mask function fails to include MAY WRITE in the access mask when the O TRUNC flag is used during a file open...