CVE-2026-64065

A flaw was found in the Linux kernel's network file system netfs component. This vulnerability, located in the netfswritebegin function, can be triggered by a local user through specific file system operations. Successful exploitation leads to a kernel bug and system crash, resulting in a denial ...

CVE-2026-64062

A flaw was found in the Linux kernel's network filesystem netfs component. Specifically, a vulnerability in the netfsadvancewritethrough function, when operating in write-through mode, can lead to a system deadlock. This occurs because the function may not consistently unlock memory pages folios ...

SUSE-SU-2026:22801-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270208. - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust-...

mac802154: llsec: add skb_cow_data() before in-place crypto

...

wifi: rtw88: usb: fix memory leaks on USB write failures

...

CVE-2026-12898 All-in-One WP Migration and Backup < 7.106 - Unauthenticated Arbitrary-Location Log File Write via Path Traversal

The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not properly sanitise a user-supplied value before using it to build a file path, allowing unauthenticated attackers to create or append a log file in arbitrary locations outside its intended storage directory...

CVE-2026-12898

CVE-2026-12898 affects the All-in-One WP Migration and Backup WordPress plugin prior to 7.106. The root cause is improper sanitisation of a user-supplied value used to build a file path, enabling path traversal to create or append a log file in arbitrary locations outside the intended storage dir...

PT-2026-61593

A path traversal vulnerability was found in pulpcore. The relative path validator function only verifies that content paths do not begin with "/" but fails to block directory traversal sequences such as "../" anywhere in the path. An authenticated administrator can craft a relative path containin...

IBM Langflow OSS path traversal vulnerability (CNVD-2026-31206)

IBM Langflow OSS is an open-source low-code visualization AI workflow building tool developed by IBM. It enables developers to quickly build, deploy, and iterate AI agents and RAG applications by dragging and dropping components. Additionally, it supports deep customization using Python to...

Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2026-1952)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1952 advisory. An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected...

Linux Distros Unpatched Vulnerability : CVE-2026-64062

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential deadlock in write-through mode Fix netfsadvancewritethrough to always...

Amazon Linux 2023 : GraphicsMagick, GraphicsMagick-c++, GraphicsMagick-c++-devel (ALAS2023-2026-1960)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1960 advisory. A flaw was found in GraphicsMagick's Photo CD PCD decoder. A remote attacker could exploit this vulnerability by providing a specially crafted PCD file. This could lead to an out-of-bounds...

Linux Distros Unpatched Vulnerability : CVE-2026-63952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - memfd: deny writeable mappings when implying SEALWRITE When SEALEXEC is added, SEALWRITE is implied to make W^X. But the implied seal is set after the check tha...

The vulnerabilities of the components camel-knative-http, camel-cxf-rest, and camel-cxf-transport from the Apache Camel framework allow attackers to execute arbitrary code or gain unauthorized access during write operations.

The vulnerability of the camel-knative-http, camel-cxf-rest, and camel-cxf-transport components of the Apache Camel framework is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain...

Linux Distros Unpatched Vulnerability : CVE-2026-63923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pcifunc in rvumboxhandlerrepeventnotify...

Linux Distros Unpatched Vulnerability : CVE-2026-64063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In order to avoid reading whilst writing,...

Linux Distros Unpatched Vulnerability : CVE-2026-64156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfs, afs: Fix write skipping in dir/link writepages Fix netfswritesingle and...

Linux Distros Unpatched Vulnerability : CVE-2026-64065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfs: fix VMBUGONFOLIO issue in netfswritebegin call The multiple runs of generic/013...

PT-2026-61643

In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in team xmit during mode change team change mode clears team-ops with memset before restoring safe dummy handlers via team adjust ops. A concurrent team xmit running under RCU on another CP...

Linux Distros Unpatched Vulnerability : CVE-2026-64158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix write streaming disablement if fd open ORDWR In netfsperformwrite, write streaming the caching of dirty data in dirty but !uptodate folios is perform...