PT-2026-132040

TuxCare rebuilt 7 io.micrometer packages to address 1 CVE. Fixed in 1.4.13-tuxcare.2...

PT-2026-131180

TuxCare rebuilt @angular/platform-server to address 3 CVEs. Fixed in 14.2.8-tuxcare.6...

PT-2026-133057

TuxCare rebuilt @babel/plugin-transform-for-of to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

PT-2026-131268

TuxCare rebuilt @angular/platform-server to address 2 CVEs. Fixed in 17.3.12-tuxcare.3...

PT-2026-131567

TuxCare rebuilt @angular/platform-browser-dynamic to address 5 CVEs. Fixed in 5.1.2-tuxcare.3...

PT-2026-130815

TuxCare rebuilt @angular/platform-browser to address 3 CVEs. Fixed in 12.2.0-tuxcare.6...

PT-2026-131395

TuxCare rebuilt @angular/platform-browser-dynamic to address 1 CVE. Fixed in 7.2.11-tuxcare.1...

PT-2026-131194

TuxCare rebuilt @angular/platform-server to address 4 CVEs. Fixed in 16.2.7-tuxcare.5...

PT-2026-131795

TuxCare rebuilt @angular/service-worker to address 5 CVEs. Fixed in 19.2.25-tuxcare.1...

PT-2026-131208

TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 16.2.12-tuxcare.16...

PT-2026-131440

TuxCare rebuilt @angular/platform-browser-dynamic to address 2 CVEs. Fixed in 7.2.1-tuxcare.4...

PT-2026-131392

TuxCare rebuilt @angular/platform-browser-dynamic to address 1 CVE. Fixed in 18.2.12-tuxcare.1...

PT-2026-131522

TuxCare rebuilt @angular/platform-browser-dynamic to address 1 CVE. Fixed in 9.1.13-tuxcare.16...

PT-2026-131729

TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 6.0.1-tuxcare.1...

PT-2026-131125

TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 13.3.0-tuxcare.3...

PT-2026-131248

TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 13.3.11-tuxcare.6...

PT-2026-132034

TuxCare rebuilt @babel/plugin-transform-unicode-regex to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

PT-2026-116683

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the RISC-V KVM implementation during vCPU teardown. The non-Sstc hrtimer callback clears the next set variable before its final uses of the enclosing vCPU. If...

PT-2026-116692

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config Three related problems exist in the handling of KVM interrupt and page resources when a queue is removed from the host's AP configuration while assigned...

PT-2026-116717

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix rev entry reference leak in mlx5 tc ct shared counter get When the reverse entry is found but its counter is already being released, refcount inc not zero fails and the reference taken by mlx5 tc ct entry get is nev...

PT-2026-116891

In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case the conversion has failed or returned zero, processing val can lead to a division by zero. Need to check for errors, or converted value is zero, befo...

PT-2026-116919

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: set info-band for 802.3 encap offload frames Unlike the 802.11 TX paths, ieee80211 8023 xmit does not set info-band from the channel context on non-MLD interfaces. It stays at 0, so ieee80211 get tx rates uses the...

PT-2026-116962

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream config-type stream config is not initialized before being passed to sdw stream add slave. The type field may contain garbage and is later copied to stream-type by sdw config...

PT-2026-116968

In the Linux kernel, the following vulnerability has been resolved: tty: serial: max3100: shut down timer before freeing port max3100 shutdown stops the polling timer but returns early during system suspend. If the SPI device is unbound before resume, the serial core does not call max3100 shutdow...

PT-2026-116903

In the Linux kernel, the following vulnerability has been resolved: smb: client: flush and commit data before querying allocated ranges The mode 0 / FALLOC FL KEEP SIZE fallocate emulation for small interior ranges in smb3 simple fallocate range issues FSCTL QUERY ALLOCATED RANGES and zero-fills...

PT-2026-117000

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix pdev reference leak in mtk drm bind When the device is not the mmsys master, mtk drm bind returns early after taking a reference on the disp-mutex device via of find device by node, without ever dropping it: mtk...

PT-2026-117056

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: unregister the input device when probe fails setup card registers the input device, whose name and phys point into struct snd usb caiaqdev, and then goes on to snd card register and snd usb caiaq control init. If...

PT-2026-117066

In the Linux kernel, the following vulnerability has been resolved: rtc: spear: initialize IRQ state before requesting alarm IRQ devm request irq enables the interrupt before it returns, so the handler may run while probe is still initializing the device. Initialize the MMIO address and spinlock...

PT-2026-117072

In the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-IP segmentation IP-in-IP GSO can re-enter inet gso segment or ipv6 gso segment for each nested IP header. encap level tracks header bytes, not callback depth, so a deep chain can exhaust the kernel...

PT-2026-116720

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the HID alps driver. The alps input configured function stores data-input2 before calling input register device. If registration fails, input free device...

PT-2026-116743

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Reliable Datagram Sockets RDS InfiniBand ib implementation. The function rds ib map frmr stores a scatterlist in the Memory Region MR before DMA...

PT-2026-116784

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 The core and io supplies are only requested for ID MT7530: both the devm regulator get in probe and the regulator enable in mt7530 setup are guarded by the...

PT-2026-116791

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix immediate JMP JEQ/JNE on MIPS32 An addu instruction was emitted instead of addiu, causing the immediate value 1 to be interpreted as register $at. This made the comparison result invalid when the immediate operand was...

PT-2026-116818

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject non-negative offsets in stack slot obj get spi bpf get spi computes -off - 1 / BPF REG SIZE using C division, which truncates toward zero. For off == 0, this produces spi 0, the same index used by the valid stack slot...

PT-2026-116885

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16136: fix unprotected debugfs reads The serial number file operations are open coded and never call debugfs file get, which debugfs create file unsafe requires. debugfs remove recursive therefore does not wait for...

PT-2026-116904

In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via clone range cifs remap file range discarded the pagecache only for the folios overlapping the destination region, so when a clone extends the file the folio...

PT-2026-116906

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject oversized XDomain properties responses tb xdp properties request allocates room for 45 data dwords in its 252-byte response buffer. The XDomain length field is six bits wide, however, and a malicious peer can...

PT-2026-116917

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: handle empty FILS association request payload fils encrypt assoc req accepts a ReAssociation Request frame whose last element is the FILS Session element. crypt len is then zero and aes siv encrypt is called with ...

PT-2026-116973

In the Linux kernel, the following vulnerability has been resolved: tty: vcc: hold port lock when clearing tty pointer in vcc cleanup vcc cleanup sets port-tty to NULL without holding port-lock, racing with vcc event LDC callbacks that read port-tty under port-lock and then use tty-port. This can...

PT-2026-117017

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix NULL dereference in set coalesce before first open The Rx ring priv and index are only set in bcmgenet init rx ring, which runs at open. Setting the Rx coalescing parameters on an interface that was never opene...

PT-2026-117038

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate DDC record lengths Parse DDC record lengths in unsigned storage so 0xFF does not wrap. Reject records smaller than the mandatory three-byte header, records exceeding U8 MAX, and records exceeding...

PT-2026-117043

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate TX status rate metadata minstrel ht tx status converts the HT/VHT rate reported in a TX status into a group and rate index and uses those to index the minstrel ht rate tables. The existing validation only...

PT-2026-117053

In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device has been registered, mtd otp nvmem add unregisters the user device but leaves mtd-otp user nvmem set. On an error, the...

PT-2026-116984

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: dummy-hcd: Fix wait for outstanding request completions The dummy-hcd driver emulates synchronize irq by waiting until its private callback usage counter drops to 0 with the private lock not held. This counter is...

PT-2026-117039

In the Linux kernel, the following vulnerability has been resolved: blk-mq: set RQF USE SCHED when the operation is known The cached requests are allocated for one operation but can be handed out for another. A passthrough command has RQF USE SCHED cleared, so using those flags for a subsequent...

PT-2026-117058

In the Linux kernel, the following vulnerability has been resolved: vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste selection In paste selection, the loop copies min tunsigned int, vc sel.buf len - pasted,tty-receive room bytes per iteration into tty ldisc receive buf a...

PT-2026-117161

A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is some unknown functionality of the file App/Home/Controller/VoteController.class.php of the component Vote Handler. This manipulation of the argument...

PT-2026-117029

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix slab-out-of-bounds read in ieee80211 monitor select queue ieee80211 monitor select queue validates the skb length using skb-len before dereferencing pointers into skb-data to access the 802.11 header. However,...

PT-2026-117018

In the Linux kernel, the following vulnerability has been resolved: bpf: Skip detached progs in trampoline images that are still in use bpf tramp image put makes sure a trampoline image is not freed while a task may still be running in it, but nothing similar is done for the progs called by that...

PT-2026-117014

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: skip ptp deinit if init was skipped sparx5 ptp init returns early on the base lan969x variants because they do not have the SPX5 FEATURE PTP flag. It also returns early when no "ptp" interrupt is described. Unbinding...