CVE-2026-48961

IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID. When decodeux in bin/zipdetails handles an Info-ZIP Unix Extra Field tag 0x7875 with UID Size or GID Size set to 8, causing...

CVE-2025-15649

IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date. dosToUnixTime decodes the local-file-header last-modification date field and calls Time::Local::timelocal without an eval guard. A header whose date field decodes to ...

CVE-2026-49014

In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow. It reads a geometry attribute into a fixed-size stack buffer without validating the attribute length. The attacker embeds the exploit as an oversized geometry...

CVE-2026-49017

In OpenStack Swift before 2.36.2 and 2.37.2, s3api middleware enters an infinite loop when processing a truncated aws-chunked PUT request body. The StreamingInput class repeatedly appends an empty buffer and re-reads, causing the proxy-server worker handling the request to become permanently...

CVE-2026-45966

apparmor: fix NULL pointer dereference in unixneedsrevalidation...

CVE-2026-45974

btrfs: fix invalid leaf access in btrfsquotaenable if ref key not found...

CVE-2026-45907

net/mlx5e: Fix deadlocks between devlink and netdev instance locks...

CVE-2026-45933

bpf: Preserve id of register in synclinkedregs...

CVE-2026-46012

rxrpc: Fix memory leaks in rxkadverifyresponse...

CVE-2026-46024

libceph: Prevent potential null-ptr-deref in cephhandleauthreply...

CVE-2026-46096

tpm2-sessions: Fix missing tpmbufdestroy in tpm2readpublic...

CVE-2026-46074

spi: ch341: fix memory leaks on probe failures...

CVE-2026-45899

ext4: drop extent cache when splitting extent fails...

CVE-2026-45892

ext4: drop extent cache after doing PARTIALVALID1 zeroout...

CVE-2026-45902

power: supply: bq256xx: Fix use-after-free in powersupplychanged...

CVE-2026-46019

crypto: atmel-aes - Fix 3-page memory leak in atmelaesbuffcleanup...

CVE-2026-45943

erofs: fix inline data read failure for ztailpacking pclusters...

CVE-2026-45911

usb: cdns3: fix role switching during resume...

CVE-2026-45837

bpf: Fix use-after-free in arenavmclose on fork...

CVE-2026-45916

power: supply: sbs-battery: Fix use-after-free in powersupplychanged...

CVE-2026-45860

netfilter: nfconncount: increase the connection clean up limit to 64...

CVE-2026-45956

drm/exynos: vidi: use priv-vididev for ctx lookup in vidiconnectionioctl...

CVE-2026-46033

crypto: authencesn - reject short ahash digests during instance creation...

CVE-2026-45867

power: supply: act8945a: Fix use-after-free in powersupplychanged...

CVE-2026-45983

nfsd: never defer requests during idmap lookup...

CVE-2026-45999

erofs: fix unsigned underflow in zerofslz4handleoverlap...

CVE-2026-45875

mfd: arizona: Fix regulator resource leak on wm5102clearwritesequencer failure...

CVE-2026-46102

net: strparser: fix skbhead leak in strpabortstrp...

CVE-2026-46064

ibmasm: fix heap over-read in ibmasmsendi2omessage...

CVE-2026-45891

net: hns3: fix double free issue for tx spare buffer...

CVE-2026-45844

netfilter: arptables: fix IEEE1394 ARP payload parsing...

CVE-2026-45848

apparmor: fix NULL sock in aasockfileperm...

CVE-2026-45920

ext4: fix dirtyclusters double decrement on fs shutdown...

CVE-2026-45869

power: supply: wm97xx: Fix NULL pointer dereference in powersupplychanged...

CVE-2026-46047

net: qrtr: ns: Fix use-after-free in driver remove...

CVE-2026-45885

power: supply: cpcap-battery: Fix use-after-free in powersupplychanged...

CVE-2026-46099

net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels...

CVE-2026-45934

btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation...

CVE-2026-45905

xfrm: fix iprtbug race in icmproutelookup reverse path...

CVE-2026-46061

jbd2: fix deadlock in jbd2journalcancelrevoke...

CVE-2026-46025

mm/damon/core: fix damoncall vs kdamondfn exit race...

CVE-2026-45951

bpf: Fix a potential use-after-free of BTF object...

CVE-2026-45949

hwrng: core - use RCU and workstruct to fix race condition...

CVE-2026-45953

md/raid5: fix IO hang with degraded array with llbitmap...

CVE-2026-45980

accel/amdxdna: Stop job scheduling across aie2releaseresource...

CVE-2026-45929

ovpn: fix possible use-after-free in ovpnnetxmit...

CVE-2026-45863

i3c: dw: Fix memory leak in dwi3cmasteri2cxfers...

CVE-2026-45993

LoongArch: Add spectre boundry for syscall dispatch table...

CVE-2026-45979

drm/amdgpu: clean up the amdgpucsparserbos...

CVE-2026-45901

netfilter: nftables: revert commitmutex usage in reset path...