Detection Coverage

HIGH CVE-2025-5791 7.1 This Week users@0.11.0 Privilege escalation vulnerability in the Rust 'users' crate that incorrectly includes the root group in acces HIGH CVE-2026-41676 7.2 This Week openssl@0.10.68 Memory corruption in rust-openssl's key derivation functions allows heap or stack buffer overflow when applica HIGH CVE-2026-41678 7.2 This Week openssl@0.10.68 Out-of-bounds memory write in rust-openssl's AES key unwrap function allows attackers who control buffer sizes HIGH CVE-2026-41681 8.1 This Week openssl@0.10.68 Stack-based buffer overflow in rust-openssl's MdCtxRef::digest_final() allows safe Rust code to corrupt memory HIGH CVE-2026-41898 8.3 This Week openssl@0.10.68 Buffer overflow in rust-openssl 0.9.24 through 0.10.77 allows remote unauthenticated attackers to trigger memo HIGH CVE-2026-42327 8.7 This Week openssl@0.10.68 Undefined behavior in rust-openssl's X509Ref::ocsp_responders allows crafted X.509 certificates with non-UTF-8 MEDIUM CVE-2020-26235 5.3 This Month time@0.1.45 In Rust time crate from version 0.2.7 and before version 0.2.23, unix-like operating systems may segfault due MEDIUM CVE-2024-12224 5.1 This Month PoC idna@0.5.0 Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker MEDIUM CVE-2025-24898 6.3 This Month openssl@0.10.68 rust-openssl is a set of OpenSSL bindings for the Rust programming language. Rated medium severity (CVSS 6.3), MEDIUM CVE-2025-4574 6.5 This Month crossbeam-channel@0.5.13 Double-free vulnerability in crossbeam-channel Rust crate's Channel Drop implementation allows memory corrupti MEDIUM CVE-2026-123609 4.1 This Month rustls@0.23.28 Rustls before 0.23.46 and the 0.24.0-dev.1 pre-release can expose TLS 1.2 master secrets or TLS 1.3 resumption MEDIUM CVE-2026-123610 6.3 This Month rustls@0.23.28 Memory exhaustion in rustls can abort Brotli-enabled clients or client-authenticating servers when a malicious MEDIUM CVE-2026-123611 6.3 This Month rustls@0.23.28 rustls clients before 0.23.46 can be steered into classical-only TLS 1.3 key exchange by an unauthenticated ne MEDIUM CVE-2026-123613 6.9 This Month rustls@0.23.28 rustls 0.23.13 through 0.23.44 accepts TLS 1.3 handshake messages delivered at the wrong encryption level when MEDIUM CVE-2026-25727 6.5 This Month time@0.3.36 The Rust time library versions 0.3.6 through 0.3.46 are vulnerable to denial of service through stack exhausti MEDIUM CVE-2026-44662 5.1 This Month openssl@0.10.68 Heap buffer overflow in rust-openssl's AES key-wrap-with-padding cipher functions allows attackers to write up MEDIUM CVE-2026-45784 5.1 This Month openssl@0.10.68 Heap corruption in rust-openssl versions 0.10.50 through 0.10.79 allows attacker-controllable out-of-bounds wr LOW CVE-2026-41677 1.7 openssl@0.10.68 Buffer over-read in rust-openssl's password callback APIs allows information disclosure when a user-supplied c Show 13 more CVEs Show less

MEDIUM CVE-2023-49092 5.9 This Month PoC rsa@0.9.10 RustCrypto/RSA is a portable RSA implementation in pure Rust. Rated medium severity (CVSS 5.9), this vulnerabi MEDIUM CVE-2026-22705 6.4 This Month ml-dsa@0.0.4 which provide authentication of data using public-key cryptography. versions up to 0.1.0 contains a security v MEDIUM CVE-2026-24850 5.3 This Month ml-dsa@0.0.4 The RustCrypto ml-dsa crate versions 0.0.4 through 0.1.0-rc.3 incorrectly validate ML-DSA digital signatures b

CRITICAL CVE-2026-115905 10.0 Act Now zip@2.4.1 A parser differential in the Rust `zip` crate (zip2) through 9.0.4 lets a crafted archive present different fi HIGH CVE-2026-115909 7.5 This Week zip@2.4.1 Process abort denial of service in the Rust `zip` crate (versions 1.3.0 through 8.x) allows a tiny, crafted ar HIGH CVE-2026-123607 8.7 This Week hickory-proto@0.25.2 Hickory DNS can be driven into an unbounded loop that panics debug builds and exhausts memory in release build HIGH CVE-2026-123608 8.7 This Week hickory-proto@0.25.2 CPU exhaustion in hickory-proto 0.3.1 through 0.26.0 lets remote attackers force quadratic-time work during DN HIGH CVE-2026-93657 8.7 This Week hickory-resolver@0.25.2 hickory-resolver releases before 0.26.2 fail to propagate a 'bogus' DNSSEC proof state out of the high-level R MEDIUM CVE-2023-49092 5.9 This Month PoC rsa@0.9.10 RustCrypto/RSA is a portable RSA implementation in pure Rust. Rated medium severity (CVSS 5.9), this vulnerabi MEDIUM CVE-2026-115906 6.5 This Month zip@2.4.1 Integrity bypass in the zip2 Rust crate (0.6.0 through versions below 9.0.0) lets an attacker who can modify o MEDIUM CVE-2026-119375 6.8 This Month libsqlite3-sys@0.38.1 An information disclosure flaw in SQLite before 3.54.0 lets an attacker who supplies a crafted database plus W MEDIUM CVE-2026-123585 6.9 This Month hickory-resolver@0.25.2 Query amplification in Hickory DNS's hickory-resolver 0.25.0 through 0.26.1 lets unauthenticated remote attack Show 4 more CVEs Show less

CRITICAL CVE-2021-29937 9.8 Act Now PoC telemetry@0.1.0 An issue was discovered in the telemetry crate through 2021-02-17 for Rust. Rated critical severity (CVSS 9.8) MEDIUM CVE-2023-49092 5.9 This Month PoC rsa@0.9.10 RustCrypto/RSA is a portable RSA implementation in pure Rust. Rated medium severity (CVSS 5.9), this vulnerabi MEDIUM CVE-2026-119375 6.8 This Month libsqlite3-sys@0.30.1 An information disclosure flaw in SQLite before 3.54.0 lets an attacker who supplies a crafted database plus W

MEDIUM CVE-2023-49092 5.9 This Month PoC rsa@0.9.10 RustCrypto/RSA is a portable RSA implementation in pure Rust. Rated medium severity (CVSS 5.9), this vulnerabi

HIGH CVE-2026-25541 7.5 This Week PoC bytes@1.10.1 Integer overflow in the Bytes library versions 1.2.1 through 1.11.0 allows attackers to corrupt the BytesMut c

CRITICAL CVE-2024-51736 9.8 Act Now symfony/process@5.3.12 Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. Rated cr CRITICAL CVE-2026-114509 9.2 Act Now PoC laravel/framework@8.73.2 Laravel TokenGuard authentication bypass is a genuine high-priority issue, not an inflated CVSS score: unauthe HIGH CVE-2022-24775 7.5 This Week guzzlehttp/psr7@2.1.0 guzzlehttp/psr7 is a PSR-7 HTTP message library. Rated high severity (CVSS 7.5), this vulnerability is remotel HIGH CVE-2022-24894 8.8 symfony/http-kernel@5.3.12 Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The Symfony HIGH CVE-2023-29197 7.5 This Week guzzlehttp/psr7@2.1.0 guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Rated high severity (CVSS 7.5), this vu HIGH CVE-2024-47823 7.7 This Week PoC livewire/livewire@2.8.0 Livewire is a full-stack framework for Laravel that allows for dynamic UI components without leaving PHP. Rate HIGH CVE-2024-52301 8.7 This Week PoC laravel/framework@8.73.2 Laravel is a web application framework. Rated high severity (CVSS 8.7), this vulnerability is remotely exploit HIGH CVE-2024-58382 8.7 This Week league/commonmark@2.0.2 league/commonmark versions before 2.6.0 contain polynomial time complexity vulnerabilities in Markdown parsing HIGH CVE-2025-64500 7.3 This Week PoC symfony/http-foundation@5.3.11 Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Rated high s HIGH CVE-2026-105830 8.7 This Week league/commonmark@2.0.2 Quadratic-time denial of service in league/commonmark 2.0.0 through 2.10.1 lets unauthenticated remote attacke HIGH CVE-2026-108082 8.7 This Week symfony/http-foundation@5.3.11 Unauthenticated remote denial of service in Symfony's HttpFoundation component (v4.1.0-BETA1 up to 5.4.54, v6. HIGH CVE-2026-109413 8.7 This Week symfony/yaml@5.3.11 Unbounded recursion in the Symfony YAML inline lexer lets a single document made of deeply nested inline colle HIGH CVE-2026-24765 7.8 This Week PoC phpunit/phpunit@9.5.10 Unsafe deserialization in PHPUnit versions before 8.5.52, 9.6.33, 10.5.62, 11.5.50, and 12.5.8 allows local at HIGH CVE-2026-45133 8.2 This Week symfony/yaml@5.3.11 Denial of service in the Symfony Yaml component (symfony/yaml and the symfony/symfony monolith) lets remote at HIGH CVE-2026-45304 8.7 This Week symfony/yaml@5.3.11 Uncontrolled memory consumption in the Symfony Yaml component lets remote attackers trigger a "Billion Laughs" HIGH CVE-2026-45305 8.7 This Week symfony/yaml@5.3.11 Denial of service in the Symfony Yaml component (symfony/yaml and the monolithic symfony/symfony) allows remot HIGH CVE-2026-48019 8.9 This Week laravel/framework@8.73.2 CRLF injection in Laravel Framework (CWE-93) enables unauthenticated remote attackers to manipulate outbound e HIGH CVE-2026-61815 7.2 This Week PoC zbateson/mail-mime-parser@2.1.0 CRLF header injection in zbateson/mail-mime-parser before 3.0.6 and 4.0.2 allows an attacker-influenced attach HIGH CVE-2026-61816 7.5 This Week PoC zbateson/mail-mime-parser@2.1.0 Denial of service in zbateson/mail-mime-parser 2.0.0 through 3.0.5 and 4.0.0/4.0.1 allows unauthenticated remo HIGH CVE-2026-71488 7.5 This Week league/commonmark@2.0.2 Quadratic-time denial of service in league/commonmark versions 0.6.0 through 2.8.3 allows remote unauthenticat HIGH CVE-2026-86428 8.7 This Week league/commonmark@2.0.2 Quadratic CPU exhaustion in league/commonmark's optional AttributesExtension (versions 1.5.0 through 2.9.2) al HIGH CVE-2026-86429 8.7 This Week league/commonmark@2.0.2 Quadratic parsing complexity in league/commonmark (thephpleague/commonmark, versions ≥1.5.0 and <2.9.1) allows HIGH CVE-2026-86430 8.7 This Week league/commonmark@2.0.2 Three independent super-linear parsing paths in league/commonmark before 2.9.1 allow unauthenticated remote at HIGH CVE-2026-86434 8.7 This Week league/commonmark@2.0.2 Quadratic CPU exhaustion in league/commonmark 2.0.0-2.8.3 allows unauthenticated remote attackers to deny serv MEDIUM CVE-2021-43808 6.1 This Month PoC laravel/framework@8.73.2 Laravel is a web application framework. Rated medium severity (CVSS 6.1), this vulnerability is remotely explo MEDIUM CVE-2024-50345 6.1 This Month symfony/http-foundation@5.3.11 symfony/http-foundation is a module for the Symphony PHP framework which defines an object-oriented layer for MEDIUM CVE-2025-22145 6.3 This Month nesbot/carbon@2.54.0 Carbon is an international PHP extension for DateTime. Rated medium severity (CVSS 6.3), this vulnerability is MEDIUM CVE-2025-27515 6.9 This Month laravel/framework@8.73.2 Laravel is a web application framework. Rated medium severity (CVSS 6.9), this vulnerability is remotely explo MEDIUM CVE-2025-46734 6.4 This Month league/commonmark@2.0.2 league/commonmark is a PHP Markdown parser. Rated medium severity (CVSS 6.4), this vulnerability is remotely e MEDIUM CVE-2026-105829 5.3 This Month league/commonmark@2.0.2 Stored cross-site scripting in league/commonmark from 1.3.0 through 2.10.1 lets any user who can post Markdown MEDIUM CVE-2026-24739 6.3 This Month PoC symfony/process@5.3.12 Symfony versions up to 5.4.51 contains a vulnerability that allows attackers to operations being performed on MEDIUM CVE-2026-30838 6.1 This Month league/commonmark@2.0.2 The DisallowedRawHtml extension in PHP Commonmark (league/commonmark) versions prior to 2.8.1 can be bypassed MEDIUM CVE-2026-45067 6.3 This Month symfony/mime@5.3.11 Email-header and SMTP command injection (CWE-93) in Symfony's Mime component (symfony/mime, also shipped in th MEDIUM CVE-2026-45070 6.3 This Month PoC symfony/mime@5.3.11 Header injection in Symfony's Mime component (symfony/mime) enables attackers to inject arbitrary MIME headers MEDIUM CVE-2026-46644 6.9 This Month symfony/polyfill-intl-idn@1.23.0 Symfony's polyfill-intl-idn library (versions 1.17.1–1.38.0) silently accepts malformed Punycode ACE labels — MEDIUM CVE-2026-48784 5.1 This Month symfony/routing@5.3.11 Symfony's UrlGenerator encodes only alternating dot-segments in chained `../` or `./` sequences due to a `strt MEDIUM CVE-2026-48998 5.3 This Month guzzlehttp/psr7@2.1.0 Host confusion in guzzlehttp/psr7 (all versions prior to 2.10.2) allows unauthenticated network attackers to s MEDIUM CVE-2026-49214 5.3 This Month guzzlehttp/psr7@2.1.0 CRLF injection in guzzlehttp/psr7 versions prior to 2.10.2 allows remote unauthenticated attackers to inject a MEDIUM CVE-2026-55766 4.8 This Month guzzlehttp/psr7@2.1.0 CRLF injection in guzzlehttp/psr7 (all versions prior to 2.12.1) enables header injection, response splitting, MEDIUM CVE-2026-59882 6.5 This Month guzzlehttp/psr7@2.1.0 Host validation bypass in guzzlehttp/psr7 before 2.12.3 enables URI authority confusion attacks against PHP ap MEDIUM CVE-2026-71478 6.1 This Month league/commonmark@2.0.2 Stored XSS in league/commonmark's AttributesExtension allows remote attackers to inject and execute arbitrary LOW CVE-2026-102279 3.1 PoC laravel/framework@8.73.2 DOM-based cross-site scripting in Laravel's built-in exception debug renderer (Laravel framework before 12.69. LOW CVE-2026-102601 3.5 league/flysystem@1.1.7 Malformed UTF-8 in a filename can bypass the control-character check performed by Flysystem's default Whitespa LOW CVE-2026-45065 2.3 symfony/routing@5.3.11 Protocol-relative URL injection in Symfony's UrlGenerator allows open redirect via regex alternation bypass in Show 39 more CVEs Show less

CRITICAL CVE-2026-114509 9.2 Act Now PoC laravel/framework@12.22.1 Laravel TokenGuard authentication bypass is a genuine high-priority issue, not an inflated CVSS score: unauthe HIGH CVE-2025-64500 7.3 This Week PoC symfony/http-foundation@7.3.2 Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Rated high s HIGH CVE-2026-105830 8.7 This Week league/commonmark@2.7.1 Quadratic-time denial of service in league/commonmark 2.0.0 through 2.10.1 lets unauthenticated remote attacke HIGH CVE-2026-108082 8.7 This Week symfony/http-foundation@7.3.2 Unauthenticated remote denial of service in Symfony's HttpFoundation component (v4.1.0-BETA1 up to 5.4.54, v6. HIGH CVE-2026-109413 8.7 This Week symfony/yaml@7.3.2 Unbounded recursion in the Symfony YAML inline lexer lets a single document made of deeply nested inline colle HIGH CVE-2026-24765 7.8 This Week PoC phpunit/phpunit@11.5.29 Unsafe deserialization in PHPUnit versions before 8.5.52, 9.6.33, 10.5.62, 11.5.50, and 12.5.8 allows local at HIGH CVE-2026-32935 8.2 This Week phpseclib/phpseclib@3.0.46 phpseclib versions 1.0.26 and below, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a paddin HIGH CVE-2026-44167 7.5 This Week phpseclib/phpseclib@3.0.46 Denial of service attacks against PHP applications using phpseclib can be triggered by providing maliciously c HIGH CVE-2026-45068 8.7 This Week symfony/mailer@7.3.2 Argument (option) injection in Symfony Mailer's SendmailTransport lets a dash-prefixed recipient address be in HIGH CVE-2026-45133 8.2 This Week symfony/yaml@7.3.2 Denial of service in the Symfony Yaml component (symfony/yaml and the symfony/symfony monolith) lets remote at HIGH CVE-2026-45304 8.7 This Week symfony/yaml@7.3.2 Uncontrolled memory consumption in the Symfony Yaml component lets remote attackers trigger a "Billion Laughs" HIGH CVE-2026-45305 8.7 This Week symfony/yaml@7.3.2 Denial of service in the Symfony Yaml component (symfony/yaml and the monolithic symfony/symfony) allows remot HIGH CVE-2026-48019 8.9 This Week laravel/framework@12.22.1 CRLF injection in Laravel Framework (CWE-93) enables unauthenticated remote attackers to manipulate outbound e HIGH CVE-2026-67354 8.2 This Week guzzlehttp/guzzle@7.9.3 URI fragment leakage in guzzlehttp/guzzle's RedirectMiddleware (versions before 7.15.1) exposes sensitive clie HIGH CVE-2026-67355 8.2 This Week guzzlehttp/guzzle@7.9.3 Cookie scope leakage in guzzlehttp/guzzle before 7.15.1 allows an attacker controlling a child subdomain to re HIGH CVE-2026-69246 7.2 This Week PoC guzzlehttp/guzzle@7.9.3 Host confusion in GuzzleHttp Guzzle before 7.15.2 and 8.0.1 allows remote attackers who can influence a fetche HIGH CVE-2026-71488 7.5 This Week league/commonmark@2.7.1 Quadratic-time denial of service in league/commonmark versions 0.6.0 through 2.8.3 allows remote unauthenticat HIGH CVE-2026-86428 8.7 This Week league/commonmark@2.7.1 Quadratic CPU exhaustion in league/commonmark's optional AttributesExtension (versions 1.5.0 through 2.9.2) al HIGH CVE-2026-86429 8.7 This Week league/commonmark@2.7.1 Quadratic parsing complexity in league/commonmark (thephpleague/commonmark, versions ≥1.5.0 and <2.9.1) allows HIGH CVE-2026-86430 8.7 This Week league/commonmark@2.7.1 Three independent super-linear parsing paths in league/commonmark before 2.9.1 allow unauthenticated remote at HIGH CVE-2026-86434 8.7 This Week league/commonmark@2.7.1 Quadratic CPU exhaustion in league/commonmark 2.0.0-2.8.3 allows unauthenticated remote attackers to deny serv MEDIUM CVE-2026-105829 5.3 This Month league/commonmark@2.7.1 Stored cross-site scripting in league/commonmark from 1.3.0 through 2.10.1 lets any user who can post Markdown MEDIUM CVE-2026-24739 6.3 This Month PoC symfony/process@7.3.0 Symfony versions up to 5.4.51 contains a vulnerability that allows attackers to operations being performed on MEDIUM CVE-2026-30838 6.1 This Month league/commonmark@2.7.1 The DisallowedRawHtml extension in PHP Commonmark (league/commonmark) versions prior to 2.8.1 can be bypassed MEDIUM CVE-2026-30964 5.4 This Month web-auth/webauthn-lib@5.2.2 The webauthn-lib PHP library before version 5.2.4 incorrectly validates origin restrictions by comparing only MEDIUM CVE-2026-33347 6.3 This Month league/commonmark@2.7.1 Mozilla's Embed extension contains a domain allowlist bypass in the DomainFilteringAdapter due to insufficient MEDIUM CVE-2026-45067 6.3 This Month symfony/mime@7.3.2 Email-header and SMTP command injection (CWE-93) in Symfony's Mime component (symfony/mime, also shipped in th MEDIUM CVE-2026-45070 6.3 This Month PoC symfony/mime@7.3.2 Header injection in Symfony's Mime component (symfony/mime) enables attackers to inject arbitrary MIME headers MEDIUM CVE-2026-46644 6.9 This Month symfony/polyfill-intl-idn@1.32.0 Symfony's polyfill-intl-idn library (versions 1.17.1–1.38.0) silently accepts malformed Punycode ACE labels — MEDIUM CVE-2026-48736 6.9 This Month symfony/http-foundation@7.3.2 SSRF filter bypass in Symfony's NoPrivateNetworkHttpClient permits requests to private IPv4 addresses to be sm MEDIUM CVE-2026-48784 5.1 This Month symfony/routing@7.3.2 Symfony's UrlGenerator encodes only alternating dot-segments in chained `../` or `./` sequences due to a `strt MEDIUM CVE-2026-48998 5.3 This Month guzzlehttp/psr7@2.7.1 Host confusion in guzzlehttp/psr7 (all versions prior to 2.10.2) allows unauthenticated network attackers to s MEDIUM CVE-2026-49214 5.3 This Month guzzlehttp/psr7@2.7.1 CRLF injection in guzzlehttp/psr7 versions prior to 2.10.2 allows remote unauthenticated attackers to inject a MEDIUM CVE-2026-55568 5.9 This Month guzzlehttp/guzzle@7.9.3 Silent TLS downgrade in Guzzle's built-in cURL handlers exposes proxy credentials and tunneled connection meta MEDIUM CVE-2026-55599 5.8 This Month PoC phpseclib/phpseclib@3.0.46 Server-side request forgery in phpseclib's X.509 validation allows unauthenticated network attackers to force MEDIUM CVE-2026-55766 4.8 This Month guzzlehttp/psr7@2.7.1 CRLF injection in guzzlehttp/psr7 (all versions prior to 2.12.1) enables header injection, response splitting, MEDIUM CVE-2026-55767 5.8 This Month guzzlehttp/guzzle@7.9.3 Cookie domain validation in guzzlehttp/guzzle before 7.12.1 allows cross-origin cookie injection when a shared MEDIUM CVE-2026-59882 6.5 This Month guzzlehttp/psr7@2.7.1 Host validation bypass in guzzlehttp/psr7 before 2.12.3 enables URI authority confusion attacks against PHP ap MEDIUM CVE-2026-59883 6.1 This Month PoC guzzlehttp/guzzle@7.9.3 Cookie domain suffix-matching bypass in Guzzle PHP HTTP client (prior to 7.12.3) allows cross-host cookie disc MEDIUM CVE-2026-67339 6.9 This Month guzzlehttp/guzzle@7.9.3 Proxy-Authorization header leakage in guzzlehttp/guzzle before 7.14.2 allows origin servers to receive proxy c MEDIUM CVE-2026-67353 6.9 This Month guzzlehttp/guzzle@7.9.3 Denial of service in guzzlehttp/guzzle versions before 7.15.1 allows a malicious or compromised upstream serve MEDIUM CVE-2026-69245 6.5 This Month PoC guzzlehttp/guzzle@7.9.3 Cookie domain scope bypass in Guzzle PHP HTTP client (prior to 7.15.2 and 8.0.1) allows improper cookie sharin MEDIUM CVE-2026-71478 6.1 This Month league/commonmark@2.7.1 Stored XSS in league/commonmark's AttributesExtension allows remote attackers to inject and execute arbitrary MEDIUM CVE-2026-81887 5.1 This Month livewire/livewire@3.6.4 Prototype pollution in Livewire's client-side query-string parser enables reflected cross-site scripting again MEDIUM CVE-2026-84308 6.3 This Month PoC phpseclib/phpseclib@3.0.46 Timing side-channel exposure in phpseclib's pure-PHP X25519 scalar multiplication allows a local observer to r MEDIUM CVE-2026-86431 6.9 This Month league/commonmark@2.7.1 Cross-site scripting in league/commonmark 2.7.0-2.9.0 allows unauthenticated attackers to inject arbitrary Jav LOW CVE-2026-102279 3.1 PoC laravel/framework@12.22.1 DOM-based cross-site scripting in Laravel's built-in exception debug renderer (Laravel framework before 12.69. LOW CVE-2026-102601 3.5 league/flysystem@3.30.0 Malformed UTF-8 in a filename can bypass the control-character check performed by Flysystem's default Whitespa LOW CVE-2026-40194 3.7 phpseclib/phpseclib@3.0.46 phpseclib's SSH2 packet authentication uses PHP's non-constant-time != operator to compare HMACs, enabling tim LOW CVE-2026-45065 2.3 symfony/routing@7.3.2 Protocol-relative URL injection in Symfony's UrlGenerator allows open redirect via regex alternation bypass in N/A CVE-2025-45769 firebase/php-jwt@6.11.1 Vulnerability in firebase/php-jwt Show 46 more CVEs Show less

MEDIUM CVE-2026-119193 5.4 This Month phpunit/phpunit@13.4.1 Local code execution against developers running PHPT tests with code coverage in PHPUnit 13.4.0 through 13.4.3

CRITICAL CVE-2005-2541 10.0 tar@1.34+dfsg-1.2+deb12u1 Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users CRITICAL CVE-2019-1010022 9.8 Act Now PoC libc6@2.36-9+deb12u14 GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. CRITICAL CVE-2023-45853 9.8 Act Now zlib1g@1:1.2.13.dfsg-1 MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFile CRITICAL CVE-2026-5450 9.8 Act Now libc6@2.36-9+deb12u14 Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 t HIGH CVE-2017-18018 7.1 PoC coreutils@9.1-1 In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file wi HIGH CVE-2018-20796 7.5 PoC libc6@2.36-9+deb12u14 In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Unc HIGH CVE-2018-6829 7.5 This Week PoC libgcrypt20@1.10.1-3+deb12u1 cipher/elgamal.c in Libgcrypt through 1.8.2, when used to encrypt messages directly, improperly encodes plaint HIGH CVE-2019-9192 7.5 This Week PoC libc6@2.36-9+deb12u14 In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Unc HIGH CVE-2023-31486 8.1 This Week perl-base@5.36.0-7+deb12u4 HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure def HIGH CVE-2025-13151 7.5 This Week libtasn1-6@4.19.0-2+deb12u1 Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input dat HIGH CVE-2025-69720 7.3 This Week ncurses-bin@6.4-4 ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function analyze_string(). HIGH CVE-2025-8941 7.8 This Month libpam0g@1.5.2-6+deb12u2 A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing HIGH CVE-2026-102010 7.0 This Week libstdc++6@12.2.0-14+deb12u1 A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in li HIGH CVE-2026-109518 7.7 This Week libapt-pkg6.0@2.6.1 On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic HIGH CVE-2026-19499 7.7 This Week libc6@2.36-9+deb12u14 [Unknown description] HIGH CVE-2026-53613 7.0 This Week util-linux-extra@2.38.1-5+deb12u3 util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42. HIGH CVE-2026-53615 8.0 This Week util-linux-extra@2.38.1-5+deb12u3 util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `lib HIGH CVE-2026-5435 7.3 This Week libc6@2.36-9+deb12u14 The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail HIGH CVE-2026-54369 8.4 libacl1@2.3.1-3 acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl HIGH CVE-2026-54370 7.2 This Week libacl1@2.3.1-3 acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that al HIGH CVE-2026-54371 8.4 This Week libattr1@1:2.5.1-4 attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities th HIGH CVE-2026-5928 7.5 This Week libc6@2.36-9+deb12u14 Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlap HIGH CVE-2026-78410 7.8 This Week util-linux-extra@2.38.1-5+deb12u3 A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that sou HIGH CVE-2026-82560 7.5 This Week perl-base@5.36.0-7+deb12u4 Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over HIGH CVE-2026-84243 7.0 This Week libc6@2.36-9+deb12u14 The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variabl HIGH CVE-2026-85091 8.3 This Week PoC zlib1g@1:1.2.13.dfsg-1 zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function w HIGH CVE-2026-9538 7.5 This Week perl-base@5.36.0-7+deb12u4 Pre-NVD disclosure via oss-security: oss-security mailing list - 2026/05/26. ar versions before 3.08 for Perl HIGH CVE-2026-95619 7.7 This Week libstdc++6@12.2.0-14+deb12u1 A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the C++ `new` ope MEDIUM CVE-2007-5686 4.9 passwd@1:4.13+dfsg1-1+deb12u2 initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to MEDIUM CVE-2010-4756 4.0 PoC libc6@2.36-9+deb12u14 The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a MEDIUM CVE-2011-3389 4.3 This Month PoC libgnutls30@3.7.9-2+deb12u7 The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozi MEDIUM CVE-2013-4392 5.0 This Month libudev1@252.39-1~deb12u2 systemd, when updating file permissions, allows local users to change the permissions and SELinux security con MEDIUM CVE-2016-2781 4.6 This Month coreutils@9.1-1 chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a c MEDIUM CVE-2019-1010023 5.4 This Month PoC libc6@2.36-9+deb12u14 GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In MEDIUM CVE-2019-1010024 5.3 This Month PoC libc6@2.36-9+deb12u14 GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thr MEDIUM CVE-2019-1010025 5.3 This Month PoC libc6@2.36-9+deb12u14 GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pt MEDIUM CVE-2022-0563 5.5 This Month util-linux-extra@2.38.1-5+deb12u3 A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline l MEDIUM CVE-2022-27943 5.5 This Month PoC libstdc++6@12.2.0-14+deb12u1 libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-ne MEDIUM CVE-2023-31437 5.3 This Month libudev1@252.39-1~deb12u2 An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not MEDIUM CVE-2023-31438 5.3 This Month libudev1@252.39-1~deb12u2 An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing MEDIUM CVE-2023-31439 5.3 This Month libudev1@252.39-1~deb12u2 An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log fil MEDIUM CVE-2023-50495 6.5 This Month ncurses-bin@6.4-4 NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry(). MEDIUM CVE-2024-10041 4.7 This Month libpam0g@1.5.2-6+deb12u2 A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger t MEDIUM CVE-2024-2236 5.9 This Month libgcrypt20@1.10.1-3+deb12u1 A timing-based side-channel flaw was found in libgcrypt's RSA implementation. This issue may allow a remote at MEDIUM CVE-2025-14104 6.1 This Month util-linux-extra@2.38.1-5+deb12u3 A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte user MEDIUM CVE-2025-5278 4.4 This Month coreutils@9.1-1 A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under MEDIUM CVE-2025-6141 4.8 This Month ncurses-bin@6.4-4 A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerabi MEDIUM CVE-2025-68972 4.7 This Month gpgv@2.2.40-1.1+deb12u2 Alpine Linux: gnupg fixed in 2.4.9-r0 MEDIUM CVE-2026-102473 5.5 This Month dash@0.5.12-2 A flaw was found in dash. When built without libc fnmatch, the internal pmatch() matcher implements * by unbou MEDIUM CVE-2026-102474 4.0 This Month dash@0.5.12-2 A flaw was found in dash. The printf builtin reserves four bytes before converting a Unicode \u or \U escape, MEDIUM CVE-2026-114690 6.2 This Month libstdc++6@12.2.0-14+deb12u1 A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search MEDIUM CVE-2026-114691 5.9 This Month libstdc++6@12.2.0-14+deb12u1 A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element c MEDIUM CVE-2026-115455 6.5 This Month libstdc++6@12.2.0-14+deb12u1 A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character strea MEDIUM CVE-2026-13595 5.3 This Month util-linux-extra@2.38.1-5+deb12u3 A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solar MEDIUM CVE-2026-13757 6.2 This Month libp11-kit0@0.24.1-2 A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p MEDIUM CVE-2026-15059 5.5 This Month libudev1@252.39-1~deb12u2 Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing p MEDIUM CVE-2026-15534 5.7 This Month perl-base@5.36.0-7+deb12u4 Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via a MEDIUM CVE-2026-16742 6.7 This Month libudev1@252.39-1~deb12u2 systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged MEDIUM CVE-2026-18374 4.9 This Month libc6@2.36-9+deb12u14 Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` functi MEDIUM CVE-2026-18477 4.4 This Month tar@1.34+dfsg-1.2+deb12u1 A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows MEDIUM CVE-2026-18508 4.4 This Month tar@1.34+dfsg-1.2+deb12u1 A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are MEDIUM CVE-2026-18938 6.2 This Month libp11-kit0@0.24.1-2 A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could MEDIUM CVE-2026-19542 5.6 This Month libc6@2.36-9+deb12u14 [Out-of-bounds stack array access in tdelete] MEDIUM CVE-2026-27456 4.7 This Month util-linux-extra@2.38.1-5+deb12u3 util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of MEDIUM CVE-2026-3184 5.3 This Month util-linux-extra@2.38.1-5+deb12u3 A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked wit MEDIUM CVE-2026-41992 6.9 This Month gzip@1.12-1 Out-of-bounds read in GNU gzip's LZH decompression logic allows an unprivileged local attacker to disclose mem MEDIUM CVE-2026-42250 4.8 This Month libbz2-1.0@1.0.8-5+b1 bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the MEDIUM CVE-2026-54411 6.9 This Month libpam0g@1.5.2-6+deb12u2 Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plainte MEDIUM CVE-2026-56391 4.6 This Month coreutils@9.1-1 GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when th MEDIUM CVE-2026-5704 5.5 This Month tar@1.34+dfsg-1.2+deb12u1 A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, l MEDIUM CVE-2026-6238 6.5 This Month libc6@2.36-9+deb12u14 The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail MEDIUM CVE-2026-6791 6.6 This Month libc6@2.36-9+deb12u14 When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function ext MEDIUM CVE-2026-77117 5.9 This Month libc6@2.36-9+deb12u14 [Unknown description] MEDIUM CVE-2026-80489 5.9 This Month libc6@2.36-9+deb12u14 [Unknown description] MEDIUM CVE-2026-8674 5.3 This Month libc6@2.36-9+deb12u14 Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose MEDIUM CVE-2026-86805 6.3 This Month libc6@2.36-9+deb12u14 A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (gli MEDIUM CVE-2026-88647 6.5 This Month libgnutls30@3.7.9-2+deb12u7 A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mecha MEDIUM CVE-2026-89092 4.2 This Month libc6@2.36-9+deb12u14 The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS se MEDIUM CVE-2026-95184 5.9 This Month libgnutls30@3.7.9-2+deb12u7 Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for MEDIUM CVE-2026-95210 4.8 This Month libgnutls30@3.7.9-2+deb12u7 Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing inv LOW CVE-2011-3374 3.7 PoC libapt-pkg6.0@2.6.1 It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, le LOW CVE-2011-4116 3.3 PoC perl-base@5.36.0-7+deb12u4 _is_safe in the File::Temp module for Perl does not properly handle symlinks. LOW CVE-2022-3219 3.3 gpgv@2.2.40-1.1+deb12u2 GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of LOW CVE-2024-56433 3.6 passwd@1:4.13+dfsg1-1+deb12u2 shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 thro LOW CVE-2025-30258 2.7 PoC gpgv@2.2.40-1.1+deb12u2 In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a LOW CVE-2026-105712 3.6 gpgv@2.2.40-1.1+deb12u2 gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untr LOW CVE-2026-27171 2.9 PoC zlib1g@1:1.2.13.dfsg-1 zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do ri LOW CVE-2026-40228 2.9 libudev1@252.39-1~deb12u2 In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "lo LOW CVE-2026-41991 2.0 gzip@1.12-1 Arbitrary file overwrite in GNU gzip's gzexe utility allows a local attacker to corrupt victim-accessible file LOW CVE-2026-53910 2.1 diffutils@1:3.8-4 Heap-based buffer overflow in GNU diffutils' diff3 tool, triggered by signed integer overflows in internal lin LOW CVE-2026-56392 1.8 coreutils@9.1-1 Heap-based buffer overflow in GNU coreutils unexpand allows an attacker who can supply large tab stop (-t) val LOW CVE-2026-57062 2.9 gpgv@2.2.40-1.1+deb12u2 CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES- LOW CVE-2026-6368 2.1 libc6@2.36-9+deb12u14 Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to r LOW CVE-2026-67693 3.7 libgnutls30@3.7.9-2+deb12u7 An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entit LOW CVE-2026-88648 3.7 libgnutls30@3.7.9-2+deb12u7 Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Autho LOW CVE-2026-95818 3.6 libc6@2.36-9+deb12u14 A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through LOW CVE-2026-97399 3.7 libc6@2.36-9+deb12u14 The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read on Show 92 more CVEs Show less

CRITICAL CVE-2005-2541 10.0 tar@1.35+dfsg-3.1 Tar 1.15.1 does not properly warn the user when extracting setuid or setgid files, which may allow local users CRITICAL CVE-2019-1010022 9.8 Act Now PoC libc6-dev@2.41-12+deb13u4 GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass stack guard protection. CRITICAL CVE-2025-68359 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of qgroup record a CRITICAL CVE-2025-68745 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip rese CRITICAL CVE-2026-10536 9.8 Act Now libcurl4t64@8.14.1-2+deb13u7 A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tr CRITICAL CVE-2026-11856 9.8 Act Now libcurl4t64@8.14.1-2+deb13u7 Successfully using libcurl to do a transfer to a specific HTTP origin (`hostA`) with **Digest** authentication CRITICAL CVE-2026-18924 9.1 Act Now libcurl4t64@8.14.1-2+deb13u7 A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections CRITICAL CVE-2026-19931 9.8 Act Now PoC libcurl4t64@8.14.1-2+deb13u7 A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authent CRITICAL CVE-2026-31536 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb: server: let send_done handle a compl CRITICAL CVE-2026-43083 9.1 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: ioam6: fix OOB and missing lock Whe CRITICAL CVE-2026-43185 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix signededness bug in smb_direct CRITICAL CVE-2026-43414 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Completely fix fcport doub CRITICAL CVE-2026-43465 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix XDP multi-buf frag cou CRITICAL CVE-2026-46325 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix iova-to-va conversion for M CRITICAL CVE-2026-53224 9.1 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and ad CRITICAL CVE-2026-53246 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: sctp: validate cached peer INIT chunk len CRITICAL CVE-2026-63825 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix c CRITICAL CVE-2026-63857 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: airoha: Do not read uninitialized fr CRITICAL CVE-2026-63979 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/handshake: hand off the pinned file r CRITICAL CVE-2026-64024 9.4 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcp_tw_isn leak en CRITICAL CVE-2026-64066 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_to_pagecache() to p CRITICAL CVE-2026-64067 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing barriers when accessin CRITICAL CVE-2026-64068 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry a CRITICAL CVE-2026-64160 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential for tearing in ->rem CRITICAL CVE-2026-68426 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: xfrm: fix stale skb->prev after async cry CRITICAL CVE-2026-72098 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix buffer overflow in FEC cal CRITICAL CVE-2026-72288 9.3 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between int CRITICAL CVE-2026-72329 9.3 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/liquidio: drop cached VF pci_dev LUT CRITICAL CVE-2026-72355 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix barriering when walking subreq CRITICAL CVE-2026-72366 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_create_write_req() to ha CRITICAL CVE-2026-72398 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie CRITICAL CVE-2026-72493 9.9 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: serialize netif_running() check in e CRITICAL CVE-2026-72494 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace waitqueue and flag wi CRITICAL CVE-2026-72495 9.3 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Avoid repeated requests to CRITICAL CVE-2026-74269 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bnxt: fix head underflow on XDP head-grow CRITICAL CVE-2026-74350 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate fast symlink target durin CRITICAL CVE-2026-74611 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tls: rx: restore msg_iter before TLS 1.3 CRITICAL CVE-2026-74723 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without CRITICAL CVE-2026-74752 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: sctp: validate cookie AUTH state before u CRITICAL CVE-2026-80634 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: avoid num_encaps un CRITICAL CVE-2026-80668 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: use connt CRITICAL CVE-2026-80670 9.1 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perf_env__get_cpu_topolog CRITICAL CVE-2026-80693 9.3 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: idpf: bound interrupt-vector register fil CRITICAL CVE-2026-86414 9.1 Act Now libcurl4t64@8.14.1-2+deb13u7 An HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos CRITICAL CVE-2026-87866 9.1 Act Now libcurl4t64@8.14.1-2+deb13u7 When built with wolfSSL, curl can successfully validate a pinned public key hash against a key the TLS peer do CRITICAL CVE-2026-8926 9.1 Act Now libcurl4t64@8.14.1-2+deb13u7 When asking curl to use a `.netrc` file to find credentials and at the same time specifying a URL with a usern CRITICAL CVE-2026-89537 9.1 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject short RFC 4121 MIC tokens CRITICAL CVE-2026-89610 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ntfs: verify run length exceeding volume CRITICAL CVE-2026-89611 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ntfs: validate non-resident attribute off CRITICAL CVE-2026-89631 9.1 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb: client: reject a tree connect respon CRITICAL CVE-2026-89637 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in c CRITICAL CVE-2026-89654 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in check_new_map() on sessi CRITICAL CVE-2026-89675 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix UAF in async copy cancel and sh CRITICAL CVE-2026-89788 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix tree connection use-after-free CRITICAL CVE-2026-90104 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: zero referring call lists before CRITICAL CVE-2026-9079 9.8 Act Now libcurl4t64@8.14.1-2+deb13u7 libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, lea CRITICAL CVE-2026-92388 9.1 Act Now libcurl4t64@8.14.1-2+deb13u7 When an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, CRITICAL CVE-2026-99153 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the ITT reflecte CRITICAL CVE-2026-99154 9.8 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task in HIGH CVE-2007-0086 7.8 This Week apache2-utils@2.4.69-1~deb13u1 The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attacke HIGH CVE-2008-1687 7.5 This Week m4@1.4.19-8 The (1) maketemp and (2) mkstemp builtin functions in GNU m4 before 1.4.11 do not quote their output when a fi HIGH CVE-2008-1688 7.5 This Week m4@1.4.19-8 Unspecified vulnerability in GNU m4 before 1.4.11 might allow context-dependent attackers to execute arbitrary HIGH CVE-2008-4609 7.1 This Week linux-libc-dev@6.12.113-1 The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco product HIGH CVE-2013-7445 7.8 This Week linux-libc-dev@6.12.113-1 The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics HIGH CVE-2015-3276 7.5 This Week libldap2@2.6.10+dfsg-1 The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style HIGH CVE-2017-17740 7.5 This Week libldap2@2.6.10+dfsg-1 contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overl HIGH CVE-2017-18018 7.1 PoC coreutils@9.7-3 In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file wi HIGH CVE-2018-20796 7.5 PoC libc6-dev@2.41-12+deb13u4 In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Unc HIGH CVE-2018-5709 7.5 This Week libkrb5support0@1.21.3-5+deb13u1 An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" i HIGH CVE-2018-6951 7.5 This Week patch@2.8-2 An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL poin HIGH CVE-2018-6952 7.5 This Week patch@2.8-2 A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6. HIGH CVE-2019-12456 7.8 This Week linux-libc-dev@6.12.113-1 An issue was discovered in the MPT3COMMAND case in _ctl_ioctl_main in drivers/scsi/mpt3sas/mpt3sas_ctl.c in th HIGH CVE-2019-19070 7.5 This Week linux-libc-dev@6.12.113-1 A memory leak in the spi_gpio_probe() function in drivers/spi/spi-gpio.c in the Linux kernel through 5.3.11 al HIGH CVE-2019-19378 7.8 This Week PoC linux-libc-dev@6.12.113-1 In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write acc HIGH CVE-2019-19449 7.8 This Week PoC linux-libc-dev@6.12.113-1 In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can lead to slab-out-of-bounds read acces HIGH CVE-2019-19814 7.8 This Week PoC linux-libc-dev@6.12.113-1 In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause __remove_dirty_segment slab-out HIGH CVE-2019-9192 7.5 This Week PoC libc6-dev@2.41-12+deb13u4 In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Unc HIGH CVE-2020-11725 7.8 This Week PoC linux-libc-dev@6.12.113-1 snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line, which HIGH CVE-2021-26934 7.8 This Week linux-libc-dev@6.12.113-1 An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend allocation (aka HIGH CVE-2021-3847 7.8 linux-libc-dev@6.12.113-1 An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayF HIGH CVE-2021-3864 7.0 PoC linux-libc-dev@6.12.113-1 A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its desc HIGH CVE-2022-0400 7.5 This Week linux-libc-dev@6.12.113-1 An out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack, causing remote d HIGH CVE-2022-1247 7.0 This Week PoC linux-libc-dev@6.12.113-1 An issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver uses rose_nei HIGH CVE-2022-2961 7.0 This Week linux-libc-dev@6.12.113-1 A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race HIGH CVE-2022-3238 7.8 This Week linux-libc-dev@6.12.113-1 A double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount and umount s HIGH CVE-2022-45884 7.0 This Week linux-libc-dev@6.12.113-1 An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-fre HIGH CVE-2022-45885 7.0 This Week linux-libc-dev@6.12.113-1 An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvb_frontend.c has a race co HIGH CVE-2023-26242 7.8 This Week linux-libc-dev@6.12.113-1 afu_mmio_region_get_by_offset in drivers/fpga/dfl-afu-region.c in the Linux kernel through 6.1.12 has an integ HIGH CVE-2023-3640 7.8 This Week linux-libc-dev@6.12.113-1 A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU d HIGH CVE-2024-21803 7.8 This Week linux-libc-dev@6.12.113-1 Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local HIGH CVE-2024-26461 7.5 This Week PoC libkrb5support0@1.21.3-5+deb13u1 Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c. HIGH CVE-2024-58015 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix for out-of bound access HIGH CVE-2025-38137 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Cancel outstanding rescan wo HIGH CVE-2025-38187 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix a use-after-free in r535 HIGH CVE-2025-38421 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: pmf: Use device managed HIGH CVE-2025-38636 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: rv: Use strings in da monitors tracepoint HIGH CVE-2025-38656 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Fix error code in iwl_op_m HIGH CVE-2025-39859 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: fix use-after-free bugs causing HIGH CVE-2025-39862 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix list corruption a HIGH CVE-2025-39958 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Make attach succeed when the HIGH CVE-2025-40025 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node foot HIGH CVE-2025-66862 7.5 This Week PoC libsframe1@2.44-3 A buffer overflow vulnerability in function gnu_special in file cplus-dem.c in BinUtils 2.26 allows attackers HIGH CVE-2025-66863 7.5 This Week PoC libsframe1@2.44-3 An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to HIGH CVE-2025-66864 7.5 This Week PoC libsframe1@2.44-3 An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers HIGH CVE-2025-66865 7.5 This Week PoC libsframe1@2.44-3 An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers HIGH CVE-2025-66866 7.5 This Week PoC libsframe1@2.44-3 An issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows attackers to caus HIGH CVE-2025-68174 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: enhance kfd process check in HIGH CVE-2025-68304 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: lookup hci_conn on R HIGH CVE-2025-68360 8.2 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: wed: use proper wed reference HIGH CVE-2025-68730 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix page fault in ivpu_bo_unb HIGH CVE-2025-68735 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Prevent potential UAF in gro HIGH CVE-2025-69649 7.5 This Week PoC libsframe1@2.44-3 GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF HIGH CVE-2025-69650 7.5 This Week PoC libsframe1@2.44-3 GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with HIGH CVE-2025-69720 7.3 This Week ncurses-bin@6.5+20250216-2 ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function analyze_string(). HIGH CVE-2025-70873 7.5 This Week PoC libsqlite3-0@3.46.1-7+deb13u2 An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and HIGH CVE-2025-8941 7.8 This Month libpam0g@1.7.0-5 A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing HIGH CVE-2026-100072 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpi_bus_get_primary_ HIGH CVE-2026-102010 7.0 This Week libubsan1@14.2.0-19 A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in li HIGH CVE-2026-107161 7.5 This Week libsasl2-modules-db@2.1.28+dfsg1-9 A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 p HIGH CVE-2026-107778 7.1 This Week libkrb5support0@1.21.3-5+deb13u1 MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that HIGH CVE-2026-107928 8.1 This Week libcurl4t64@8.14.1-2+deb13u7 When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. T HIGH CVE-2026-107929 8.1 This Week libcurl4t64@8.14.1-2+deb13u7 When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented p HIGH CVE-2026-109518 7.7 This Week libapt-pkg7.0@3.0.3 On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic HIGH CVE-2026-113351 8.2 This Week libexpat1@2.9.0-1~deb13u1 libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the dir HIGH CVE-2026-115506 8.7 This Week PoC libexpat1@2.9.0-1~deb13u1 libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in account HIGH CVE-2026-117610 8.2 This Week libexpat1@2.9.0-1~deb13u1 libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in HIGH CVE-2026-118370 8.2 This Week libexpat1@2.9.0-1~deb13u1 libexpat through 2.9.0 contains a signed integer overflow vulnerability in storeAtts() in lib/xmlparse.c that HIGH CVE-2026-119373 8.5 This Week libsqlite3-0@3.46.1-7+deb13u2 SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5MergeRowidLists() that undersizes HIGH CVE-2026-119374 8.5 This Week libsqlite3-0@3.46.1-7+deb13u2 SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attac HIGH CVE-2026-119379 8.5 This Week libsqlite3-0@3.46.1-7+deb13u2 SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in sqlite3 HIGH CVE-2026-119586 8.5 This Week libsqlite3-0@3.46.1-7+deb13u2 SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command th HIGH CVE-2026-12064 7.5 This Week libcurl4t64@8.14.1-2+deb13u7 When a user invokes curl using a schemeless URL combined with `--proto-default` sftp (or scp), a disconnect oc HIGH CVE-2026-13608 7.4 This Week libcurl4t64@8.14.1-2+deb13u7 A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be m HIGH CVE-2026-18220 7.8 This Week libsframe1@2.44-3 An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend (bfd/elf32-dlx.c) in GNU b HIGH CVE-2026-19499 7.7 This Week libc6-dev@2.41-12+deb13u4 [Unknown description] HIGH CVE-2026-23208 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Prevent excessive number HIGH CVE-2026-23327 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: cxl/mbox: validate payload size before ac HIGH CVE-2026-31435 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix read abandonment during retry HIGH CVE-2026-31493 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Fix use of completion ctx after HIGH CVE-2026-31568 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: s390/mm: Add missing secure storage acces HIGH CVE-2026-31630 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: rxrpc: proc: size address buffers for %pI HIGH CVE-2026-31771 8.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: move wake reason st HIGH CVE-2026-3441 7.1 This Week libsframe1@2.44-3 A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds HIGH CVE-2026-3442 7.1 This Week libsframe1@2.44-3 A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bou HIGH CVE-2026-43009 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix incorrect pruning due to atomic HIGH CVE-2026-43029 7.5 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mptcp: fix soft lockup in mptcp_recvmsg() HIGH CVE-2026-43042 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mpls: add seqcount to protect the platfor HIGH CVE-2026-43048 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: HID: core: Mitigate potential OOB by remo HIGH CVE-2026-43101 7.5 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix potential NULL dereferenc HIGH CVE-2026-43172 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix 22000 series SMEM pars HIGH CVE-2026-43213 7.5 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate sequence numbe HIGH CVE-2026-43263 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Null refer HIGH CVE-2026-43352 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Correct RING_CTRL_ABOR HIGH CVE-2026-43353 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in DMA ring d HIGH CVE-2026-43464 7.5 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix XDP multi-buf frag cou HIGH CVE-2026-45932 7.3 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix tcx/netkit detach permissions wh HIGH CVE-2026-45956 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: use priv->vidi_dev for HIGH CVE-2026-46130 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: dm-verity-fec: fix reading parity bytes s HIGH CVE-2026-46175 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by FG HIGH CVE-2026-46181 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix mis-use of RCU in mlx4_srq HIGH CVE-2026-46279 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mm/alloc_tag: clear codetag for pages all HIGH CVE-2026-46317 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Reassign nested_mmus array be HIGH CVE-2026-46324 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu fo HIGH CVE-2026-46330 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Revert "net/smc: Introduce TCP ULP suppor HIGH CVE-2026-52953 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix oops due to out of scope HIGH CVE-2026-52956 7.5 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds acce HIGH CVE-2026-52983 7.5 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix BQL imbalance in TX path HIGH CVE-2026-52991 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: sched/psi: fix race between file release HIGH CVE-2026-53000 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfilter: nat: use kfree_rcu to release HIGH CVE-2026-53009 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ice: fix double-free of tx_buf skb If ic HIGH CVE-2026-53024 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: greybus: raw: fix use-after-free if write HIGH CVE-2026-53025 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: greybus: raw: fix use-after-free on cdev HIGH CVE-2026-53091 8.4 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: pull headers in qdisc_pkt_len_segs_i HIGH CVE-2026-53109 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: powerpc/pgtable-frag: Fix bad page state HIGH CVE-2026-53118 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: vdpa: use generic driver_override infrast HIGH CVE-2026-53178 8.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: rtw_mlme: add bounds HIGH CVE-2026-53277 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page t HIGH CVE-2026-53281 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereferenc HIGH CVE-2026-53284 7.5 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: only release the dirty pages io tr HIGH CVE-2026-53330 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds read i HIGH CVE-2026-53368 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by in HIGH CVE-2026-53401 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: fbdev: omap2: fix use-after-free in omapf HIGH CVE-2026-5435 7.3 This Week libc6-dev@2.41-12+deb13u4 The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail HIGH CVE-2026-54369 8.4 libacl1@2.3.2-2+b1 acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl HIGH CVE-2026-54370 7.2 This Week libacl1@2.3.2-2+b1 acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that al HIGH CVE-2026-54371 8.4 This Week libattr1@1:2.5.2-3 attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities th HIGH CVE-2026-63805 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: crypto: nx - fix nx_crypto_ctx_exit argum HIGH CVE-2026-63819 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on f2fs_get_ HIGH CVE-2026-63832 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: add wcid publish check in mt7 HIGH CVE-2026-63853 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN HIGH CVE-2026-63858 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: add hook transactio HIGH CVE-2026-63879 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix amdgpu_hmm_range_get_page HIGH CVE-2026-63941 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap ZCR_EL2 provide HIGH CVE-2026-64036 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: cgroup/rstat: validate cpu before css_rst HIGH CVE-2026-64076 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: eb_tables: close modul HIGH CVE-2026-64077 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage re HIGH CVE-2026-64078 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: add and use xtables_ HIGH CVE-2026-64117 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: capture fast-RX rate befo HIGH CVE-2026-64255 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate sta_mask bef HIGH CVE-2026-64283 7.0 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Treat memslot binding o HIGH CVE-2026-64388 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POS HIGH CVE-2026-64389 8.2 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate NTLMv2 response before up HIGH CVE-2026-64400 8.6 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent path traversal bypass by r HIGH CVE-2026-64520 8.4 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_G HIGH CVE-2026-6653 7.0 Act Now libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3 Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote HIGH CVE-2026-68258 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on CRIU restore HIGH CVE-2026-68295 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Zero-extend signed ALU32 HIGH CVE-2026-68323 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tipc: serialize udp bearer replicast list HIGH CVE-2026-68382 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Hold device ref until queue t HIGH CVE-2026-68383 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Keep scheduler timeline name HIGH CVE-2026-68393 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: extend conn_hash loo HIGH CVE-2026-68399 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in sock clone early bailouts HIGH CVE-2026-68400 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix Endpoint Memory Ac HIGH CVE-2026-68401 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix out-of-bound write HIGH CVE-2026-68404 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: use wiphy work for socket HIGH CVE-2026-68409 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: defer link RX stats percp HIGH CVE-2026-68447 7.1 Act Now linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: clamp v9 CRIU control stack c HIGH CVE-2026-68453 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in cca_ HIGH CVE-2026-6846 7.8 This Week libsframe1@2.44-3 A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted HIGH CVE-2026-68470 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate extension-frame HIGH CVE-2026-68471 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: ieee80211: validate MLE common info HIGH CVE-2026-72009 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: Extract PHY as HIGH CVE-2026-72042 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix user refcount underflow in even HIGH CVE-2026-72162 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix UBSAN array-index-out-of-bound HIGH CVE-2026-72367 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: iomap: guard io_size EOF trim against con HIGH CVE-2026-72375 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: afs: Fix reinitialisation of the inode, i HIGH CVE-2026-72380 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: xen/pvcalls: bound backend response req_i HIGH CVE-2026-72383 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: sctp: fix addr_wq_timer race in sctp_free HIGH CVE-2026-72397 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/core) honor vrm_version in HIGH CVE-2026-72404 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in cleanup_bearer() due to HIGH CVE-2026-72423 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Guard conntrack opts error writes T HIGH CVE-2026-72440 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix writes_pending and barrier HIGH CVE-2026-72454 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Fix race in i3c_hci_ad HIGH CVE-2026-72488 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: soundwire: fix bug in sdw_add_element_gro HIGH CVE-2026-72497 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a max slot check for SQ HIGH CVE-2026-72499 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free CQ toggle page after f HIGH CVE-2026-72500 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free SRQ toggle page after HIGH CVE-2026-74257 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: sockmap: Fix use-after-free in udp_bpf_re HIGH CVE-2026-74264 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: watchdog: fix refcount tracking race HIGH CVE-2026-74314 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value r HIGH CVE-2026-74317 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ixgbe: do not configure xps for XDP queue HIGH CVE-2026-74338 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable BPF_LSM_CGROUP prog HIGH CVE-2026-74344 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Clear rb node linkage when freeing b HIGH CVE-2026-74354 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Take mmap_lock in zap_pages() zap_v HIGH CVE-2026-74374 7.5 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix error-path detection HIGH CVE-2026-74385 7.5 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check return value of nvmet_tc HIGH CVE-2026-74388 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Fix UAF at handling event HIGH CVE-2026-74405 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: OPP: Fix race between OPP addition and lo HIGH CVE-2026-74407 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cancel SSR work items durin HIGH CVE-2026-74449 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix divide-by-zero in ca HIGH CVE-2026-74506 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: afs: Fix UAF when sending a message In a HIGH CVE-2026-74513 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: dibs: fix use-after-free of dmb_node in l HIGH CVE-2026-74520 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: iommu/iommufd: Fix IOPF group ownership U HIGH CVE-2026-74527 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering s HIGH CVE-2026-74529 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_con HIGH CVE-2026-74530 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_con HIGH CVE-2026-74533 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix race of kfree vs kref HIGH CVE-2026-74537 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: hold sk properly in iso_c HIGH CVE-2026-74538 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_connect_in HIGH CVE-2026-74544 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: validate offshift to HIGH CVE-2026-74605 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head HIGH CVE-2026-74687 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: watchdog: at91sam9_wdt: prevent timer rea HIGH CVE-2026-74690 8.4 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: s390/ism: Fix UAF of sba and ieq during i HIGH CVE-2026-74695 7.5 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_flow_table: drop existing s HIGH CVE-2026-74697 8.2 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Disable EOP for TPA on all chips HIGH CVE-2026-74711 8.4 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus) Fix type confusion in noti HIGH CVE-2026-74713 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: vhost_iotlb: bound map allocation in add_ HIGH CVE-2026-74715 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix netns reference imbalance in con HIGH CVE-2026-74733 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_bus_sync_u HIGH CVE-2026-74747 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bo HIGH CVE-2026-74860 8.5 This Week libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3 A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability b HIGH CVE-2026-76642 8.5 This Week mount@2.41.5-0+deb13u1 util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount HIGH CVE-2026-78408 7.9 This Week util-linux@2.41.5-0+deb13u1 The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor op HIGH CVE-2026-78409 7.0 This Week util-linux@2.41.5-0+deb13u1 The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured sub HIGH CVE-2026-78410 7.8 This Week util-linux@2.41.5-0+deb13u1 A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that sou HIGH CVE-2026-80229 7.5 This Week libcurl4t64@8.14.1-2+deb13u7 When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating HIGH CVE-2026-80230 7.5 This Week libcurl4t64@8.14.1-2+deb13u7 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable standard peer verification (`CURLO HIGH CVE-2026-80255 7.5 This Week libcurl4t64@8.14.1-2+deb13u7 A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instead of space (ascii code 32) immediately b HIGH CVE-2026-80579 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: fbdev: clear fb_info->mode before deletin HIGH CVE-2026-80580 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: fbdev: bound mode sysfs output to the sys HIGH CVE-2026-80614 7.5 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: emac: Fix NULL pointer dereference i HIGH CVE-2026-80628 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Serialize readq reset sta HIGH CVE-2026-80631 7.5 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject compressed segment tha HIGH CVE-2026-80653 8.4 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Add slave_destroy interfa HIGH CVE-2026-80662 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXL_HEADERLOG_SIZE to match RAS HIGH CVE-2026-80692 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_con HIGH CVE-2026-80721 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon r HIGH CVE-2026-80734 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for HIGH CVE-2026-80738 7.3 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Check sk_state before sk_protocol in HIGH CVE-2026-80747 8.0 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add bounds check for CRAT sub HIGH CVE-2026-82208 7.5 This Week libcurl4t64@8.14.1-2+deb13u7 With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_SSL_CTX_FUNCTION` callback replaces the t HIGH CVE-2026-82209 8.2 This Week libcurl4t64@8.14.1-2+deb13u7 When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing HIGH CVE-2026-82560 7.5 This Week perl-modules-5.40@5.40.1-6+deb13u1 Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over HIGH CVE-2026-84243 7.0 This Week libc6-dev@2.41-12+deb13u4 The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variabl HIGH CVE-2026-85091 8.3 This Week PoC zlib1g@1:1.3.dfsg+really1.3.1-1+b1 zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function w HIGH CVE-2026-86138 7.8 This Week libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3 Heap-based buffer overflow in libxml2 before 2.15.4, reachable through the internal dictionary routine xmlDict HIGH CVE-2026-86139 7.8 This Week libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3 An integer overflow in libxml2's xmlURIEscapeStr() URI-escaping routine, present in all versions before 2.15.4 HIGH CVE-2026-86140 7.8 This Week libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3 Let me construct the JSON. Key facts: libxml2 before 2.15.4, xmlSnprintfElements in valid.c, strcat stack buf HIGH CVE-2026-86142 7.8 This Week libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3 Let me produce the JSON. Key facts: libxml2 heap buffer overflow in xmlXPtrEvalXPtrPart due to xmlXPtrEval xp HIGH CVE-2026-86143 7.3 This Week libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3 Integer-overflow handling in libxml2's xmlIO output path lets a negative length reach application-supplied wri HIGH CVE-2026-86144 7.8 This Week libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3 SSRF, XXE and denial of service exposure arise in libxml2 before 2.15.4 because xmlXIncludeProcess and xmlXInc HIGH CVE-2026-86409 8.1 This Week libcurl4t64@8.14.1-2+deb13u7 Setting `CURLOPT_AWS_SIGV4` to NULL does not disable SigV4 authentication, contrary to expectations and docume HIGH CVE-2026-86410 8.1 This Week libcurl4t64@8.14.1-2+deb13u7 A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting HIGH CVE-2026-87862 8.1 This Week libcurl4t64@8.14.1-2+deb13u7 Importing a `includeSubDomains` parent HSTS entry before a longer-lived child entry, silently drops the child. HIGH CVE-2026-87863 8.1 This Week libcurl4t64@8.14.1-2+deb13u7 An authenticated HTTPS origin can supply an HSTS `max-age` value that the parser accepts, but time serializati HIGH CVE-2026-87864 8.1 This Week libcurl4t64@8.14.1-2+deb13u7 Enabling `CURLOPT_CRLF` causes curl to advertise the raw input byte count in the `IMAP APPEND {N}` literal whi HIGH CVE-2026-87865 7.4 This Week libcurl4t64@8.14.1-2+deb13u7 When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial entry can cause host key vali HIGH CVE-2026-8932 7.5 This Week libcurl4t64@8.14.1-2+deb13u7 libcurl would reuse a previously created connection even when some mTLS config related option had been changed HIGH CVE-2026-89528 7.5 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Read lists that exceed th HIGH CVE-2026-89534 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: svcrdma: Clear sc_cm_id when ADDR_CHANGE HIGH CVE-2026-89601 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ext2: Fix lost inode updates for IS_SYNC HIGH CVE-2026-89632 8.2 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-before-check of Repa HIGH CVE-2026-89639 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: cifs: use cifs_invalidate_cache() in cifs HIGH CVE-2026-89648 7.5 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in ceph_p HIGH CVE-2026-89682 8.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: nfsd: fix fcache_disposal UAF by inlining HIGH CVE-2026-89705 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: nfsd: restore rq_status_counter to even o HIGH CVE-2026-89709 8.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: lockd, nfsd: RCU-protect nlmsvc_ops dispa HIGH CVE-2026-89808 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix the case that vm range is HIGH CVE-2026-89810 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix error path at svm_migrate HIGH CVE-2026-89811 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add TLB flush after MES queue HIGH CVE-2026-89826 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/panthor: harden firmware build-info b HIGH CVE-2026-89906 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Refactor jump offset calc HIGH CVE-2026-89913 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v3: take an LPI referenc HIGH CVE-2026-89920 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory corruption by not r HIGH CVE-2026-90093 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: access chan->conn safel HIGH CVE-2026-90111 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ip6mr: do not clone dst in ip6mr_cache_re HIGH CVE-2026-90142 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix resize of the RX ring Wh HIGH CVE-2026-90149 7.5 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: fix NULL dereference for HIGH CVE-2026-90161 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: erofs: fix interlaced ztailpacking pclust HIGH CVE-2026-90162 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer publishing granted locks to HIGH CVE-2026-90174 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds read in ksm HIGH CVE-2026-90177 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Check pointer type for all atomic RM HIGH CVE-2026-90204 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate DIO orphan slot during in HIGH CVE-2026-90205 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate orphan slot during inode HIGH CVE-2026-90217 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Compare iterator types during state HIGH CVE-2026-90231 8.4 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unconfined user namespace r HIGH CVE-2026-90234 7.5 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: NFS: Return a delegation the client fails HIGH CVE-2026-90237 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: move custom expectatio HIGH CVE-2026-90240 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush context cache with corr HIGH CVE-2026-90256 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: use proto_lock for l2ca HIGH CVE-2026-90260 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: don't clobber the extent bu HIGH CVE-2026-90289 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Resize MST HDCP per-conn HIGH CVE-2026-90301 8.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ocfs2: o2hb: quiesce negotiate handlers a HIGH CVE-2026-90317 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Invalidate RCU pointers after final HIGH CVE-2026-90320 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate external xattr entries wh HIGH CVE-2026-90321 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline xattrs during inod HIGH CVE-2026-90324 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ublk: check import_ubuf() return value i HIGH CVE-2026-90326 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix race between policy activ HIGH CVE-2026-90343 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: stop PMSR before P2P and HIGH CVE-2026-90347 8.4 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: Keep 'orig_x0' in-sync wit HIGH CVE-2026-90367 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: hold dev->mt76.mutex HIGH CVE-2026-90379 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: Add PCIe AER handler HIGH CVE-2026-90401 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: md: remove REQ_NOWAIT support from raid1/ HIGH CVE-2026-90408 7.7 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix overreads in ath12k_wmi HIGH CVE-2026-90427 7.4 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Don't fall back to HIGH CVE-2026-9080 7.3 This Week libcurl4t64@8.14.1-2+deb13u7 Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a use-after-fre HIGH CVE-2026-92386 8.1 This Week libcurl4t64@8.14.1-2+deb13u7 When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make `curl` write HIGH CVE-2026-92387 8.1 This Week libcurl4t64@8.14.1-2+deb13u7 By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can explo HIGH CVE-2026-92389 8.1 This Week libcurl4t64@8.14.1-2+deb13u7 libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, acc HIGH CVE-2026-92390 7.5 This Week libcurl4t64@8.14.1-2+deb13u7 When invoked with `--remote-header-name` (`-J`), curl fails to preserve its documented anti-clobbering protect HIGH CVE-2026-92391 7.5 This Week libcurl4t64@8.14.1-2+deb13u7 A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl dur HIGH CVE-2026-92485 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix WARNING in bpf_tracing_link_rele HIGH CVE-2026-92518 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Fix kernel stack corruption i HIGH CVE-2026-93105 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: esp: do not unref managed frag pages in e HIGH CVE-2026-93116 7.0 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wmi: fix resource leak HIGH CVE-2026-93122 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uac: validate rate list leng HIGH CVE-2026-93125 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject rdonly/rdwr_buf_size kfunc ar HIGH CVE-2026-93144 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject writes through untrusted BTF HIGH CVE-2026-93148 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject MEM_ALLOC BTF accesses past o HIGH CVE-2026-93154 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Add refcounting to user ring HIGH CVE-2026-93175 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in HIGH CVE-2026-93176 7.0 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dangling pointer in HIGH CVE-2026-93221 8.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: nfsd: convert nfsd_net boolean flags to u HIGH CVE-2026-93237 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: LoongArch: Add DIRECT_MAP_PHYSMEM_END def HIGH CVE-2026-93260 7.4 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: propagate IPI init errors t HIGH CVE-2026-93282 8.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks HIGH CVE-2026-94266 7.5 This Week libcurl4t64@8.14.1-2+deb13u7 libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing HIGH CVE-2026-9538 7.5 This Week perl-modules-5.40@5.40.1-6+deb13u1 Pre-NVD disclosure via oss-security: oss-security mailing list - 2026/05/26. ar versions before 3.08 for Perl HIGH CVE-2026-9545 7.5 This Week libcurl4t64@8.14.1-2+deb13u7 In this scenario, libcurl first uses a proper HTTP/3 server for the initial transfers, and when it makes a sec HIGH CVE-2026-9547 7.4 This Week libcurl4t64@8.14.1-2+deb13u7 When a libcurl-based application performs transfers via `SCP://` or `SFTP://` and utilizes the `CURLOPT_SSH_KE HIGH CVE-2026-95619 7.7 This Week libubsan1@14.2.0-19 A flaw was found in libstdc++. An integer overflow can occur when processing large inputs to the C++ `new` ope HIGH CVE-2026-97478 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: virt: acrn: Fix irqfd use-after-free duri HIGH CVE-2026-97513 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Release m2m_ct HIGH CVE-2026-98073 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: Remove conflicting altnames for dyin HIGH CVE-2026-98115 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logof HIGH CVE-2026-98118 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix readahead synchronisation issu HIGH CVE-2026-98156 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource HIGH CVE-2026-98180 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/msm: RCU-free the scheduler-containin HIGH CVE-2026-98228 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mips: select CONFIG_WEAK_REORDERING_BEYON HIGH CVE-2026-98330 7.0 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: get the wiphy out of a dy HIGH CVE-2026-98341 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't free driver-owned s HIGH CVE-2026-98364 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: xfrm: hold net_device reference under RCU HIGH CVE-2026-98376 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Use array_map_meta_equal for percpu HIGH CVE-2026-98436 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer expo HIGH CVE-2026-98466 8.2 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Transfer the hyp stack pages HIGH CVE-2026-98471 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do cache maintenance on the sou HIGH CVE-2026-98932 7.4 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Fix use-after-free in error HIGH CVE-2026-98974 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size HIGH CVE-2026-98975 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: xfs: stop exchanging reflink flags when e HIGH CVE-2026-98978 8.4 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: namespace: never expire a locked mount L HIGH CVE-2026-98981 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: namespace: unhash a dentry before detachi HIGH CVE-2026-98993 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: namespace: don't inherit MNT_UMOUNT in cl HIGH CVE-2026-98999 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix stale pinned_link entry when HIGH CVE-2026-99002 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from us HIGH CVE-2026-99014 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix command skb life HIGH CVE-2026-99077 7.4 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: Create exceptions before socke HIGH CVE-2026-99082 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use active memslots for the per HIGH CVE-2026-99083 8.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix heap out-of-bounds write in kr HIGH CVE-2026-99109 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb: client: reject SetEA requests that d HIGH CVE-2026-99110 7.0 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix heap overflow in cifs_do HIGH CVE-2026-99112 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flower: validate mask poin HIGH CVE-2026-99117 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: don't truncate the po HIGH CVE-2026-99122 7.3 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: validate packet source for co HIGH CVE-2026-99123 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: validate packet source for HIGH CVE-2026-99131 8.2 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: xfs: fix capability check in xfs An user HIGH CVE-2026-99136 7.0 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: dm-crypt: fix a tiny race condition in cr HIGH CVE-2026-99142 7.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tracing: Check operator stack capacity be HIGH CVE-2026-99143 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the predicate limit separat HIGH CVE-2026-99152 7.5 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the task named b HIGH CVE-2026-99156 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix use-after-free race between HIGH CVE-2026-99163 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Reject non-stacktrace HIGH CVE-2026-99167 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in __tcf_ac HIGH CVE-2026-99173 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: eventfs: Free the eventfs_inode after an HIGH CVE-2026-99180 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: unicode: free the map after a grace perio HIGH CVE-2026-99203 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: pipe: preserve existing fasync readers on HIGH CVE-2026-99212 7.0 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let the rdma_cm destroy an HIGH CVE-2026-99213 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: vsock: treat TCP_CLOSING as once-establis HIGH CVE-2026-99216 8.4 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Don't reset VMBus connection HIGH CVE-2026-99218 7.0 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: coredump: hold RCU while releasing parked HIGH CVE-2026-99224 7.0 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: keys: Protect the type name while describ HIGH CVE-2026-99227 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: prevent cancel reference HIGH CVE-2026-99231 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: own the request before c HIGH CVE-2026-99233 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Verify event_call ide HIGH CVE-2026-99235 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tracing: Save the event file instead of t HIGH CVE-2026-99236 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tracing: Reject incomplete event filter e HIGH CVE-2026-99239 7.8 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: refuse __l2cap_chan_add HIGH CVE-2026-99246 8.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tipc: protect node reset trace dump with HIGH CVE-2026-99270 8.1 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UAF in reqsk_timer_han MEDIUM CVE-2003-1307 4.3 PoC apache2-utils@2.4.69-1~deb13u1 The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send sign MEDIUM CVE-2003-1580 4.3 PoC apache2-utils@2.4.69-1~deb13u1 The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format t MEDIUM CVE-2004-0230 5.0 PoC linux-libc-dev@6.12.113-1 TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause MEDIUM CVE-2005-3660 4.9 linux-libc-dev@6.12.113-1 Linux kernel 2.4 and 2.6 allows attackers to cause a denial of service (memory exhaustion and panic) by creati MEDIUM CVE-2007-1743 4.4 apache2-utils@2.4.69-1~deb13u1 suexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on the command l MEDIUM CVE-2007-3303 4.9 This Month apache2-utils@2.4.69-1~deb13u1 Apache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial of service vi MEDIUM CVE-2007-5686 4.9 passwd@1:4.17.4-2 initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to MEDIUM CVE-2008-2544 5.5 PoC linux-libc-dev@6.12.113-1 Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the MEDIUM CVE-2010-4563 5.0 linux-libc-dev@6.12.113-1 The Linux kernel, when using IPv6, allows remote attackers to determine whether a host is sniffing the network MEDIUM CVE-2010-4651 5.8 patch@2.8-2 Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attacke MEDIUM CVE-2010-4756 4.0 PoC libc6-dev@2.41-12+deb13u4 The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a MEDIUM CVE-2010-5321 4.3 linux-libc-dev@6.12.113-1 Memory leak in drivers/media/video/videobuf-core.c in the videobuf subsystem in the Linux kernel 2.6.x through MEDIUM CVE-2011-3389 4.3 This Month PoC libgnutls30t64@3.8.9-3+deb13u4 The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozi MEDIUM CVE-2011-4915 5.5 PoC linux-libc-dev@6.12.113-1 fs/proc/base.c in the Linux kernel through 3.1 allows local users to obtain sensitive keystroke information vi MEDIUM CVE-2011-4916 5.5 PoC linux-libc-dev@6.12.113-1 Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /dev/pts/ MEDIUM CVE-2011-4917 5.5 PoC linux-libc-dev@6.12.113-1 In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat. MEDIUM CVE-2012-4542 4.6 This Month linux-libc-dev@6.12.113-1 block/scsi_ioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during aut MEDIUM CVE-2013-4392 5.0 This Month libudev1@257.13-1~deb13u1 systemd, when updating file permissions, allows local users to change the permissions and SELinux security con MEDIUM CVE-2014-9892 5.5 This Month linux-libc-dev@6.12.113-1 The snd_compr_tstamp function in sound/core/compress_offload.c in the Linux kernel through 4.7, as used in And MEDIUM CVE-2014-9900 5.5 This Month linux-libc-dev@6.12.113-1 The ethtool_get_wol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before MEDIUM CVE-2016-10723 5.5 linux-libc-dev@6.12.113-1 An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resour MEDIUM CVE-2016-8660 5.5 This Month linux-libc-dev@6.12.113-1 The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync MEDIUM CVE-2017-0630 4.7 This Month linux-libc-dev@6.12.113-1 An information disclosure vulnerability in the kernel trace subsystem could enable a local malicious applicati MEDIUM CVE-2017-13693 5.5 This Month linux-libc-dev@6.12.113-1 The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 doe MEDIUM CVE-2017-13694 5.5 This Month linux-libc-dev@6.12.113-1 The acpi_ps_complete_final_op() function in drivers/acpi/acpica/psobject.c in the Linux kernel through 4.12.9 MEDIUM CVE-2017-13716 5.5 This Month libsframe1@2.44-3 The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remo MEDIUM CVE-2017-14159 4.7 This Month libldap2@2.6.10+dfsg-1 slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root account, which MEDIUM CVE-2018-1121 5.9 This Month PoC linux-libc-dev@6.12.113-1 procps-ng, procps is vulnerable to a process hiding through race condition. Since the kernel's proc_pid_readdi MEDIUM CVE-2018-12928 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel 4.15.0, a NULL pointer dereference was discovered in hfs_ext_read_extent in hfs.ko. This c MEDIUM CVE-2018-17977 4.4 This Month linux-libc-dev@6.12.113-1 The Linux kernel 4.14.67 mishandles certain interaction among XFRM Netlink messages, IPPROTO_AH packets, and I MEDIUM CVE-2018-20673 5.5 PoC libsframe1@2.44-3 The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contain MEDIUM CVE-2018-20712 6.5 PoC libsframe1@2.44-3 A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as dist MEDIUM CVE-2018-9996 5.5 This Month PoC libsframe1@2.44-3 An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion MEDIUM CVE-2019-1010023 5.4 This Month PoC libc6-dev@2.41-12+deb13u4 GNU Libc current is affected by: Re-mapping current loaded library with malicious ELF file. The impact is: In MEDIUM CVE-2019-1010024 5.3 This Month PoC libc6-dev@2.41-12+deb13u4 GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thr MEDIUM CVE-2019-1010025 5.3 This Month PoC libc6-dev@2.41-12+deb13u4 GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pt MEDIUM CVE-2019-12378 5.5 This Month linux-libc-dev@6.12.113-1 An issue was discovered in ip6_ra_control in net/ipv6/ipv6_sockglue.c in the Linux kernel through 5.1.5. There MEDIUM CVE-2019-12379 5.5 This Month linux-libc-dev@6.12.113-1 An issue was discovered in con_insert_unipair in drivers/tty/vt/consolemap.c in the Linux kernel through 5.1.5 MEDIUM CVE-2019-12380 5.5 This Month linux-libc-dev@6.12.113-1 **DISPUTED** An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. phys_efi_set_virt MEDIUM CVE-2019-12381 5.5 This Month linux-libc-dev@6.12.113-1 An issue was discovered in ip_ra_control in net/ipv4/ip_sockglue.c in the Linux kernel through 5.1.5. There is MEDIUM CVE-2019-12382 5.5 This Month linux-libc-dev@6.12.113-1 An issue was discovered in drm_load_edid_firmware in drivers/gpu/drm/drm_edid_load.c in the Linux kernel throu MEDIUM CVE-2019-12455 5.5 This Month linux-libc-dev@6.12.113-1 An issue was discovered in sunxi_divs_clk_setup in drivers/clk/sunxi/clk-sunxi.c in the Linux kernel through 5 MEDIUM CVE-2019-15213 4.6 This Month PoC linux-libc-dev@6.12.113-1 An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB MEDIUM CVE-2019-16089 4.1 This Month linux-libc-dev@6.12.113-1 An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not ch MEDIUM CVE-2019-16229 4.1 This Month linux-libc-dev@6.12.113-1 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux kernel 5.2.14 does not check the alloc_workqueue retur MEDIUM CVE-2019-16230 4.7 This Month linux-libc-dev@6.12.113-1 drivers/gpu/drm/radeon/radeon_display.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return v MEDIUM CVE-2019-16231 4.1 This Month linux-libc-dev@6.12.113-1 drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leadi MEDIUM CVE-2019-16232 4.1 This Month PoC linux-libc-dev@6.12.113-1 drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue MEDIUM CVE-2019-16233 4.1 This Month linux-libc-dev@6.12.113-1 drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, lead MEDIUM CVE-2019-16234 4.7 This Month linux-libc-dev@6.12.113-1 drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue MEDIUM CVE-2019-20794 4.7 This Month PoC linux-libc-dev@6.12.113-1 An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. MEDIUM CVE-2020-0347 6.7 This Month linux-libc-dev@6.12.113-1 In iptables, there is a possible out of bounds write due to an incorrect bounds check. This could lead to loca MEDIUM CVE-2020-14304 4.4 This Month linux-libc-dev@6.12.113-1 A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EE MEDIUM CVE-2020-15719 4.2 This Month libldap2@2.6.10+dfsg-1 libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third-party packag MEDIUM CVE-2020-36694 6.7 PoC linux-libc-dev@6.12.113-1 An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the pac MEDIUM CVE-2021-32256 6.5 PoC libsframe1@2.44-3 An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in MEDIUM CVE-2021-3714 5.9 linux-libc-dev@6.12.113-1 A flaw was found in the Linux kernels memory deduplication mechanism. Previous work has shown that memory dedu MEDIUM CVE-2021-4214 5.5 PoC libpng16-16t64@1.6.48-1+deb13u6 A heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with local network MEDIUM CVE-2021-45261 5.5 This Month PoC patch@2.8-2 An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial MEDIUM CVE-2022-0563 5.5 This Month util-linux@2.41.5-0+deb13u1 A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline l MEDIUM CVE-2022-41848 4.2 This Month linux-libc-dev@6.12.113-1 drivers/char/pcmcia/synclink_cs.c in the Linux kernel through 5.19.12 has a race condition and resultant use-a MEDIUM CVE-2022-44032 6.4 This Month linux-libc-dev@6.12.113-1 An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4000_cs.c has a race conditio MEDIUM CVE-2022-44033 6.4 This Month linux-libc-dev@6.12.113-1 An issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040_cs.c has a race conditio MEDIUM CVE-2022-4543 5.5 PoC linux-libc-dev@6.12.113-1 A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). This issue could allow a MEDIUM CVE-2023-23039 5.7 This Month linux-libc-dev@6.12.113-1 An issue was discovered in the Linux kernel through 6.2.0-rc2. drivers/tty/vcc.c has a race condition and resu MEDIUM CVE-2023-31081 5.5 This Month linux-libc-dev@6.12.113-1 An issue was discovered in drivers/media/test-drivers/vidtv/vidtv_bridge.c in the Linux kernel 6.2. There is a MEDIUM CVE-2023-31082 5.5 This Month linux-libc-dev@6.12.113-1 An issue was discovered in drivers/tty/n_gsm.c in the Linux kernel 6.2. There is a sleeping function called fr MEDIUM CVE-2023-31085 5.5 This Month linux-libc-dev@6.12.113-1 An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in MEDIUM CVE-2023-31437 5.3 This Month libudev1@257.13-1~deb13u1 An issue was discovered in systemd 253. An attacker can modify a sealed log file such that, in some views, not MEDIUM CVE-2023-31438 5.3 This Month libudev1@257.13-1~deb13u1 An issue was discovered in systemd 253. An attacker can truncate a sealed log file and then resume log sealing MEDIUM CVE-2023-31439 5.3 This Month libudev1@257.13-1~deb13u1 An issue was discovered in systemd 253. An attacker can modify the contents of past events in a sealed log fil MEDIUM CVE-2023-3397 6.3 This Month linux-libc-dev@6.12.113-1 A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in MEDIUM CVE-2023-37454 5.5 This Month PoC linux-libc-dev@6.12.113-1 An issue was discovered in the Linux kernel through 6.4.2. A crafted UDF filesystem image causes a use-after-f MEDIUM CVE-2023-6238 6.7 This Month linux-libc-dev@6.12.113-1 A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privilege MEDIUM CVE-2023-6240 6.5 linux-libc-dev@6.12.113-1 A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. Thi MEDIUM CVE-2024-0564 6.5 This Month PoC linux-libc-dev@6.12.113-1 A flaw was found in the Linux kernel's memory deduplication mechanism. The max page sharing of Kernel Samepage MEDIUM CVE-2024-2193 5.7 This Month linux-libc-dev@6.12.113-1 A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative MEDIUM CVE-2024-24864 4.7 This Month linux-libc-dev@6.12.113-1 A race condition was found in the Linux kernel's media/dvb-core in dvbdmx_write() function. This can result in MEDIUM CVE-2024-25740 5.5 This Month linux-libc-dev@6.12.113-1 A memory leak flaw was found in the UBI driver in drivers/mtd/ubi/attach.c in the Linux kernel through 6.7.4 f MEDIUM CVE-2024-26458 5.3 This Month PoC libkrb5support0@1.21.3-5+deb13u1 Kerberos 5 (aka krb5) 1.21.2 contains a memory leak in /krb5/src/lib/rpc/pmap_rmt.c. MEDIUM CVE-2024-56709 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: io_uring: check if iowq is killed before MEDIUM CVE-2024-58074 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/i915: Grab intel_display from the enc MEDIUM CVE-2025-10966 4.3 This Month PoC libcurl4t64@8.14.1-2+deb13u7 curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and m MEDIUM CVE-2025-1178 6.3 This Month PoC libsframe1@2.44-3 A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerab MEDIUM CVE-2025-14017 6.3 This Month libcurl4t64@8.14.1-2+deb13u7 When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread wou MEDIUM CVE-2025-15079 5.3 This Month PoC libcurl4t64@8.14.1-2+deb13u7 When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still MEDIUM CVE-2025-21752 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: don't use btrfs_set_item_key_safe MEDIUM CVE-2025-21949 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: LoongArch: Set hugetlb mmap base address MEDIUM CVE-2025-22109 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ax25: Remove broken autobind Binding AX2 MEDIUM CVE-2025-23132 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: f2fs: quota: fix to avoid warning in dquo MEDIUM CVE-2025-23135 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Teardown riscv specific bits MEDIUM CVE-2025-3198 4.8 This Month PoC libsframe1@2.44-3 A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulne MEDIUM CVE-2025-37743 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid memory leak while ena MEDIUM CVE-2025-37746 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: perf/dwc_pcie: fix duplicate pci_dev devi MEDIUM CVE-2025-37880 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: um: work around sched_yield not yielding MEDIUM CVE-2025-37906 4.7 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ublk: fix race between io_uring_cmd_compl MEDIUM CVE-2025-38029 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: kasan: avoid sleepable page allocation fr MEDIUM CVE-2025-38036 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Perform early GT MMIO initiali MEDIUM CVE-2025-38041 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h616: Reparent GPU clock d MEDIUM CVE-2025-38042 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Drop skip_fd MEDIUM CVE-2025-38064 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: virtio: break and reset virtio devices on MEDIUM CVE-2025-38132 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: coresight: holding cscfg_csdev_lock while MEDIUM CVE-2025-38140 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: dm: limit swapping tables for devices wit MEDIUM CVE-2025-38199 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix memory leak due to mult MEDIUM CVE-2025-38207 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mm: fix uprobe pte be overwritten when ex MEDIUM CVE-2025-38261 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: riscv: save the SR_SUM status over switch MEDIUM CVE-2025-38284 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: configure manual DAC mo MEDIUM CVE-2025-38311 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: iavf: get rid of the crit lock Get rid o MEDIUM CVE-2025-38359 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix in_atomic() handling in do_s MEDIUM CVE-2025-38597 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: vop2: fail cleanly if missi MEDIUM CVE-2025-38605 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Pass ab pointer directly to MEDIUM CVE-2025-39677 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix backlog accounting in qdis MEDIUM CVE-2025-39762 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: add null check [WHY] Pr MEDIUM CVE-2025-39775 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix WARN with uffd that has re MEDIUM CVE-2025-39789 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: crypto: x86/aegis - Add missing error che MEDIUM CVE-2025-39822 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: fix signedness in this_len MEDIUM CVE-2025-39830 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Fix memory leak in hws_poo MEDIUM CVE-2025-39834 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Fix memory leak in hws_act MEDIUM CVE-2025-39910 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc, mm/kasan: respect gfp mask in MEDIUM CVE-2025-39933 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb: client: let recv_done verify data_of MEDIUM CVE-2025-5244 4.8 This Month PoC libsframe1@2.44-3 A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is MEDIUM CVE-2025-5245 4.8 This Month PoC libsframe1@2.44-3 A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function de MEDIUM CVE-2025-5278 4.4 This Month coreutils@9.7-3 A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under MEDIUM CVE-2025-6141 4.8 This Month ncurses-bin@6.5+20250216-2 A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerabi MEDIUM CVE-2025-66382 5.5 This Month libexpat1@2.9.0-1~deb13u1 In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of p MEDIUM CVE-2025-69644 5.0 This Month libsframe1@2.44-3 An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when p MEDIUM CVE-2025-69645 5.5 This Month libsframe1@2.44-3 Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DW MEDIUM CVE-2025-69646 5.5 This Month libsframe1@2.44-3 Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DW MEDIUM CVE-2025-69647 6.2 This Month libsframe1@2.44-3 GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary w MEDIUM CVE-2025-69648 6.2 This Month libsframe1@2.44-3 GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary w MEDIUM CVE-2025-69651 5.5 This Month PoC libsframe1@2.44-3 GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing MEDIUM CVE-2025-69652 6.2 This Month PoC libsframe1@2.44-3 GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a cra MEDIUM CVE-2025-71074 4.7 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: functionfs: fix the open/removal races f MEDIUM CVE-2025-71117 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: block: Remove queue freezing from several MEDIUM CVE-2025-71141 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/tilcdc: Fix removal actions in case o MEDIUM CVE-2025-71188 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: dmaengine: lpc18xx-dmamux: fix device lea MEDIUM CVE-2025-71202 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: iommu/sva: invalidate stale IOTLB entries MEDIUM CVE-2025-71227 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't WARN for connection MEDIUM CVE-2025-71285 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Drop the MHI auto_queue featur MEDIUM CVE-2025-71302 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/panthor: fix for dma-fence safe acces MEDIUM CVE-2025-71313 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Add missing NULL check for MEDIUM CVE-2025-71315 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Convert to DRM's vblank timer MEDIUM CVE-2026-100074 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_refcount field as unique B MEDIUM CVE-2026-100076 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmit_frame/xmit_b MEDIUM CVE-2026-100077 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/msm: Recover HW before retire hung su MEDIUM CVE-2026-102473 5.5 This Month dash@0.5.12-12 A flaw was found in dash. When built without libc fnmatch, the internal pmatch() matcher implements * by unbou MEDIUM CVE-2026-102474 4.0 This Month dash@0.5.12-12 A flaw was found in dash. The printf builtin reserves four bytes before converting a Unicode \u or \U escape, MEDIUM CVE-2026-107708 6.9 This Month libkrb5support0@1.21.3-5+deb13u1 MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_real MEDIUM CVE-2026-112060 6.1 This Month librtmp1@2.4+20151223.gitfa8646d.1-2+b5 librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability beca MEDIUM CVE-2026-112061 5.3 This Month librtmp1@2.4+20151223.gitfa8646d.1-2+b5 librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode that reads a MEDIUM CVE-2026-114690 6.2 This Month libubsan1@14.2.0-19 A flaw was found in GCC. An out-of-bounds memory access vulnerability exists in the libstdc++ parallel search MEDIUM CVE-2026-114691 5.9 This Month libubsan1@14.2.0-19 A flaw was found in the libstdc++ component of GCC. An attacker who can provide an excessively large element c MEDIUM CVE-2026-115207 5.5 This Month patch@2.8-2 A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working di MEDIUM CVE-2026-115455 6.5 This Month libubsan1@14.2.0-19 A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character strea MEDIUM CVE-2026-11850 5.0 This Month libkrb5support0@1.21.3-5+deb13u1 An integer underflow vulnerability was found in MIT krb5 in the berval2tl_data() function in plugins/kdb/ldap/ MEDIUM CVE-2026-119371 6.8 This Month libsqlite3-0@3.46.1-7+deb13u2 SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMI MEDIUM CVE-2026-119372 6.8 This Month libsqlite3-0@3.46.1-7+deb13u2 SQLite before 3.54.0 built with FTS3/FTS4 and SQLITE_ENABLE_FTS3_PARENTHESIS contains a use-after-free vulnera MEDIUM CVE-2026-119375 6.8 This Month libsqlite3-0@3.46.1-7+deb13u2 SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitiali MEDIUM CVE-2026-119376 6.8 This Month libsqlite3-0@3.46.1-7+deb13u2 SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE_LIMI MEDIUM CVE-2026-119378 6.8 This Month libsqlite3-0@3.46.1-7+deb13u2 SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to MEDIUM CVE-2026-119591 6.8 This Month libsqlite3-0@3.46.1-7+deb13u2 SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attack MEDIUM CVE-2026-13757 6.2 This Month libp11-kit0@0.25.5-3 A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p MEDIUM CVE-2026-15003 5.6 This Month libsframe1@2.44-3 A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow rea MEDIUM CVE-2026-15059 5.5 This Month libudev1@257.13-1~deb13u1 Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing p MEDIUM CVE-2026-15534 5.7 This Month perl-modules-5.40@5.40.1-6+deb13u1 Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via a MEDIUM CVE-2026-16742 6.7 This Month libudev1@257.13-1~deb13u1 systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged MEDIUM CVE-2026-18374 4.9 This Month libc6-dev@2.41-12+deb13u4 Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` functi MEDIUM CVE-2026-18477 4.4 This Month tar@1.35+dfsg-3.1 A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows MEDIUM CVE-2026-18508 4.4 This Month tar@1.35+dfsg-3.1 A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are MEDIUM CVE-2026-18938 6.2 This Month libp11-kit0@0.25.5-3 A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could MEDIUM CVE-2026-19542 5.6 This Month libc6-dev@2.41-12+deb13u4 [Out-of-bounds stack array access in tdelete] MEDIUM CVE-2026-19548 5.5 This Month libsframe1@2.44-3 Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the G MEDIUM CVE-2026-22185 4.6 This Month libldap2@2.6.10+dfsg-1 OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up to and including 0.9.14, prior to commit 8e1fda8, MEDIUM CVE-2026-23007 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: block: zero non-PI portion of auto integr MEDIUM CVE-2026-23017 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: idpf: fix error handling in the init_task MEDIUM CVE-2026-23143 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix misalignment bug in struc MEDIUM CVE-2026-23152 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: correctly decode TTLM wit MEDIUM CVE-2026-23217 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: riscv: trace: fix snapshot deadlock with MEDIUM CVE-2026-23259 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: free potentially allocated i MEDIUM CVE-2026-23265 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node foot MEDIUM CVE-2026-23348 4.7 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: cxl: Fix race of nvdimm_bus object when c MEDIUM CVE-2026-23371 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix missing ENQUEUE_REPLE MEDIUM CVE-2026-23377 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ice: change XDP RxQ frag_size from DMA wr MEDIUM CVE-2026-23385 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: clone set on flush MEDIUM CVE-2026-23472 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: serial: core: fix infinite loop in handle MEDIUM CVE-2026-31526 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exception exit lock checking for MEDIUM CVE-2026-31537 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb: server: make use of smbdirect_socket MEDIUM CVE-2026-31562 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dsi: Store driver data befo MEDIUM CVE-2026-31579 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wireguard: device: use exit_rtnl callback MEDIUM CVE-2026-31591 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Lock all vCPUs when synchronzin MEDIUM CVE-2026-31592 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Protect *all* of sev_mem_enc_re MEDIUM CVE-2026-31692 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable MEDIUM CVE-2026-31777 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Check the error for index ma MEDIUM CVE-2026-3184 5.3 This Month util-linux@2.41.5-0+deb13u1 A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked wit MEDIUM CVE-2026-42250 4.8 This Month libbz2-1.0@1.0.8-6 bzip2 contains an off‑by‑one error in the bzip2recover utility. When processing a specially crafted file, the MEDIUM CVE-2026-43022 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hci_cmd_sync_queue_o MEDIUM CVE-2026-43034 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bnxt_en: set backing store type from quer MEDIUM CVE-2026-43053 4.7 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: xfs: close crash window in attr dabtree i MEDIUM CVE-2026-43115 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: srcu: Use irq_work to start GP in tiny SR MEDIUM CVE-2026-43118 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix zero size inode with non-zero MEDIUM CVE-2026-43127 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix circular locking dependency in MEDIUM CVE-2026-43191 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Adjust PHY FSM transitio MEDIUM CVE-2026-43204 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6asm: drop DSP responses for MEDIUM CVE-2026-43234 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: team: avoid NETDEV_CHANGEMTU event when u MEDIUM CVE-2026-43272 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix possible dereference of MEDIUM CVE-2026-43294 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm: renesas: rz-du: mipi_dsi: fix kernel MEDIUM CVE-2026-43298 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip vcn poison irq release o MEDIUM CVE-2026-43299 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: do not ASSERT() when the fs flips MEDIUM CVE-2026-43301 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix PM runtime MEDIUM CVE-2026-43308 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUG() on unexpected delayed MEDIUM CVE-2026-43309 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: md raid: fix hang when stopping arrays wi MEDIUM CVE-2026-43310 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: Avoid G2 bus error wh MEDIUM CVE-2026-43311 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: soc/tegra: pmc: Fix unsafe generic_handle MEDIUM CVE-2026-43325 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't send a 6E relat MEDIUM CVE-2026-43326 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix SCX_KICK_WAIT deadlock by MEDIUM CVE-2026-43337 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer derefer MEDIUM CVE-2026-43346 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ice: ptp: don't WARN when controlling PF MEDIUM CVE-2026-43416 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: powerpc, perf: Check that current->mm is MEDIUM CVE-2026-43443 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-mach-common: Add missing e MEDIUM CVE-2026-43463 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix missing error pointer che MEDIUM CVE-2026-43485 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: nouveau/gsp: drop WARN_ON in ACPI probes MEDIUM CVE-2026-45934 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix EEXIST abort due to non-consec MEDIUM CVE-2026-45940 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix oops when split header i MEDIUM CVE-2026-45961 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: gfs2: fix memory leaks in gfs2_fill_super MEDIUM CVE-2026-46014 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Add missing save/restore handli MEDIUM CVE-2026-46017 4.7 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mm: fix deferred split queue races during MEDIUM CVE-2026-46032 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Triple fault if restore host C MEDIUM CVE-2026-46044 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ipmi:ssif: Clean up kthread on errors If MEDIUM CVE-2026-46059 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use NextRIP as vmcb02's MEDIUM CVE-2026-46066 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ceph: fix num_ops off-by-one when crypto MEDIUM CVE-2026-46071 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Avoid clearing VMCB_LBR in vmc MEDIUM CVE-2026-46096 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix missing tpm_buf_destro MEDIUM CVE-2026-46147 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix pin leak and publication MEDIUM CVE-2026-46148 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: control built-i MEDIUM CVE-2026-46153 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: 8021q: delete cleared egress QoS mappings MEDIUM CVE-2026-46171 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: riscv: kvm: fix vector context allocation MEDIUM CVE-2026-46228 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix devres lifetime USB driv MEDIUM CVE-2026-46245 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dc_link NULL handlin MEDIUM CVE-2026-46256 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: NFS/localio: prevent direct reclaim recur MEDIUM CVE-2026-46272 4.7 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: coresight: tmc-etr: Fix race condition be MEDIUM CVE-2026-46302 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: selinux: allow multiple opens of /sys/fs/ MEDIUM CVE-2026-46314 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Reject empty multisync extension MEDIUM CVE-2026-4647 6.1 This Month libsframe1@2.44-3 A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as ob MEDIUM CVE-2026-50812 5.5 This Month libsqlite3-0@3.46.1-7+deb13u2 A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before che MEDIUM CVE-2026-50813 6.1 This Month libsqlite3-0@3.46.1-7+deb13u2 An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information MEDIUM CVE-2026-52937 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tap: fix stack info leak in tap_ioctl() S MEDIUM CVE-2026-52994 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix MSG_ZEROCOPY pinned-pag MEDIUM CVE-2026-53017 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix data loss caused by incorrect u MEDIUM CVE-2026-53018 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid reading already updated pages MEDIUM CVE-2026-53103 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix potential deadloc MEDIUM CVE-2026-53104 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: Fix memory leak destroying de MEDIUM CVE-2026-53106 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Do not allow deleting local storage MEDIUM CVE-2026-53107 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: don't kill URBs in interr MEDIUM CVE-2026-53108 4.7 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix unmap race with PMD migr MEDIUM CVE-2026-53258 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: fix leak if split 6 GHz scanning fa MEDIUM CVE-2026-53285 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wrap DCN32 phantom-plane MEDIUM CVE-2026-53292 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: phonet: do not BUG_ON() in pn_socket MEDIUM CVE-2026-53297 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: mana: Guard mana_remove against doub MEDIUM CVE-2026-53321 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: io_uring/napi: cap busy_poll_to 10 msec MEDIUM CVE-2026-53377 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/msm: always recover the gpu Previous MEDIUM CVE-2026-54411 6.9 This Month libpam0g@1.7.0-5 Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plainte MEDIUM CVE-2026-56288 4.6 This Month patch@2.8-2 GNU patch crashes with a NULL pointer dereference when a user applies a specially crafted unified-diff file, r MEDIUM CVE-2026-56289 4.6 This Month patch@2.8-2 GNU patch enters an infinite CPU-consuming loop when processing a specially crafted unified-diff file containi MEDIUM CVE-2026-56391 4.6 This Month coreutils@9.7-3 Out-of-bounds read in GNU coreutils uniq allows attackers with crafted multibyte input and the -w option to cr MEDIUM CVE-2026-5704 5.5 This Month tar@1.35+dfsg-3.1 A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, l MEDIUM CVE-2026-58055 6.3 This Month PoC libnghttp2-14@1.64.0-1.1+deb13u1 nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length MEDIUM CVE-2026-6238 6.5 This Month libc6-dev@2.41-12+deb13u4 The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail MEDIUM CVE-2026-63859 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: airoha: Add missing bits in airoha_q MEDIUM CVE-2026-63998 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnl_ops_complete( MEDIUM CVE-2026-63999 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ethtool: rss: fix indir_table and hkey le MEDIUM CVE-2026-64006 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix dst corruption MEDIUM CVE-2026-64038 4.7 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Stop work before releasing MEDIUM CVE-2026-64060 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix leak of request in netfs_write MEDIUM CVE-2026-64079 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: allocate hook ops wh MEDIUM CVE-2026-64146 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: erofs: fix metabuf leak in inode xattr in MEDIUM CVE-2026-64154 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: Fix a reference leak in a MEDIUM CVE-2026-64159 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix zeropoint update where i_size MEDIUM CVE-2026-64190 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference i MEDIUM CVE-2026-64212 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't dereference a p MEDIUM CVE-2026-64213 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Add lock protection to lm90 MEDIUM CVE-2026-6791 6.6 This Month libc6-dev@2.41-12+deb13u4 When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function ext MEDIUM CVE-2026-6844 5.5 This Month libsframe1@2.44-3 A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial o MEDIUM CVE-2026-6845 5.0 This Month libsframe1@2.44-3 A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local att MEDIUM CVE-2026-76781 5.5 This Month libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3 A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger MEDIUM CVE-2026-77117 5.9 This Month libc6-dev@2.41-12+deb13u4 [Unknown description] MEDIUM CVE-2026-80489 5.9 This Month libc6-dev@2.41-12+deb13u4 [Unknown description] MEDIUM CVE-2026-8458 6.5 This Month libcurl4t64@8.14.1-2+deb13u7 libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, MEDIUM CVE-2026-86137 6.1 This Month libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3 Out-of-bounds read in libxml2's XML regular expression parser exposes all versions before 2.15.4 to a limited MEDIUM CVE-2026-8674 5.3 This Month libc6-dev@2.41-12+deb13u4 Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose MEDIUM CVE-2026-86805 6.3 This Month libc6-dev@2.41-12+deb13u4 A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (gli MEDIUM CVE-2026-88647 6.5 This Month libgnutls30t64@3.8.9-3+deb13u4 A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mecha MEDIUM CVE-2026-89092 4.2 This Month libc6-dev@2.41-12+deb13u4 The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS se MEDIUM CVE-2026-95184 5.9 This Month libgnutls30t64@3.8.9-3+deb13u4 Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for MEDIUM CVE-2026-95210 4.8 This Month libgnutls30t64@3.8.9-3+deb13u4 Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing inv MEDIUM CVE-2026-95512 5.5 This Month libfreetype6@2.13.3+dfsg-1+deb13u1 A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vu MEDIUM CVE-2026-98049 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: zero extend the result of an arena 3 MEDIUM CVE-2026-98053 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Refactor and fix init_c MEDIUM CVE-2026-98058 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Mark syscall helpers as sleepable b MEDIUM CVE-2026-98062 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Mark signal tracepoint siginfo argum MEDIUM CVE-2026-98099 4.7 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu_assign_pointer() for MEDIUM CVE-2026-98119 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfs: break unbuffered write when netfs_ MEDIUM CVE-2026-98124 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb/client: invalidate fscache for falloc MEDIUM CVE-2026-98125 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in inser MEDIUM CVE-2026-98131 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping leak in stmm MEDIUM CVE-2026-98134 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: check_cond_jmp_op(): properly infer MEDIUM CVE-2026-98147 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on kthread_run failure MEDIUM CVE-2026-98148 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate GUD_ROTATION_0 is prese MEDIUM CVE-2026-98162 5.5 This Month linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb/server: fix tree connection leak in s LOW CVE-2001-1534 2.1 apache2-utils@2.4.69-1~deb13u1 mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including h LOW CVE-2003-1581 2.6 PoC apache2-utils@2.4.69-1~deb13u1 The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, allows remote attackers LOW CVE-2007-3719 2.1 linux-libc-dev@6.12.113-1 The process scheduler in the Linux kernel 2.6.16 gives preference to "interactive" processes that perform volu LOW CVE-2008-0456 2.6 PoC apache2-utils@2.4.69-1~deb13u1 CRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the LOW CVE-2011-3374 3.7 PoC libapt-pkg7.0@3.0.3 It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, le LOW CVE-2011-4116 3.3 PoC perl-modules-5.40@5.40.1-6+deb13u1 _is_safe in the File::Temp module for Perl does not properly handle symlinks. LOW CVE-2015-2877 3.3 linux-libc-dev@6.12.113-1 Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing si LOW CVE-2019-11191 2.5 PoC linux-libc-dev@6.12.113-1 The Linux kernel through 5.0.7, when CONFIG_IA32_AOUT is enabled and ia32_aout is loaded, allows local users t LOW CVE-2020-35501 3.4 linux-libc-dev@6.12.113-1 A flaw was found in the Linux kernels implementation of audit rules, where a syscall can unexpectedly not be c LOW CVE-2024-56433 3.6 passwd@1:4.17.4-2 shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 thro LOW CVE-2025-11081 1.9 PoC libsframe1@2.44-3 A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the f LOW CVE-2025-11082 1.9 PoC libsframe1@2.44-3 A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/e LOW CVE-2025-11083 1.9 PoC libsframe1@2.44-3 A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the LOW CVE-2025-11412 1.9 PoC libsframe1@2.44-3 A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of th LOW CVE-2025-11413 1.9 PoC libsframe1@2.44-3 A vulnerability was found in GNU Binutils 2.45. Affected is the function elf_link_add_object_symbols of the fi LOW CVE-2025-11414 1.9 PoC libsframe1@2.44-3 A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_h LOW CVE-2025-1147 2.3 PoC libsframe1@2.44-3 A vulnerability has been found in GNU Binutils 2.43 and classified as problematic. Affected by this vulnerabil LOW CVE-2025-1148 2.3 PoC libsframe1@2.44-3 A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the fu LOW CVE-2025-1149 2.3 PoC libsframe1@2.44-3 A vulnerability was found in GNU Binutils 2.43. It has been classified as problematic. This affects the functi LOW CVE-2025-11494 1.9 PoC libsframe1@2.44-3 A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of th LOW CVE-2025-11495 1.9 PoC libsframe1@2.44-3 A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_ LOW CVE-2025-1150 2.3 PoC libsframe1@2.44-3 A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. This vulnerability affect LOW CVE-2025-1151 2.3 PoC libsframe1@2.44-3 A vulnerability was found in GNU Binutils 2.43. It has been rated as problematic. This issue affects the funct LOW CVE-2025-1152 2.3 PoC libsframe1@2.44-3 A vulnerability classified as problematic has been found in GNU Binutils 2.43. Affected is the function xstrdu LOW CVE-2025-1153 2.3 PoC libsframe1@2.44-3 A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability LOW CVE-2025-1176 2.3 PoC libsframe1@2.44-3 A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bf LOW CVE-2025-1180 2.3 PoC libsframe1@2.44-3 A vulnerability classified as problematic has been found in GNU Binutils 2.43. This affects the function _bfd_ LOW CVE-2025-1181 2.3 PoC libsframe1@2.44-3 A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function LOW CVE-2025-1182 2.3 PoC libsframe1@2.44-3 A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bf LOW CVE-2025-11839 1.9 PoC libsframe1@2.44-3 A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prd LOW CVE-2025-11840 1.9 PoC libsframe1@2.44-3 A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file l LOW CVE-2025-15224 3.1 PoC libcurl4t64@8.14.1-2+deb13u7 When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would LOW CVE-2025-66861 2.5 PoC libsframe1@2.44-3 An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowing attacke LOW CVE-2025-7545 1.9 libsframe1@2.44-3 A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is th LOW CVE-2025-7546 1.9 libsframe1@2.44-3 A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this is LOW CVE-2025-8225 1.9 PoC libsframe1@2.44-3 A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function LOW CVE-2026-119377 2.0 libsqlite3-0@3.46.1-7+deb13u2 SQLite before 3.54.0 contains an authorization bypass vulnerability in lookupName() that invokes the authorize LOW CVE-2026-11979 1.8 libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3 Stack-based buffer overflows in libxml2's xmlcatalog utility enable memory corruption and potential arbitrary LOW CVE-2026-27171 2.9 PoC zlib1g@1:1.3.dfsg+really1.3.1-1+b1 zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do ri LOW CVE-2026-2903 1.9 re2c@4.1-1 A flaw has been found in skvadrik re2c up to 4.4. Impacted is the function check_and_merge_special_rules of th LOW CVE-2026-3713 1.9 PoC libpng16-16t64@1.6.48-1+deb13u6 A flaw has been found in pnggroup libpng up to 1.6.55. Affected by this vulnerability is the function do_pnm2p LOW CVE-2026-40228 2.9 libudev1@257.13-1~deb13u1 In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a "lo LOW CVE-2026-53910 2.1 diffutils@1:3.10-4 Heap-based buffer overflow in GNU diffutils' diff3 tool, triggered by signed integer overflows in internal lin LOW CVE-2026-56392 1.8 coreutils@9.7-3 Heap-based buffer overflow in GNU coreutils unexpand allows an attacker who can supply large tab stop (-t) val LOW CVE-2026-6368 2.1 libc6-dev@2.41-12+deb13u4 Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to r LOW CVE-2026-67693 3.7 libgnutls30t64@3.8.9-3+deb13u4 An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entit LOW CVE-2026-86141 3.3 libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3 NULL pointer dereference in libxml2's xmlRegNewParserCtxt() function crashes any application invoking the XML LOW CVE-2026-88648 3.7 libgnutls30t64@3.8.9-3+deb13u4 Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Autho LOW CVE-2026-90801 1.9 PoC libsframe1@2.44-3 A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file b LOW CVE-2026-90802 1.9 PoC libsframe1@2.44-3 A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbf LOW CVE-2026-90803 1.9 PoC libsframe1@2.44-3 A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the functio LOW CVE-2026-90804 0.9 PoC libsframe1@2.44-3 A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_secti LOW CVE-2026-90828 1.9 libsframe1@2.44-3 A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_c LOW CVE-2026-90829 1.9 libsframe1@2.44-3 A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_content LOW CVE-2026-90830 1.9 libsframe1@2.44-3 A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_se LOW CVE-2026-90831 1.9 libsframe1@2.44-3 A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref LOW CVE-2026-91779 1.9 PoC libsframe1@2.44-3 A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_ LOW CVE-2026-91780 1.9 PoC libsframe1@2.44-3 A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of LOW CVE-2026-91781 1.9 PoC libsframe1@2.44-3 A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_se LOW CVE-2026-91782 1.9 PoC libsframe1@2.44-3 A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allo LOW CVE-2026-95818 3.6 libc6-dev@2.41-12+deb13u4 A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through LOW CVE-2026-97399 3.7 libc6-dev@2.41-12+deb13u4 The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read on N/A CVE-2021-45346 libsqlite3-0@3.46.1-7+deb13u2 N/A CVE-2022-25265 linux-libc-dev@6.12.113-1 N/A CVE-2025-40065 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Write hgatp register with va N/A CVE-2025-40086 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't allow evicting of BOs in sa N/A CVE-2025-40113 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: pas: Shutdown lite ADSP N/A CVE-2025-40130 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix data race in CPU lat N/A CVE-2025-40136 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - request reserved i N/A CVE-2025-40146 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix potential deadlock while nr_r N/A CVE-2025-40217 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: pidfs: validate extensible ioctls Valida N/A CVE-2025-40247 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix pgtable prealloc error path N/A CVE-2025-40338 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Do not share the name p N/A CVE-2025-40355 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: sysfs: check visibility before changing g N/A CVE-2025-68193 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Add devm release action to sa N/A CVE-2025-68209 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mlx5: Fix default values in create CQ Cu N/A CVE-2025-68236 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix UFS OCP issue du N/A CVE-2025-68318 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks N/A CVE-2025-68319 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire su_mutex before navig N/A CVE-2025-68353 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: vxlan: prevent NULL deref in vxlan_x N/A CVE-2025-68368 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: md: init bioset in mddev_init IO operati N/A CVE-2025-68376 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: coresight: ETR: Fix ETR buffer use-after- N/A CVE-2025-68729 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix MSDU buffer types handl N/A CVE-2025-68751 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: s390/fpu: Fix false-positive kmsan report N/A CVE-2025-68755 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver N/A CVE-2026-23102 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Fix restoration of N/A CVE-2026-63811 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original ino N/A CVE-2026-64513 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Unconditionally recompute CR8 i N/A CVE-2026-68081 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM- N/A CVE-2026-68086 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: write all dirty file folio N/A CVE-2026-68105 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic during drive N/A CVE-2026-68211 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: media: stm32-dcmipp: Return queued buffer N/A CVE-2026-68233 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Shut down BO cache timer before N/A CVE-2026-68238 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Release VFCT ACPI table refer N/A CVE-2026-68241 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/i915/mst: limit DP MST ESI service lo N/A CVE-2026-68242 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix NULL deref on sched_engi N/A CVE-2026-68291 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: idpf: fix max_vport related crash on allo N/A CVE-2026-68312 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: cifs: fix cifsFileInfo leak on kmalloc fa N/A CVE-2026-68375 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Handle partially initialized aux N/A CVE-2026-68412 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix an error handling pat N/A CVE-2026-68418 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent user-triggered null d N/A CVE-2026-68421 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't warn on core-sched force N/A CVE-2026-68435 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in N/A CVE-2026-68436 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate N/A CVE-2026-68441 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/sched: Handle TC_ACT_REDIRECT from qd N/A CVE-2026-68448 This Week linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copy_file_range sour N/A CVE-2026-72031 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Add NOLPM quirk for PNY N/A CVE-2026-72073 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix use-after-free on probe N/A CVE-2026-72321 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential memory leaks in N/A CVE-2026-72337 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: avoid untracked enabl N/A CVE-2026-72341 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix publication race for priv- N/A CVE-2026-72365 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writethrough to use collection N/A CVE-2026-72388 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Always use the IRQ-safe vari N/A CVE-2026-72439 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes_pending leak on wri N/A CVE-2026-72501 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Initialize dpi variable to N/A CVE-2026-74261 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: avoid stale FIFO cells during N/A CVE-2026-74272 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: cxl/region: Resolve region deletion races N/A CVE-2026-74273 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: cxl/region: Block region delete during re N/A CVE-2026-74324 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: validate skb length i N/A CVE-2026-74337 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NMI/tracepoint re-entry deadlock N/A CVE-2026-74342 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: kernfs: link kn to its parent before the N/A CVE-2026-74368 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12k_w N/A CVE-2026-74373 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix bio accounting for s N/A CVE-2026-74375 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: fix deadlock in read err N/A CVE-2026-74466 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Close speculative mem read p N/A CVE-2026-74542 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio_queue ENOMEM in writebac N/A CVE-2026-74558 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: xsk: reclaim invalid Tx descriptors in ZC N/A CVE-2026-74559 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: xsk: drain continuation descs after overf N/A CVE-2026-74560 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: xsk: fix buffer leak in xsk_drop_skb() fo N/A CVE-2026-74571 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: skip global block reserve accounti N/A CVE-2026-74600 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mm/page_table_check: skip special zero ma N/A CVE-2026-74638 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout N/A CVE-2026-74728 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: xfs: handle NULL b_addr in xfs_buf_free N/A CVE-2026-74729 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Fix usercopy over N/A CVE-2026-74734 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer derefere N/A CVE-2026-74754 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: core: pair EH runtime PM get and pu N/A CVE-2026-80581 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipelin N/A CVE-2026-80607 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARN_ON_ONCE from N/A CVE-2026-80616 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARN_ON() on -E N/A CVE-2026-80623 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: coresight: ete: Always save state on powe N/A CVE-2026-80643 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing N/A CVE-2026-80655 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Fix race condition in event N/A CVE-2026-80698 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double free of wq, e N/A CVE-2026-80705 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check if dml21_add_phant N/A CVE-2026-80761 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: zero the sockaddr before N/A CVE-2026-80785 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: fbdev: serialize mode sysfs access with l N/A CVE-2026-80786 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fb_set_ N/A CVE-2026-80866 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tipc: avoid busy looping in tipc_exit_net N/A CVE-2026-80872 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/tas2781: Cancel async firmware N/A CVE-2026-80884 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ntb: Store original DMA address for futur N/A CVE-2026-80899 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: erofs: remove fscache backend entirely E N/A CVE-2026-80905 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: tap: fix wrong transport_header when N/A CVE-2026-80920 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd signaling when qu N/A CVE-2026-80948 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dvm: fix memory leak in iw N/A CVE-2026-89642 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: cifs: call pagecache_isize_extended() in N/A CVE-2026-89722 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Fix out-of-bounds read in pci_ N/A CVE-2026-89757 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mm/mglru: fix and remove redundant unevic N/A CVE-2026-89812 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: force complete the MES ring f N/A CVE-2026-89813 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: force complete the KIQ ring f N/A CVE-2026-89833 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential deadloop in N/A CVE-2026-89862 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix BSG job leak on valida N/A CVE-2026-89866 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Resume device N/A CVE-2026-89935 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: iio: light: apds9306: fix PM reference le N/A CVE-2026-89987 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: transfer the pmd dirty bi N/A CVE-2026-90040 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA N/A CVE-2026-90061 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: skip double clone s N/A CVE-2026-90083 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ife: Only operate on Ether N/A CVE-2026-90084 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: fix workqueue and netdev ra N/A CVE-2026-90086 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: xsk: honor XDP_TX_METADATA in zero-copy p N/A CVE-2026-90087 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: do not leak an hci_conn when a N/A CVE-2026-90097 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Skip VMBus module cle N/A CVE-2026-90098 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: sparx5: fix sleep in atomic context N/A CVE-2026-90099 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/sched: account classifier filter allo N/A CVE-2026-90105 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: vxlan: fix reading neigh ha Currently ar N/A CVE-2026-90106 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: bridge: arp/nd proxy: fix reading ne N/A CVE-2026-90116 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ALSA: mtpav: shut down output timer befor N/A CVE-2026-90144 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: dpll: fix NULL deref in dpll_device_ops() N/A CVE-2026-90154 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope session state changes to bou N/A CVE-2026-90155 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: detach blocked lock requests befor N/A CVE-2026-90156 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely discard unregistered deferr N/A CVE-2026-90167 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize oplock close with pendin N/A CVE-2026-90179 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: apparmor: fix deadlock in complain-mode c N/A CVE-2026-90182 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: blk-iocost: clear delay state when freein N/A CVE-2026-90183 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: clear delay state when fre N/A CVE-2026-90206 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: nvmet: fix max_qid race between configfs N/A CVE-2026-90208 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/samsung_pwm: Switch t N/A CVE-2026-90211 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf, s390: Clear fetch destination on fau N/A CVE-2026-90232 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: amt: Don't support cross-netns setup. Wh N/A CVE-2026-90247 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix mmap_lock leak in irq_work path N/A CVE-2026-90259 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix a wrong length calcula N/A CVE-2026-90261 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: flush active metadata block N/A CVE-2026-90263 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: check if root is readonly when set N/A CVE-2026-90264 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: always wait for ordered extents to N/A CVE-2026-90265 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: defrag: fix deadlock between defra N/A CVE-2026-90267 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: sd: Fix special_vec mempool leak wh N/A CVE-2026-90273 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: missing cscfg_csdev_dis N/A CVE-2026-90300 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Clear buf on error in __bpf_get_task N/A CVE-2026-90306 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ARM: 9481/2: breakpoint: CFI breakpoints N/A CVE-2026-90311 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: thermal: hwmon: Remove hwmon class device N/A CVE-2026-90315 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add lockdown checks to legacy N/A CVE-2026-90328 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: HID: steam: Reject short reads Steam Con N/A CVE-2026-90330 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Fix FF device cleanu N/A CVE-2026-90333 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: dm-integrity: replace forgeable discard f N/A CVE-2026-90335 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tty: skip cdev_del() when no cdev is regi N/A CVE-2026-90336 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: serial: core: clear freed pointers on uar N/A CVE-2026-90337 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: serial: core: do fallible allocations bef N/A CVE-2026-90345 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix P2P action frame hand N/A CVE-2026-90346 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: clean up color-change beac N/A CVE-2026-90351 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: do not attach hif2 WE N/A CVE-2026-90359 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject >8 byte return values on retu N/A CVE-2026-90363 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/msm: don't tear down KMS twice when K N/A CVE-2026-90365 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: cancel reset and rc work on d N/A CVE-2026-90409 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Add vm_bind region with kbo N/A CVE-2026-90417 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Fix dereg_skb leak and double N/A CVE-2026-90421 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: PCI: Fix UAF when probe runs concurrent t N/A CVE-2026-90422 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: pllfh: Fix IO remapping le N/A CVE-2026-90424 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix VINTF0 leak on N/A CVE-2026-92480 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Validate string descript N/A CVE-2026-92482 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: use devm_gpiochip_add_ N/A CVE-2026-92493 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: cpufreq: amd-pstate-ut: Skip tests when a N/A CVE-2026-92499 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ext4: validate readdir offset before acce N/A CVE-2026-92500 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ext4: use fsdata to track inline data wri N/A CVE-2026-92503 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ext4: fix ABBA deadlock in ext4_xattr_ino N/A CVE-2026-92520 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Zero queue and stack outputs on lock N/A CVE-2026-93044 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for ar N/A CVE-2026-93047 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Associate BOs with every job tha N/A CVE-2026-93058 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/msm: Only fini scheduler after succes N/A CVE-2026-93081 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix SCMI device destr N/A CVE-2026-93099 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix UAF from worker threads w N/A CVE-2026-93100 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Prevent use-after-free in rdt N/A CVE-2026-93104 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RDMA/rvt: Return NULL after port allocati N/A CVE-2026-93129 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fix handling N/A CVE-2026-93135 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject programs with inlined helpers N/A CVE-2026-93146 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: time/namespace: Validate nanosecond field N/A CVE-2026-93168 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx_dma: Fix CPU stall in x N/A CVE-2026-93181 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix uncore_box ref N/A CVE-2026-93202 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during N/A CVE-2026-93216 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mm/page_owner: use memcg_data snapshot to N/A CVE-2026-93230 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: initialize gigantic bootmem h N/A CVE-2026-93251 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ACPI: bus: Introduce acpi_bus_get_primary N/A CVE-2026-93270 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for BP N/A CVE-2026-93272 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom_wcnss: Fix handling the N/A CVE-2026-93276 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: phy: renesas: phy-rcar-gen3-usb2: Fix dev N/A CVE-2026-97422 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process i N/A CVE-2026-97424 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/ras: add ras_suspend callback N/A CVE-2026-97432 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix P2P-Device bindin N/A CVE-2026-97477 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RDMA/counter: Fix num_counters leak on bi N/A CVE-2026-97479 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: driver core: Avoid warning when removing N/A CVE-2026-97480 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tty: serial: 8250: protect against NULL u N/A CVE-2026-97493 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Bound GPIO I2C table entry co N/A CVE-2026-97499 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: coresight: perf: Retrieve path and source N/A CVE-2026-97501 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: paris: bypass pinctrl N/A CVE-2026-97503 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: genirq/proc: Size interrupt directory nam N/A CVE-2026-97515 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Prevent IRQ storm from N/A CVE-2026-97526 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: s390/pai: Support CPU hotplug for PMU PAI N/A CVE-2026-97538 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_rog_ryujin) Validate HID rep N/A CVE-2026-97554 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid using uninitialized SI N/A CVE-2026-97561 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb: client: honor forceuid/forcegid when N/A CVE-2026-97563 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb: client: reject out-of-bounds DataOff N/A CVE-2026-97565 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses N/A CVE-2026-97928 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip the VMID 0 flush for VRA N/A CVE-2026-97960 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Prevent drain_pebs() reen N/A CVE-2026-97962 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Move representor vnic reporter N/A CVE-2026-97975 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sysfs: Fix NULL pointer de N/A CVE-2026-97988 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: vhost: invalidate vring access on IOTLB t N/A CVE-2026-97989 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: vduse: validate virtqueue alignment vdus N/A CVE-2026-97997 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: virtio_ring: fix stale descriptor flags a N/A CVE-2026-98003 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Do not reallocate GA log buffe N/A CVE-2026-98019 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: mark a NULL call argument precise c N/A CVE-2026-98032 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tracing: Fix subbuf resize races with tra N/A CVE-2026-98033 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve inner map identity in callb N/A CVE-2026-98034 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Mark NULL kptr stores precise check N/A CVE-2026-98038 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Keep refcount_acquire nullable for b N/A CVE-2026-98043 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Don't infer non-NULL from a pointer N/A CVE-2026-98044 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject legacy packet loads from call N/A CVE-2026-98047 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Check ancestor frames for rbtree cal N/A CVE-2026-98048 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: don't rewrite bpf_fastcall patterns N/A CVE-2026-98067 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: erofs: disable LZ4 rolling decompression N/A CVE-2026-98079 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: zstd: fix lost wakeup when waiting N/A CVE-2026-98084 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: backtracking shouldn't clear outer f N/A CVE-2026-98085 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: backtrack_insn(): Handle ld_{abs,ind N/A CVE-2026-98087 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: sched/rt,dl: Skip migrate-disabled tasks N/A CVE-2026-98176 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid integer underflow with N/A CVE-2026-98177 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid integer underflow in EO N/A CVE-2026-98273 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: x86/kprobes: Fix crash when probing CS CA N/A CVE-2026-98277 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: ring the doorbell if a burst N/A CVE-2026-98279 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: btrfs: handle lack of space when cleaning N/A CVE-2026-98284 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netlink: do not free nlk->groups while lo N/A CVE-2026-98285 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by swi N/A CVE-2026-98286 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drop_monitor: use timer_shutdown_sync() t N/A CVE-2026-98288 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TSO header length trunca N/A CVE-2026-98289 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: af_unix: Unify scc_index when finalising N/A CVE-2026-98292 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio, btmtkuart: validate N/A CVE-2026-98294 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: Do not write to the s N/A CVE-2026-98296 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: validate TX skb N/A CVE-2026-98304 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: restore the hardware filte N/A CVE-2026-98313 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: skip PUSH_IDLE when the link N/A CVE-2026-98317 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPA_INTER N/A CVE-2026-98321 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: unregister and release N/A CVE-2026-98332 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: only operate on TDLS peer N/A CVE-2026-98333 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the LED state when N/A CVE-2026-98338 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ibss: ref BSS entry for j N/A CVE-2026-98353 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Use IRQ-safe XArray helpers f N/A CVE-2026-98355 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: guard against null kobj name N/A CVE-2026-98389 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switch_power_profile N/A CVE-2026-98393 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: ipv4: Fix UDP length overflow with P N/A CVE-2026-98408 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: watchdog: rzv2h: Avoid division by zero N/A CVE-2026-98420 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: follow SMB2 session expiration sem N/A CVE-2026-98424 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: undo netns switch if rena N/A CVE-2026-98427 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/sched: codel: bound the dropping loop N/A CVE-2026-98431 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Fix mmap_lock/disassociation N/A CVE-2026-98439 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when cl N/A CVE-2026-98444 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: xfs: drop dquot flush lock when we can't N/A CVE-2026-98449 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb: client: delete compound mids on send N/A CVE-2026-98551 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: perf/core: Fill branch entries with a sin N/A CVE-2026-98556 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out N/A CVE-2026-98558 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: flush skb_defer_nodes in dev_cpu_dea N/A CVE-2026-98570 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: ipv6: keep room for the mac header i N/A CVE-2026-98589 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject pkt arguments in mutating sub N/A CVE-2026-98598 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ipv6: Prevent rt6_insert_exception() for N/A CVE-2026-98599 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject non-negative offsets in stack N/A CVE-2026-98616 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: reset num_napi when the napi N/A CVE-2026-98628 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Make post-verification instruction r N/A CVE-2026-98652 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Add missing srcu in kvm_s390_s N/A CVE-2026-98674 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Initialize state m N/A CVE-2026-98682 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb: client: drain and invalidate before N/A CVE-2026-98683 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb: client: flush dirty data before zero N/A CVE-2026-98684 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb: client: flush and commit data before N/A CVE-2026-98685 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache w N/A CVE-2026-98714 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update control fields on #VMEXI N/A CVE-2026-98715 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Preserve TLB control (i.e. pend N/A CVE-2026-98740 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Drop __init from ECC setup p N/A CVE-2026-98747 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: serial: core: fix NULL pointer dereferenc N/A CVE-2026-98786 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: guard dc_sink dereferenc N/A CVE-2026-98789 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix objects stuck in free_by_rcu_ttr N/A CVE-2026-98795 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: sparx5: skip ptp deinit if init was N/A CVE-2026-98799 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Skip detached progs in trampoline im N/A CVE-2026-98800 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Wait for an RCU tasks grace period b N/A CVE-2026-98802 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable befo N/A CVE-2026-98803 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix rx Scatter-Gather suppor N/A CVE-2026-98810 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix slab-out-of-bounds re N/A CVE-2026-98813 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Hold map BTF for the memory allocato N/A CVE-2026-98814 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: nvme: fix command effects log lifetime fo N/A CVE-2026-98815 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: nvme: fix cdev lifetime Sashiko bot repo N/A CVE-2026-98816 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overflow of jump offset in const N/A CVE-2026-98820 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: blk-mq: set RQF_USE_SCHED when the operat N/A CVE-2026-98824 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate TX status rate m N/A CVE-2026-98829 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop oversized fragments N/A CVE-2026-98834 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM N/A CVE-2026-98839 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: vt: selection: Fix unsigned underflow and N/A CVE-2026-98843 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netfs: zero gaps in read-gaps folio to av N/A CVE-2026-98853 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-IP segmen N/A CVE-2026-98863 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Re-pend GET_NESTED_STATE_PAGES N/A CVE-2026-98874 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't WARN on WoWLAN N/A CVE-2026-98875 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip t N/A CVE-2026-98878 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Immediately exec priority N/A CVE-2026-98883 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: serial: 8250_port: recognize UPIO_AU My N/A CVE-2026-98894 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: reset CPER ring on corrupt e N/A CVE-2026-98897 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: don't hold ci->m_lock while waitin N/A CVE-2026-98914 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nestin N/A CVE-2026-98916 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: check link is beaconing fo N/A CVE-2026-98917 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: parisc: Increase kernel stack size to 32k N/A CVE-2026-98924 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: fs: avoid repeated scans in evict_inodes( N/A CVE-2026-98926 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove sink usage from D N/A CVE-2026-98929 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: macsec: initialize SecY before registerin N/A CVE-2026-98942 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: sched_ext: Build the cid tables privately N/A CVE-2026-98946 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Disable the V3D interrupt across N/A CVE-2026-98951 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: riscv: ptrace: Zero-initialize regset buf N/A CVE-2026-98954 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: always dissect GSO packets in __virt N/A CVE-2026-98958 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: account non-AQL frames per pe N/A CVE-2026-98966 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: bonding: fix the program leak when XDP is N/A CVE-2026-98972 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Don't access cpuset_cgrp_s N/A CVE-2026-98977 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: namespace: handle mount locking for autom N/A CVE-2026-98983 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: unshare: don't drop active namespace refe N/A CVE-2026-98985 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: namespace: check the mounts before readin N/A CVE-2026-98989 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: namespace: check a recursive bind mount f N/A CVE-2026-98996 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: fs: don't silently unmount busy mounts T N/A CVE-2026-99009 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: connect the session so N/A CVE-2026-99019 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: ch: Do not keep references to data N/A CVE-2026-99021 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: regulator: of: fill in supply names in of N/A CVE-2026-99026 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: team: free skb when broadcast has no N/A CVE-2026-99027 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: team: stop reusing skb after queue o N/A CVE-2026-99028 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Free outstanding DM N/A CVE-2026-99041 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ip6_gre: remove obsolete ERSPAN PMTU upda N/A CVE-2026-99044 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ice: fix use-after-free in dynamic port c N/A CVE-2026-99076 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ipv6: udp: Create exceptions before socke N/A CVE-2026-99085 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix CPU hotplug hang when a dy N/A CVE-2026-99086 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on N/A CVE-2026-99087 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereferenc N/A CVE-2026-99092 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: riscv: patch: fix handling of bpf-jit exe N/A CVE-2026-99098 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inli N/A CVE-2026-99100 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: wifi: p54: validate firmware record lengt N/A CVE-2026-99103 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix unbound pool lifetime for N/A CVE-2026-99105 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix stall when a task enqueued N/A CVE-2026-99106 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: free the userptr ranges when N/A CVE-2026-99113 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: zero the FS_OBJECT_ID_INFORMATION N/A CVE-2026-99114 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: initialize FileSystemControlFlags N/A CVE-2026-99115 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fill in FileSysIdentifier in FS_PO N/A CVE-2026-99118 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Harden DMC firmware payload N/A CVE-2026-99121 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ipv4: avoid divide by zero in fib_rebalan N/A CVE-2026-99124 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix leak of uninitialized kerne N/A CVE-2026-99125 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: s390/pai: Handle multiple PMU stop callba N/A CVE-2026-99126 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Prevent XID null dereference N/A CVE-2026-99127 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: page_pool: keep frag_offset aligned for o N/A CVE-2026-99128 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: sctp: validate chunk length in the inqueu N/A CVE-2026-99130 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: io_uring/cancel: don't spin on local work N/A CVE-2026-99132 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: xfs: don't hold buffer locks across sync N/A CVE-2026-99133 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix the recvmsg window update N/A CVE-2026-99134 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: mac802154: fix data race and NULL deref o N/A CVE-2026-99135 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix infinite loop on discar N/A CVE-2026-99138 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free in do_tcp_getsock N/A CVE-2026-99139 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free in do_tcp_getsock N/A CVE-2026-99140 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tracing: Fix hist trigger timestamps for N/A CVE-2026-99146 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Add sanity check for DMC lo N/A CVE-2026-99147 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/exec: don't immediately add prelocked N/A CVE-2026-99150 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: don't drop the runtime PM ref N/A CVE-2026-99155 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: xen/scsifront: Check for a NULL sha N/A CVE-2026-99157 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: bsg: Pass reply_len to bsg_setup_qu N/A CVE-2026-99158 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix false warning in ring_bu N/A CVE-2026-99159 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix the sub-buffer array bas N/A CVE-2026-99160 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not show buffer_meta for N/A CVE-2026-99161 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmt_i2 N/A CVE-2026-99165 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate output stream after asso N/A CVE-2026-99166 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: rds: fix uninitialized trans derefer N/A CVE-2026-99169 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: futex: Fix mm reuse handling for FUT_OFF_ N/A CVE-2026-99171 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ntfs3: free the sbi after a grace period N/A CVE-2026-99172 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ipc: drop the mqueue mount with kern_unmo N/A CVE-2026-99174 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ext4: free the sbi after a grace period N/A CVE-2026-99175 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: fsnotify: prevent mark additions during c N/A CVE-2026-99176 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Reset MMU back to the root MMU N/A CVE-2026-99178 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Don't consume async #PF flags on N/A CVE-2026-99179 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: watch_queue: Fix note pool publication ra N/A CVE-2026-99181 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: autofs: ignore notification errors from a N/A CVE-2026-99182 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Fix shift-out-o N/A CVE-2026-99187 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: perf: Fix perf_pmu_migrate_context() leav N/A CVE-2026-99189 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: gpio: mxc: fix race between chained IRQ h N/A CVE-2026-99191 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: calipso: keep BIG TCP payload_len in cali N/A CVE-2026-99192 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: unshare the skb before wri N/A CVE-2026-99201 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netlink: avoid hashing the network namesp N/A CVE-2026-99202 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix SMP IO deadlock during N/A CVE-2026-99204 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: Protect the recovery list duri N/A CVE-2026-99206 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discover N/A CVE-2026-99208 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Zero OA buffer at allocation N/A CVE-2026-99209 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/xe: skip eviction of a BO with no res N/A CVE-2026-99211 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: netlink: reset skb headers before unicast N/A CVE-2026-99214 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Move packet RAM enable to N/A CVE-2026-99215 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: power: supply: core: prevent unregisterin N/A CVE-2026-99219 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: ftrace: Initialize modname and offset in N/A CVE-2026-99220 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: asymmetric_keys: reject trust keys withou N/A CVE-2026-99221 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: keys/trusted_keys: return immediately aft N/A CVE-2026-99222 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: keys: Protect the read method check again N/A CVE-2026-99223 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: keys: make keyring indexes independent of N/A CVE-2026-99225 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: keys: Check the authorization payload in N/A CVE-2026-99226 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: keys: Avoid the owner account dereference N/A CVE-2026-99228 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: don't lose the signal tha N/A CVE-2026-99229 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: io_uring/wait: don't spin on a stuck over N/A CVE-2026-99230 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd: don't leave list poison in N/A CVE-2026-99234 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tracing: Unregister field variable histog N/A CVE-2026-99244 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: pid_namespace: prevent TIF_NOTIFY_SIGNAL N/A CVE-2026-99245 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix key_reject_and_link() race with N/A CVE-2026-99247 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: tracing: Do not initialize tracefs work i N/A CVE-2026-99249 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: pid_namespace: make zap_pid_ns_processes( N/A CVE-2026-99250 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: printk: Postpone kthread startup There h N/A CVE-2026-99251 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Avoid infinite retry loop in N/A CVE-2026-99254 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: io_uring: don't flood a cancelling task w N/A CVE-2026-99255 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: don't hide a link from ca N/A CVE-2026-99256 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: dm cache: fix issue with background work N/A CVE-2026-99258 linux-libc-dev@6.12.113-1 In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Avoid using per-cpu output pa Show 1209 more CVEs Show less