2026

D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Address potential out-of-bounds read in

In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix -EIO cleanup order in queue_rq On -

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix BPF_F_CPU validation for sparse CPU IDs B

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix percpu map update indexing with sparse CPU

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Don't read the U65 rounding mode as

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound $AttrDef table walk to the loaded table

In the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START Th

In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix readahead synchronisation issues by load

In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UAF/KASAN warning Curren

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Serialize PCM mmap with buffer reallocat

In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 mu

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate version TLV value leng

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: bound firmware ID by TLV length

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + E

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore network header before routing and

In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl_micfil: balance mclk enable/disable hw_p

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction use-after-free in raid strip

In the Linux kernel, the following vulnerability has been resolved: net: Remove conflicting altnames for dying netns in

In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callb

In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire the fastpath locks in rds_conn_shu

In the Linux kernel, the following vulnerability has been resolved: nvme: remove stale namespaces by NSID range during

In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: clear txcb->last before writing each d

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_ptp: Fix napi_gro_receive() call fr

In the Linux kernel, the following vulnerability has been resolved: bpf: Don't predict JMP32 pointer vs zero comparison

In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcm_sf2: bound the CFP rule dump by the c

In the Linux kernel, the following vulnerability has been resolved: eth: nfp: bound the ntuple rule dump by the caller'

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: bound the policy rule dump by

In the Linux kernel, the following vulnerability has been resolved: vxlan: reject dynamic fdb entries that reference a

In the Linux kernel, the following vulnerability has been resolved: net/sched: defer qdisc freeing after failed creatio

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix ineffective error check in nested do

In the Linux kernel, the following vulnerability has been resolved: vdpa_sim_blk: reject out-of-range sector starts vd

In the Linux kernel, the following vulnerability has been resolved: vdpa_sim_net: check TX pull result before RX copy

In the Linux kernel, the following vulnerability has been resolved: nstree: check listing permission before taking a na

In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix mailbox segment buffer overflow ch

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TX descriptor availability check f

In the Linux kernel, the following vulnerability has been resolved: mm/slab: take n->list_lock in __slab_try_return_fre

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix fib6 walker UAF on seq stop ipv6_route_i

In the Linux kernel, the following vulnerability has been resolved: ftrace: fork: Initialize function graph state befor

In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Prevent write upgrades for read mappi

In the Linux kernel, the following vulnerability has been resolved: ufs: validate cylinder group metadata before cachin

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM region size matches job

In the Linux kernel, the following vulnerability has been resolved: ASoC: sprd: validate compress buffer sizes against

In the Linux kernel, the following vulnerability has been resolved: exit: hold a reference to thread_pid across proc_fl

Rojo's "rojo serve" HTTP API (default port 34872) has no Host/Origin header validation, making it vulnerable to DNS rebi

In the Linux kernel, the following vulnerability has been resolved: net: mpls: clear inner_protocol when the last label

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix use-after-free of the flow ta