2026

FTM 4.x ALL could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity in

Espruino 2v29 (commit bffc6d0) contains a NULL pointer dereference vulnerability in jslGetRawString() in src/jslex.c. Cr

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix tree connection leak in smb2_tree_c

In the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep PREFLUSH before data writes pme

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix mismatched free of HalData

A vulnerability has been found in GibbonEdu Gibbon up to 30.0.01. The affected element is the function makeBlock of the

A heap use-after-free flaw was found in Gnumeric. When a user opens a crafted Gnumeric workbook containing a malformed S

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister debugfs entries on tea

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: pass correct argument to functi

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Recover HW before retire hung submit Duri

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmit_frame/xmit_buf leaks o

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_refcount field as unique BPF_REFCOUN

In the Linux kernel, the following vulnerability has been resolved: ext4: fix transaction overflow during writeback Co

In the Linux kernel, the following vulnerability has been resolved: net: hsr: free learned nodes on device setup failur

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: rewind offset when NAT shrin

A reflected cross-site scripting (XSS) vulnerability in the EntryAbstract.save() component of APSL puput v1.2.1 through

Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via t

A Server-Side Request Forgery (SSRF) vulnerability exists in the Image API (v2) of OpenStack Glance. When the show_multi

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records

In the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored frame instead of resett

In the Linux kernel, the following vulnerability has been resolved: EDAC/device_sysfs: Use kstrtouint() for poll_msec t

In the Linux kernel, the following vulnerability has been resolved: nvme: fix racy access to FDP placement id array nv

In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix queue leak when connect backlog is

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOLATION on speculative po

In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate GUD_ROTATION_0 is present in supp

In the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on kthread_run failure. Since _

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove __counted_by from struct amdx

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: put the chained BO when its mapping

In the Linux kernel, the following vulnerability has been resolved: drm/cirrus-qemu: Validate BAR0 size during probe T

In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure up

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local leak in write_mft_record_noloc

In the Linux kernel, the following vulnerability has been resolved: ntfs: only count successfully cleared runs when fre

In the Linux kernel, the following vulnerability has been resolved: ntfs: do not mark the volume clean in sync_fs when

In the Linux kernel, the following vulnerability has been resolved: ntfs: treat any nonzero dio zero-range return as an

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid sectors_per_cluster in the boo

In the Linux kernel, the following vulnerability has been resolved: bpf: check_cond_jmp_op(): properly infer if registe

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failur

In the Linux kernel, the following vulnerability has been resolved: bpf: don't downgrade half-dead scalar zero spills t

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping leak in stmmac_tso_xmi

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix NULL pointer dereference in mpi3m

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix target device refcount leak in mp

In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for insert range smb3

In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for zero range When F

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in insert/collapse

In the Linux kernel, the following vulnerability has been resolved: smb/client: invalidate fscache for fallocate range

In the Linux kernel, the following vulnerability has been resolved: sctp: fix soft lockup from unpadded ASCONF-ACK para

In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix NULL pointer dereference in

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix subreq ref leak Fix a subrequest ref le

In the Linux kernel, the following vulnerability has been resolved: netfs: break unbuffered write when netfs_alloc_subr