2026

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in h

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: pass validated element co

In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: honor task_work cancellation io_w

In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix use after free in icc_get() and o

In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmb_wri

In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failur

In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error I

In the Linux kernel, the following vulnerability has been resolved: net/iucv: filter frames in afiucv_hs_rcv() by ingre

In the Linux kernel, the following vulnerability has been resolved: slip: fix use-after-free in sl_sync() slip_devs[]

In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() us

In the Linux kernel, the following vulnerability has been resolved: net: bnxt: ring the doorbell when SW USO exits earl

In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix stalled modem TX queue after runtime

In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to the route device in

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on f

In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock

In the Linux kernel, the following vulnerability has been resolved: net: ravb: serialize PTP clock teardown ravb_ptp_i

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bri

In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Reject oversized TX buffers nt

In the Linux kernel, the following vulnerability has been resolved: net/smc: carry oversized SMC-Rv2 LLC messages in th

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix use-after-free in smc_rx_pipe_buf_rele

In the Linux kernel, the following vulnerability has been resolved: net/smc: unregister the connection before draining

In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunnel d

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't touch shared zerocopy state in s

In the Linux kernel, the following vulnerability has been resolved: mfd: qnap-mcu: keep the reply buffer alive past a c

In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: clear the URB pointers on disconnect

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcxhr: initialize mutexes before requesting t

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate geometry fields from on-disk ca

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate kset key_num and intra-segment

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the persisted tail-position offset

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: clamp the tail kset read to the segment

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: fix use-after-free and invalid seg opera

In the Linux kernel, the following vulnerability has been resolved: i3c: Fix unlocked dereference of dev->desc in i3c_d

In the Linux kernel, the following vulnerability has been resolved: i3c: master: adi: initialize the lock before enabli

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix info leak and UAF in device unregi

In the Linux kernel, the following vulnerability has been resolved: i3c: renesas: Check that the transfer is valid befo

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq o

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Detach sync cmd buffer on interrupte

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: rtl8192du: check QoS TID before inde

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: bound the device EEPROM address

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel mlo_pm_work on stop mt7

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: bound the device EEPROM address

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate default EEPROM firmwar

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order virt

In the Linux kernel, the following vulnerability has been resolved: w1: ds28e17: reject an oversize length on an I2C bl

In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cad_pid" entry from pid_table[] t

In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smack_file_send_sigiotask()

AirSane is a SANE frontend, and a scanner server that supports Apple's AirScan protocol. Versions prior to 0.4.12 have a

An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camer

A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon i

Certain Woltlab products are affected by RCE via Cache Poisoning. WCF >= 6.1.0 until < 6.1.23 and WCF >= 6.2.0 until < 6