2026

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: validate inner IPv4 header length in I

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential deadlock in cpu hotplug with

In the Linux kernel, the following vulnerability has been resolved: tracing: Drain deferred trigger frees if kthread cr

In the Linux kernel, the following vulnerability has been resolved: s390/entry: Scrub r12 register on kernel entry Bef

In the Linux kernel, the following vulnerability has been resolved: s390/syscalls: Add spectre boundary for syscall dis

In the Linux kernel, the following vulnerability has been resolved: spi: use generic driver_override infrastructure Wh

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Harden depth calculation functions An

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Initialize free_qp completion before us

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use netlink policy range chec

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: skip expectations i

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: clamp SCO altsetting table indice

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()

In the Linux kernel, the following vulnerability has been resolved: udp: Fix wildcard bind conflict check when using ha

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix circular locking dependency in nci_cl

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Validate PDU length before readin

In the Linux kernel, the following vulnerability has been resolved: erofs: set fileio bio failed in short read case Fo

In the Linux kernel, the following vulnerability has been resolved: af_key: validate families in pfkey_send_migrate()

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix skb_put() panic on non-linear skb

In the Linux kernel, the following vulnerability has been resolved: esp: fix skb leak with espintcp and async crypto W

In the Linux kernel, the following vulnerability has been resolved: btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol

In the Linux kernel, the following vulnerability has been resolved: HID: apple: avoid memory leak in apple_report_fixup

In the Linux kernel, the following vulnerability has been resolved: module: Fix kernel panic when a symbol st_shndx is

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: avoid memory leak in magicmouse_re

In the Linux kernel, the following vulnerability has been resolved: HID: asus: avoid memory leak in asus_report_fixup()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exception exit lock checking for subprogs

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix leakage in __construct_region() Fa

A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that

The recursive mode (-R) of the chmod utility in uutils coreutils incorrectly handles exit codes when processing multiple

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit co

The sort utility in uutils coreutils is vulnerable to a process panic when using the --files0-from option with inputs co

An argument parsing error in the kill utility of uutils coreutils incorrectly interprets kill -1 as a request to send th

A logic error in the cut utility of uutils coreutils causes the program to incorrectly interpret the literal two-byte st

Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, the Sq

IBM Security Verify Directory (Container) 10.0.0 through 10.0.0.3 IBM Security Verify Directory could be vulnerable to m

IBM Guardium Data Protection 12.1 is vulnerable to stored cross-site scripting. This vulnerability allows an administrat

In the Linux kernel, the following vulnerability has been resolved: ipv4: nexthop: allocate skb dynamically in rtm_get_

In the Linux kernel, the following vulnerability has been resolved: smb: server: make use of smbdirect_socket.send_io.b

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Check set_default_submission() before

In the Linux kernel, the following vulnerability has been resolved: x86/platform/uv: Handle deconfigured sockets When

In the Linux kernel, the following vulnerability has been resolved: crash_dump: don't log dm-crypt key bytes in read_ke

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix NULL dereference on notify

In the Linux kernel, the following vulnerability has been resolved: NFC: nxp-nci: allow GPIOs to sleep Allow the firmw

In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix NULL deref in bond_debug_rlb_hash

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix missing runtime PM reference in ccs_mod

In the Linux kernel, the following vulnerability has been resolved: i2c: cp2615: fix serial string NULL-deref at probe

In the Linux kernel, the following vulnerability has been resolved: pmdomain: bcm: bcm2835-power: Increase ASB control

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix static_branch_dec() underflow f

In the Linux kernel, the following vulnerability has been resolved: futex: Clear stale exiting pointer in futex_lock_pi