2026

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix dma_fence refcount leak on error in

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_sta

In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-rsu: Fix NULL deref on rsu_send

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add bounds check for firmware runtime m

In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure: fix hugetlb_lock AA deadlock in

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: reject BR/EDR signaling packets o

In the Linux kernel, the following vulnerability has been resolved: tee: shm: fix shm leak in register_shm_helper() re

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_meta_bridge: fix stale stack leak vi

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: fix krealloc() memory leak Don't just ove

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix a potential NPD in cleanup_prefix_route()

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_exthdr: fix register tracking for F_

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: avoid leaking percpu counter p

In the Linux kernel, the following vulnerability has been resolved: netfilter: revalidate bridge ports ebt_redirect_tg

In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: fix resource freeing order Commit a60fc3

In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: fix generic IRQ chip leak on remove

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix possible kfree_skb of ERR_PTR

In the Linux kernel, the following vulnerability has been resolved: net: phy: don't try to setup PHY-driven SFP cages w

In the Linux kernel, the following vulnerability has been resolved: tcp: restrict SO_ATTACH_FILTER to priv users This

In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: fix NULL pointer dereference in suspen

In the Linux kernel, the following vulnerability has been resolved: netlabel: validate unlabeled address and mask attri

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: dummy: fix UMP event stack overread The

In the Linux kernel, the following vulnerability has been resolved: rseq: Fix using an uninitialized stack variable in

In the Linux kernel, the following vulnerability has been resolved: net/802/mrp: fix vector attribute parsing in mrp_pd

In the Linux kernel, the following vulnerability has been resolved: ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options T

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not releasing hdev reference on

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix memory leak in error path of hci_all

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: enforce HE/EHT cap/oper consistency

In the Linux kernel, the following vulnerability has been resolved: wifi: fix leak if split 6 GHz scanning fails rdev-

In the Linux kernel, the following vulnerability has been resolved: devlink: Release nested relation on devlink free d

In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix off-by-one in multicast context addres

In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: add mutex to guard hook refere

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix NULL-deref of opinfo->conn in oplock/lea

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix sleep-inside-lock in __smc_setsockopt(

Vim is an open source, command line text editor. Prior to 9.2.0662, the dump_prefixes() function in src/spell.c walks a

Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt~04

Halo is an open source website building tool. Prior to 2.24.3, a path traversal vulnerability in the backup download end

jq is a command-line JSON processor. Prior to 1.8.2, comparing two sufficiently deeply nested arrays with the == operato

jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvp_string_append has a chance of integer/multiple

When used to deliver a signal to a specific thread, thr_kill2(2) called p_cansignal() to determine whether the operation

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.1, the mise HTTP backend builds its inst

In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Check whether the config array is allocat

In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktrail_lvds: fix hang on init failure

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix NULL group->domain dereference in pci_de

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Push kjump return address even for non-k

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bounds-check devid in __rlookup_amd_iomm

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wrap DCN32 phantom-plane allocatio

In the Linux kernel, the following vulnerability has been resolved: audit: fix incorrect inheritable capability in CAPS

In the Linux kernel, the following vulnerability has been resolved: arm64: Reserve an extra page for early kernel mappi

In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL pointer dereference in ice_reset_all_