2026

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a time-of-

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper p

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-base

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap buf

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper h

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bo

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite arbitrary files due to improper

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a writ

Software installed and run as a non-privileged user may conduct improper GPU system calls to pass invalid log2 page size

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hard_header_len in non-ring

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_route: fix fastmap use-after-free on

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _run_comman

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the _command_co

UAC (Unix-like Artifacts Collector) versions prior to 3.3.0 contain a command injection vulnerability in the user substi

BabelDOC is a document translation tool. Prior to 0.6.3, BabelDOC's vendored PDF parser in babeldoc/pdfminer/cmapdb.py d

Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.4, hydra.utils.instantiate() resolves

better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-s

hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecti

In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpf_get_fsverity_digest() dynptr assu

In the Linux kernel, the following vulnerability has been resolved: sched/psi: Shut down rtpoll_timer in psi_cgroup_fre

In the Linux kernel, the following vulnerability has been resolved: fscrypt: use the mount idmap for the owner check in

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Use current_context for safe per-CPU b

In the Linux kernel, the following vulnerability has been resolved: eventfs: Use children field for rcu head and add me

In the Linux kernel, the following vulnerability has been resolved: eventfs: Fix use-after-free in eventfs_remove_rec()

In the Linux kernel, the following vulnerability has been resolved: tipc: read le->link under the node lock in tipc_nod

In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext sk_msg ring unpus

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: avoid refilling the RX queue after te

In the Linux kernel, the following vulnerability has been resolved: net: devmem: prevent net-iov / page mixing We shou

In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent in6_dev_get() from resurrecting inet6

In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix huge_zero_pfn race Patch serie

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when resiz

In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit_curs

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix group leader use-after-free after si

In the Linux kernel, the following vulnerability has been resolved: ALSA: FCP: fix OOB write in fcp_meter_ctl_get() fc

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset snd

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: take fl->lock when moving mmaps on i

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Remove buffer from list prior to unm

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: validate monitor transmit frame

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: cancel RS485 hrtimers after fre

In the Linux kernel, the following vulnerability has been resolved: ipv4: fix use-after-free in fib_nhc_update_mtu() f

In the Linux kernel, the following vulnerability has been resolved: netfilter: ebt_nflog: pin the NFLOG backend nf_log

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix netdev use-after-free in beacon work

In the Linux kernel, the following vulnerability has been resolved: net/sched: reject overly deep qdisc hierarchies De

In the Linux kernel, the following vulnerability has been resolved: packet: synchronize pressure clearing with ring rec

In the Linux kernel, the following vulnerability has been resolved: net/packet: reset the MAC header on the packet-sock

In the Linux kernel, the following vulnerability has been resolved: packet: use consistent hard_header_len in TX_RING s

In the Linux kernel, the following vulnerability has been resolved: ipvs: stop estimator after disabled calc phase IPV

In the Linux kernel, the following vulnerability has been resolved: mm: fix incorrect flush address in direct page tabl

In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbd_keycode with tty