2026

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix potential memory leaks in ipc_

In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix memory block reference leak

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference lea

In the Linux kernel, the following vulnerability has been resolved: efi: Allocate runtime workqueue before ACPI init S

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: call missing mem_cgroup_ite

In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update fa

libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.1

libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and in

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.backup()` recu

In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no

In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in team_xmi

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if

In the Linux kernel, the following vulnerability has been resolved: i2c: i801: fix hardware state machine corruption in

In the Linux kernel, the following vulnerability has been resolved: net/sched: dualpi2: fix GSO backlog accounting Whe

Shamefile is a linter for undocumented linter warnings. Prior to version 0.1.7, a path traversal vulnerability in `shame

PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praiso

PraisonAI is a multi-agent teams system. Prior to version 4.6.40 of PraisonAI, corresponding to version 1.6.40 of praiso

Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without

The NXP LPUART serial driver (drivers/serial/uart_mcux_lpuart.c), when CONFIG_UART_USE_RUNTIME_CONFIGURE is enabled, cal

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version th

libheif is a HEIF and AVIF file format decoder and encoder. Versions prior to 1.22.0 crashes in the public C API `heif_i

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that ar

Vulnerability in the PeopleSoft Enterprise FIN Pay/Bill Management product of Oracle PeopleSoft (component: Paybill Mana

Vulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft (component: FM Need Analysis Ca

Vulnerability in Oracle APEX (component: Installation). Supported versions that are affected are 24.1, 24.2 and 26.1.

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is

A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the

In OpenStack Ironic Python Agent through 11.5.0, a malicious bootc container, when deployed using ironic-python-agent, m

A flaw was found in Red Hat Quay's notification webhook feature. The Slack and generic webhook notification handlers acc

A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer set

A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root

A flaw was found in the Keycloak Admin REST API, which is used to manage security realms and clients. The issue occurs w

In the Linux kernel, the following vulnerability has been resolved: srcu: Don't queue workqueue handlers to never-onlin

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't dereference a pointer bef

In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Add lock protection to lm90_alert Sa

In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preempt_disable|enab

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send

In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode->secondary to NULL in f

In the Linux kernel, the following vulnerability has been resolved: ACPI: driver: Check ACPI_COMPANION() against NULL d

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is di

In the Linux kernel, the following vulnerability has been resolved: regulator: tps65219: fix irq_data.rdev not being as

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't dump registers past the mapped r

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: hold opts->lock across XU walks i

In the Linux kernel, the following vulnerability has been resolved: tty: serial: pch_uart: add check for dma_alloc_cohe

In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock

In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix deadlock on shared proxy's parent

In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix control request setup p