2026

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister debugfs entries on tea

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: pass correct argument to functi

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Recover HW before retire hung submit Duri

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix xmit_frame/xmit_buf leaks o

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_refcount field as unique BPF_REFCOUN

In the Linux kernel, the following vulnerability has been resolved: ext4: fix transaction overflow during writeback Co

In the Linux kernel, the following vulnerability has been resolved: ACPI: platform: Use acpi_bus_get_primary_device()

In the Linux kernel, the following vulnerability has been resolved: net: hsr: free learned nodes on device setup failur

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: rewind offset when NAT shrin

Improper Neutralization of Special Elements in Output Used by a Downstream Component in the colour control escape code h

Incorrect access control in the BlogPage.get_entries() component of APSL puput v1.2.1 through v2.2.0 allows unauthentica

A reflected cross-site scripting (XSS) vulnerability in the EntryAbstract.save() component of APSL puput v1.2.1 through

Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driv

Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via t

An issue in Wellav Technologies Co., Ltd Wellav WES Emergency Broadcast Terminal WES100, WES270, WES280, and WES290 befo

An issue in the VMware datastore driver of OpenStack glance_store. When an authenticated attacker provides a maliciously

A Server-Side Request Forgery (SSRF) vulnerability exists in the Image API (v2) of OpenStack Glance. When the show_multi

D-Link DAP-2610 up to 2.06B08r099 contains an authenticated command injection vulnerability within the web interface at

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records

In the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored frame instead of resett

In the Linux kernel, the following vulnerability has been resolved: EDAC/device_sysfs: Use kstrtouint() for poll_msec t

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Address potential out-of-bounds read in

In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix -EIO cleanup order in queue_rq On -

In the Linux kernel, the following vulnerability has been resolved: nvme: fix racy access to FDP placement id array nv

In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix queue leak when connect backlog is

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOLATION on speculative po

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix BPF_F_CPU validation for sparse CPU IDs B

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix percpu map update indexing with sparse CPU

In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate GUD_ROTATION_0 is present in supp

In the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on kthread_run failure. Since _

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove __counted_by from struct amdx

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: put the chained BO when its mapping

In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Don't read the U65 rounding mode as

In the Linux kernel, the following vulnerability has been resolved: drm/cirrus-qemu: Validate BAR0 size during probe T

In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure up

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local leak in write_mft_record_noloc

In the Linux kernel, the following vulnerability has been resolved: ntfs: only count successfully cleared runs when fre

In the Linux kernel, the following vulnerability has been resolved: ntfs: do not mark the volume clean in sync_fs when

In the Linux kernel, the following vulnerability has been resolved: ntfs: treat any nonzero dio zero-range return as an

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound $AttrDef table walk to the loaded table

In the Linux kernel, the following vulnerability has been resolved: ntfs: reject invalid sectors_per_cluster in the boo

In the Linux kernel, the following vulnerability has been resolved: bpf: check_cond_jmp_op(): properly infer if registe

In the Linux kernel, the following vulnerability has been resolved: ntfs: leave HasEA flag untouched on setxattr failur

In the Linux kernel, the following vulnerability has been resolved: bpf: don't downgrade half-dead scalar zero spills t

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix dma mapping leak in stmmac_tso_xmi

In the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START Th

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix NULL pointer dereference in mpi3m