2026

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix UAF in selftest IOPF reporting IOMMUF

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attri

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate level in perf mask ioc

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate socket ID in clos_asso

In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: cancel card-detect work on remove

In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: stop card-detect handling on probe

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Add a NULL check for sst_inst[]

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate logical CPU id and clo

In the Linux kernel, the following vulnerability has been resolved: platform/x86: int1092: Fix potential memory leak in

In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix sentinel write

Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE before version

Concrete CMS before 9.5.3 evaluated the authorization check for an Express entry submission against the entity of the po

Concrete CMS below 9.5.3 does not perform an object-level authorization check when a Page Type was updated. The Types::s

Concrete CMS versions 9.5.0 through 9.5.2 are vulnerable to Open Redirect via the rcURL parameter. An attacker can craft

Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery in the Move Multiple Groups feature. The dashboard

Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog. The custom_slot save_templ

In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate si

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Bound the EC-reported s

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Propagate SMU errors and vali

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks wh

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read in sk_s

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read on empt

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in h

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: pass validated element co

In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: honor task_work cancellation io_w

In the Linux kernel, the following vulnerability has been resolved: io_uring/query: cap user size passed to copy_struct

In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix use after free in icc_get() and o

In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmb_wri

In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failur

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed

In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error I

In the Linux kernel, the following vulnerability has been resolved: net/iucv: filter frames in afiucv_hs_rcv() by ingre

In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdp_convert_zc_to_

In the Linux kernel, the following vulnerability has been resolved: slip: fix use-after-free in sl_sync() slip_devs[]

In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() us

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiod_set_value_cansleep for

In the Linux kernel, the following vulnerability has been resolved: net: bnxt: ring the doorbell when SW USO exits earl

In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix stalled modem TX queue after runtime

In the Linux kernel, the following vulnerability has been resolved: net: l2tp: do not propagate multicast notification

In the Linux kernel, the following vulnerability has been resolved: net: mctp: hold a reference to the route device in

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix flow mask use-after-free on f

In the Linux kernel, the following vulnerability has been resolved: net: phylink: correctly validate returned PCS in ph

In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock

In the Linux kernel, the following vulnerability has been resolved: net: ravb: serialize PTP clock teardown ravb_ptp_i

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Release the Rx HopID that was han

In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Mark the connection down when bri

In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Fail TX enqueue when the QP lin

In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Reject oversized TX buffers nt

In the Linux kernel, the following vulnerability has been resolved: net/smc: bound the peer rkey counts in SMC-Rv2 LLC

In the Linux kernel, the following vulnerability has been resolved: net/smc: carry oversized SMC-Rv2 LLC messages in th