2026

IBM i 7.6, 7.5, and 7.4 could allow a remote authenticated attacker to modify certain system messages due to improper au

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization o

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to the use

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 1

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bound

IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 1

IBM Langflow OSS 1.0.0 through 1.10.2 could allow an authenticated attacker to traverse directories on the system. An at

IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log

IBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure attack.

smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse() can enter an infinite loop w

Cross-Site Request Forgery (CSRF) in the OrderConfirmController at GET /order/confirm/{order_number} in Roskus Prospero

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_AT

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix OOB in free_rd_atomic_resources() fr

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix usage of page_frag_cache nvme uses p

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: bail out of setup if the controller is i

In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend After

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring re

In the Linux kernel, the following vulnerability has been resolved: fuse: publish io-uring queues with release semantic

In the Linux kernel, the following vulnerability has been resolved: fuse: wait for FR_FINISHED on abort_on_kill to prev

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on setattr writeback

In the Linux kernel, the following vulnerability has been resolved: fuse: fix invalidate lock leak on open O_TRUNC DAX

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: keep port count until LUN teard

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Allocate full pages for {DE,EN}CRYPT ops

In the Linux kernel, the following vulnerability has been resolved: tls: device: fix out-of-bounds write in tls_append_

In the Linux kernel, the following vulnerability has been resolved: gtp: serialize PDP context updates PDP contexts ca

In the Linux kernel, the following vulnerability has been resolved: tcp: fix AO info use-after-free in tcp_ao_connect_i

In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of current_key on re

In the Linux kernel, the following vulnerability has been resolved: xfrm: espintcp: fix UAF during close ZDI reported

In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCP_MIN_MSS tcp_select_

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress devic

In the Linux kernel, the following vulnerability has been resolved: xfrm: avoid lock inversion in nat keepalive work n

In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left A

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix xfrm_state_construct() auth-trunc leak a

In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: fix use-after-free of a master

In the Linux kernel, the following vulnerability has been resolved: net/packet: defer vmalloc TX_RING free until skbs f

In the Linux kernel, the following vulnerability has been resolved: ipv6: seg6: clear IPv4 control block on IPIP decaps

In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject unrepresentable multicast TVLV o

In the Linux kernel, the following vulnerability has been resolved: vxlan: keep the last remote linked during FDB flush

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't queue packet path objec

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - bound the akcipher result length

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Remove crypto_rng interface qco

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce - Remove crypto_rng interface Sin

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ss - Remove crypto_rng interface Sin

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix CCM AAD buffer underallocation T

In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length acc

In the Linux kernel, the following vulnerability has been resolved: usb: core: Add lock to usb_wakeup_notification() A

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in snd_usbmidi_novat

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resu

In the Linux kernel, the following vulnerability has been resolved: USB: serial: option: fix slab OOB read in interrupt