2026

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_ju

In the Linux kernel, the following vulnerability has been resolved: net/handshake: Drain pending requests at net namesp

In the Linux kernel, the following vulnerability has been resolved: net/handshake: hand off the pinned file reference t

In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_deco

In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after skb

In the Linux kernel, the following vulnerability has been resolved: tunnels: load network headers after skb_cow() in ip

In the Linux kernel, the following vulnerability has been resolved: net: hsr: fix potential OOB access in supervision f

In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: refresh tcphdr after skb_ensur

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable reconnect error path file lifeti

In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data_ready racing with k

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Fix use-after-free in path file creation

In the Linux kernel, the following vulnerability has been resolved: igc: set tx buffer type for SMD frames Sashiko poi

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: fix TSO segmentation explosion

In the Linux kernel, the following vulnerability has been resolved: net: tls: prevent chain-after-chain in plain text S

In the Linux kernel, the following vulnerability has been resolved: net: tls: fix off-by-one in sg_chain entry count fo

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Carry over frag counter Th

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port The S

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfs_read_ga

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_to_pagecache() to pause on su

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing barriers when accessing stream->

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix cancellation of a DIO and single read su

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative last_changeset_len ba

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix TOCTOU race for reported vlans

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before s

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast sourc

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: keep RBUF EEE/PM disabled Setting R

In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: refresh hdr pointer before ioam6_event(

In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_fin

In the Linux kernel, the following vulnerability has been resolved: ksmbd: close durable scavenger races against m_fp_l

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before re-

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential for tearing in ->remote_i_size

In the Linux kernel, the following vulnerability has been resolved: idpf: fix read_dev_clk_lock spinlock init in idpf_p

Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These versions use the built-

FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-based buffer overflow in crypto_rsa_common() (libfreerdp/crypt

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlemen

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Syncope. A

Improper Privilege Management vulnerability in Apache Syncope. When: * the all-Java user workflow adapter is configure

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements

The Piwigo installer in versions 16.3.0 and earlier accepts POST parameters for database configuration and writes them d

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap

Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. Net::DNS::RR::OPT::EX

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, a

ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization vulnerability t

The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the sub_4418CC function of the file /goform/Se

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EA38 function of the file /goform/Se

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EEE0 function of the file /goform/Se

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_424CE0 function of the file /goform/se