2026

A server-ide request forgery (SSRF) vulnerability in webhook in Synology Chat Server before 2.4.5-22148 allows remote au

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tangible Loops & L

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: prevent read-only mappings from becom

In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: prevent OOB when too many dynamic

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate individual TWT params befo

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: ensure no dangling hcon references

In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set for iomap_split_ioend

In the Linux kernel, the following vulnerability has been resolved: mm: mglru: fix stale batch updates after memcg repa

In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in

In the Linux kernel, the following vulnerability has been resolved: sctp: validate Adaptation Indication parameter leng

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: wake linked drain waiters on unlink snd

In the Linux kernel, the following vulnerability has been resolved: igc: remove napi_synchronize() in igc_down() When

In the Linux kernel, the following vulnerability has been resolved: ipvs: do not propagate one-packet flag to synced co

In the Linux kernel, the following vulnerability has been resolved: io_uring: preserve task restrictions across exec P

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before

In the Linux kernel, the following vulnerability has been resolved: power: supply: max17040: handle missing status supp

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix undersized format-check buffer fmt_

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix wrong domain value verification wi

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix missing mem scrub at clear key imp

In the Linux kernel, the following vulnerability has been resolved: can: j1939: transport: j1939_session_fresh_new(): i

In the Linux kernel, the following vulnerability has been resolved: can: softing: fw_parse(): validate firmware record

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check if dml21_add_phantom_plane()

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging Th

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authorization check in KFD_

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: fix guest_memory_dirty bitfield clobber

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: enforce cursor size limits for MOB curs

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external BO copy bounds for bo

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Avoid double-deactivate of IRQs i

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix double free of wq, engine, and

In the Linux kernel, the following vulnerability has been resolved: erofs: ensure valid f_path for page cache sharing

In the Linux kernel, the following vulnerability has been resolved: hwmon: (ltc4282) Fix reading the minimum alarm volt

In the Linux kernel, the following vulnerability has been resolved: hwmon: (sht3x) Fix unaligned accesses Sashiko repo

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_

In the Linux kernel, the following vulnerability has been resolved: idpf: bound interrupt-vector register fill to the a

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_acl/l

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iblock: Fix wrong PR ops NULL check f

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Initialize hba->rpmbs list in ufsh

In the Linux kernel, the following vulnerability has been resolved: tracing/mmiotrace: Add NULL check for mmio_trace_ar

In the Linux kernel, the following vulnerability has been resolved: riscv: drop __init from vec_check_unaligned_access_

In the Linux kernel, the following vulnerability has been resolved: iommufd/viommu: Release the igroup lock on the vdev

In the Linux kernel, the following vulnerability has been resolved: mm: migrate_device: fix pte_pfn/pte_dirty called on

In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read __page_2 for order-1 folios in

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix NULL dereference on AIBV alloca

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: give the socket its own sco_conn re

In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmap_start_

In the Linux kernel, the following vulnerability has been resolved: vxlan: re-fetch eth header after route_shortcircuit

In the Linux kernel, the following vulnerability has been resolved: i2c: amd-mp2: Unregister callback on adapter add fa

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix potential NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Fix slave registration race and error han

In the Linux kernel, the following vulnerability has been resolved: driver core: use READ_ONCE() for dev->driver in dev