2026

In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: fix preempt count underflow in fsl_em

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In

In the Linux kernel, the following vulnerability has been resolved: mfd: cs42l43: Sanity check firmware size Currently

In the Linux kernel, the following vulnerability has been resolved: coresight: ete: Always save state on power down Sy

In the Linux kernel, the following vulnerability has been resolved: char: tlclk: fix use-after-free in tlclk_cleanup()

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NU

In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/MSI: Unmap MSI-X region on error" This

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in aa_replace_profiles

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix foe_check_time allocation size fo

In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARN_ON() on -ENOMEM in c

In the Linux kernel, the following vulnerability has been resolved: net: dst_metadata: fix false-positive memcpy overfl

In the Linux kernel, the following vulnerability has been resolved: net: emac: Fix NULL pointer dereference in emac_pro

In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path Durin

In the Linux kernel, the following vulnerability has been resolved: net: lwtunnel: Drop skb metadata before LWT encapsu

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor_idle: Mark LPI enter functions as _

In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix potential divide-by-zero when num_v

In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe->len_list[]

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix iommu domain lifetime race durin

In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARN_ON_ONCE from parse_btf_

In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: Hold notifier_lock for write on inj

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in p

In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hid_get_report for numbe

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off-by

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel address leakage A use

In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only after

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: acquire ARP hw source only after s

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: ensure accessible eth_hdr proto fi

In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in decompress_lznt d

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - only expose sysfs attributes on co

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The dr

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC

In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_atk0110) Check package count before ac

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range pa

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix listxattr handling of corrupted xattr ent

In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before

The User Registration & Membership WordPress plugin before 5.2.6 does not perform a capability check when saving its lo

The User Registration & Membership WordPress plugin before 5.2.5 does not verify that the account whose pending email c

The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to buil

The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not check authorisation when returning question ba

SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of th

SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of th

The WCFM Marketplace WordPress plugin before 3.8.2 does not correctly verify that the person requesting a refund owns t

The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including,

SOY Calendar contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of th

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Script

The wpForo Forum plugin for WordPress is vulnerable to SQL Injection via the 'referer' parameter in all versions up to,

The ElementsKit Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 's' parameter of the Advan