2026

The HTTP Headers plugin for WordPress is vulnerable to CRLF Injection in all versions up to, and including, 1.19.2. This

A flaw was found in nano. A local user could exploit a format string vulnerability in the `statusline()` function. By cr

A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix leak of kobject name for sub-group space

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix NULL pointer dereference in netfs_unbuff

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix kernel BUG in netfs_limit_iter() for ITE

In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx: xdma: Fix regmap init error hand

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix leaking event log memory Duri

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix memory leak when a wq is reset

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix crash when the event log is di

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid use of half-online-committed c

In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUG_ON with proper error handling in

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: check contexts->nr in repeat_call_f

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: check contexts->nr before accessing

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix param_ctx leak on damon_sysfs_n

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check if ext_caps is valid in BL s

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix drm_edid leak in amdgpu_dm [W

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent immediate PASID reuse case PAS

In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: validate inner IPv4 header length in I

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix potential deadlock in cpu hotplug with

In the Linux kernel, the following vulnerability has been resolved: tracing: Drain deferred trigger frees if kthread cr

In the Linux kernel, the following vulnerability has been resolved: s390/entry: Scrub r12 register on kernel entry Bef

In the Linux kernel, the following vulnerability has been resolved: s390/syscalls: Add spectre boundary for syscall dis

In the Linux kernel, the following vulnerability has been resolved: spi: use generic driver_override infrastructure Wh

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Harden depth calculation functions An

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Initialize free_qp completion before us

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use netlink policy range chec

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: skip expectations i

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: clamp SCO altsetting table indice

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()

In the Linux kernel, the following vulnerability has been resolved: udp: Fix wildcard bind conflict check when using ha

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix circular locking dependency in nci_cl

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Validate PDU length before readin

In the Linux kernel, the following vulnerability has been resolved: erofs: set fileio bio failed in short read case Fo

In the Linux kernel, the following vulnerability has been resolved: af_key: validate families in pfkey_send_migrate()

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix skb_put() panic on non-linear skb

In the Linux kernel, the following vulnerability has been resolved: esp: fix skb leak with espintcp and async crypto W

In the Linux kernel, the following vulnerability has been resolved: btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol

In the Linux kernel, the following vulnerability has been resolved: HID: apple: avoid memory leak in apple_report_fixup

In the Linux kernel, the following vulnerability has been resolved: module: Fix kernel panic when a symbol st_shndx is

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: avoid memory leak in magicmouse_re

In the Linux kernel, the following vulnerability has been resolved: HID: asus: avoid memory leak in asus_report_fixup()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exception exit lock checking for subprogs

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix leakage in __construct_region() Fa

A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that

The recursive mode (-R) of the chmod utility in uutils coreutils incorrectly handles exit codes when processing multiple

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit co