2026

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: validate minimum block_len in n

In the Linux kernel, the following vulnerability has been resolved: fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCR

In the Linux kernel, the following vulnerability has been resolved: ALSA: fireworks: bound device-supplied status befor

In the Linux kernel, the following vulnerability has been resolved: bnge: return after auxiliary_device_uninit() in err

In the Linux kernel, the following vulnerability has been resolved: net: usb: cdc-phonet: fix skb frags[] overflow in r

In the Linux kernel, the following vulnerability has been resolved: HID: core: clamp report_size in s32ton() to avoid u

In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix NULL pointer dereference in alps_raw

In the Linux kernel, the following vulnerability has been resolved: x86/CPU: Fix FPDSS on Zen1 Zen1's hardware divider

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix leak of rxgk context in rxgk_verify_resp

In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix reference count leak in rxrpc_server_key

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix key reference count leak from call->key

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call removal to use RCU safe deletion F

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix key parsing memleak In rxrpc_preparse_x

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix page pool leak in error paths la

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix page_pool error handling in lan96

In the Linux kernel, the following vulnerability has been resolved: idpf: fix PREEMPT_RT raw/bh spinlock nesting for as

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix NULL-deref on disconnect Make sur

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: dealloc repeat_call_control if damo

In the Linux kernel, the following vulnerability has been resolved: mm/vma: fix memory leak in __mmap_region() commit

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock

In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: allocate rx skb before consuming bytes

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: Fix dma_free_coherent() size dma_a

In the Linux kernel, the following vulnerability has been resolved: xfrm: clear trailing padding in build_polexpire()

In the Linux kernel, the following vulnerability has been resolved: net: rfkill: prevent unlimited numbers of rfkill ev

In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_report() struct

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00usb: fix devres lifetime USB drivers b

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - limit RX SG extraction by receive

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_multiport: validate range encoding in

In the Linux kernel, the following vulnerability has been resolved: net: sched: act_csum: validate nested VLAN headers

RoboImport 1.2.0.72 contains a denial of service vulnerability that allows local attackers to crash the application by s

Infiltrator Network Security Scanner 4.6 contains a buffer overflow vulnerability that allows local attackers to crash t

iCash 7.6.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying a

Fathom 2.4 contains a buffer overflow vulnerability in the Authorization Code field that allows local attackers to crash

Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application b

P10 Central Management Software 1.4.13 contains a buffer overflow vulnerability in the login password field that allows

Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "

Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread

A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to c

Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing

In the Linux kernel, the following vulnerability has been resolved: gpio: omap: do not register driver in probe() Comm

In the Linux kernel, the following vulnerability has been resolved: EDAC/mc: Fix error path ordering in edac_mc_alloc()

In the Linux kernel, the following vulnerability has been resolved: igb: remove napi_synchronize() in igb_down() When

OpenClaw before 2026.3.31 contains a local roots self-whitelisting vulnerability in appendLocalMediaParentRoots that all

A vulnerability in GRASSMARLIN v3.2.1 allows crafted session data to trigger improper handling of XML input, which may

Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local att

HTTP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

UDS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service

Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service