2026

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix NULL-deref of opinfo->conn in oplock/lea

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix sleep-inside-lock in __smc_setsockopt(

Vim is an open source, command line text editor. Prior to 9.2.0662, the dump_prefixes() function in src/spell.c walks a

Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt~04

Halo is an open source website building tool. Prior to 2.24.3, a path traversal vulnerability in the backup download end

jq is a command-line JSON processor. Prior to 1.8.2, comparing two sufficiently deeply nested arrays with the == operato

jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvp_string_append has a chance of integer/multiple

When used to deliver a signal to a specific thread, thr_kill2(2) called p_cansignal() to determine whether the operation

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.1, the mise HTTP backend builds its inst

In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Check whether the config array is allocat

In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktrail_lvds: fix hang on init failure

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix NULL group->domain dereference in pci_de

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Push kjump return address even for non-k

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bounds-check devid in __rlookup_amd_iomm

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wrap DCN32 phantom-plane allocatio

In the Linux kernel, the following vulnerability has been resolved: audit: fix incorrect inheritable capability in CAPS

In the Linux kernel, the following vulnerability has been resolved: arm64: Reserve an extra page for early kernel mappi

In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL pointer dereference in ice_reset_all_

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/conexant: Fix missing error check for jac

In the Linux kernel, the following vulnerability has been resolved: net: phonet: do not BUG_ON() in pn_socket_autobind(

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG There wer

In the Linux kernel, the following vulnerability has been resolved: mailbox: add sanity check for channel array Fail g

In the Linux kernel, the following vulnerability has been resolved: net: mana: Guard mana_remove against double invocat

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of ai

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of ai

In the Linux kernel, the following vulnerability has been resolved: reset: amlogic: t7: Fix null reset ops Fix missing

In the Linux kernel, the following vulnerability has been resolved: crypto: eip93 - fix hmac setkey algo selection eip

In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Resolve soft lockup issue when opening /d

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ps883x: Fix Oops at unbind When trying

In the Linux kernel, the following vulnerability has been resolved: tty: hvc_iucv: fix off-by-one in number of supporte

In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fully validate 'pinmux' p

In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Free allocated workqueue a

In the Linux kernel, the following vulnerability has been resolved: soc/tegra: cbb: Fix cross-fabric target timeout loo

In the Linux kernel, the following vulnerability has been resolved: fuse: fix uninit-value in fuse_dentry_revalidate()

In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Remove overflows on the invalidation p

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid NULL dereference in dc_dmub_

In the Linux kernel, the following vulnerability has been resolved: padata: Put CPU offline callback in ONLINE section

In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: Fix NULL deref in ras_core_get_utc_sec

In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: Fix NULL deref in ras_core_ras_interru

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: Place upper limit on station AI

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: prevent NULL pointer dereferenc

In the Linux kernel, the following vulnerability has been resolved: blk-wbt: remove WARN_ON_ONCE from wbt_init_enable_d

In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark

In the Linux kernel, the following vulnerability has been resolved: io_uring/napi: cap busy_poll_to 10 msec Currently

In the Linux kernel, the following vulnerability has been resolved: net: dsa: remove redundant netdev_lock_ops() from c

In the Linux kernel, the following vulnerability has been resolved: net: mana: Use pci_name() for debugfs directory nam

Lansweeper lsrunase 2.0 and lsencrypt 2.0 use RC4 encryption with a hardcoded 142-byte static key array to encrypt crede

A stack overflow in the AP4_StsdAtom::AP4_StsdAtom component of axiomatic-systems Bento4 before v1.8.9allows attackers t

A stack overflow in the AP4_Array<AP4_TrunAtom::Entry>::EnsureCapacity component of axiomatic-systems Bento4 before v1.8