2026

A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer set

A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root

A flaw was found in the Keycloak Admin REST API, which is used to manage security realms and clients. The issue occurs w

In the Linux kernel, the following vulnerability has been resolved: srcu: Don't queue workqueue handlers to never-onlin

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't dereference a pointer bef

In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Add lock protection to lm90_alert Sa

In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preempt_disable|enab

In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send

In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode->secondary to NULL in f

In the Linux kernel, the following vulnerability has been resolved: ACPI: driver: Check ACPI_COMPANION() against NULL d

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is di

In the Linux kernel, the following vulnerability has been resolved: regulator: tps65219: fix irq_data.rdev not being as

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't dump registers past the mapped r

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: hold opts->lock across XU walks i

In the Linux kernel, the following vulnerability has been resolved: tty: serial: pch_uart: add check for dma_alloc_cohe

In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock

In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix deadlock on shared proxy's parent

In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix control request setup p

In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: teardown bugs and resource leaks A

In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: set mem->altmap after successf

In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: report dying CPU to RCU in stop_this_cpu

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Report dying CPU to RCU in stop_this_cpu

In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Prevent initial console buffer from land

In the Linux kernel, the following vulnerability has been resolved: kernel/fork: clear PF_BLOCK_TS in copy_process() P

In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid pci_iounmap() with offset when PEER

In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around quota ids in dqiterate LOLL

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: remove request-less entries from ent_w_

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: end fuse_req on io-uring cancel task wo

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix moving cancelled entry to ent_in_us

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix EFAULT clobber in fuse_uring_commit

In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune notification count wrap F

In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - prevent division by zero and arit

In the Linux kernel, the following vulnerability has been resolved: i2c: imx-lpi2c: mark I2C adapter when hardware is p

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPU

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Avoid dereferencing NULL VNCR pseud

In the Linux kernel, the following vulnerability has been resolved: iommufd: Set upper bounds on cache invalidation ent

In the Linux kernel, the following vulnerability has been resolved: iommufd: Break the loop on failure in iommufd_fault

In the Linux kernel, the following vulnerability has been resolved: iommufd: Set veventq_depth upper bound iommufd_vev

In the Linux kernel, the following vulnerability has been resolved: iommufd: Move vevent memory allocation outside spin

In the Linux kernel, the following vulnerability has been resolved: mm: do file ownership checks with the proper mount

In the Linux kernel, the following vulnerability has been resolved: mm: page_ext: add count limit to page_ext_iter_next

In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of module_ex

Kimi Code (@moonshot-ai/kimi-code) before 0.27.0 implements FetchURL SSRF hardening as a static hostname and IP-literal

Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows att

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized c

HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an i

A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memor

An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.7.

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Ta