2026

SENAITE.CORE is the core framework for the SENAITE laboratory information management system. From 2.0.0 to 2.6.0, the SE

Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header

Nagios Core before 4.5.12 contains a cross-site request forgery vulnerability in cmd.cgi where the CSRF protection mecha

In the Linux kernel, the following vulnerability has been resolved: block: stop the timeout timer when releasing a neve

In the Linux kernel, the following vulnerability has been resolved: mptcp: reclaim forward-allocated memory on RX path

In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid combining some incoming suboptions So

In the Linux kernel, the following vulnerability has been resolved: mptcp: options: reset DSS fields in case of unexpec

In the Linux kernel, the following vulnerability has been resolved: mptcp: fastopen: only mark MPTFO subflows with SYN

In the Linux kernel, the following vulnerability has been resolved: s390/qeth: validate user buffer length in SNMP and

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-tx-macro: Fix enum kcontrol acc

In the Linux kernel, the following vulnerability has been resolved: drm/shmem_helper: Check VMA boundaries for PMD mapp

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger

In the Linux kernel, the following vulnerability has been resolved: fbdev: bound mode sysfs output to the sysfs buffer

In the Linux kernel, the following vulnerability has been resolved: fbdev: clear fb_info->mode before deleting a videom

In the Linux kernel, the following vulnerability has been resolved: fbdev: core: Fix pointer desynchronization in fb_io

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: skip zero-sized firmware sections pan

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: reject oversized IBs with per-ring pack

In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - validate custom data from us

In the Linux kernel, the following vulnerability has been resolved: Input: focaltech - fix array out-of-bounds in focal

In the Linux kernel, the following vulnerability has been resolved: Input: iforce - validate input packet lengths ifor

In the Linux kernel, the following vulnerability has been resolved: Input: byd - synchronize timer deletion before free

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: papr-phy-attest - validate cmd.len

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 wor

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - bound the F54 report size t

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block s_input when F54 queu

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - propagate F54 worker errors

In the Linux kernel, the following vulnerability has been resolved: Input: hynitron_cstxxx - validate touch count and f

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devm_qce_register_a

In the Linux kernel, the following vulnerability has been resolved: gve: fix NULL dereference due to missing ptp adjfin

In the Linux kernel, the following vulnerability has been resolved: gpio: sloppy-logic-analyzer: fix use-after-free via

In the Linux kernel, the following vulnerability has been resolved: gpio: ml-ioh: use raw_spinlock_t for the register l

In the Linux kernel, the following vulnerability has been resolved: libceph: fix multiple unsafe decodes in decode_lock

In the Linux kernel, the following vulnerability has been resolved: openrisc: signal: do not restore privileged SR bits

In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration orderi

In the Linux kernel, the following vulnerability has been resolved: libceph: Avoid using invalid osd indices from prima

In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decode_watchers() via miss

In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: Fix use-after-free in atmci_remove

In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Free all memory if cp_init() fails

In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Limit the number of channel program

In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Cancel existing workqueues The init

In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure index for read/write regions

In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure first IDAW remains constant

In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Fix out of bounds check on CCW array

In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Move cp cleanup out of not operation

In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Selectively expand io_mutex The io_

In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Implement a crw lock Unlike the cha

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve CCA CPRB length and overflow c

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB length and overflow

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Pad trailing CCA or EP11 message with