2026

In the Linux kernel, the following vulnerability has been resolved: ftrace: Add global mutex to serialize trace_parser

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use sender devcom for MPV master-up Aft

In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on build_skb failure

In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF

In the Linux kernel, the following vulnerability has been resolved: super: fix emergency thaw deadlock on frozen block

In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer destroy_previous_session() until after

In the Linux kernel, the following vulnerability has been resolved: mac802154: hold an interface reference across the s

In the Linux kernel, the following vulnerability has been resolved: ovpn: fix peer refcount leak in TCP error paths Wh

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON(

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() T

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic during driver load fai

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix aperture mapping leak amdgpu_pci_r

In the Linux kernel, the following vulnerability has been resolved: ksmbd: restore DACL size on check_add_overflow() to

In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix race between registration and conne

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Preserve rq tracking across local DSQ di

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Bump asid_generation on CPU online to avo

Missing Authorization in the permission management component in Roskus Prospero Flow CRM before 5.2.1 allows any authent

entr is vulnerable to Heap-based buffer overflow in run_utility() function. The function allocates a fixed-size heap buf

In the Linux kernel, the following vulnerability has been resolved: time/jiffies: Register jiffies clocksource before u

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Plug race against a concurrent OOM di

In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If *p

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check to r

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush

In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: write all dirty file folios when col

In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: fix location monitor leak in tsi

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attack

GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory() in src/sfnt.c. Due to a

GNU Emacs for Android is vulnerable to an integer overflow in sfnt_read_name_table() in src/sfnt.c. The function compute

GNU Emacs for Android is vulnerable to an integer overflow in the sfnt_read_cmap_format_12() function in src/sfnt.c. Whe

GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index b

GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When list

GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at src/makepath.c. The function us

GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar arch

Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.7.2 - An unauthenticated attacker could execute ar

Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information

Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attacker

Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to acc

Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands wi

A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is lo

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash allows an attacker to f

CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient neutralization of Vue template

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pages if nested VM-Enter fail

In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X ser

In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms retried

Ruby LSP is an implementation of the language server protocol for Ruby. Several workspace-level settings in the Ruby LSP