2026

In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Fix race condition in event registrati

In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Shutdown and free rx mailbox channel

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp/sev-dev-tsm - bail out early when pdev-

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: gc2235: fix UAF and memory leak gc

In the Linux kernel, the following vulnerability has been resolved: pinctrl: spacemit: fix NULL check in spacemit_pin_s

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix warning in poll cq direct mode CQs a

In the Linux kernel, the following vulnerability has been resolved: ocfs2: don't BUG_ON an invalid journal dinode [BUG

In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release()

In the Linux kernel, the following vulnerability has been resolved: liveupdate: Reference count incoming FLB data Incr

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The

In the Linux kernel, the following vulnerability has been resolved: cxl/fwctl: Fix __fortify_panic Fix a runtime asser

In the Linux kernel, the following vulnerability has been resolved: cxl/test: Fix __fortify_panic Fix a runtime assert

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: revert ct extension genid inf

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix NULL pointer dereference in

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: npc: Fix size of entry2cntr_map KASA

In the Linux kernel, the following vulnerability has been resolved: MIPS: mm: Fix out-of-bounds write in maar_res_walk(

In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: fix preempt count underflow in fsl_em

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix memory leak of bonding resources In

In the Linux kernel, the following vulnerability has been resolved: mfd: cs42l43: Sanity check firmware size Currently

In the Linux kernel, the following vulnerability has been resolved: coresight: ete: Always save state on power down Sy

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NU

In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/MSI: Unmap MSI-X region on error" This

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs

In the Linux kernel, the following vulnerability has been resolved: ieee802154: Avoid calling WARN_ON() on -ENOMEM in c

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor_idle: Mark LPI enter functions as _

In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix potential divide-by-zero when num_v

In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARN_ON_ONCE from parse_btf_

In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference in p

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel address leakage A use

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - add response length checks The dr

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix potential infinite loop in CDC

In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range pa

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM.  JavaScript code can alt

The wallabag (aka fr.gaulupeau.apps.InThePoche) application through 2.6.0 for Android allows XSS because /api/entries da

A business logic flaw in WatchGuard Dimension allows an authenticated administrator to trigger multiple backend operatio

WatchGuard Dimension's web login endpoint does not enforce effective rate-limiting or account lockout by default allowin

A Stored Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows

A Reflected Cross-Site Scripting (XSS) vulnerability in WatchGuard Dimension's report detail page allows an attacker to

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an a

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the log viewer feature which allows an aut

WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows

WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF protection. An attacker

A blind server-side request forgery (SSRF) vulnerability WatchGuard Dimension Database Server Test configuration allows

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension FTP Server Test configuration allows an authenti

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Email Server Test configuration allows an authen

A server-side request forgery (SSRF) vulnerability WatchGuard Dimension Remote Backup Connection Test configuration allo

A Cross-Site Scripting (XSS) vulnerability in the WatchGuard Dimension Backup Historical Data feature allows an authenti

WatchGuard Dimension records unredacted session identifiers for logged-in users in its web UI diagnostic log. A low-priv