2026

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing barriers when accessing stream->

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_to_pagecache() to pause on su

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfs_read_ga

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port The S

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Carry over frag counter Th

In the Linux kernel, the following vulnerability has been resolved: net: tls: fix off-by-one in sg_chain entry count fo

In the Linux kernel, the following vulnerability has been resolved: net: tls: prevent chain-after-chain in plain text S

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: fix TSO segmentation explosion

In the Linux kernel, the following vulnerability has been resolved: igc: set tx buffer type for SMD frames Sashiko poi

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix TOCTOU double-fetch of hwc_msg_id fr

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Fix use-after-free in path file creation

In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data_ready racing with k

In the Linux kernel, the following vulnerability has been resolved: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN

In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-bo

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable reconnect error path file lifeti

In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: refresh tcphdr after skb_ensur

In the Linux kernel, the following vulnerability has been resolved: net: hsr: fix potential OOB access in supervision f

In the Linux kernel, the following vulnerability has been resolved: tunnels: load network headers after skb_cow() in ip

In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after skb

In the Linux kernel, the following vulnerability has been resolved: tunnels: do not assume transport header in iptunnel

In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_deco

In the Linux kernel, the following vulnerability has been resolved: net/handshake: hand off the pinned file reference t

In the Linux kernel, the following vulnerability has been resolved: net/handshake: Drain pending requests at net namesp

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' E

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the correct max length of the in-

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the act

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_ju

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after handling HAO option

In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: restore combined single-frag length gate

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-fr

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_output

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Validate CHAP_R length before

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Do not read uninitialized fragment add

In the Linux kernel, the following vulnerability has been resolved: net: skmsg: preserve sg.copy across SG transforms

In the Linux kernel, the following vulnerability has been resolved: gcov: use atomic counter updates to fix concurrent

In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in exfat_find_d

In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix use-after-free in pnfs_update_layout() W

In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9_client_walk() error

In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME decode error cleanup nfs

In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 8250 port if clk_notifi

Impact: @fastify/http-proxy versions up to and including 11.5.0 fail to rewrite the request prefix when the prefix segme

VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with network access may be ab

Avo is a framework to create admin panels for Ruby on Rails apps. Prior to 3.32.1 and 4.0.0.beta.51, Avo's association a

PrestaShop ps_facetedsearch is a module that adds layered navigation filters. From 3.0.0 until 4.0.4, the ps_facetedsear

cool-admin-java 8.0.0 has a SQL injection vulnerability in the order() method of CrudOption.java.

CodeIgniter is a PHP full-stack web framework. Prior to 4.7.3, the ext_in upload validation rule in system/Validation/St

IBM Langflow OSS 1.0.0 through 1.10.1 contains hard-coded credentials, such as a password or cryptographic key, which it

IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow an attacker to write arbitrary files to unintended locations

IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to superuser by directly manipul