2026

In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Free allocated workqueue a

In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fully validate 'pinmux' p

In the Linux kernel, the following vulnerability has been resolved: tty: hvc_iucv: fix off-by-one in number of supporte

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ps883x: Fix Oops at unbind When trying

In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Resolve soft lockup issue when opening /d

In the Linux kernel, the following vulnerability has been resolved: f2fs: protect extension_list reading with sb_lock i

In the Linux kernel, the following vulnerability has been resolved: crypto: eip93 - fix hmac setkey algo selection eip

In the Linux kernel, the following vulnerability has been resolved: reset: amlogic: t7: Fix null reset ops Fix missing

In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix NTMP DMA use-after-free issue The

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of ai

In the Linux kernel, the following vulnerability has been resolved: net: airoha: Move ndesc initialization at end of ai

In the Linux kernel, the following vulnerability has been resolved: net: mana: Guard mana_remove against double invocat

In the Linux kernel, the following vulnerability has been resolved: mailbox: mailbox-test: free channels on probe error

In the Linux kernel, the following vulnerability has been resolved: mailbox: add sanity check for channel array Fail g

In the Linux kernel, the following vulnerability has been resolved: mailbox: mailbox-test: don't free the reused channe

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG There wer

In the Linux kernel, the following vulnerability has been resolved: net: phonet: do not BUG_ON() in pn_socket_autobind(

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/conexant: Fix missing error check for jac

In the Linux kernel, the following vulnerability has been resolved: drm/xe/eustall: Fix drm_dev_put called before strea

In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL pointer dereference in ice_reset_all_

In the Linux kernel, the following vulnerability has been resolved: arm64: Reserve an extra page for early kernel mappi

In the Linux kernel, the following vulnerability has been resolved: audit: fix incorrect inheritable capability in CAPS

In the Linux kernel, the following vulnerability has been resolved: idpf: fix double free and use-after-free in aux dev

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wrap DCN32 phantom-plane allocatio

In the Linux kernel, the following vulnerability has been resolved: btrfs: only release the dirty pages io tree after s

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bounds-check devid in __rlookup_amd_iomm

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Push kjump return address even for non-k

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereference or refco

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix NULL group->domain dereference in pci_de

In the Linux kernel, the following vulnerability has been resolved: drm/gma500/oaktrail_lvds: fix hang on init failure

In the Linux kernel, the following vulnerability has been resolved: arm_mpam: Check whether the config array is allocat

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is a SQL injection

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is a CSRF on TARGET

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, OpenProject's Storages mo

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is an IDOR through

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, the HTML sanitizer grants

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, cache store poisoning lea

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, a cross-project IDOR / au

RustFS is a distributed object storage system built in Rust. In 1.0.0-beta.4, authenticated users with only PutObject pe

OpenProject is open-source, web-based project management software. Prior to 17.4.0, `GET /api/v3/meetings/:meeting_id/ag

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, the journal diff endpoint

OpenProject is open-source, web-based project management software. Prior to , the official openproject/openproject Docke

OpenProject is open-source, web-based project management software. Prior to 17.4.0, the GET /api/v3/relations endpoint a

OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, the GET /api/v3/shares en

OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, a Missing Authorization v

OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, Business Logic Error on O

OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, OpenProject exposes a doc

OpenProject is open-source, web-based project management software. Prior to 17.3.2 and 17.4.0, the web application's mee

OpenProject is open-source, web-based project management software. Prior to 17.4.0, OpenProject's rich text (markdown) r

Cudy LT300 3.0 running firmware prior to version 2.5.12 contains an OS command injection vulnerability that allows authe