A vulnerability in the Linux kernel's isofs filesystem handling has been resolved. The issue involves improper handling of set_blocksize failures due to isofs using buffer_heads, which do not support block sizes larger than PAGE_SIZE. This can cause a kernel BUG_ON error during mounting, specifically triggered by an offset check in folio_set_bh on the first __bread_gfp call.
A vulnerability in the Linux kernel's irqchip/gic-v5 driver causes a delay in priority dropping after interrupt activation, potentially blocking new interrupts and causing a denial of service. This occurs because the priority drop was previously done during interrupt deactivation rather than immediately after acknowledgment. The issue affects certain Linux kernel versions and has been resolved by moving the priority drop to occur immediately after interrupt acknowledgment.
A vulnerability in the Linux kernel's irqchip/gic-v4 component causes a kernel panic due to a NULL pointer dereference when the system is configured with kvm-arm.vgic_v4_enable=1 but lacks an MSI controller device tree node and GICv4. The issue arises because the kernel attempts to access a NULL gic_domain pointer. The fix involves disabling vLPI support at initialization if no ITS is present, preventing the kernel panic.
A vulnerability in the Linux kernel's host1x bus driver was fixed by adding a missing null check for client operations during error teardown. Without this check, a NULL pointer dereference could occur if client->ops is NULL, potentially causing a kernel crash. The issue affects specific Linux kernel versions and has been addressed by adding the necessary null checks in the error teardown paths.
A vulnerability in the Linux kernel's nouveau DRM driver related to the GA100 chip's SEC2 falcon was fixed by adding the SEC2 entry to the chip table. Without this fix, a NULL pointer dereference occurs during the GSP-RM boot process, causing a crash.
This vulnerability in the Linux kernel's iwlwifi driver relates to handling WoWLAN suspend operations without netdetect configured. The issue caused a WARN_ON() warning when suspending WoWLAN without network detection, which is now resolved by removing the warning and properly handling the suspend call.
A vulnerability in the Linux kernel's netfilter subsystem (nf_conntrack_expect) involves uninitialized data potentially leaking to userspace via ctnetlink. The issue arises from not zeroing memory at allocation time. This vulnerability affects specific Linux kernel versions and has been addressed by ensuring zero initialization during allocation.
A vulnerability in the Linux kernel's freevxfs filesystem code causes a kernel crash (BUG) when encountering an unknown typed-extent type during ioctl(FIBMAP) operations on regular files. The issue arises because vxfs_bmap_typed() calls BUG() for unrecognized extent types, leading to a kernel panic. The fix replaces BUG() with WARN_ON_ONCE() and returns 0 to fail cleanly without crashing the kernel.
A deadlock vulnerability was fixed in the Linux kernel's crypto CCP SEV initialization failure path. The issue occurred because a function called with an incorrect lock status could cause a deadlock during cleanup after an RMPUPDATE failure. This was resolved by correctly passing the lock status to honor the parent function's mutex lock.
CVE-2026-98870 is a high severity use-after-free vulnerability in the Linux kernel's ksmbd component. It occurs because stale channels are not properly removed from all sessions on connection teardown, leading to dereferencing freed memory and leaking sessions. This flaw affects multiple specific Linux kernel versions. The vulnerability has a CVSS score of 8.8, indicating critical confidentiality, integrity, and availability impacts. A fix is available that removes the conditional gate so that all stale channels are always removed on teardown.
CVE-2026-90458 is a medium severity vulnerability affecting multiple specific versions of the Ironic software package distributed in Ubuntu. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a network attack vector with low complexity and requiring low privileges, resulting in limited confidentiality and integrity impacts without availability impact. No detailed description of the flaw or exploitation method is provided. There are no known exploits in the wild and no vendor patch or remediation information is available in the provided data.
CVE-2026-89419 is a medium severity vulnerability affecting multiple specific Ubuntu package versions of the Ironic project. The vulnerability has a CVSS 3.1 base score of 5.0, indicating a network attack vector with high attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No detailed description of the flaw or exploitation method is provided. There are no known exploits in the wild, and no patch or remediation information is available in the provided data.
A buffer overflow vulnerability exists in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms. This flaw allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, potentially leading to sensitive memory disclosure, denial of service, or arbitrary code execution. The issue is addressed by updating Brotli libraries or binaries to versions 1.0.9-2ubuntu0.1, 1.1.0-2ubuntu0.1, 1.2.0-4ubuntu0.1, or later. Ubuntu has released security updates for multiple supported releases to fix this vulnerability.
A vulnerability in python-authlib prior to version 1.9.0 causes the default JWTBearerGrant.get_audiences() method to return an empty list. This leads to JWTBearerGrant.verify_claims() only checking for the presence of an aud claim without verifying it matches the current authorization server. Consequently, an attacker with a valid assertion for another service sharing the signing key can obtain an access token across trust boundaries. Implementations that override get_audiences() with valid audience identifiers are not affected. The issue is fixed in version 1.9.0.
Mistune versions from 3.0.0 up to but not including 3.3.0 contain an algorithmic complexity denial of service (DoS) vulnerability in the parse_link_text function. This flaw allows attackers to craft markdown input with deeply nested square brackets that cause quadratic parsing time, leading to excessive CPU consumption and potential service disruption.
EDK2 BIOS firmware contains a critical vulnerability that allows remote attackers to cause out-of-bounds writes, classic buffer overflows, and incorrect buffer size calculations. Successful exploitation can lead to arbitrary code execution, impacting confidentiality, integrity, and availability of affected systems. Multiple specific versions of EDK2 are affected.
Pylint versions from 0.15.2 up to 4.0.8 store module statistics in predictable cache files under PYLINT_HOME and load them using pickle.load. An attacker with write access to a shared or group-writable cache directory can replace these cache files with malicious serialized data, leading to arbitrary code execution with the privileges of the user running Pylint. The default per-user cache is typically not writable by others. This vulnerability is fixed in Pylint version 4.0.9.
dnspython versions prior to 2.9.0 contain a vulnerability in the dns.name.from_wire_parser function, which follows attacker-controlled DNS compression pointer chains without a hop limit. This can allow a malicious DNS message to cause excessive pointer traversal during name decompression, resulting in high CPU usage, application degradation, or denial of service. The issue is fixed in version 2.9.0.
A vulnerability in the body-parser middleware for Node.js and Express allows a specially crafted request with compressed content to crash applications using affected versions. This occurs because an error emitted by the decompression stream is not properly handled, causing an uncaught exception that terminates the process. The issue affects versions before 1.20.9 and from 2.0.0 before 2.4.0. It is fixed in versions 1.20.9 and 2.4.0. A workaround is to disable request-body inflation to reject encoded requests before decompression.
CVE-2026-92709 is a medium severity vulnerability affecting multiple specific versions of the rsyslog software package, primarily distributed in various Ubuntu releases. The exact nature and technical details of the vulnerability are not described in the available data. There is no CVSS score or detailed impact information provided. No patch or remediation guidance is currently available, and no known exploits in the wild have been reported.