A vulnerability in the Linux kernel CIFS client code could cause the inode size (i_size) to be incorrectly set to zero when truncating a file without a cached handle, while the server file remains unchanged. This occurs if certain internal functions fail, leading to stale cache pages and inconsistent file size metadata.
CVE-2026-99132 is a vulnerability in the Linux kernel's XFS filesystem code where buffer locks are held across a synchronous transaction commit in the xfs_sync_sb_buf function. This locking behavior can cause a deadlock during shutdown when the CIL push workqueue flushes and attempts to lock the same buffers, leading to a system hang. The issue is fixed by removing the calls that hold buffer locks during commit and reacquiring the buffers afterward for on-disk writeback.
CVE-2026-99130 is a Linux kernel vulnerability involving io_uring's cancel mechanism where an exiting task spins indefinitely on local work it cannot run. This occurs when a disabled io_uring ring is enabled by another task, causing the exiting task to burn CPU cycles or potentially panic the kernel if panic_on_warn is set. The issue is fixed by adjusting the sleep behavior to only skip sleeping when the task is allowed to run the work, and removing an incorrect warning.
CVE-2026-99117 is a vulnerability in the Linux kernel's network bridge multicast handling. It involves improper handling of port group walks during teardown, leading to use-after-free conditions and potential kernel crashes. The issue arises because the iterator's saved next node pointer can be cleared prematurely, causing the walk to terminate early and leaving dangling pointers. The fix involves using a safer unlinking method and skipping already deleted groups during iteration.
Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a `T.140 RED` out-of-bounds write during `generation accumulation` using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to crash. The `chan_sip` channel driver must be installed and configured, and its `textsupport` option must be enabled; `textsupport` defaults to no. `The chan_sip driver was deprecated in Asterisk 20 and completely removed in all later versions.` Repository comparisons verify patch containment in Asterisk 20.20.1, 21.12.3, 22.10.1 and 23.4.1, and Certified Asterisk 20.7-cert11 and 22.8-cert3. The affected release-track scope remains unresolved: structured metadata includes later release tracks even though the advisory says the required `chan_sip` driver was removed there.
Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a `T.140 RED` heap buffer overflow using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to crash. The `chan_sip` channel driver must be installed and configured, and its `textsupport` option must be enabled; `textsupport` defaults to no. `The chan_sip driver was deprecated in Asterisk 20 and completely removed in all later versions.` Repository comparisons verify patch containment in Asterisk 20.20.1, 21.12.3, 22.10.1 and 23.4.1, and Certified Asterisk 20.7-cert11 and 22.8-cert3. The affected release-track scope remains unresolved: structured metadata includes later release tracks even though the advisory says the required `chan_sip` driver was removed there.
A vulnerability in the Linux kernel's io_uring subsystem allowed disabled rings to bypass task restrictions on register operations until enabled. This flaw permitted a restricted task to create a disabled ring, perform register operations without proper permission, and then enable the ring improperly. The issue has been fixed by enforcing permission checks on disabled rings inheriting task restrictions, requiring explicit permission to enable them.
A vulnerability in the Linux kernel caused kernel panics during system boot when using a boot-time function tracer with a filter. This was due to scheduling deferred kernel page table freeing work before the system's workqueue was initialized. The issue was fixed by delaying the scheduling of this freeing work until after the system has fully booted.
A vulnerability was identified in Kameleo up to 5.0.1.26. Affected by this vulnerability is the function ListProfiles of the file client-engine-application/t.cs of the component Profile Controller. The manipulation leads to information disclosure. The attack can only be performed from a local environment. Upgrading to version 5.2.0 addresses this issue. Upgrading the affected component is recommended.
This vulnerability involves the LTC3676 regulator where reading the write-only HRST and CLIRQ registers is problematic. The advisory does not provide further technical details or impact information. The affected versions are 3.0 and 4.0 of the Microsoft product referenced. No CVSS score or exploit information is available.
This vulnerability, identified as CVE-2026-98898, relates to the drm/amd/pm/si component and involves scheduling thermal work when the queue is not initialized. The advisory does not provide detailed technical information or impact specifics. It affects Microsoft products with versions 3.0 and 4.0. No CVSS score or exploit information is available.
This vulnerability involves the irqchip/gic-v4 component where VLPIs (Virtual Locality-specific Peripheral Interrupts) are advertised even if no ITS (Interrupt Translation Service) is probed. The issue affects Microsoft products with versions 3.0 and 4.0. No CVSS score or detailed impact information is provided.
CVE-2026-98872 concerns an issue in Microsoft software versions 3.0 and 4.0 where the freevxfs component improperly handles unknown typed-extent types by triggering a BUG() condition. This behavior could lead to unexpected crashes or instability in the affected software.
This vulnerability involves the ksmbd component where a lock (ci->m_lock) is held while waiting for a lease break acknowledgment. The issue affects Microsoft products versions 3.0 and 4.0. No CVSS score or detailed impact information is provided, and no known exploits are reported in the wild.
This vulnerability concerns the iwlwifi driver related to multi-link device (mld) functionality, specifically avoiding warnings on WoWLAN suspend without netdetect. It is identified as CVE-2026-98874 and affects Microsoft products versions 3.0 and 4.0. No CVSS score or detailed impact information is provided.
CVE-2026-99063 is a vulnerability in the Linux kernel's device mapper ioctl interface where an internal pointer (data_start) can run past the allocated buffer due to incorrect size calculations. This causes an out-of-bounds read of up to seven bytes beyond the buffer. The flaw arises because the struct dm_ioctl has trailing padding, and the kernel code does not properly clamp the data_start pointer to the actual buffer size. This can lead to a kernel slab-out-of-bounds read detected by KASAN. However, this issue can only be triggered by root, and thus is not considered a security vulnerability.