Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Highwifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driverOct 14, 2026
- HighIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parse_posix_sids() In parse_posix_sids(), sidsbuf_end…Oct 14, 2026
- MediumIn the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() Smatch complains th…Oct 14, 2026
- HighIn the Linux kernel, the following vulnerability has been resolved: s390/boot: Avoid IPL parameter append past command line A command line may occupy all but the termi…Oct 14, 2026
- HighIn the Linux kernel, the following vulnerability has been resolved: net: icmp: avoid invalid transport header access in icmp_send tracepoint syzbot reported a WARNING…Oct 14, 2026
- MediumIn the Linux kernel, the following vulnerability has been resolved: net: iptunnel: fix stale transport header during tunnel decapsulation Syzbot reported a crash in qd…Oct 14, 2026
- MediumIn the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in kdump without re-IPL parm block Some IPL types, like HMC FTP boot or QE…Oct 14, 2026
- MediumIn the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block Unlike kdump, which passes the re-…Oct 14, 2026
- MediumIn the Linux kernel, the following vulnerability has been resolved: locking/lockdep: Invalidate stale class_cache entries for zapped classes syzbot reported a lockdep…Oct 14, 2026
- HighIn the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown In gpio_seco…Oct 14, 2026
- Highpowerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()Oct 14, 2026
- HighIn the Linux kernel, the following vulnerability has been resolved: powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit When __replay_soft_interrupt…Oct 14, 2026
- MediumIn the Linux kernel, the following vulnerability has been resolved: af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.Oct 14, 2026
- MediumIn the Linux kernel, the following vulnerability has been resolved: net: ipv4: Fix UDP length overflow with PMTU discover and big MTU This commit bounds cork->base.fra…Oct 14, 2026
- HighBluetooth: btintel_pcie: fix tx_handle bounds off-by-oneOct 14, 2026
- Mediumdrm/xe: Guard page-fault worker with runtime PM checkOct 14, 2026
- MediumIn the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Avoid divide by zero on virtualized systems On a virtualized system, the number of no…Oct 14, 2026
- MediumIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switch_power_profile during GPU reset During resume from GPU reset, the gfx id…Oct 14, 2026
- HighIn the Linux kernel, the following vulnerability has been resolved: exec: do_close_on_exec() before taking exec_update_lock do_close_on_exec() currently happens while…Oct 14, 2026
- HighIn the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipher_walk return code handling in aes_s390 The return codes from skcipher_walk…Oct 14, 2026
- Highscsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slotOct 14, 2026
- HighHeap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.Oct 14, 2026
- CriticalDouble free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.Oct 14, 2026
- Critical9.8Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated SQL Injection via Guest Persistent Cart meta_valueEPSS 0.4%Oct 13, 2026
- Critical9.8Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' ParameterEPSS 0.4%Oct 13, 2026