THREAT OPS › Threat News

Threat Intelligence News

12111 reports from 110+ open cyber-threat-intelligence sources — APT activity, malware, vulnerabilities and campaigns, newest first.

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabilitiescisco_psirt · 2026-07-20
Zimbra security advisory (AV26-721)cccs_ca · 2026-07-20
GitHub security advisory (AV26-720)cccs_ca · 2026-07-20
Red Hat security advisory (AV26-719)cccs_ca · 2026-07-20
[Control systems] CISA ICS security advisories (AV26-718)cccs_ca · 2026-07-20
Ubuntu security advisory (AV26-717)cccs_ca · 2026-07-20
Dell security advisory (AV26-716)cccs_ca · 2026-07-20
IBM security advisory (AV26-715)cccs_ca · 2026-07-20
What Is Grounding? Why AI Coding Assistants Need Better Intelligencesonatype · 2026-07-20
[NVD] CVE-2026-12080 (HIGH 7.3) — A flaw was found in the QEMU Guest Agent (qga). A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to nvd · 2026-07-20
From a Single Alert to 1,000 Files: Inside an Exposed WebDAV Malware Delivery Labrapid7 · 2026-07-20
20th July – Threat Intelligence Reportcheckpoint_research · 2026-07-20
[NVD] CVE-2026-15588 (MEDIUM 5.3) — A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit thinvd · 2026-07-20
Zscaler Joins the Hiroshima AI Process Partners Communityzscaler_threatlabz · 2026-07-20
[NVD] CVE-2026-16242 (CRITICAL 9.4) — A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach thnvd · 2026-07-20
[NVD] CVE-2026-13577 (HIGH 8.2) — Dancer2 versions before 2.2.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable. Dancer2::Core::Role::SessionFactory::generate_id silently falls back to a built-in rand-derived session id unless both Math::Random::ISAAC::XS and Crypt::URandom arnvd · 2026-07-20
Risky Bulletin: Hacker wipes Romania's entire land registry databaseriskybiz_news · 2026-07-20
Microsoft Edge Multiple Vulnerabilitieshkcert · 2026-07-20
WordPress Multiple Vulnerabilitieshkcert · 2026-07-20
Autonomous AI Intrusions Are Here: Lessons from the Hugging Face Compromiseembracethered · 2026-07-20
Sponsored: Thinkst on building companies that don’t suckriskybiz_news · 2026-07-20
Threat Hunting: A Guide | Recorded Futurerecordedfuture · 2026-07-20
[NVD] CVE-2026-64139 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow Commit 299f962c0b02 ("ksmbd: use check_add_overflow() to prevent u16 DACL size overflow") added check_add_overflow() guards that break out nvd · 2026-07-19
[NVD] CVE-2026-64087 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) reject implausible blackbox record_count adm1266_nvmem_read_blackbox() loops over a record_count that comes straight from byte 3 of the BLACKBOX_INFO response. The destination buffer is nvd · 2026-07-19
[NVD] CVE-2026-64086 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer adm1266_pmbus_block_xfer() sets up the read transaction with .buf = data->read_buf, .len = ADM1266_PMBUS_BLOCK_MAX + 2, but read_buf invd · 2026-07-19
[NVD] CVE-2026-64082 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: riscv: Fix register corruption from uninitialized cregs on error compat_riscv_gpr_set() calls cregs_to_regs() unconditionally, even when user_regset_copyin() fails. Since cregs is an uninitialized stack variablnvd · 2026-07-19
[NVD] CVE-2026-64078 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: add and use xtables_unregister_table_exit Previous change added xtables_unregister_table_pre_exit to detach the table from the packetpath and to unlink it from the active table list. In casnvd · 2026-07-19
[NVD] CVE-2026-64077 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: move to two-stage removal scheme Like previous patches for x_tables, follow same pattern in ebtables. We can't reuse xt helpers: ebt_table struct layout is incompatible. table->ops assignmnvd · 2026-07-19
[NVD] CVE-2026-64076 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: eb_tables: close module init race sashiko reports for unrelated patch: Does the core ebtables initialization in ebtables.c suffer from a similar race? Once nf_register_sockopt() completes, nvd · 2026-07-19
[NVD] CVE-2026-64075 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: fprobe: Fix unregister_fprobe() to wait for RCU grace period Commit 4346ba1604093 ("fprobe: Rewrite fprobe on function-graph tracer") changed fprobe to register struct fprobe to an rcu-hlist, but it forgot to wnvd · 2026-07-19
[NVD] CVE-2026-64074 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap statmount_mnt_idmap() writes one mapping with seq_printf() and then manually advances seq->count to include the NUL separator. If seq_printf() nvd · 2026-07-19
[NVD] CVE-2026-64073 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT On PREEMPT_RT, non-HARD irq_work runs in per-CPU kthreads via run_irq_workd(), so irq_work_sync() uses rcuwait() to wait for BUSY==0. After irq_wnvd · 2026-07-19
[NVD] CVE-2026-64071 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvme_free_host_mem() nvme_free_host_mem() frees dev->hmb_sgt via dma_free_noncontiguous() but never clears the pointer afterward. This leads to a use-after-free if nvme_free_hosnvd · 2026-07-19
[NVD] CVE-2026-64070 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: powerpc/hv-gpci: fix preempt count leak in sysfs show paths Four sysfs show() callbacks in hv-gpci take get_cpu_var(hv_gpci_reqb) (which calls preempt_disable()) but only call the matching put_cpu_var() on the nvd · 2026-07-19
[NVD] CVE-2026-64069 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: netfs: Fix cancellation of a DIO and single read subrequests When the preparation of a new subrequest for a read fails, if the subrequest has already been added to the stream->subrequests list, it can't simply nvd · 2026-07-19
[NVD] CVE-2026-64068 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs Fix netfs_retry_read_subrequests() and netfs_retry_write_stream() to take the appropriate lock when adding extra subrequests into stream->subrequests.nvd · 2026-07-19
[NVD] CVE-2026-64067 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing barriers when accessing stream->subrequests locklessly The list of subrequests attached to stream->subrequests is accessed without locks by netfs_collect_read_results() and netfs_collect_writnvd · 2026-07-19
[NVD] CVE-2026-64066 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_to_pagecache() to pause on subreq failure Fix netfs_read_to_pagecache() so that it pauses the generation of new subrequests if an already-issued subrequest fails.nvd · 2026-07-19
[NVD] CVE-2026-64065 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call The multiple runs of generic/013 test-case is capable to reproduce a kernel BUG at mm/filemap.c:1504 with probability of 30%. while true; do sudnvd · 2026-07-19
[NVD] CVE-2026-64064 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone If a streaming write is made, this will leave the relevant modified folio in a not-uptodate, but dirty state with a netfs_folio struct nvd · 2026-07-19
[NVD] CVE-2026-64058 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_folio() to wait on writeback Fix netfs_read_folio() to wait for an ongoing writeback to complete so that it can trust the dirty flag and whatever is attached to folio->private (folio->privnvd · 2026-07-19
[NVD] CVE-2026-64048 (HIGH 7.5) — In the Linux kernel, the following vulnerability has been resolved: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot On the SMC-D client, slot 0 of ini->ism_dev[]/ini->ism_chid[] is reserved for an SMC-Dv1 device. smc_find_ism_v2_device_clnt() populates V2 entrinvd · 2026-07-19
[NVD] CVE-2026-64031 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: erofs: fix managed cache race for unaligned extents After unaligned compressed extents were introduced, the following race could occur: [Thread 1] [Thread 2] (z_erofs_fill_bionvd · 2026-07-19
[NVD] CVE-2026-64016 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable reconnect error path file lifetime After a durable reconnect succeeds, ksmbd_reopen_durable_fd() republishes the same ksmbd_file into the session volatile-id table. If smb2_open() then takes nvd · 2026-07-19
[NVD] CVE-2026-63979 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: net/handshake: hand off the pinned file reference to accept_doit handshake_req_next() removes the request from the per-net pending list and drops hn_lock before handshake_nl_accept_doit() reads req->hr_sk->sk_snvd · 2026-07-19
[NVD] CVE-2026-63978 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: net/handshake: Drain pending requests at net namespace exit The arguments to list_splice_init() in handshake_net_exit() are reversed. The call moves the local empty "requests" list onto hn->hn_requests, leavingnvd · 2026-07-19
[NVD] CVE-2026-63923 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify rvu_mbox_handler_rep_event_notify() in drivers/net/ethernet/marvell/ octeontx2/af/rvu_rep.c queues a sender-controlled REP_EVENT_NOTIFY rnvd · 2026-07-19
[NVD] CVE-2026-63815 (HIGH 8.4) — In the Linux kernel, the following vulnerability has been resolved: f2fs: bound i_inline_xattr_size for non-inline-xattr inodes When the flexible_inline_xattr feature is enabled, do_read_inode() loads the on-disk i_inline_xattr_size unconditionally: if (f2fs_sb_has_flexible_invd · 2026-07-19
[NVD] CVE-2026-63814 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: f2fs: validate ACL entry sizes in f2fs_acl_from_disk() f2fs_acl_count() only validates the aggregate ACL xattr length. A malformed ACL can still place ACL_USER or ACL_GROUP in a slot that only contains struct fnvd · 2026-07-19
[NVD] CVE-2026-63813 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: Revert "f2fs: remove non-uptodate folio from the page cache in move_data_block" This reverts commit 9609dd704725a40cd63d915f2ab6c44248a44598. The kernel panics are keeping to be reported especially when the f2nvd · 2026-07-19
[NVD] CVE-2026-63812 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() When __destroy_extent_node() sets the inode flag FI_NO_EXTENT, it does not reset the length of the largest extent to 0 and update the inode fnvd · 2026-07-19
[NVD] CVE-2026-63811 — In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fs_write_begin() may read the previously written data back from the COW inode: prepare_atomic_write_begin() nvd · 2026-07-19
[NVD] CVE-2026-63810 — In the Linux kernel, the following vulnerability has been resolved: block: Avoid mounting the bdev pseudo-filesystem in userspace The bdev pseudo-filesystem is an internal kernel filesystem with which userspace should not interfere. Unregister it so that userspace cannot even anvd · 2026-07-19
[NVD] CVE-2026-63809 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: bpf: use kvfree() for replaced sysctl write buffer proc_sys_call_handler() allocates its temporary sysctl buffer with kvzalloc() and passes it to __cgroup_bpf_run_filter_sysctl(). Since kvzalloc() may fall backnvd · 2026-07-19
[NVD] CVE-2026-63808 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: exfat: fix potential use-after-free in exfat_find_dir_entry() In exfat_find_dir_entry(), the buffer_head obtained from exfat_get_dentry() is released with brelse(bh) before the fall-through TYPE_EXTEND branch rnvd · 2026-07-19
[NVD] CVE-2026-63807 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level When recovering hugepages in the shadow MMU, verify that the base gfn of the shadow page is actually contained within the target memnvd · 2026-07-19
[NVD] CVE-2026-63806 (HIGH 7.1) — In the Linux kernel, the following vulnerability has been resolved: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() Drop a BUG_ON() that has been reachable since it was first added, way back in 2009, and instead use get_unaligned() to performnvd · 2026-07-19
[NVD] CVE-2026-63805 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: crypto: nx - fix nx_crypto_ctx_exit argument nx_crypto_ctx_shash_exit calls nx_crypto_ctx_exit with crypto_shash_ctx(...) but crypto_shash_ctx gives a nx_crypto_ctx *, not a crypto_tfm *. Fix the type in nx_crnvd · 2026-07-19
[NVD] CVE-2026-63804 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs2_qd_dealloc gfs2_qd_dealloc(), called as an RCU callback from gfs2_qd_dispose(), accesses the superblock object sdp through qd->qd_sbd after freeing qd. It does so to decrement snvd · 2026-07-19
[NVD] CVE-2026-63803 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: hdlc_ppp: sync per-proto timers before freeing hdlc state Each PPP control protocol (LCP/IPCP/IPV6CP) embedded in struct ppp registers a timer via timer_setup(). That struct ppp is the hdlc->state allocation, wnvd · 2026-07-19
[NVD] CVE-2026-63802 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in __blkcg_rstat_flush() When multiple blkgs in the same blkcg are released concurrently, a use-after-free can occur. The race happens when one blkg's __blkcg_rstat_flush() removes another bnvd · 2026-07-19
[NVD] CVE-2026-63801 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done tipc_aead_decrypt() goes straight from tipc_bearer_hold(b) to crypto_aead_decrypt(req) without taking a reference on the netns, unlike the encrypt panvd · 2026-07-19
[NVD] CVE-2026-63800 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix use-after-free in pnfs_update_layout() When hitting the NFS_LAYOUT_RETURN branch in pnfs_update_layout(), the code calls pnfs_prepare_to_retry_layoutget(lo). If it succeeds, pnfs_put_layout_hdr(lo) isnvd · 2026-07-19
[NVD] CVE-2026-63799 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in fixup path In mm_cid_fixup_cpus_to_tasks(), when rq->curr has the target mm and mm_cid.active is set, the CID is checked with cid_in_transit() before snvd · 2026-07-19
[NVD] CVE-2026-63798 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove The driver allocates domain generic chips using irq_alloc_domain_generic_chips() during probe and sets up chained handlers using nvd · 2026-07-19
[NVD] CVE-2026-63797 (HIGH 8.4) — In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix use-after-free on probe error path rpmsg_chrdev_probe() stores the newly allocated eptdev in the default endpoint's priv pointer before calling rpmsg_chrdev_eptdev_add(). If rpmsg_chrdev_eptdevnvd · 2026-07-19
[NVD] CVE-2026-63796 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject oversized group bitmap descriptors ocfs2_validate_gd_parent() only bounds bg_bits against the parent allocator's chain geometry. A malicious descriptor can still claim a bg_size/bg_bits pair thatnvd · 2026-07-19
[NVD] CVE-2026-63795 (CRITICAL 10.0) — In the Linux kernel, the following vulnerability has been resolved: 9p: avoid putting oldfid in p9_client_walk() error path When p9_client_walk() is called with clone set to false, fid aliases oldfid. If the walk subsequently fails after the request has been sent, the error patnvd · 2026-07-19
[NVD] CVE-2026-63794 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path In sev_dbg_crypt(), the per-iteration transfer length is bounded by the source page offset (PAGE_SIZE - s_off) but not by the destination page offnvd · 2026-07-19
[NVD] CVE-2026-63793 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: ntfs: serialize volume label accesses Protect vol->volume_label with a mutex and snaphost the label before copy_to_user. This prevent a use-after-free when FS_IOC_SETFSLABEL replaces the vol->volume_label and Fnvd · 2026-07-19
[NVD] CVE-2026-53403 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var info->var, a framebuffer's current mode, is expected to have a matching entry in info->modelist. var_to_display() relies on this and tnvd · 2026-07-19
[NVD] CVE-2026-53402 (HIGH 7.1) — In the Linux kernel, the following vulnerability has been resolved: fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() When fbcon_do_set_font() fails (e.g., due to a memory allocation failure inside vc_resize() under heavy memory pressure), it jumps to the `nvd · 2026-07-19
[NVD] CVE-2026-53401 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: fbdev: omap2: fix use-after-free in omapfb_mmap omapfb_mmap() has a race condition with OMAPFB_SETUP_PLANE ioctl that can lead to use-after-free: The fb_mmap() entry point holds mm_lock but not lock (fb_info->nvd · 2026-07-19
[NVD] CVE-2026-53400 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter registration race Adapters can be looked up based on their id using i2c_get_adapter() which takes a reference to the embedded struct device. Make sure that the adapter (including its strnvd · 2026-07-19
[NVD] CVE-2026-53399 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: nfsd: release layout stid on setlease failure nfs4_alloc_stid() publishes the new stid into cl->cl_stateids via idr_alloc_cyclic() under cl_lock before returning to nfsd4_alloc_layout_stateid(). When nfsd4_layonvd · 2026-07-19
[NVD] CVE-2026-53398 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix SECINFO_NO_NAME decode error cleanup nfsd4_decode_secinfo_no_name() currently initializes sin_exp after decoding sin_style. If the XDR stream is truncated, the decoder returns nfserr_bad_xdr before sinvd · 2026-07-19
[NVD] CVE-2026-53397 (HIGH 7.5) — In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak on SETACL decode failure nfsaclsvc_decode_setaclargs() and nfs3svc_decode_setaclargs() each call nfs_stream_decode_acl() twice, first for NFS_ACL and then for NFS_DFACL. Each successfunvd · 2026-07-19
[NVD] CVE-2026-53396 (HIGH 7.1) — In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posix_acl leak and ignored error in nfsd4_create_file nfsd4_create_file() has two bugs in its ACL handling: The return value of nfsd4_acl_to_attr() is silently discarded. When the NFSv4-to-POSIX ACLnvd · 2026-07-19
[NVD] CVE-2026-53395 (HIGH 7.5) — In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dead ACL conflict guard in nfsd4_create nfsd4_create() steals create->cr_dpacl/cr_pacl into the local nfsd_attrs via the designated initializer, then immediately sets the source pointers to NULL. The nvd · 2026-07-19
[NVD] CVE-2026-53394 (HIGH 7.5) — In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race When find_or_alloc_open_stateowner() encounters an unconfirmed owner, it calls release_openowner() and sets oo = NULL. Control then falls thnvd · 2026-07-19
[NVD] CVE-2026-53393 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: nfsd: reset write verifier on deferred writeback errors nfsd_vfs_write() and nfsd_commit() both call filemap_check_wb_err() to detect deferred writeback errors, but neither rotates the server's write verifier (nvd · 2026-07-19
[NVD] CVE-2026-53392 (HIGH 7.5) — In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count ff_layout_alloc_lseg() decodes the filehandle-version array count from the flexfiles layout body. The value is used as the count for kzalloc_objs(), and thenvd · 2026-07-19
[NVD] CVE-2026-53391 (HIGH 7.5) — In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr nfs4_decode_mp_ds_addr() decodes the r_netid and r_addr opaques of a netaddr4 from a GETDEVICEINFO multipath-DS body, then immediately calls strrcnvd · 2026-07-19
[NVD] CVE-2026-53390 (HIGH 8.1) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds read in smb_check_perm_dacl() The permission-check ACE walk in smb_check_perm_dacl() validates the ACE header size and caps sid.num_subauth at SID_MAX_SUB_AUTHORITIES, but it never checnvd · 2026-07-19
[NVD] CVE-2026-53389 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: fix use-after-free of key in del_async path In tcp_ao_delete_key(), the del_async path skips the current_key and rnext_key validity checks present in the synchronous path, assuming these pointers arnvd · 2026-07-19
[NVD] CVE-2026-53388 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fuse_try_move_folio() unlocks the request on entry but does not re-lock it on the success path. This means fuse_chan_abort() can end the request and free nvd · 2026-07-19
[NVD] CVE-2026-53387 (HIGH 7.1) — In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml6075_it_ms index veml6075_it_ms has 5 elements but VEML6075_CONF_IT can yield values 0-7. If it returns a value >= 5, this causes an out-of-bounds array access. Addnvd · 2026-07-19
[NVD] CVE-2026-53386 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pga_settings index ads1298_pga_settings has 7 elements but ADS1298_MASK_CH_PGA can yield values 0-7. If it yields a value >= 7, this causes an out-of-bounds array accesnvd · 2026-07-19
[NVD] CVE-2026-53385 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write A KASAN null-ptr-deref was observed in vcs_notifier(): BUG: KASAN: null-ptr-deref in vcs_notifier+0x98/0x130 Read of size 2 at addr qnvd · 2026-07-19
[NVD] CVE-2026-53384 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails dw8250_probe() registers the 8250 port via serial8250_register_8250_port() and then, if the device has a clock, registers a clock notifier.nvd · 2026-07-19
[NVD] CVE-2026-53383 (HIGH 7.5) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject non-VALID session in compound request branch smb2_check_user_session() takes a shortcut for any operation that is not the first in a COMPOUND request: it reuses work->sess (the session bound by thnvd · 2026-07-19
[NVD] CVE-2026-53382 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si syzbot reported a general protection fault in vidtv_psi_ts_psi_write_into [1]. vidtv_mux_get_pid_ctx() can return NULL, but vidtv_mux_push_si() dnvd · 2026-07-19
[NVD] CVE-2026-53381 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput() called from fuse_release_end() can Oops if the super block has already been destroyed. Normally this is prevented by waiting for num_waiting to go down to zero befornvd · 2026-07-19
[NVD] CVE-2026-9323 (HIGH 8.1) — The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id) in Screen.start() by concatenating two random.randrange(10**9) calls that use Python's Mersenne Twister PRNG, which is not cryptographically secure. Each call consumes approximately nvd · 2026-07-18
[NVD] CVE-2026-9147 (HIGH 7.8) — uproot dynamically generates Python class source code from ROOT TStreamerInfo records in a file and compiles it at runtime. Some file-controlled streamer metadata fields (for example, streamer element names) are interpolated into the generated Python source without safe quoting vnvd · 2026-07-18
New North Korean campaign uses fake coding interviews to steal developer credentialselastic_security · 2026-07-18
PSA: WordPress Core Patched Unauthenticated Remote Code Execution Vulnerability Chainwordfence · 2026-07-17
Proxying to Compromise: SonicWall Secure Mobile Access 0-day Exploitationvolexity · 2026-07-17
Friday Squid Blogging: Squid Washing Up on Cape Cod Beachschneier · 2026-07-17
[NVD] CVE-2026-16118 (HIGH 7.1) — A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/nvd · 2026-07-17