CVE Notifier

CVE-2026-93295 CWE-74 N/A

MISP Background Job Argument Injection via Console Path Switches Enables Remote Code Execution

MISP contains a vulnerability in its background job dispatch mechanism that allows remote code execution as the web user. Background job arguments are passed directly as the argv of the CakePHP console process. CakePHP's…

cve.org misp:misp 3 hari lalu

CVE-2026-85716 CWE-287 3.7

AsyncHttpClient: SCRAM and Digest mutual-authentication responses are not verified

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3.0.8 until 3.0.12, processScramAuthenticationInfo and processAuthenticationInfo …

cve.org AsyncHttpClient:async-http-client 3 hari lalu

CVE-2026-93204 CWE-? N/A

batman-adv: dat: atomically update mac addresses

In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: atomically update mac addresses When a MAC address is updated in batadv_dat_entry_add(), it is done using a simple copy function. A p…

cve.org Linux:Linux · Linux:Linux 3 hari lalu

CVE-2026-93203 CWE-? 7.1

batman-adv: bla: avoid CRC corruption due to parallel claim add

In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid CRC corruption due to parallel claim add batadv_bla_add_claim() is used to add claims and modify the backbone of claims for CLA…

cve.org Linux:Linux · Linux:Linux 3 hari lalu

CVE-2026-93202 CWE-? N/A

i3c: master: Fix recursive locking during device registration

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3c_master_register_new_i3c_devs() registers newly discovered devices while holding i3c_…

cve.org Linux:Linux · Linux:Linux 3 hari lalu

CVE-2026-93201 CWE-? 7.8

dm-pcache: validate seg_id fields from persistent memory

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate seg_id fields from persistent memory cache_pos_decode(), cache_key_decode() and the last-kset branches of cache_replay(), the writ…

cve.org Linux:Linux · Linux:Linux 3 hari lalu

CVE-2026-93200 CWE-? N/A

i3c: master: Fix use-after-free of master->this

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix use-after-free of master->this sysfs attribute callbacks for the master controller device dereference master->this. However, master-…

cve.org Linux:Linux · Linux:Linux 3 hari lalu

CVE-2026-93199 CWE-? N/A

i3c: master: Do not treat master device as a duplicate target

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Do not treat master device as a duplicate target i3c_master_search_i3c_dev_duplicate() searches the bus for another I3C device with the s…

cve.org Linux:Linux · Linux:Linux 3 hari lalu

CVE-2026-93198 CWE-? N/A

dm-pcache: validate the persisted dirty_tail chain at load

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate the persisted dirty_tail chain at load The writeback worker follows the persisted dirty_tail chain, which is decoded from the cach…

cve.org Linux:Linux · Linux:Linux 3 hari lalu

CVE-2026-93197 CWE-? N/A

memcg: move LRU size accounting on reparenting instead of copying it

In the Linux kernel, the following vulnerability has been resolved: memcg: move LRU size accounting on reparenting instead of copying it When a memory cgroup is offlined its LRU folios are reparented to the parent. lr…

cve.org Linux:Linux · Linux:Linux 3 hari lalu

CVE-2026-93196 CWE-? 8.4

nvdimm: virtio_pmem: refcount requests for token lifetime

In the Linux kernel, the following vulnerability has been resolved: nvdimm: virtio_pmem: refcount requests for token lifetime KASAN reports slab-use-after-free in __wake_up_common(): BUG: KASAN: slab-use-after-free in …

cve.org Linux:Linux · Linux:Linux 3 hari lalu

CVE-2026-93195 CWE-? N/A

drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel

In the Linux kernel, the following vulnerability has been resolved: drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel The DisplayPort AUX channel gets initialized and registered during dw_dp_bind(), bu…

cve.org Linux:Linux · Linux:Linux 3 hari lalu