Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
6.9 MEDIUM
CVE-2026-108046 — Direct Object Reference (IDOR) vulnerability in Alosuite

Direct Object Reference (IDOR) vulnerability in Alosuite due to insufficient authorization checks when processing object identifiers. By modifying the identifier provided to the ‘/Companies/Edit/{id}…

Remote | Authorization
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99269 — sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before moving tasks off DSQs A task can be found on a non-local DSQ while the CPU which …

| Race Condition
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99268 — io_uring: wake ring pollers for local task_work

In the Linux kernel, the following vulnerability has been resolved: io_uring: wake ring pollers for local task_work With IORING_SETUP_DEFER_TASKRUN completions are queued as local work, and only be…

| Race Condition
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99267 — io_uring/napi: make stale entries time out after 60s

In the Linux kernel, the following vulnerability has been resolved: io_uring/napi: make stale entries time out after 60s With dynamic tracking a NAPI id that hasn't been seen for a minute is meant …

| Misconfiguration
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99266 — io_uring/zcrx: fix buffer offsets in areas above 4GB

In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix buffer offsets in areas above 4GB io_zcrx_queue_cqe() computes the offset of the buffer in its area from net_i…

| Memory Corruption
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99265 — io_uring/openclose: keep the lock in io_pipe_fixed()

In the Linux kernel, the following vulnerability has been resolved: io_uring/openclose: keep the lock in io_pipe_fixed() io_pipe_fixed() installs both ends of the pipe in the fixed file table, drop…

| Race Condition
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99264 — io_uring/net: don't retry recv on uncommitted buffers

In the Linux kernel, the following vulnerability has been resolved: io_uring/net: don't retry recv on uncommitted buffers Commit 41b70df5b38b ("io_uring/net: commit partial buffers on retry") commi…

| Race Condition
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99263 — io_uring/poll: avoid retry wakeup loss when dropping ownership

In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: avoid retry wakeup loss when dropping ownership If a wakeup sets IO_POLL_RETRY_FLAG between the owning task consum…

| Race Condition
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99262 — io_uring/timeout: don't lose a cancel as io-wq arms a timeout

In the Linux kernel, the following vulnerability has been resolved: io_uring/timeout: don't lose a cancel as io-wq arms a timeout An IORING_OP_TIMEOUT run by io-wq, because of IOSQE_ASYNC, has the …

| Race Condition
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99261 — drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction It fixes both the move overflow and the eviction fence …

Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99260 — ntfs: fix resident conversion in ntfs_new_attr_flags

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags When setting sparse/compressed flags on a resident attribute, the function s…

| Memory Corruption
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99259 — soc/tegra: pmc: Fix uninitialised clock rate

In the Linux kernel, the following vulnerability has been resolved: soc/tegra: pmc: Fix uninitialised clock rate For legacy 32-bit Tegra devices, the warning in the tegra_pmc_enter_suspend_mode() f…

Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99258 — x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()

In the Linux kernel, the following vulnerability has been resolved: x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() hv_apicid_to_vp_index() currently uses the per-cpu hyperca…

| Misconfiguration
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99257 — gpio: shared: gracefully handle no-device lookup of shared GPIOs

In the Linux kernel, the following vulnerability has been resolved: gpio: shared: gracefully handle no-device lookup of shared GPIOs We use platform lookup tables for shared GPIOs. This mechanism n…

| Memory Corruption
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99256 — dm cache: fix issue with background work locking

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix issue with background work locking dm cache used a rw_semaphore for background_work_lock. Write locks on rw_semapho…

| Race Condition
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99255 — io_uring/io-wq: don't hide a link from cancellations

In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: don't hide a link from cancellations A task that exits cancels its tracked requests and waits until they are gone…

| Race Condition
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99254 — io_uring: don't flood a cancelling task with task_work

In the Linux kernel, the following vulnerability has been resolved: io_uring: don't flood a cancelling task with task_work io_ring_exit_work() asks each task which has used the ring to remove its t…

| Denial of Service
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99253 — io_uring/cancel: rearm local work wake up before sleep

In the Linux kernel, the following vulnerability has been resolved: io_uring/cancel: rearm local work wake up before sleep io_uring_try_cancel_requests() sets ->cq_wait_nr to 1 so that the next io_…

| Race Condition
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99252 — io_uring/mpscq: disable preemption while pushing

In the Linux kernel, the following vulnerability has been resolved: io_uring/mpscq: disable preemption while pushing A push makes the node the new tail, and then links it to its predecessor. In bet…

| Race Condition
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
0.0 NA
CVE-2026-99251 — Drivers: hv: Avoid infinite retry loop in init_vp_index()

In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: Avoid infinite retry loop in init_vp_index() There is a retry loop in init_vp_index() where the CPUs from a certain …

| Denial of Service
Nov 03, 2026 Nov 03, 2026
Nov 03, 2026
Nov 03, 2026
Showing 20 of 16944 Results