Aggregator

A vulnerability was found in Linux Kernel up to 6.19.12. It has been declared as critical. Affected by this issue is the function proto_register of the component mptcp. Executing a manipulation can lead to use after free. This vulnerability is registered as CVE-2026-31669. The attack requires access to the local network. No exploit is available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.19.12. It has been rated as critical. This affects the function build_report of the component xfrm_user. The manipulation leads to information disclosure. This vulnerability is documented as CVE-2026-31671. The attack requires being on the local network. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.1.167/6.6.130/6.12.79/6.18.20/6.19.10. This issue affects the function dev_consume_skb_any of the file kernel/softirq.c. This manipulation causes privilege escalation. This vulnerability appears as CVE-2026-31563. The attacker needs to be present on the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.19.12. Affected by this vulnerability is the function nft_ct_timeout_obj_destroy of the file nfnetlink_cttimeout.c of the component netfilter. Such manipulation leads to use after free. This vulnerability is referenced as CVE-2026-31665. The attack needs to be initiated within the local network. No exploit is available. You should upgrade the affected component.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.19.12. Affected by this issue is some unknown functionality of the component net. The manipulation leads to privilege escalation. This vulnerability is traded as CVE-2026-31670. Access to the local network is required for this attack to succeed. There is no exploit available. You should upgrade the affected component.

A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.19.12. This vulnerability affects the function jumbo_frm. The manipulation of the argument len results in integer underflow. This vulnerability is reported as CVE-2026-31649. The attacker must have access to the local network to execute the attack. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.19.10. This affects the function futex_lock_pi. The manipulation leads to improper update of reference count. This vulnerability is uniquely identified as CVE-2026-31555. The attack can only be initiated within the local network. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in Linux Kernel up to 6.19.9. This vulnerability affects the function bond_debug_rlb_hash_show of the file bond_alb.c of the component net. The manipulation of the argument slave leads to null pointer dereference. This vulnerability is documented as CVE-2026-31546. The attack requires being on the local network. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.19.12. The affected element is an unknown function of the component mmc. Performing a manipulation results in use after free. This vulnerability is cataloged as CVE-2026-31651. The attack must originate from the local network. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability identified as critical has been detected in Linux Kernel up to 7.0.0. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in privilege escalation. This vulnerability was named CVE-2026-31628. The attack needs to be approached within the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.15.9/6.16.0. This impacts the function config_group_find_item of the component usb. Such manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2025-38558. The attack can only be initiated within the local network. No exploit exists. The affected component should be upgraded.

A vulnerability identified as critical has been detected in Linux Kernel up to 6.12.41/6.15.9/6.16.0. This affects the function apple_magic_backlight_report_set of the component HID. This manipulation causes null pointer dereference. This vulnerability is handled as CVE-2025-38557. The attack can only be done within the local network. There is not any exploit available. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.15.9/6.16.0. It has been classified as problematic. Affected is the function s32ton. This manipulation causes out-of-bounds read. This vulnerability is registered as CVE-2025-38556. The attack requires access to the local network. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 6.1.147/6.6.101/6.12.41/6.15.9/6.16.0 and classified as critical. This impacts the function composite_dev_cleanup of the component usb. The manipulation results in use after free. This vulnerability is cataloged as CVE-2025-38555. The attack must originate from the local network. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.15.9/6.16.0 and classified as critical. Impacted is the function lock_vma_under_rcu of the component mm. Performing a manipulation results in use after free. This vulnerability is cataloged as CVE-2025-38554. The attack must originate from the local network. There is no exploit available. The affected component should be upgraded.

A vulnerability described as critical has been identified in Python CPython up to 3.14.x. Impacted is the function lzma.LZMADecompressor/bz2.BZ2Decompressor/gzip.GzipFile of the component Decompression Call Handler. Executing a manipulation can lead to use after free. This vulnerability appears as CVE-2026-6100. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability has been found in Python CPython up to 3.14.x and classified as critical. This affects the function webbrowser.open. Performing a manipulation results in command injection. This vulnerability is known as CVE-2026-4786. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

概述2026 年 7 月初，我们注意到一个用 Go 语言编写的僵尸网络正在向互联网大规模投递 Bot 样本。

德国纺织公司ZEGO Textilveredelungszentrum已申请破产，并将原因归咎于今年3月遭受的一次网络攻击——该攻击导致其生产停滞近六周。

A vulnerability identified as critical has been detected in Linux Kernel. This affects the function del_timer of the file drivers/isdn/mISDN/l1oip_core.c of the component Bluetooth. This manipulation causes use after free. This vulnerability is tracked as CVE-2022-3565. The attack is only possible within the local network. No exploit exists. It is recommended to apply a patch to fix this issue.