Aggregator

CVE-2026-53273 | Linux Kernel up to 7.0.12 tee kfree idr use after free (EUVD-2026-39224)

Vuldb Updates
3 days 19 hours ago
A vulnerability was found in Linux Kernel up to 7.0.12 and classified as critical. Impacted is the function kfree of the component tee. The manipulation of the argument idr results in use after free. This vulnerability was named CVE-2026-53273. The attack needs to be approached within the local network. There is no available exploit. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-53272 | Linux Kernel up to 6.12.93/6.18.35/7.0.12 erofs z_erofs_decompress_kickoff sync_decompress use after free (EUVD-2026-39223)

Vuldb Updates
3 days 19 hours ago
A vulnerability classified as critical has been found in Linux Kernel up to 6.12.93/6.18.35/7.0.12. This vulnerability affects the function z_erofs_decompress_kickoff of the component erofs. Performing a manipulation of the argument sync_decompress results in use after free. This vulnerability is reported as CVE-2026-53272. The attacker must have access to the local network to execute the attack. No exploit exists. It is recommended to upgrade the affected component.
vuldb.com

CVE-2026-53274 | Linux Kernel up to 7.0.12 net __smc_setsockopt denial of service (EUVD-2026-39225)

Vuldb Updates
3 days 19 hours ago
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.175/6.6.142/6.12.93/6.18.35/7.0.12. Impacted is the function __smc_setsockopt of the component net. The manipulation leads to denial of service. This vulnerability is traded as CVE-2026-53274. An attack has to be approached locally. There is no exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2026-53276 | Linux Kernel up to 7.0.12 Bluetooth iso_sock_rebind_bc conn use after free (EUVD-2026-39227)

Vuldb Updates
3 days 19 hours ago
A vulnerability, which was classified as critical, was found in Linux Kernel up to 7.0.12. The affected element is the function iso_sock_rebind_bc of the component Bluetooth. The manipulation of the argument conn results in use after free. This vulnerability is known as CVE-2026-53276. Access to the local network is required for this attack. No exploit is available. You should upgrade the affected component.
vuldb.com

CVE-2026-53275 | Linux Kernel up to 7.0.12 ipv6 net/ipv6/mcast.c pskb_may_pull use after free (EUVD-2026-39226)

Vuldb Updates
3 days 19 hours ago
A vulnerability identified as critical has been detected in Linux Kernel up to 7.0.12. Affected is the function pskb_may_pull of the file net/ipv6/mcast.c of the component ipv6. The manipulation leads to use after free. This vulnerability is listed as CVE-2026-53275. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.
vuldb.com

OpenAI 宣布了专用于推理的自研 AI 芯片 Jalapeño

Solidot
3 days 19 hours ago
OpenAI 宣布了首款自研芯片 Jalapeño，由 OpenAI 与博通公司合作设计和制造，专门用于 AI 推理。OpenAI 没有披露技术方面的细节，只是称初步测试显示每瓦性能显著优于目前最先进的同类产品。OpenAI 与博通是在去年 10 月正式宣布合作，OpenAI 声称利用其模型加速了芯片的设计。自研 AI 芯片旨在减少对英伟达的依赖，Google 和亚马逊也都开发了自研芯片。

WhatsApp to Warn Users Before Starting Chats With New Phone Numbers

Cyber Security News
3 days 19 hours ago

WhatsApp is rolling out a new security warning on both Android and iOS that appears before users even open a conversation with an unknown phone number. WABetaInfo noted that the feature displays the country where the number is registered, whether it’s saved as a contact, and whether any groups are shared, prompting users to pause […]

The post WhatsApp to Warn Users Before Starting Chats With New Phone Numbers appeared first on Cyber Security News.

Guru Baran

Hacker gets 18 months for attack that compromised 60,000 betting accounts

Help Net Security
3 days 19 hours ago

A 21-year-old man known online as “Snoopy” was sentenced to 18 months in prison for his role in a scheme that hacked user accounts on a fantasy sports and betting website and sold access to them, causing hundreds of thousands of dollars in losses. Nathan Austad of Farmington, Minnesota, pleaded guilty in December 2025 to one count of conspiracy to commit computer intrusion. According to prosecutors, Austad and his co-conspirators launched a credential stuffing attack … More →

The post Hacker gets 18 months for attack that compromised 60,000 betting accounts appeared first on Help Net Security.

Sinisa Markovic

Managed ad