Posts of last 24 hours

CVE-2026-53403 | Linux Kernel up to 7.1.2 Fbdev fb_new_modelist var null pointer dereference (Nessus ID 330014 / WID-SEC-2026-2403)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 7.1.2. This impacts the function fb_new_modelist of the component Fbdev. The manipulation of the argument var results in null pointer dereference. This vulnerability is identified as CVE-2026-53403. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.
https://vuldb.com/vuln/380137
CVE-2026-53402 | Linux Kernel up to 6.12.95/6.18.38/7.1.2/7.2 Fbcon drivers/video/fbcon.c fbcon_do_set_font vc_hi_font_mask out-of-bounds (Nessus ID 327892 / WID-SEC-2026-2403)
A vulnerability was found in Linux Kernel up to 6.12.95/6.18.38/7.1.2/7.2 and classified as problematic. Impacted is the function fbcon_do_set_font of the file drivers/video/fbcon.c of the component Fbcon. Such manipulation of the argument vc_hi_font_mask leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2026-53402. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.
https://vuldb.com/vuln/380133
CVE-2026-53400 | Linux Kernel up to 6.12.94/6.18.37/7.1.2 I2C Core i2c_get_adapter use after free (WID-SEC-2026-2403)
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.12.94/6.18.37/7.1.2. This vulnerability affects the function i2c_get_adapter of the component I2C Core. The manipulation results in use after free. This vulnerability is known as CVE-2026-53400. Attacking locally is a requirement. No exploit is available. You should upgrade the affected component.
https://vuldb.com/vuln/380131
CVE-2026-53401 | Linux Kernel up to 7.1.2/7.2 Fbdev omapfb_mmap use after free (WID-SEC-2026-2403)
A vulnerability classified as critical has been found in Linux Kernel up to 7.1.2/7.2. This vulnerability affects the function omapfb_mmap of the component Fbdev. The manipulation leads to use after free. This vulnerability is documented as CVE-2026-53401. The attack needs to be performed locally. There is not any exploit available. It is recommended to upgrade the affected component.
https://vuldb.com/vuln/380142
CVE-2026-53399 | Linux Kernel up to 6.12.95/6.18.38/7.1.2 Nfsd nfsd4_layout_setlease ls_fence_work use after free (Nessus ID 333521 / WID-SEC-2026-2403)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.12.95/6.18.38/7.1.2. This affects the function nfsd4_layout_setlease of the component Nfsd. The manipulation of the argument ls_fence_work leads to use after free. This vulnerability is traded as CVE-2026-53399. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.
https://vuldb.com/vuln/380130
CVE-2026-53398 | Linux Kernel up to 7.1.2 NFSD nfsd4_decode_secinfo_no_name initialization (Nessus ID 330014 / WID-SEC-2026-2403)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 7.1.2. The affected element is the function nfsd4_decode_secinfo_no_name of the component NFSD. Executing a manipulation can lead to improper initialization. This vulnerability is tracked as CVE-2026-53398. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.
https://vuldb.com/vuln/380123
CVE-2026-45201 | Imagination Graphics DDK up to 26.1 RTM1 out-of-bounds
A vulnerability classified as very critical was found in Imagination Graphics DDK up to 1.18 RTM1/23.2 RTM1/24.2 RTM2/25.3 RTM/26.1 RTM1. Affected is an unknown function. Executing a manipulation can lead to out-of-bounds read. This vulnerability is registered as CVE-2026-45201. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.
https://vuldb.com/vuln/394031
CVE-2026-45202 | Imagination Graphics DDK up to 26.1 RTM1 Memory Free Paths double free
A vulnerability classified as very critical has been found in Imagination Graphics DDK up to 1.18 RTM2/23.2 RTM2/24.2 RTM2/25.3 RTM/26.1 RTM1. This impacts an unknown function of the component Memory Free Paths. Performing a manipulation results in double free. This vulnerability is cataloged as CVE-2026-45202. The attack must be initiated from a local position. There is no exploit available. It is recommended to upgrade the affected component.
https://vuldb.com/vuln/394030
Nearly half of enterprises have no one leading PQC migration

Enterprises believe they are prepared for the security challenges posed by quantum computing, but gaps in ownership, testing and visibility could complicate their transition to post-quantum cryptography (PQC), according to new research from Axiad. Who owns PQC migration? (Source: Axiad) Organizations need to know where certificates, cryptographic keys and algorithms are used before they can plan a PQC migration. About 75% of respondents said they maintain a continuously updated inventory of these assets. However, responses … More →

The post Nearly half of enterprises have no one leading PQC migration appeared first on Help Net Security.

https://www.helpnetsecurity.com/2026/08/21/axiad-pqc-migration-readiness-gaps-report/
CVE-2026-45199 | Imagination Graphics DDK up to 26.1 RTM1 GPU Firmware memory corruption
A vulnerability described as very critical has been identified in Imagination Graphics DDK up to 26.1 RTM1. This affects an unknown function of the component GPU Firmware. Such manipulation leads to memory corruption. This vulnerability is listed as CVE-2026-45199. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.
https://vuldb.com/vuln/394029

Managed ad