riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE
Advisory content revised
CVE-2026-99017
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Weekly briefing
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
1120 source records · 1005 groupsSecurityriscv: futex: untag the user pointer before the atomic access
riscv: futex: untag the user pointer before the atomic access
Advisory content revised
CVE-2026-99016
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitysched/cache: Decouple sched_cache_group from mm to fix UAF
sched/cache: Decouple sched_cache_group from mm to fix UAF
Advisory content revised
CVE-2026-98385
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securityscsi: libiscsi_tcp: Check the data direction of a Data-In PDU
scsi: libiscsi_tcp: Check the data direction of a Data-In PDU
Advisory content revised
CVE-2026-98479
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitysmb: client: fix create context out-of-bounds reads
smb: client: fix create context out-of-bounds reads
Advisory content revised
CVE-2026-98454
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitysmb: client: fix missing iov bounds check in parse_posix_sids()
smb: client: fix missing iov bounds check in parse_posix_sids()
Advisory content revised
CVE-2026-98405
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitysmb: client: use finish_no_open() for non-regular inodes
smb: client: use finish_no_open() for non-regular inodes
Advisory content revised
CVE-2026-98451
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitystrparser: make sure __strp_recv isn't running before tearing down the parser
strparser: make sure __strp_recv isn't running before tearing down the parser
Advisory content revised
CVE-2026-99056
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitytcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()
tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()
Advisory content revised
CVE-2026-98374
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitytipc: destroy topsrv workqueues before closing connections
tipc: destroy topsrv workqueues before closing connections
Advisory content revised
CVE-2026-99054
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitytipc: hold a reference to nodes found by link name
tipc: hold a reference to nodes found by link name
Advisory content revised
CVE-2026-99053
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitytipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow
tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow
Advisory content revised
CVE-2026-98550
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securityveth: manage XDP program pointers during channel resize
veth: manage XDP program pointers during channel resize
Advisory content revised
CVE-2026-98381
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitywifi: iwlwifi: mvm: fix sched scan IE sizing
wifi: iwlwifi: mvm: fix sched scan IE sizing
Advisory content revised
CVE-2026-98889
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securitywireguard: noise: reject response consumption after intermediate initiation
wireguard: noise: reject response consumption after intermediate initiation
Advisory content revised
CVE-2026-99059
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securityxfs: fix cursor and pointer handling when recovering iunlink buckets
xfs: fix cursor and pointer handling when recovering iunlink buckets
Advisory content revised
CVE-2026-98443
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securityxfs: fix exchange-range-to-eof file size exchange
xfs: fix exchange-range-to-eof file size exchange
Advisory content revised
CVE-2026-98974
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Securityxfs: stop exchanging reflink flags when exchanging mappings
xfs: stop exchanging reflink flags when exchanging mappings
Advisory content revised
CVE-2026-98975
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityArista VeloCloud Orchestrator SQL Injection Vulnerability
Arista VeloCloud Orchestrator SQL Injection Vulnerability
New CISA KEV listing observed
CVE-2026-114625
Assessment context
CISA lists exploitation in the wild; assess the source's affected products.
SecurityCollabora Online – Built-in CODE Server OS Command Injection Vulnerability
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
New CISA KEV listing observed
CVE-2026-110447
Assessment context
CISA lists exploitation in the wild; assess the source's affected products.
SecurityAgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server
AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server
Newly collected advisory
CVE-2026-115727
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityArbitrary file read and backend crash through unrestricted provider method calls
Arbitrary file read and backend crash through unrestricted provider method calls
Newly collected advisory
CVE-2026-115931
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityAuthenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10
Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10
Affected-version evidence changed
CVE-2026-95714
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityAuthenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10
Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10
Affected-version evidence changed
CVE-2026-95719
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.