Vuldb Updates

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.51/7.2.5. This affects the function nxp_process_fw_dump of the component btnxpuart. The manipulation results in out-of-bounds read. This vulnerability is cataloged as CVE-2026-90089. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability identified as critical has been detected in Linux Kernel up to 7.2.5. Affected by this issue is the function create_le_conn_complete of the component Bluetooth. The manipulation leads to allocation of resources. This vulnerability is listed as CVE-2026-90087. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.51/7.2.5. Affected by this vulnerability is the function xsk_tx_metadata_request of the component xsk. Executing a manipulation can lead to state issue. This vulnerability is tracked as CVE-2026-90086. The attack can be launched remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.12.109/6.18.51/7.2.5. This issue affects the function rvu_dbg_nix_tm_tree_display of the file /sys/kernel/debug/octeontx2/nix/tm_tree of the component octeontx2-af. Performing a manipulation of the argument sq_ctx results in null pointer dereference. This vulnerability is known as CVE-2026-90085. Attacking locally is a requirement. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Google Chrome. Impacted is an unknown function of the component Canvas. The manipulation results in memory corruption. This vulnerability is cataloged as CVE-2026-112992. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability identified as very critical has been detected in MongoDB PHP Driver up to 1.21.10/2.1.10/2.5.3. Affected is an unknown function of the component BSON encoder. Performing a manipulation results in heap-based buffer overflow. This vulnerability is reported as CVE-2026-106432. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

A vulnerability was found in Web::Simple up to 0.034. It has been classified as critical. Impacted is the function Web::Dispatch::ParamParser::get_unpacked_body_from of the component ParamParser. Performing a manipulation results in buffer overflow. This vulnerability was named CVE-2026-114629. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability categorized as critical has been discovered in MongoDB PHP Driver up to 1.21.10/2.1.10/2.5.3. This impacts an unknown function of the component BSON Encoder. Such manipulation leads to unchecked return value. This vulnerability is documented as CVE-2026-106436. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in GitLab up to 19.2.6/19.3.2/19.4.0. It has been classified as critical. Affected by this issue is some unknown functionality of the component Regular Expression Compilation. This manipulation causes integer overflow. This vulnerability is tracked as CVE-2026-93577. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability classified as critical has been found in GitLab up to 19.2.6/19.3.2/19.4.0. The affected element is an unknown function of the component Regular Expression Parsing. This manipulation causes double free. This vulnerability is handled as CVE-2026-89078. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability labeled as very critical has been found in GitLab up to 19.5.0. This affects an unknown part of the component Regular Expression Compilation. The manipulation results in integer overflow. This vulnerability is cataloged as CVE-2026-110264. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.18.51/7.2.5. It has been rated as very critical. Affected is the function register_netdev of the component octeontx2-vf. Performing a manipulation results in improper initialization. This vulnerability is identified as CVE-2026-90084. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is advised.

A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.51/7.2.5. Impacted is the function tcf_ife_act of the file net/sched/act_ife.c of the component act_ife. The manipulation of the argument hard_header_len results in memory corruption. This vulnerability is cataloged as CVE-2026-90083. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.2.5 and classified as very critical. This issue affects the function mana_gd_query_max_resources of the component mana. Executing a manipulation can lead to memory corruption. The identification of this vulnerability is CVE-2026-90082. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.2.5. It has been rated as very critical. The impacted element is the function rds_cong_map_updated of the file include/linux/wait.h of the component RDS. This manipulation of the argument m_waitq causes race condition. This vulnerability is tracked as CVE-2026-90081. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

A vulnerability has been found in Linux Kernel up to 6.18.51/7.2.5 and classified as critical. This vulnerability affects the function otx2_init_hw_resources/otx2_pool_aq_init of the component octeontx2-pf. Performing a manipulation results in null pointer dereference. This vulnerability was named CVE-2026-90080. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 7.2.5. It has been declared as critical. The affected element is the function rvu_mbox_init of the component octeontx2-af. The manipulation results in allocation of resources. This vulnerability is identified as CVE-2026-90079. The attack is only possible with local access. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 7.2.5. It has been classified as critical. Impacted is the function tcf_skbmod_act of the file net/sched/act_skbmod.c of the component act_skbmod. The manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-2026-90078. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in Linux Kernel up to 6.12.109/6.18.51/7.2.5. This affects the function fq_init of the file net/sched/fq.c of the component Fair Queueing Scheduler. Performing a manipulation of the argument quantum results in infinite loop. This vulnerability is reported as CVE-2026-90076. The attack requires a local approach. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.18.51/7.2.5. This affects the function copy_net_ns of the component Network Namespace. Such manipulation leads to memory leak. This vulnerability is uniquely identified as CVE-2026-90077. The attack can be launched remotely. No exploit exists. You should upgrade the affected component.