Week: 2026-W07

io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop

2026-02-10 CVE-2026-23113

iommu/sva: invalidate stale IOTLB entries for kernel address space

2026-02-10 CVE-2025-71202

Kata Container to Guest micro VM privilege escalation

2026-02-10 CVE-2026-24834

criticalMicrosoft MSRC 2026-W07

ksmbd: add chann_lock to protect ksmbd_chann_list xarray

2026-02-10 CVE-2026-23226

ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths

2026-02-10 CVE-2026-23220

Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure

2026-02-10 CVE-2026-2443

libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.

2026-02-10 CVE-2025-61145

libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.

2026-02-10 CVE-2025-61143

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

2026-02-10 CVE-2025-61144

criticalMicrosoft MSRC 2026-W07

Local Path Provisioner vulnerable to Path Traversal via parameters.pathPattern

2026-02-10 CVE-2025-62878

criticalMicrosoft MSRC 2026-W07

LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED

2026-02-10 CVE-2025-71228

Mailslot File System Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21253

Malformed Valkey Cluster bus message can lead to Remote DoS

2026-02-10 CVE-2026-21863

md: suspend array while updating raid_disks via sysfs

2026-02-10 CVE-2025-71225

Microsoft ACI Confidential Containers Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21522

Microsoft ACI Confidential Containers Information Disclosure Vulnerability

2026-02-10 CVE-2026-23655

Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21537

Microsoft Edge (Chromium-based) Defense in Depth Vulnerability

2026-02-10 CVE-2026-0102

lowMicrosoft MSRC 2026-W07

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

2026-02-10 CVE-2026-0391

Microsoft Excel Elevation of Privilege Vulnerability

2026-02-10 CVE-2026-21259

Microsoft Excel Information Disclosure Vulnerability

2026-02-10 CVE-2026-21258

Microsoft Excel Information Disclosure Vulnerability

2026-02-10 CVE-2026-21261

Microsoft Exchange Server Spoofing Vulnerability

2026-02-10 CVE-2026-21527

Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

2026-02-10 CVE-2026-21513

Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

2026-02-10 CVE-2026-21514

Microsoft Outlook Spoofing Vulnerability

2026-02-10 CVE-2026-21260

Microsoft Outlook Spoofing Vulnerability

2026-02-10 CVE-2026-21511

Microsoft Teams Information Disclosure Vulnerability

2026-02-10 CVE-2026-21535

Microsoft Windows Improper Privilege Management Vulnerability

2026-02-10 CVE-2026-21533

Microsoft Windows NULL Pointer Dereference Vulnerability

2026-02-10 CVE-2026-21525

Microsoft Windows Shell Protection Mechanism Failure Vulnerability

2026-02-10 CVE-2026-21510

Microsoft Windows Type Confusion Vulnerability

2026-02-10 CVE-2026-21519

Microsoft Word Security Feature Bypass Vulnerability

2026-02-10 CVE-2026-21514

mm/hugetlb: fix hugetlb_pmd_shared()

2026-02-10 CVE-2026-23100

mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()

2026-02-10 CVE-2026-23169

mruby JMPNOT-to-JMPIF Optimization vm.c mrb_vm_exec use after free

2026-02-10 CVE-2026-1979

MSHTML Framework Security Feature Bypass Vulnerability

2026-02-10 CVE-2026-21513

nats-server websockets are vulnerable to pre-auth memory DoS

2026-02-10 CVE-2026-27571

net: fix segmentation of forwarding fraglist GRO

2026-02-10 CVE-2026-23154

net/sched: cls_u32: use skb_header_pointer_careful()

2026-02-10 CVE-2026-23204

netdevsim: fix a race issue related to the operation on bpf_bound_progs list

2026-02-10 CVE-2026-23126

nilfs2: Fix potential block overflow that cause system hang

2026-02-10 CVE-2025-71237

node-tar has Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in Extraction

2026-02-10 CVE-2026-26960

of: unittest: Fix memory leak in unittest_data_add()

2026-02-10 CVE-2026-23137

OpenSSL: Schwachstelle ermöglicht Denial of Service

2026-02-10 CVE-2024-4603

mediumBSI 2026-W07

PCI: endpoint: Avoid creating sub-groups asynchronously

2026-02-10 CVE-2025-71233

Power BI Remote Code Execution Vulnerability

2026-02-10 CVE-2026-21229

Qemu-kvm: heap buffer out-of-bounds read in vmdk compressed grain parsing

2026-02-10 CVE-2026-2243

Red Hat, Inc. CVE-2023-2804: Heap Based Overflow libjpeg-turbo

2026-02-10 CVE-2023-2804

riscv: trace: fix snapshot deadlock with sbi ecall

2026-02-10 CVE-2026-23217

rxrpc: Fix data-race warning and potential load/store tearing

2026-02-10 CVE-2026-23118

rxrpc: Fix recvmsg() unconditional requeue

2026-02-10 CVE-2026-23066

sched/mmcid: Don't assume CID is CPU owned on mode switch

2026-02-10 CVE-2026-23225

scsi: core: Wake up the error handler when final completions race against each other

2026-02-10 CVE-2026-23110

scsi: qla2xxx: Delay module unload while fabric scan in progress

2026-02-10 CVE-2025-71235

scsi: qla2xxx: Free sp in error path to fix system crash

2026-02-10 CVE-2025-71232

scsi: qla2xxx: Validate sp before freeing associated memory

2026-02-10 CVE-2025-71236

scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()

2026-02-10 CVE-2026-23216