CVE-2026-53327

Publié : 1 juillet 2026

Modifié : 1 juillet 2026

Description détaillée

In the Linux kernel, the following vulnerability has been resolved: debugobjects: Do not fill_pool() if pi_blocked_on On RT enabled kernels, fill_pool() ends up calling rtlock_lock(), which asserts if current::pi_blocked_on is set, because a task can obviously only block on one lock as otherwise the priority inheritenace chain gets corrupted. Prevent this by expanding the conditional to take current::pi_blocked_on into account.

Références et Patchs

https://git.kernel.org/stable/c/33bee10644f8fff3b1a0187ad5ad34513e5e8e72 https://git.kernel.org/stable/c/3a408cae608d9c075dd3a9e5cfc03b3cb0726863 https://git.kernel.org/stable/c/5f41161059fd0f1bbf18c90f3180e38cc45a14eb

Dernières Vulnérabilités

CVE-2026-5051

HashiCorp Vault and Vault Enterprise prior to 2.0.1 audit device validation logic did not consistently apply plugin directory protections when the legacy file audit path option was used. This vulnerability (CVE-2026-5051) is fixed in 2.0.1, 1.21.6, 1.20.11, and 1.19.17.

VOIR DÉTAILS

CVE-2026-58521

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in The Wikimedia Foundation Mediawiki - Cargo Extension allows SQL Injection. This issue affects Mediawiki - Cargo Extension: from * before 1.43.9,1.44.6,1.45.4.

VOIR DÉTAILS

CVE-2026-58520

URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - UrlShortener Extension allows Cross-Site Flashing. This issue affects Mediawiki - UrlShortener Extension: from * before 1.43.9, 1.44.6, 1.45.4.

VOIR DÉTAILS