vulnerability mitigation

A small change in the Linux kernel’s Ceph client code — replacing a fatal assertion with a graceful error path in osdmap_apply_incremental() — closed CVE‑2026‑22990, eliminating a trivial path to a kernel panic but raising a set of operational and defensive‑coding questions operators should not...

The libsoup bug tracked as CVE-2025-32053 is a medium‑severity, remotely reachable heap buffer over‑read in the library’s feed/html sniffing code that can cause memory disclosure or crashes. Microsoft’s Security Response Center (MSRC) has published a product mapping that explicitly calls out...

Microsoft has confirmed a new security record — CVE-2026-0386 — tied to Windows Deployment Services (WDS) that, according to the vendor entry, stems from an improper access control issue capable of enabling remote code execution by an unauthenticated actor on an adjacent network. This is a...