On April 22, 2026, CVE-2026-6842 was published for GNU nano after Red Hat documented a low-severity local flaw in which permissive directory creation could allow an attacker to plant a malicious .desktop launcher under a user’s home directory. The bug is not a Windows vulnerability in the...
CVE-2026-43500 is a high-severity Linux kernel vulnerability disclosed in May 2026 in the rxrpc networking subsystem, where certain fragmented socket buffers can reach in-place decryption paths without being copied away from externally owned memory, creating a local privilege-escalation risk on...