{"vulnerability": "CVE-2026-8948", "sightings": [{"uuid": "29ee6144-576e-4eba-915e-1a89b0604e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8948", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities_20260520", "content": "", "creation_timestamp": "2026-05-19T20:00:00.000000Z"}, {"uuid": "9db3f331-7675-42c6-94c4-124659459832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89485", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvf3qjzf2y2t", "content": "CVE-2026-89485 - linux\nThe Linux kernel\u2019s file\u2011cleanup code could accidentally use a file that has already been removed, leading to a system crash or instability. This happens when the system checks files for\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#linux #Debian12 #CVE #infosec", "creation_timestamp": "2026-09-13T07:40:05.010831Z"}, {"uuid": "9b2c7bcd-3a06-46c7-b099-b602a29abcb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89482", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvfpcgh6522n", "content": "CVE-2026-89482 - linux\nThe Linux kernel's NVMe over TCP driver can mishandle a special write-zeroes command, leading to memory corruption and a possible system crash. This occurs when the driver accepts data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#linux #Debian12 #CVE #infosec", "creation_timestamp": "2026-09-13T13:30:06.202086Z"}, {"uuid": "923df3a1-5e40-4175-9ee1-331b5d6af0e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89488", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mviovm6xf22z", "content": "CVE-2026-89488: use-after-free in Linux openvswitch CT limit teardown. Unprivileged user can trigger slab-UAF in ovs_ct_execute(). CVSS N/A, no patch yet. Update immediately. https://www.valtersit.com/cve/CVE-2026-89488/ #CVE #Linux #infosec", "creation_timestamp": "2026-09-14T18:00:55.417546Z"}, {"uuid": "e97762d7-801e-49ea-80c1-b3976ecddb4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89488", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117270698712667304", "content": "CVE-2026-89488: use-after-free in Linux openvswitch CT limit teardown. Unprivileged user can trigger slab-UAF in ovs_ct_execute(). CVSS N/A, no patch yet. Update immediately. https://www.valtersit.com/cve/CVE-2026-89488/ #CVE #Linux #infosec", "creation_timestamp": "2026-09-14T18:00:57.325024Z"}, {"uuid": "c123c554-4342-4ccd-80c2-d37750adecbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89481", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvkixofqxw2e", "content": "CVE-2026-89481 Linux kernel nvme-tcp host memory disclosure: a malicious controller can send an R2T for a READ and the host returns the read buffer, leaking kernel memory. CVSS N/A, patch status unknown. Patch https://www.valtersit.com/cve/CVE-2026-89481/ #CVE #Linux #infosec", "creation_timestamp": "2026-09-15T11:20:02.189180Z"}, {"uuid": "65d9f53a-f6fa-46a6-ae5d-509f00756810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89489", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117279935751262853", "content": "CVE-2026-89489 Linux kernel openrisc or1k_atomic lacks access_ok checks, allowing arbitrary kernel memory read/write. No CVSS assigned, patch status unknown. Update your kernel now. https://www.valtersit.com/cve/CVE-2026-89489/ #CVE #Linux #infosec", "creation_timestamp": "2026-09-16T09:10:02.122990Z"}, {"uuid": "68cc8b28-a4ae-45ec-b9cf-b8112cb6befc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89489", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvmsq2c64k2b", "content": "CVE-2026-89489 Linux kernel openrisc or1k_atomic lacks access_ok checks, allowing arbitrary kernel memory read/write. No CVSS assigned, patch status unknown. Update your kernel now. https://www.valtersit.com/cve/CVE-2026-89489/ #CVE #Linux #infosec", "creation_timestamp": "2026-09-16T09:20:04.249928Z"}, {"uuid": "6cf51ae5-b353-4487-9080-4ae3a8565065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89483", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvpqm57yun2f", "content": "CVE-2026-89483 Linux kernel nvme discard: uninitialized page read leaks 4080 bytes of stale kernel memory to devices. CVSS N/A, patch status unknown. Update kernel now if you run nvme. https://www.valtersit.com/cve/CVE-2026-89483/ #CVE #Linux #infosec", "creation_timestamp": "2026-09-17T13:20:04.010875Z"}, {"uuid": "4090d402-4d44-4403-9a7b-43abbb88d07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89483", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117286581226384577", "content": "CVE-2026-89483 Linux kernel nvme discard: uninitialized page read leaks 4080 bytes of stale kernel memory to devices. CVSS N/A, patch status unknown. Update kernel now if you run nvme. https://www.valtersit.com/cve/CVE-2026-89483/ #CVE #Linux #infosec", "creation_timestamp": "2026-09-17T13:20:05.545966Z"}, {"uuid": "4ae6d5ed-b810-4e54-bc27-e377916f4d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89480", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvutri77iv2e", "content": "CVE-2026-89480: Linux nvme-tcp accepts short reads without comparing received bytes to requested length, risking data corruption. CVSS N/A, unpatched. Patch now: https://www.valtersit.com/cve/CVE-2026-89480/ #CVE #Linux #infosec", "creation_timestamp": "2026-09-19T14:00:02.926121Z"}, {"uuid": "86795c86-2d3e-47d2-a3d7-55ab00e9bdea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89480", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117298063085335496", "content": "CVE-2026-89480: Linux nvme-tcp accepts short reads without comparing received bytes to requested length, risking data corruption. CVSS N/A, unpatched. Patch now: https://www.valtersit.com/cve/CVE-2026-89480/ #CVE #Linux #infosec", "creation_timestamp": "2026-09-19T14:00:07.665731Z"}, {"uuid": "e09932b9-b0b3-48f8-860b-334a7ac45cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89487", "type": "published-proof-of-concept", "source": "Telegram/DbUpSbDyqTEDA142f1k_A52l1XmTRcR9ZMWF0o943s3WuLY", "content": "", "creation_timestamp": "2026-09-23T04:24:43.000000Z"}, {"uuid": "99618753-02f3-4007-895a-e94ec70f2740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89487", "type": "seen", "source": "Telegram/Oush8h9tlm4h3DcbVbcGPy-U03xnUnBnJEgVtMIyP8MeEv8", "content": "", "creation_timestamp": "2026-09-25T09:22:30.000000Z"}, {"uuid": "c301f33d-9d51-4b3b-8bb4-39b202c03d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89487", "type": "published-proof-of-concept", "source": "Telegram/Oush8h9tlm4h3DcbVbcGPy-U03xnUnBnJEgVtMIyP8MeEv8", "content": "", "creation_timestamp": "2026-09-25T09:22:30.000000Z"}]}