177133 matches found
CVE-2026-64266
In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before returning from fusereffolio fusereffolio unlocks the request but does not re-lock it before returning. fusechanabort can end the request and the async end callback eg fusewritepagefree can free the ar...
CVE-2026-64265
In the Linux kernel, the following vulnerability has been resolved: fuse: clear intrentry in fuseresend and fuseremovependingreq When fuseresend moves a request from fpq-processing back to fiq-pending, it sets FRPENDING and clears FRSENT but does not remove the requests intrentry from...
CVE-2026-64263
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix moving cancelled entry to entinuserspace list fuseuringcancel moves entries that are available these have no reqs attached to the entinuserspace list. entlistrequestexpired checks the first entry on entinuserspace...
CVE-2026-64264
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix EFAULT clobber in fuseuringcommit copyfromuser returns the number of bytes not copied as an unsigned residual on failure 1..sizeofstruct fuseoutheader. fuseuringcommit stores that residual in ssizet err, sets...
CVE-2026-64262
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: end fusereq on io-uring cancel task work When iouring delivers task work with tw.cancel set PFEXITING, PFKTHREAD fallback, or percpurefisdying on the ring context, fuseuringsendintask takes the cancel branch, assigns...
CVE-2026-64259
In the Linux kernel, the following vulnerability has been resolved: fuse-uring: make a fusereq on SQE commit only findable after memcpy Bad userspace might try to trick us and send commit SQEs request unique / commit-id of requests that are not even send to fuse-server iouringcmddone not called...
CVE-2026-64257
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject overlapping data areas in SMB2 responses Commit 53b7c271f06b "smb: client: restrict implied bcc0 exemption to responses without data area" restricted the implied bcc0 length exception to responses without a da...
CVE-2026-64256
In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around quota ids in dqiterate LOLLM noticed that qid is an unsigned 32-bit variable. If it happens to be set to XFSDQIDMAX due to a filesystem that actually has a dquot for IDMAX, then this addition will truncate ...
GHSA-4W2J-M93H-CJ5J vulnerabilities
Vulnerabilities for packages: komodo, sccache, xh, pixi, cargo-audit, berg, zola, asciinema, garage, deno...
CVE-2026-56817 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, tez, thingsboard, celeborn...
GHSA-4QHR-G3C6-FCFX vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, tez, thingsboard, celeborn...
GHSA-4W2J-M93H-CJ5J vulnerabilities
Vulnerabilities for packages: deno, sccache, pixi, cargo-audit, berg, zola, xh...
CVE-2026-5078 vulnerabilities
Vulnerabilities for packages: tileserver-gl, tileserver-gl-fips, azurite...
CVE-2026-5051 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector-fips, splunk-otel-collector...
GHSA-RX9V-2FJR-MHX5 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector-fips, splunk-otel-collector...
GHSA-4VJ7-5MJ6-JM8M vulnerabilities
Vulnerabilities for packages: tileserver-gl, tileserver-gl-fips, azurite...
GHSA-3PJW-73GF-8QR5 vulnerabilities
Vulnerabilities for packages: wso2is, opensearch, flyway, nacos-docker, lmcache-cuda-12.8, opensearch-fips, jenkins, spark, sonarqube, akhq, apache-nifi...
CVE-2026-59888 vulnerabilities
Vulnerabilities for packages: wso2is, opensearch, flyway, nacos-docker, lmcache-cuda-12.8, opensearch-fips, jenkins, spark, sonarqube, akhq, apache-nifi...