ROS-20261006-73-0001

The vulnerability of the mcp251xopen function in the drivers/net/can/spi/mcp251x.c file of the Linux kernel’s CAN network device driver is related to the creation of critical data packets. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20261006-73-0119

The vulnerability of the spiregistercontroller function in the drivers/spi/spi.c module of the Linux operating system’s SPI device driver lies in the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20261006-73-0078

The vulnerability of the pmruntimereinit function in the drivers/base/power/runtime.c file of the Linux kernel’s device drivers module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

PT-2026-106362

A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited input capabilities to obtain security tokens. The issue occurs because the flow fails to check the minimum authentication level required by ...

CVE-2026-105485: Authentication Bypass by Capture-replay

Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured device verification link by an authenticated victim...

PT-2026-106673

In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix device kref underflow in dma chan put dma chan get takes chan-device-ref only on the slow path: / no kref on fast path / if chan-client count module getowner; chan-client count++; return 0; if !try module getowner...

Cisco ASA Uncontrolled Resource Consumption (CVE-2021-40125)

A vulnerability in the Internet Key Exchange Version 2 IKEv2 implementation of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker to trigger a denial of service DoS condition on an affected device. This...

The vulnerability of the HU250 microprogramming software module of the modular remote terminal for telemechanics and automation by PowerLogic T300 (formerly Easergy T300 RTU) allows a intruder to gain enhanced privileges and control over the device entirely.

The vulnerability of the HU250 microprogramming software for modular remote terminals in telemechanics and automation systems from PowerLogic T300 formerly Easergy T300 RTU relates to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow attackers to...

The vulnerability of the Device Association Service in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Device Association Service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20261006-73-0325

The vulnerability of the tegraqspicombinedseqxfer function in the drivers/spi/spi-tegra210-quad.c file of the Linux operating system’s SPI device driver relates to the pointer assignment. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux Distros Unpatched Vulnerability : CVE-2026-98181

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/gud: fix out-of-bounds write in gudplaneatomiccheck The plane property loop uses req-propertiesnumproperties + i as write index while simultaneously...

ROS-20261006-73-1003

The vulnerability of the setnewpassword function in the drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c file of the Linux operating system’s X86 device driver module is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an...

Werkzeug safe_join() allows Windows special device names

Werkzeug's safejoin function allows Windows device names as filenames when they have an empty ADS marker on NTFS. This was previously reported as https://github.com/pallets/werkzeug/security/advisories/GHSA-hgf8-39gv-g3f2, but the added filtering failed to account for the fact Windows allows...

GHSA-G6X2-HCCM-HH4M Werkzeug safe_join() allows Windows special device names

Werkzeug's safejoin function allows Windows device names as filenames when they have an empty ADS marker on NTFS. This was previously reported as https://github.com/pallets/werkzeug/security/advisories/GHSA-hgf8-39gv-g3f2, but the added filtering failed to account for the fact Windows allows...

CVE-2026-93316

A flaw was found in BuildKit. This vulnerability allows an authenticated user to cause a Denial of Service DoS by crashing the daemon. When the BuildKit daemon is started with Container Device Interface CDI support disabled, submitting a build that attempts to use CDI devices triggers an unhandle...

CVE-2026-93320

A flaw was found in BuildKit. This vulnerability allows an attacker to trick the build engine into performing file operations on special file inodes where regular files are expected. By providing a crafted build context, an attacker can block build operations leading to a Denial of Service DoS or...

AZL-106806 CVE-2026-93320 affecting package moby-engine 25.0.3-20

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access...

CVE-2026-93320

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access...

CVE-2026-93320

BuildKit is vulnerable to a flaw where it may be tricked into performing file actions using special file inodes instead of the expected regular files. This behavior can lead to blocked operations or, in environments with rootful workers , potentially allow unintended host device access . No speci...

CVE-2026-93320 BuildKit improperly handles special files in build snapshots

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access...