84867 matches found
CVE-2026-68168 afs: Fix afs_edit_dir_remove() to get, not find, block 0
In the Linux kernel, the following vulnerability has been resolved: afs: Fix afseditdirremove to get, not find, block 0 Fix afseditdirremove to use afsdirgetblock to get block 0 rather than afsdirfindblock as the latter caches the found block in the afsdiriter and may switch out the page it's on ...
CVE-2026-68168
The CVE describes a Linux kernel AFS fix: afs_edit_dir_remove() now uses afs_dir_get_block() to obtain block 0 instead of afs_dir_find_block(), because the latter caches the found block in afs_dir_iter and can switch the page if a subsequent find occurs. This change aligns with the existing afs_e...
CVE-2026-68084 staging: vme_user: fix location monitor leak in tsi148 bridge
In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: fix location monitor leak in tsi148 bridge tsi148probe allocates a location monitor resource and links it into tsi148bridge-lmresources. The probe error path frees this list, but tsi148remove only frees the dma,...
EUVD-2026-55265
In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: fix location monitor leak in tsi148 bridge tsi148probe allocates a location monitor resource and links it into tsi148bridge-lmresources. The probe error path frees this list, but tsi148remove only frees the dma,...
CVE-2026-72569 cube-root directory-serve - Unauthenticated Path Traversal Arbitrary File Deletion
A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option...
CVE-2026-72569
A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option...
CVE-2026-72569
The CVE-2026-72569 entry describes a path traversal vulnerability in cube-root/directory-serve
EUVD-2026-55158
A flaw was found in 389 Directory Server. The CleanAllRUV and Abort CleanAllRUV replication-maintenance extended operations perform no authorization check, allowing an unauthenticated remote attacker to invoke them when nsslapd-allow-anonymous-access is enabled the default, or any authenticated...
PT-2026-69453
Name of the Vulnerable Software and Affected Versions cube-root/directory-serve versions prior to 1.3.8 Description A path traversal issue exists where an unauthenticated remote attacker can delete arbitrary files outside the intended served directory. This occurs when the application is executed...
PT-2026-69614
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the rtl2832 remove function. The problem occurs because cancel delayed work sync is called before i2c mux del adapters, which fails to prevent a concurre...
PT-2026-69568
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Andrew File System afs implementation where the afs edit dir remove function incorrectly uses afs dir find block to retrieve block 0. Because afs dir find block...
PT-2026-69621
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory leaks occur in the nuvoton npcm-video driver. The npcm video probe function allocates the npcm video structure using kzalloc obj but fails to free it during probe error paths or...
PT-2026-69719
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the pds core component between the reset thread and the remove process. The pci reset function function acquires device lock before performing a reset, while pdsc...
PT-2026-69718
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the pds core component during the removal process. In the pdsc remove function, the workqueue is destroyed before pdsc teardown is executed. This sequenc...
CVE-2026-68218: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: media: pci: dm1105: Free allocated workqueue Destroy allocated workqueue in remove callback to free its resources, thus fixing memory leak...
PT-2026-69691
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the idpf driver where a kernel NULL pointer dereference can occur. This happens when adapter-max vports is set before the successful allocation of vports, netdevs, and...
PT-2026-69618
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the dm1105 PCI media component. The issue arises because the allocated workqueue is not properly released, which can be resolved by destroying the workqueue withi...
PT-2026-69809
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mac80211 wifi module where the sta remove link function frees a removed MLO link's RX stats percpu buffer immediately, while only deferring the link container to R...
PT-2026-69269
Name of the Vulnerable Software and Affected Versions CubeWP Framework versions prior to 1.1.31 Description An issue exists where a parameter is not properly sanitized and escaped before being used in a SQL statement via an AJAX action. Additionally, the action lacks a capability check, which...
MAL-2026-13669 Malicious code in specials-resources-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bd295669162565e4b75a82a674ae4ee555bd6e5bd1fab67de3093de939ea30 [email protected] is a staged remote-code-execution dropper disguised as an 'Analytics SDK'. Both the package main lib/telemetry.js an...