4635 matches found
CVE-2026-72325 perf/x86/amd/core: Avoid enabling BRS from the SVM reload path
In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Branch Sampling BRS and Last Branch Record LBR are mutually exclusive hardware features, and users of both are tracked via cpuc-lbrusers. When SVM is toggled on a CPU...
CVE-2026-72237 perf/x86/amd/brs: Fix kernel address leakage
In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/brs: Fix kernel address leakage A user-only branch stack can contain branches that originate from the kernel. As a result, kernel addresses are exposed to user space even when PERFSAMPLEBRANCHUSER is requested. On AM...
CVE-2026-72237
The CVE-2026-72237 entry concerns a Linux kernel vulnerability in perf/x86/amd/brs where a user-space can observe kernel addresses due to the branch-from address not being filtered for kernel-origin branches when PERF_SAMPLE_BRANCH_USER is requested. The issue occurs on AMD processors that suppor...
PT-2026-72425
In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/brs: Fix kernel address leakage A user-only branch stack can contain branches that originate from the kernel. As a result, kernel addresses are exposed to user space even when PERF SAMPLE BRANCH USER is requested. On...
PT-2026-72513
In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Branch Sampling BRS and Last Branch Record LBR are mutually exclusive hardware features, and users of both are tracked via cpuc-lbr users. When SVM is toggled on a CP...
PT-2026-72342
In the Linux kernel, the following vulnerability has been resolved: openrisc: Fix jump label smp syncing The original commit 8c30b0018f9d "openrisc: Add jump label support" copies from arm64 and does not properly consider how icache invalidation on remote cores works in OpenRISC. On OpenRISC remo...
Replay Attack
Overview Affected versions of this package are vulnerable to Replay Attack through the getUserByOIDCToken process in FacebookProvider.php. An attacker can impersonate a victim account by replaying a captured, valid Facebook OIDC idtoken to userFromToken without providing a matching session nonce...
CVE-2026-47191 kas checks out SHA-like git branches as valid commits
kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch...
CVE-2026-47191 kas checks out SHA-like git branches as valid commits
kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch...
CVE-2026-47191
CVE-2026-47191 affects the kas setup tool for BitBake-based projects. Before version 5.3, reliant on a git commit ID (SHA-1/SHA-256) to validate repository state could mislead users into checking out a branch with the same name, potentially indicating a repository takeover. The primary impact con...
CVE-2026-47191 kas checks out SHA-like git branches as valid commits
kas is a setup tool for bitbake based projects. Prior to version 5.3, when relying solely on a git commit ID SHA-1 or SHA-256 to qualify if a checkout of a repository is equivalent to the state validated while adding its commit ID to a kas configuration, users may be tricked to check out a branch...
CVE-2026-58443
Public-only repository tokens can update private PR head branches...
CVE-2026-58439
Branch Protection Bypass via PR Retargeting Preserves Stale official Approval Flag...
CVE-2026-58443 Public-only repository tokens can update private PR head branches
Public-only repository tokens can update private PR head branches...
EUVD-2026-58170
Public-only repository tokens can update private PR head branches...
CVE-2026-58443
The Gitea platform is affected by an incorrect authorization vulnerability where public-only repository tokens can update private PR head branches . This issue is identified in the gitea.dev context. While specific technical root causes or affected version numbers are not detailed in the provided...
CVE-2026-58439 Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag
Branch Protection Bypass via PR Retargeting Preserves Stale official Approval Flag...
CVE-2026-58439 Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag
Branch Protection Bypass via PR Retargeting Preserves Stale official Approval Flag...
CVE-2026-58439
Gitea (go-gitea/gitea) is vulnerable to a branch protection bypass in versions before v1.27.0 . The root cause is that PR retargeting preserves a stale official approval flag, allowing unauthorized actions. Remediation requires upgrading to version v1.27.0 . While the SSSC metrics indicate a proo...