316 matches found
SUSE CVE-2026-99019
In the Linux kernel, the following vulnerability has been resolved: scsi: ch: Do not keep references to data transfer element devices chreadconfig looks up the scsidevice of every data transfer element whose SCSI id the changer reports in READ ELEMENT STATUS, and stores it in ch-dt...
DEBIAN-CVE-2026-99019
In the Linux kernel, the following vulnerability has been resolved: scsi: ch: Do not keep references to data transfer element devices chreadconfig looks up the scsidevice of every data transfer element whose SCSI id the changer reports in READ ELEMENT STATUS, and stores it in ch-dt...
CVE-2026-99019
In the Linux kernel, the following vulnerability has been resolved: scsi: ch: Do not keep references to data transfer element devices chreadconfig looks up the scsidevice of every data transfer element whose SCSI id the changer reports in READ ELEMENT STATUS, and stores it in ch-dt...
UBUNTU-CVE-2026-99019
In the Linux kernel, the following vulnerability has been resolved: scsi: ch: Do not keep references to data transfer element devices chreadconfig looks up the scsidevice of every data transfer element whose SCSI id the changer reports in READ ELEMENT STATUS, and stores it in ch-dt...
CVE-2026-99019 scsi: ch: Do not keep references to data transfer element devices
In the Linux kernel, the following vulnerability has been resolved: scsi: ch: Do not keep references to data transfer element devices chreadconfig looks up the scsidevice of every data transfer element whose SCSI id the changer reports in READ ELEMENT STATUS, and stores it in ch-dt...
CVE-2026-99019
The Linux kernel contains a vulnerability in the scsi changer (ch) component where the ch_readconfig() function incorrectly maintains references to data transfer element devices . Because scsi_device_lookup() takes a reference that is never dropped, removed drives remain on the host's device list...
CVE-2026-99019 scsi: ch: Do not keep references to data transfer element devices
In the Linux kernel, the following vulnerability has been resolved: scsi: ch: Do not keep references to data transfer element devices chreadconfig looks up the scsidevice of every data transfer element whose SCSI id the changer reports in READ ELEMENT STATUS, and stores it in ch-dt...
CVE-2026-99019
In the Linux kernel, the following vulnerability has been resolved: scsi: ch: Do not keep references to data transfer element devices chreadconfig looks up the scsidevice of every data transfer element whose SCSI id the changer reports in READ ELEMENT STATUS, and stores it in ch-dt...
PT-2026-121996
In the Linux kernel, the following vulnerability has been resolved: scsi: ch: Do not keep references to data transfer element devices ch readconfig looks up the scsi device of every data transfer element whose SCSI id the changer reports in READ ELEMENT STATUS, and stores it in ch-dt. scsi device...
Linux Distros Unpatched Vulnerability : CVE-2026-99019
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: ch: Do not keep references to data transfer element devices chreadconfig looks up the scsidevice of every data transfer element whose SCSI id the changer...
PT-2026-120637
A NULL pointer dereference in the gf ac4 presentation ch mode function /media tools/av parsers.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
directory-api-client (>=9.14.0, <=9.15.0), directory-api-external (>=4.1.1, <=4.2.0) +9 more potentially affected by CVE-2026-15307 via django (1.11.5)
django PYPI version 1.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-api-client =9.14.0, =4.1.1, =0.0.1, =0.0.1, =1.0.5, =6.4.1, =0.3.0, =2.4.1, =2.0.1, =0.0.6, =0.0.11 Source cves: CVE-2026-15307 Source...
Malicious code in guras-visa-ch (npm)
Source: amazon-inspector 3fd77492c09f059a2c07e504bb3040c371b402b0d9999096613642f7d7a9f7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in ch-react-modal (npm)
The package ch-react-modal was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ch-react-search (npm)
The package ch-react-search was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ch-react-actionmenu (npm)
The package ch-react-actionmenu was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ch-react-listselector (npm)
The package ch-react-listselector was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ch-react-menu (npm)
The package ch-react-menu was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ch-react-help (npm)
The package ch-react-help was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in ch-frontend-assignment (npm)
Source: ossf-package-analysis 92c955a3b8b209ddf9f49a5b749724ccfbb0bdd4c9941bb6f327c4b83e193d81 The OpenSSF Package Analysis project identified 'ch-frontend-assignment' @ 0.1.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...